How it differs from the extension
The VS Code extension is interactive: it scores files as you work and surfaces findings inline while you type. The CLI is non-interactive: it scans, prints results, and exits with a code you can act on. Use the CLI wherever there is no editor — pre-commit hooks, build pipelines, and CI workflows.Installing
Install the CLI globally with npm:Node 18 or later is required. Run
iris --version after installation to confirm the package is on your PATH.Quick start
Authenticate (opens browser)
~/.iris/credentials for subsequent commands.Free commands
These commands are available without an Iris Pro licence:iris check <file>— single-file health scan; scores and prints findings for one source fileiris secrets— scans the whole project for hardcoded secrets, API keys, and tokens; no authentication requirediris config— view the resolved.irisconfig.jsonor write individual settingsiris hook status— show whether the git pre-push hook and build hook are currently installed
Pro commands
These commands require an active Iris Pro licence:iris check <dir>— scan an entire directory tree and score every source fileiris check --staged— scan only files currently staged in gitiris check --changed— scan only files changed since the last commitiris deps— auditpackage.json,go.mod, orrequirements.txtfor outdated versions and known CVEsiris todos— list everyTODO,FIXME, andHACKcomment across the projectiris gate— CI quality gate; exits1if any file falls below the configured health thresholdiris hook install|uninstall— install or remove git pre-push and build hooksiris report— export a standalone HTML health report for the workspace
Next steps
Authentication
Sign in via browser OAuth or set up a licence token for non-interactive CI runners.
Commands
Full reference for all nine Iris CLI commands, flags, and exit codes.
CI Integration
Use
iris gate as a quality gate in GitHub Actions, GitLab CI, or any shell pipeline.GitHub Actions
Full workflow guide including branch protection rules and threshold configuration.