devops-cli is an enterprise-grade workstation CLI and agentic code analysis platform designed for Site Reliability Engineers and DevOps Practitioners running inside VS Code Dev Containers. It unifies multi-repository infrastructure management (Git, Kubernetes, Kustomize, ArgoCD, Grafana, Prometheus, Docker, SSH) with multi-persona Agentic LLM code reviews, OS Keyring secret isolation, active SSRF network guardrails, and automated release orchestration.
- Zero-Plaintext Secret Architecture: Sensitive tokens (
github.token,grafana.token,argocd.token,ai.api_key) are stored exclusively in the OS Keyring via Pythonkeyring. Configuration files contain zero plaintext credentials. - Active SSRF & Egress Guardrails: Outbound API requests pass through strict IP validation (
validate_service_url) blocking private subnets (RFC 1918), loopbacks, and cloud metadata endpoints by default. - Multi-Persona Agentic Code Review: Paginated diff analysis across branches and PRs using specialized expert personas (
devsecops,architect,pm,auditor,qa) backed byScratchpadBufferreasoning context and deterministic finding verification. - Native DevContainer Lifecycle Engine: Cross-platform Python lifecycle orchestration (
devops devcontainer run-lifecycle) replaces legacy shell scripts for post-create and post-start hooks. - End-to-End Release Cycle Automation: Native
devops releasesubcommands suite (status,prepare,check,notes,tag) automating version bumping, changelogs, docs sync, and CI validation. - FastMCP Server & Native Tool Bridge: Infrastructure and analysis tools exposed over Model Context Protocol for seamless integration into AI IDEs and autonomous subagents.
Important
Pre-1.0 Alpha Software Status: devops-cli is active alpha software prior to release 1.0.0. Until at least release 1.0.0, there is no intention of maintaining backwards compatibility. The codebase is intentionally kept clean of legacy references, obsolete shims, and compatibility remnants at all times so that it can reach architectural maturity at a reasonable rate.
Post-1.0 Semantic Versioning: Any version released after 1.0.0 will strictly adhere to Semantic Versioning 2.0.0 (MAJOR.MINOR.PATCH) and follow enterprise change management best practices, including runtime feature flags, structured multi-release deprecation cycles, and automated migration functionality.
- System Architecture & Technical Design (
ARCHITECTURE.md) — Subsystem topologies, multi-agent sequence diagrams, and lifecycle hooks. - Release Cycle & Versioning Guide (
RELEASE_CYCLE.md) — Semantic versioning, validation checks, and release procedures. - Security Policy & Threat Model (
SECURITY.md) — Vulnerability disclosure, SSRF protections, and OS Keyring encryption. - Contributor Guidelines (
CONTRIBUTING.md) — Standards, local development withuv, and PR workflows. - Routine Tasks, Order & Methodology Guide (
docs/ROUTINE_TASKS.md) — Operational task matrix, cadences, execution order, and troubleshooting protocols. - Tool Cheatsheets & Command Translation (
docs/cheatsheets/README.md) — Side-by-side comparison of standard DevOps tools (git,kubectl,helm,docker,terraform,trivy,prometheus,grafana,ollama) vsdevops-cli. - Consolidated CLI Reference (
docs/CLI_REFERENCE.md) — Full subcommand reference. - Environment Variables Guide (
docs/ENV_VARS.md) — System and environment settings. - FastMCP Tools Specification (
docs/MCP_TOOLS.md) — Registered MCP tools.
# 1. Clone repository and open inside Dev Container
git clone https://github.com/dan-petty/devops-cli.git
cd devops-cli
# 2. Inside the Dev Container, sync Python 3.14 dependencies:
uv sync
# 3. Store credentials securely in the OS Keyring
devops config set github.token "ghp_your_personal_access_token"
devops ai config --provider claude
devops config set ai.api_key "sk-ant-..."
