Legit Security Commands¶

Comprehensive Legit Security ASPM platform commands and workflows for application security posture management.

Legitify CLI Tool¶

Command	Description
`legitify --help`	Show help information
`legitify --version`	Show version information
`legitify --org <organization>`	Scan specific organization
`legitify --repo <repository>`	Scan specific repository
`legitify --token <token>`	Use GitHub token for authentication
`legitify --output-format json`	Output results in JSON format
`legitify --output-file results.json`	Save results to file
`legitify --scorecard`	Generate security scorecard

GitHub Security Scanning¶

Command	Description
`legitify github --org <org>`	Scan GitHub organization
`legitify github --repo <owner/repo>`	Scan specific repository
`legitify github --all-repos`	Scan all accessible repositories
`legitify github --branch-protection`	Check branch protection rules
`legitify github --secrets-scanning`	Verify secrets scanning configuration
`legitify github --dependency-review`	Check dependency review settings

Configuration Management¶

Command	Description
`legitify config init`	Initialize configuration file
`legitify config validate`	Validate configuration
`legitify config show`	Display current configuration
`legitify config set <key> <value>`	Set configuration value
`legitify --config <file>`	Use custom configuration file

Policy Management¶

Command	Description
`legitify policies list`	List available policies
`legitify policies show <policy>`	Show policy details
`legitify policies validate`	Validate custom policies
`legitify --policy <policy>`	Run specific policy
`legitify --skip-policy <policy>`	Skip specific policy
`legitify --severity <level>`	Filter by severity level

Reporting and Output¶

Command	Description
`legitify --output-format table`	Output in table format
`legitify --output-format json`	Output in JSON format
`legitify --output-format sarif`	Output in SARIF format
`legitify --output-format csv`	Output in CSV format
`legitify --quiet`	Suppress verbose output
`legitify --verbose`	Enable verbose logging

ASPM Platform API¶

Endpoint	Description
`GET /api/v1/organizations`	List organizations
`GET /api/v1/repositories`	List repositories
`GET /api/v1/vulnerabilities`	Get vulnerability data
`GET /api/v1/compliance`	Get compliance status
`POST /api/v1/scans`	Trigger security scan
`GET /api/v1/reports`	Generate reports

Authentication and Setup¶

Command	Description
`legitify auth login`	Login to Legit Security platform
`legitify auth logout`	Logout from platform
`legitify auth status`	Check authentication status
`legitify auth token`	Manage API tokens
`export LEGIT_TOKEN=<token>`	Set environment token

Vulnerability Management¶

Command	Description
`legitify vulns list`	List vulnerabilities
`legitify vulns show <vuln-id>`	Show vulnerability details
`legitify vulns filter --severity high`	Filter by severity
`legitify vulns filter --status open`	Filter by status
`legitify vulns export`	Export vulnerability data
`legitify vulns remediate <vuln-id>`	Mark vulnerability as remediated

Compliance Scanning¶

Command	Description
`legitify compliance --framework pci`	Scan for PCI compliance
`legitify compliance --framework sox`	Scan for SOX compliance
`legitify compliance --framework iso27001`	Scan for ISO 27001 compliance
`legitify compliance --framework nist`	Scan for NIST compliance
`legitify compliance report`	Generate compliance report

CI/CD Integration¶

Command	Description
`legitify ci --pipeline github-actions`	Scan GitHub Actions
`legitify ci --pipeline jenkins`	Scan Jenkins pipeline
`legitify ci --pipeline gitlab-ci`	Scan GitLab CI
`legitify ci --fail-on-high`	Fail build on high severity
`legitify ci --baseline <file>`	Use baseline for comparison

Secret Detection¶

Command	Description
`legitify secrets scan`	Scan for exposed secrets
`legitify secrets --path <directory>`	Scan specific directory
`legitify secrets --exclude <pattern>`	Exclude files/patterns
`legitify secrets --custom-rules <file>`	Use custom detection rules
`legitify secrets remediate`	Remediate found secrets

