Command Line Interface

# Essential commands
attest init                    # Initialize new project
attest run                     # Execute pipeline
attest run --verify --sign    # Execute with full security
attest verify receipt.yaml    # Verify attestation
attest audit history          # View execution history

# Pipeline management
attest pipeline show          # Visualize pipeline
attest pipeline validate     # Validate configuration
attest pipeline export       # Export to other formats

# GitOps operations
attest deploy apply          # Deploy to environment
attest deploy status         # Check deployment status

# Policy enforcement
attest policy check          # Validate against policies
attest audit report          # Generate compliance reports

attest [GLOBAL_OPTIONS] <COMMAND> [COMMAND_OPTIONS]

export ATTEST_CONFIG="/path/to/config.yaml"
export ATTEST_CACHE_DIR="/custom/cache/dir"
export ATTEST_LOG_LEVEL="debug"
export ATTEST_SIGNING_KEY="/path/to/signing.key"

attest init [OPTIONS]

# Basic initialization
attest init

# Initialize without sample pipeline
attest init --no-sample

# Initialize with Rust template
attest init --template rust-project

# Force reinitialize existing directory
attest init --force --template web-app

attest run [OPTIONS]

# Basic execution
attest run

# Full security mode
attest run --verify --sign --deterministic

# Performance optimized
attest run --parallel 8 --no-cache

# Specific step execution
attest run --step build --output build-receipt.yaml

# Production workflow
attest run --verify --sign --parallel 4 --timeout 1800 --output prod-receipt.yaml

# Debug mode
attest -v run --dry-run --step problematic-step

# Continuous integration mode
attest run --verify --sign --parallel $(nproc) --format json --output ci-receipt.json

attest verify TARGET [OPTIONS]

# Basic verification
attest verify receipt_20241201_143052.yaml

# Full cryptographic verification
attest verify receipt_20241201_143052.yaml --check-signatures --verbose-verify

# Policy compliance check
attest verify receipt_20241201_143052.yaml --policy sox-compliance

# Team verification with external key
attest verify receipt_20241201_143052.yaml \
  --public-key team-public-key.pem \
  --check-signatures \
  --output verification-result.json

# Batch verification
find .attest/receipts -name "*.yaml" -exec attest verify {} --check-signatures \;

attest pipeline show [OPTIONS]

# ASCII visualization
attest pipeline show

# Detailed Mermaid diagram
attest pipeline show --format mermaid --details > pipeline.mmd

# DOT graph for Graphviz
attest pipeline show --format dot --details | dot -Tpng > pipeline.png

# JSON export with timing
attest pipeline show --format json --with-timing > pipeline-analysis.json

attest pipeline validate [OPTIONS]

# Basic validation
attest pipeline validate

# Comprehensive validation
attest pipeline validate --strict --security-check

# Validate specific file
attest pipeline validate --pipeline custom.yaml --strict

# Check against specific schema
attest pipeline validate --schema-version 0.2 --strict

attest pipeline export --format FORMAT [OPTIONS]

# Export to GitHub Actions
attest pipeline export --format github-actions --output .github/workflows/ci.yml

# Export to GitLab CI with attestation
attest pipeline export --format gitlab-ci --with-attestation --output .gitlab-ci.yml

# Export with custom variables
attest pipeline export --format docker-compose \
  --variables NODE_VERSION=18,REGISTRY=my-registry.com \
  --output docker-compose.yml

# Export Jenkins pipeline
attest pipeline export --format jenkins --output Jenkinsfile

attest pipeline generate TEMPLATE [OPTIONS]

# Generate Rust project pipeline
attest pipeline generate rust-project --output attest.yaml

# Generate with custom variables
attest pipeline generate web-app \
  --var app_name=myapp \
  --var port=8080 \
  --var database=postgres \
  --output webapp-pipeline.yaml

# Interactive generation
attest pipeline generate microservices --interactive

attest audit report [OPTIONS]

# Generate HTML compliance report
attest audit report --format html --output compliance_report.html

# SOX compliance report for last 90 days
attest audit report --framework sox --period 90 --detailed --output sox_q4.pdf

# Security failures analysis
attest audit report --format csv --failures-only --framework iso27001 --output security_failures.csv

# Comprehensive audit for multiple frameworks
attest audit report --format json --detailed --period 365 --output annual_audit.json

attest audit history [OPTIONS]

# Show last 20 executions
attest audit history --limit 20

# Show failures for specific pipeline
attest audit history --pipeline web-app --failures-only

# Export history as JSON
attest audit history --format json --limit 100 --output history.json

# Show signed executions from last month
attest audit history --signed-only --since "2024-11-01" --format csv

# Comprehensive history analysis
attest audit history --limit 1000 --format json --detailed --output full_history.json

attest audit trace --from HASH [OPTIONS]

# Trace from commit to production
attest audit trace --from abc123def --to production

# Detailed trace with signatures
attest audit trace --from abc123def --detailed --with-signatures --format json

# Visual trace graph
attest audit trace --from abc123def --format graph --output trace.dot
dot -Tpng trace.dot > deployment_trace.png

# Complete deployment chain analysis
attest audit trace --from abc123def --to production --detailed --with-signatures --max-depth 20

attest audit analyze [OPTIONS]

# Basic analysis for last 30 days
attest audit analyze

# Trend analysis with JSON output
attest audit analyze --period 90 --trends --format json --output trends.json

# Performance metrics analysis
attest audit analyze --period 60 --metrics performance,cache --output perf_analysis.yaml

attest deploy init --repo URL --cluster CLUSTER [OPTIONS]