# 4. Verify LLM connectivity and run CI validation
devops ai test
devops ci runEvery release automatically builds and publishes a pre-packaged Dev Container image to the GitHub Container Registry (GHCR):
# Pull the pre-built Dev Container image directly:
docker pull ghcr.io/dan-petty/devops-cli/devcontainer:latestTo use this pre-built image in any repository's .devcontainer/devcontainer.json:
{
"name": "devops-workstation",
"image": "ghcr.io/dan-petty/devops-cli/devcontainer:latest"
}Tip
For advanced configuration, Dockerfile extensions, Codespaces setup, and CLI scaffolding, see the Complete Dev Container Usage Guide.
from pathlib import Path
from devops_cli.ai.client import LLMClient
from devops_cli.ai.review import ReviewPipelineOrchestrator
# Initialize unified LLM client and orchestrator
client = LLMClient()
orchestrator = ReviewPipelineOrchestrator(session_id="custom-session", llm_client=client)
# Execute 6-stage review pipeline programmatically
metadata = orchestrator.run_pre_analysis_refresh(Path.cwd())
payloads = orchestrator.init_per_file_payloads(["src/file.py"], metadata)
orchestrator.execute_multi_persona_review(
payloads, diff_text_by_file={}, personas=["devsecops", "architect"]
)
orchestrator.execute_finding_verification(payloads)
orchestrator.execute_finding_reranking(payloads)
summary_data, report_md = orchestrator.generate_consolidated_report(payloads)- DevSecOps (
--persona devsecops): OWASP Top 10, secret leaks, supply chain vulnerabilities, Docker/IaC security misconfigurations. - Architect (
--persona architect): SOLID principles, clean architecture/DDD, microservice coupling, observability, API contract design. - Project Manager (
--persona pm): Scope risk, breaking changes, test coverage adequacy, deployment rollback readiness, action items. - Auditor (
--persona auditor): Regulatory compliance frameworks (NIST SP 800-53, PCI-DSS v4.0, SOC 2 Type II) with exact control IDs. - QA / Test Engineer (
--persona qa): Regression prevention, test coverage gaps, edge cases, pytest code skeletons, validation steps.
- Local Workstation Timeouts: High timeouts (
DEFAULT_REVIEW_TIMEOUT_SECONDS = 3600.0,DEFAULT_SUBPROCESS_TIMEOUT_SECONDS = 1800.0) support local LLM inference (CPU/GPU Ollama) and corporate proxies. - Key Material Mounting:
${localEnv:HOME}/.sshis bind-mounted by design into.devcontainerfor local SSH key generation and 90-day rotation. - SSRF Protections:
validate_service_urlblocks non-public IPs unlessDEVOPS_CLI_AI_ALLOW_PRIVATE_NETWORK=trueis set. - Workspace Boundary Guards: Path traversal checks (
_is_safe_workspace_path) enforce repository boundaries on file commands. - Checksum Verification:
devops install-toolsvalidates SHA-256 checksums before writing binaries to disk. - Automated Design Justification & Documentation Maintenance: Non-instructional, reference-backed inline comments (
# NOTE (Design Justification - <REF>): ...) automatically document intentional design trade-offs directly above target code constructs, and project documentation (AGENTS.md,README.md,CLAUDE.md,.github/copilot-instructions.md) is routinely updated whenever code or prompt conventions evolve.
The comprehensive Value vs. Effort Prioritization Matrix, phased milestone deliverables (v0.2.4 through v0.3.0), architectural principles, and continuous release schedules are actively managed in the dedicated Product Roadmap.
- AGENTS.md — Single source of truth for AI agents.
- Knowledge Base — Comprehensive technical manual for tools and operational tasks.
- RELEASE_NOTES.md — Version release notes and highlights.
- CHANGELOG.md — Historical release and version changes.
- ROADMAP.md — Vision, principles, and phased deliverables.
- KNOWN_ISSUES.md — Operational edge cases and intentional design trade-offs.