Dependency Analysis¶

Command	Description
`legitify deps scan`	Scan dependencies
`legitify deps --package-manager npm`	Scan NPM dependencies
`legitify deps --package-manager pip`	Scan Python dependencies
`legitify deps --package-manager maven`	Scan Maven dependencies
`legitify deps vulnerabilities`	Show dependency vulnerabilities

Code Quality Analysis¶

Command	Description
`legitify code scan`	Perform code analysis
`legitify code --language javascript`	Scan JavaScript code
`legitify code --language python`	Scan Python code
`legitify code --language java`	Scan Java code
`legitify code quality`	Generate code quality report

Risk Assessment¶

Command	Description
`legitify risk assess`	Perform risk assessment
`legitify risk --asset <asset>`	Assess specific asset
`legitify risk score`	Calculate risk score
`legitify risk trends`	Show risk trends
`legitify risk matrix`	Generate risk matrix

Monitoring and Alerts¶

Command	Description
`legitify monitor start`	Start continuous monitoring
`legitify monitor stop`	Stop monitoring
`legitify monitor status`	Check monitoring status
`legitify alerts list`	List active alerts
`legitify alerts configure`	Configure alert rules

Integration Commands¶

Command	Description
`legitify integrate jira`	Setup JIRA integration
`legitify integrate slack`	Setup Slack integration
`legitify integrate teams`	Setup Teams integration
`legitify integrate webhook <url>`	Configure webhook
`legitify integrate test`	Test integrations

Advanced Features¶

Command	Description
`legitify ai analyze`	AI-powered analysis
`legitify ai recommendations`	Get AI recommendations
`legitify ai prioritize`	AI-based prioritization
`legitify ai remediation`	AI-suggested remediation
`legitify ai insights`	Generate AI insights

Batch Operations¶

Command	Description
`legitify batch scan --repos <file>`	Batch scan repositories
`legitify batch remediate --vulns <file>`	Batch remediate vulnerabilities
`legitify batch export --format json`	Batch export data
`legitify batch import --data <file>`	Import batch data

Performance and Optimization¶

Command	Description
`legitify --parallel <count>`	Set parallel scan count
`legitify --cache-dir <path>`	Set cache directory
`legitify --timeout <seconds>`	Set scan timeout
`legitify --memory-limit <mb>`	Set memory limit
`legitify optimize`	Optimize scan performance

Debugging and Troubleshooting¶

Command	Description
`legitify debug --log-level debug`	Enable debug logging
`legitify debug --trace`	Enable trace logging
`legitify debug validate`	Validate configuration
`legitify debug connectivity`	Test connectivity
`legitify debug permissions`	Check permissions

Environment Variables¶

Variable	Description
`LEGIT_TOKEN`	API authentication token
`LEGIT_ORG`	Default organization
`LEGIT_CONFIG`	Configuration file path
`LEGIT_OUTPUT_DIR`	Default output directory
`LEGIT_LOG_LEVEL`	Logging level

Configuration Files¶

File	Description
`.legitify.yml`	Main configuration file
`.legitify-policies.yml`	Custom policies configuration
`.legitify-ignore`	Files to ignore during scans
`legitify-baseline.json`	Baseline for comparison

Docker Integration¶

Command	Description
`docker run legitify/cli scan`	Run in Docker container
`docker run -v $(pwd):/workspace legitify/cli`	Mount workspace
`docker run -e LEGIT_TOKEN=$TOKEN legitify/cli`	Pass environment variables

Kubernetes Integration¶

Command	Description
`kubectl apply -f legitify-scanner.yaml`	Deploy scanner
`kubectl get pods -l app=legitify`	Check scanner pods
`kubectl logs -l app=legitify`	View scanner logs
`kubectl delete -f legitify-scanner.yaml`	Remove scanner

Webhook Configuration¶

Event	Description
`vulnerability.found`	New vulnerability detected
`compliance.failed`	Compliance check failed
`scan.completed`	Scan completed
`risk.increased`	Risk level increased
`remediation.required`	Remediation required