Safeguard CLI
Command-line interface for Safeguard software supply chain security
Safeguard CLI
The Safeguard CLI provides command-line access to all Safeguard capabilities, enabling automation, CI/CD integration, and local development workflows.
Overview
The CLI allows you to:
- Generate SBOMs from local projects
- Scan for vulnerabilities
- Enforce security policies and gates
- Upload and manage SBOMs
- Integrate with CI/CD pipelines
- Automate security workflows
Quick Start
Install it — macOS and Linux:
curl -fsSL https://cli.safeguard.sh/install | bashWindows:
irm https://cli.safeguard.sh/install.ps1 | iexThen open the terminal and sign in:
safeguardType /login to authenticate, then /scan . to scan the folder you are in.
Or just ask it something — "how many critical vulns do we have" works.
Key Features
| Feature | Description |
|---|---|
| SBOM Generation | Create SBOMs from source code, containers, and binaries |
| Vulnerability Scanning | Identify security issues in dependencies |
| Policy Enforcement | Apply security gates and policies |
| CI/CD Integration | Seamless integration with popular CI/CD platforms |
| Multiple Formats | Output in SPDX, CycloneDX, JSON, and more |
| Offline Mode | Generate SBOMs without network connectivity |
Documentation
Installation
Install and set up the CLI
Interactive terminal
The terminal you get when you run safeguard
Slash commands
Every command inside the terminal
Usage Guide
Common commands and workflows
Configuration
Configure CLI settings
Troubleshooting
Resolve common issues
Support Matrix
Supported languages and platforms
System Requirements
The CLI is a single static binary. There is no runtime to install alongside it — no Node, no Python, no JVM.
| Requirement | Minimum |
|---|---|
| Operating System | macOS, Linux, or Windows — see Platforms |
| Architecture | x86_64 or arm64 (Windows ships x86_64 only) |
| Disk Space | ~40MB for the binary, plus the scanners it downloads on first use |
Getting Help
# View all commands
safeguard --help
# Get help for a specific command
safeguard sbom --help
safeguard scan --help
safeguard gate --help