# Basic GitOps initialization
attest deploy init --repo https://github.com/myorg/k8s-configs --cluster production

# Advanced setup with custom branch
attest deploy init \
  --repo https://github.com/myorg/deployments \
  --cluster staging \
  --branch develop \
  --gitops-dir deployments

# Force reinit without templates
attest deploy init --repo https://github.com/myorg/k8s --cluster test --force --no-templates

attest deploy apply --environment ENV [OPTIONS]

# Deploy to staging with verification
attest deploy apply --environment staging --verify-attestations --wait

# Production deployment with timeout
attest deploy apply --environment production --verify-attestations --wait --timeout 1200

# Dry run to preview changes
attest deploy apply --environment staging --dry-run --verify-attestations

# Deploy specific manifest
attest deploy apply --environment dev --manifest k8s/webapp.yaml --wait

attest deploy status [OPTIONS]

# Show all deployment status
attest deploy status

# Watch production environment
attest deploy status --environment production --watch --detailed

# Export status as JSON
attest deploy status --format json --detailed --output deployment_status.json

attest policy check [OPTIONS]

# Check all policies
attest policy check

# Check specific security policy with details
attest policy check --policy security --detailed --format json

# Fail-fast mode for CI/CD
attest policy check --fail-fast --policy-dir .policies

# Generate policy compliance report
attest policy check --detailed --format json --output policy_compliance.json

attest policy list [OPTIONS]

# List all policies
attest policy list

# Show detailed security policies
attest policy list --category security --detailed

# Export policy catalog
attest policy list --detailed --format json --output policy_catalog.json

attest policy install POLICY [OPTIONS]

# Install security policies
attest policy install security

# Install with interactive customization
attest policy install sox-compliance --interactive

# Force reinstall to custom directory
attest policy install compliance --force --target-dir custom-policies

attest clean [OPTIONS]

# Clean everything
attest clean --all

# Clean cache only
attest clean --cache-only

# Clean old receipts (30 days+)
attest clean --receipts-only --older-than 30

# Preview cleanup
attest clean --all --dry-run

attest config show [OPTIONS]

# Show all configuration
attest config show

# Show cache configuration as JSON
attest config show --section cache --format json

attest config set KEY VALUE

# Enable deterministic mode
attest config set deterministic true

# Set cache size limit
attest config set cache.max_size "5GB"

# Configure signing
attest config set signing.enabled true

attest config get KEY

# Get cache setting
attest config get cache.enabled

# Get signing configuration
attest config get signing.key_path

attest keys generate [OPTIONS]

# Generate Ed25519 key pair
attest keys generate

# Generate to custom directory
attest keys generate --output-dir team-keys --force

attest keys export [OPTIONS]

# Export public key as PEM
attest keys export --public --format pem --output team-public.pem

# Export as hex string
attest keys export --public --format hex

attest keys import [OPTIONS] FILE

# Import trusted public key
attest keys import --public --trust --name team-lead team-public.pem

# Import for verification only
attest keys import --public external-key.pem

#!/bin/bash
# CI pipeline script
set -euo pipefail

# Validate pipeline
attest pipeline validate --strict --security-check

# Run with full verification
attest run --verify --sign --parallel $(nproc) --format json --output ci-receipt.json

# Verify the result
attest verify ci-receipt.json --check-signatures --verbose-verify

# Generate compliance report
attest audit report --format json --detailed --output compliance.json

# Deploy if on main branch
if [ "$CI_COMMIT_REF_NAME" = "main" ]; then
  attest deploy apply --environment staging --verify-attestations --wait
fi

#!/bin/bash
# Production deployment script
set -euo pipefail

RECEIPT_FILE="$1"
if [ -z "$RECEIPT_FILE" ]; then
  echo "Usage: $0 <receipt-file>"
  exit 1
fi

# Verify receipt thoroughly
attest verify "$RECEIPT_FILE" --check-signatures --trusted-only --verbose-verify

# Check compliance
attest policy check --detailed --fail-fast

# Deploy to production
attest deploy apply --environment production --verify-attestations --wait --timeout 1800

# Generate deployment report
attest audit report --framework sox --period 1 --detailed --output "deployment-report-$(date +%Y%m%d).pdf"

#!/bin/bash
# Batch verify all receipts
find .attest/receipts -name "*.yaml" -print0 | \
while IFS= read -r -d '' receipt; do
  echo "Verifying $receipt"
  if attest verify "$receipt" --check-signatures; then
    echo "[OK] Valid: $receipt"
  else
    echo "[ERROR] Invalid: $receipt"
  fi
done

# Batch export pipelines
for format in github-actions gitlab-ci docker-compose; do
  echo "Exporting to $format"
  attest pipeline export --format "$format" --output "exports/$format"
done

#!/bin/bash
# Monitoring script for cron

# Check for recent failures
FAILURES=$(attest audit history --failures-only --since "1 hour ago" --format json | jq length)

if [ "$FAILURES" -gt 0 ]; then
  echo "ALERT: $FAILURES pipeline failures in the last hour"
  attest audit history --failures-only --since "1 hour ago" --detailed
fi

# Check policy compliance
if ! attest policy check --fail-fast; then
  echo "ALERT: Policy violations detected"
  attest policy check --detailed --format json
fi

# Generate daily metrics
attest audit analyze --period 1 --format json --output "/metrics/attest-$(date +%Y%m%d).json"