| Command Group | Subcommand / Usage | Purpose & Features |
|---|---|---|
| repos | devops repos clone-org [OPTIONS] <org> |
Clone all repos from a GitHub org into repos//. |
devops repos clone [OPTIONS] <url> |
Clone an individual repository into repos/_standalone//. | |
devops repos list [OPTIONS] |
List all cloned repositories. | |
devops repos update [OPTIONS] |
Fetch (and optionally pull) all tracking branches across repos. | |
devops repos sync [OPTIONS] |
Fetch (and optionally pull) all tracking branches across repos. | |
| ssh | devops ssh generate [OPTIONS] |
Generate a new Ed25519 SSH key with prefix and YYYYMMDD date suffix. |
devops ssh register [OPTIONS] |
Generate, rotate, audit, and register Ed25519 SSH keypairs. | |
devops ssh rotate [OPTIONS] |
Rotate keys older than rotation_days (default 90). | |
devops ssh list [OPTIONS] |
List all managed SSH keys with their age and rotation status. | |
devops ssh audit [OPTIONS] |
List all managed SSH keys with their age and rotation status. | |
devops ssh status [OPTIONS] |
Show the active SSH key and days until rotation. | |
| branches | devops branches update [OPTIONS] |
Fetch and pull tracking branches across all repos. |
devops branches sync [OPTIONS] |
Fetch and pull tracking branches across all repos. | |
devops branches jira [OPTIONS] <ticket_id> |
Create a feature branch for a Jira ticket: feature/PROJ-123[-slug]. | |
devops branches list [OPTIONS] |
List branches across all repos. | |
devops branches clean [OPTIONS] |
Delete local branches merged into main/master. | |
| devcontainer | devops devcontainer init [OPTIONS] <repo_path> |
Scaffold .devcontainer/ using the published DevOps CLI devcontainer image. |
devops devcontainer update [OPTIONS] <repo_path> |
Update the Python image version in an existing devcontainer.json. | |
devops devcontainer validate [OPTIONS] |
Validate .devcontainer/devcontainer.json manifest syntax and configuration schema. | |
devops devcontainer list [OPTIONS] |
List repos with their devcontainer status. | |
devops devcontainer post-create [OPTIONS] |
Execute DevContainer post-create setup tasks (history, shell completions, config prep). | |
devops devcontainer post-start [OPTIONS] |
Execute DevContainer post-start tasks (SSH keys, git defaults, kubeconfig, MCP sync). | |
devops devcontainer run-lifecycle [OPTIONS] |
Run specified DevContainer lifecycle hook tasks natively in Python. | |
devops devcontainer bootstrap-k8s [OPTIONS] |
Execute Minikube cluster startup and Kubernetes stack deployment in the background. | |
| workspace | devops workspace add [OPTIONS] <repo_path> |
Add a folder to the VS Code workspace file. |
devops workspace remove [OPTIONS] <repo_path> |
Remove a folder from the VS Code workspace file. | |
devops workspace generate [OPTIONS] |
Regenerate the workspace file from all repos in the repos directory. | |
devops workspace open [OPTIONS] |
Open the workspace in VS Code. | |
devops workspace clean [OPTIONS] |
Clean stale review sessions, old analysis caches, and temporary traces under .data/. | |
| install-tools | devops install-tools status [OPTIONS] |
Show installation status and versions for all managed tools. |
| k8s | devops k8s contexts |
List kubeconfig contexts and mark the active one. |
devops k8s switch-context <name> |
Switch active kubeconfig context. | |
devops k8s status |
Show node and pod summary for the current context. | |
devops k8s apply [OPTIONS] <path> |
Apply a Kubernetes manifest (delegates to kubectl). | |
devops k8s logs [OPTIONS] <pod> <query_arg> |
Stream pod logs or execute LogQL queries across cluster log streams. | |
devops k8s bootstrap [OPTIONS] |
Bootstrap minikube Kubernetes cluster and deploy infrastructure/LLM stack. | |
devops k8s bootstrap-openwebui [OPTIONS] |
Bootstrap or activate a local administrator account for Open-WebUI. | |
devops k8s deploy-stack [OPTIONS] |
Deploy infrastructure or LLM stack (Ollama, WebUI, Qdrant, Valkey) to Kubernetes. | |
devops k8s sync-secrets [OPTIONS] |
Fetch stack admin credentials (ArgoCD, Grafana) from Kubernetes and store in OS Keyring. | |
devops k8s configure-urls [OPTIONS] |
Auto-detect Kubernetes stack URLs and update CLI config. | |
devops k8s port-forward [OPTIONS] |
Port-forward k8s monitoring / LLM stack services to localhost ports and update CLI config. | |
devops k8s port-forward-status |
List active background Kubernetes port-forward daemons. | |
devops k8s port-forward-stop [OPTIONS] |
Terminate active background Kubernetes port-forward daemons. | |
devops k8s teardown-stack [OPTIONS] |
Uninstall the k8s infrastructure / LLM stack and delete namespaces. | |
devops k8s rbac-audit [OPTIONS] |
Audit RBAC RoleBindings and ServiceAccounts for overprivileged access. | |
devops k8s lint [OPTIONS] <target> |
Validate K8s manifests and Helm charts using Red Hat Kube-linter. | |
devops k8s audit [OPTIONS] |
Sanitize active K8s/Minikube cluster resource health using Derailed Popeye. | |
devops k8s check-deprecated [OPTIONS] <target> |
Scan manifests for deprecated/removed K8s API versions using Fairwinds Pluto. | |
devops k8s create-tls-secret [OPTIONS] <secret_name> |
Create or update a kubernetes.io/tls secret from certificate and private key files. | |
devops k8s enable-tls [OPTIONS] |
Generate Homelab certificates and apply TLS secrets across Kubernetes cluster namespaces. | |
devops k8s validate [OPTIONS] <manifest_path> |
Validate Kubernetes YAML manifests against OpenAPI schemas using Kubeconform. | |
devops k8s validate-policy [OPTIONS] <manifest_path> |
Validate Kubernetes manifests against Kyverno or OPA admission policies. | |
devops k8s stream-logs [OPTIONS] <pod_query> |
Stream logs across multiple pods in parallel using Stern or kubectl. | |
devops k8s diff-helm [OPTIONS] <release_name> <chart_path> |
Preview Kubernetes manifest diffs before executing a Helm upgrade. | |
devops k8s chaos [OPTIONS] <experiment> |
Run resilience and chaos experiments against Kubernetes workloads. | |
devops k8s pods [OPTIONS] |
List running pods with health status, restart counts, and age. | |
| kustomize | devops kustomize build [OPTIONS] <path> |
Build kustomize overlays (delegates to kustomize build). |
devops kustomize diff <path> |
Show a diff of pending changes (delegates to kubectl diff -k). | |
devops kustomize apply [OPTIONS] <path> |
Apply a kustomization (delegates to kubectl apply -k). | |
| docker | devops docker images [OPTIONS] |
List local Docker images. |
devops docker build [OPTIONS] <context> |
Build a Docker image. | |
devops docker push <image> |
Push a Docker image to a registry. | |
devops docker prune [OPTIONS] |
Remove unused containers, images, and networks. | |
devops docker stats [OPTIONS] |
Display live container CPU, memory, and network I/O statistics. | |
devops docker analyze-layers [OPTIONS] <image> |
Analyze container image layer efficiency and wasted space using Dive. | |
devops docker sandbox [OPTIONS] <command> |
Execute workload inside an isolated, disposable Docker container sandbox. | |
| grafana | devops grafana search [OPTIONS] |
Search Grafana dashboards and folders by query string. |
devops grafana datasources |
List configured datasources. | |
devops grafana alerts |
List alert rules (Grafana 9+ unified alerting). | |
devops grafana dashboards COMMAND [ARGS]... |
Grafana dashboard and alert management. | |
| prometheus | devops prometheus query [OPTIONS] <expr> |
Execute an instant PromQL query. |
devops prometheus query-range [OPTIONS] <expr> |
Execute a range PromQL query and summarise the result. | |
devops prometheus rules |
List Prometheus recording and alerting rules. | |
devops prometheus targets |
List active Prometheus scrape targets. | |
| argo | devops argo sync [OPTIONS] <name> |
Synchronize an ArgoCD application (or multi-cluster fleet when --fleet is passed). |
devops argo cd COMMAND [ARGS]... |
Argo CD, Workflows, and Rollouts management. | |
devops argo workflows COMMAND [ARGS]... |
Argo CD, Workflows, and Rollouts management. | |
devops argo rollouts COMMAND [ARGS]... |
Argo CD, Workflows, and Rollouts management. | |
devops argo fleet COMMAND [ARGS]... |
Argo CD, Workflows, and Rollouts management. | |
| config | devops config show |
Print all configuration values, masking secrets. |
devops config get <key> |
Print a single configuration value. | |
devops config set <key> <value> |
Set a configuration value. Tokens are stored in the OS keyring. | |
devops config init |
Interactive first-time setup wizard. | |
devops config env-vars [OPTIONS] |
Output environment variables available for devops-cli configuration. | |
devops config env [OPTIONS] |
Output environment variables available for devops-cli configuration. | |
devops config output [OPTIONS] |
Output environment variables available for devops-cli configuration. | |
devops config auth-headless <key> <token> |
Load secret tokens into ephemeral memory for headless CI environments lacking DBus. | |
devops config audit-stream <destination> |
Stream stored audit records to SIEM destination URL. | |
devops config audit-keys [OPTIONS] |
Audit OS Keyring token health, backend status, and zero-plaintext secret compliance. | |
| ci | devops ci test [OPTIONS] |
Run the pytest test suite in parallel leveraging all CPU cores. |
devops ci coverage [OPTIONS] |
Run pytest with parallel code coverage analysis over src/. | |
devops ci lint [OPTIONS] |
Run ruff linter across the project, automatically applying fixes by default. | |
devops ci format [OPTIONS] |
Format codebase with ruff format (or verify in check-only mode with --check). | |
devops ci typecheck [OPTIONS] |
Run mypy static type-checker strictly targeting Python 3.14 over src/. | |
devops ci audit [OPTIONS] |
Run uv audit to check for known package vulnerabilities. | |
devops ci security [OPTIONS] |
Run bandit static security vulnerability analysis over src/. | |
devops ci actionlint [OPTIONS] |
Run actionlint to validate GitHub Actions workflows for syntax and schema errors. | |
devops ci docs [OPTIONS] |
Verify (or update with --fix) that documentation is up to date with CLI commands and configuration. | |
devops ci maintain [OPTIONS] |
Run automated toolchain, dependency freshness, and lockfile maintenance checks. | |
devops ci run [OPTIONS] |
Run full CI and return a single pass/fail status. | |
| uv | devops uv sync [OPTIONS] |
Sync project dependencies into the virtual environment. |
devops uv lock [OPTIONS] |
Regenerate the uv lockfile. | |
devops uv python-install [OPTIONS] |
Install project Python version with uv. | |
devops uv run |
Run an arbitrary command using uv run. |
|
| scan | devops scan trivy [OPTIONS] <target> |
Run Aqua Trivy vulnerability, secret, and misconfiguration scan. |
devops scan secrets [OPTIONS] <target> |
Run Gitleaks secret pre-filter scan across workspace or targets. | |
devops scan sast [OPTIONS] <target> |
Run static application security testing (SAST) via Semgrep. | |
devops scan iac [OPTIONS] <target> |
Run Checkov IaC static policy and security compliance scan. | |
devops scan complexity [OPTIONS] <target> |
Run AST-based cyclomatic complexity and indentation depth analysis. | |
devops scan sbom [OPTIONS] <target> |
Generate Software Bill of Materials (SBOM) in CycloneDX, SPDX, or JSON format. | |
devops scan aibom [OPTIONS] <target> |
Generate AI Bill of Materials (AIBOM) with model licenses and hardware estimates. | |
devops scan fix [OPTIONS] <target> |
Remediate vulnerable dependencies via lockfile upgrades and optional git branch creation. | |
| ai | devops ai config [OPTIONS] |
Show or update AI provider configuration. |
devops ai models |
List available models for the configured provider. | |
devops ai preload |
Preload configured model into VRAM across all configured Ollama servers. | |
devops ai test [OPTIONS] |
Send a test prompt to verify AI provider connectivity across configured servers. | |
devops ai agents [OPTIONS] |
Generate LLM/Agent instruction files (AGENTS.md, CLAUDE.md, copilot-instructions.md). | |
devops ai chat [OPTIONS] |
Start an interactive chat with a Pydantic AI persona (tools, thinking, streaming, RAG). | |
devops ai bundle-models [OPTIONS] |
Bundle Ollama model metadata into tarball for air-gapped DevContainers. | |
devops ai pipeline [OPTIONS] <prompt> |
Run a multi-agent Pydantic pipeline with shared DevOps tools and RAG context. | |
devops ai token-count [OPTIONS] <target> |
Calculate exact BPE tokens for text or files using tiktoken context budgeting. | |
devops ai route [OPTIONS] <task> |
Evaluate task complexity and determine the optimal LLM provider and model route. | |
devops ai spec [OPTIONS] <spec_path> |
Verify codebase against executable markdown architecture specification contracts. | |
devops ai repomap [OPTIONS] |
Generate compact whole-repository AST symbol and relationship map. | |
devops ai audit-library-usage [OPTIONS] |
Audit workspace code for library API drift and deprecated calls. | |
devops ai pack-context [OPTIONS] <target_path> |
Pack and prune source code context to fit token budget while preserving signatures. | |
devops ai diagram [OPTIONS] <diagram_type> |
Generate visual Mermaid architecture topology or STRIDE threat modeling diagrams. | |
devops ai prompt-eval [OPTIONS] |
Benchmark persona prompt variations against verified review feedback datasets. | |
devops ai test-gen [OPTIONS] <target_file> |
Synthesize isolated pytest unit test suites for functions or source files. | |
devops ai chaos-model [OPTIONS] |
Model dependency chaos engineering suite simulating provider faults and validating local failovers. | |
devops ai quiesce [OPTIONS] |
Centralized emergency quiesce cleanly suspending active agent loops and background tasks. | |
devops ai failover [OPTIONS] |
Emergency failover controller re-routing tasks to designated fallback endpoints. | |
devops ai resume [OPTIONS] |
Gracefully resume suspended constellation agent loops and task runners. | |
devops ai constellation [OPTIONS] |
Display constellation fleet status, active fallback routes, and suspended tasks. | |
devops ai review [OPTIONS] COMMAND [ARGS]... |
AI-powered multi-persona code review system. | |
devops ai analyze [OPTIONS] COMMAND [ARGS]... |
Analyze codebase metadata and generate structural outlines. | |
devops ai rag [OPTIONS] COMMAND [ARGS]... |
Manage RAG vector embeddings, indexing, and semantic search (Qdrant). | |
devops ai benchmark [OPTIONS] |
Benchmark, evaluate, and peer-grade candidate AI models across engineering tasks. | |
devops ai cache COMMAND [ARGS]... |
Manage LLM response cache, performance metrics, and warm starting points. | |
devops ai harness COMMAND [ARGS]... |
Manage agent harness slots, sub-agent local offloading, and tiered synthesis. | |
devops ai ingest COMMAND [ARGS]... |
Ingest library API contracts, type stubs, and documentation. | |
devops ai ast COMMAND [ARGS]... |
Tree-Sitter multilingual AST concrete syntax tree parsing and code graph synthesis. | |
| review | devops review path [OPTIONS] <targets> |
Review source files directly (no git required). |
devops review branch [OPTIONS] <branch_name> |
Review a git branch diff with one or all AI personas. | |
devops review pr [OPTIONS] <number> |
Review a GitHub pull request with one or all AI personas. | |
devops review findings [OPTIONS] <session> |
Inspect structured findings for a review session. | |
devops review verify [OPTIONS] <session> |
Validate or invalidate a review finding, persisting feedback reasons. | |
devops review stats [OPTIONS] |
Compute and display review accuracy statistics across saved sessions. | |
devops review export-feedback [OPTIONS] |
Export review findings into a JSONL benchmark dataset for prompt tuning and fine-tuning. | |
devops review apply-patch [OPTIONS] <session> |
Apply suggested LLM code fix for a verified finding. | |
devops review auto-fix [OPTIONS] <finding_id> |
Create a corrective topic branch with verified unit test patch for an approved finding. | |
| mcp | devops mcp serve [OPTIONS] |
Launch FastMCP server to expose devops-cli tools to MCP clients. |
devops mcp tools |
List all registered FastMCP tools and descriptions. | |
devops mcp export-schemas [OPTIONS] |
Export FastMCP tool JSON schemas and instructions for MCP clients. | |
| docs | devops docs generate [OPTIONS] |
Generate comprehensive Markdown or JSON documentation for all CLI commands and tools. |
devops docs check [OPTIONS] |
Check that generated documentation and README.md are up to date with codebase. | |
devops docs sync-readme [OPTIONS] |
Synchronize the Complete Command Matrix table in README.md with live CLI commands. | |
devops docs compact [OPTIONS] |
Compact historical documentation for completed release series. | |
| release | devops release status [OPTIONS] |
Display current release status, versions, tags, changelog, and docs state. |
devops release prepare [OPTIONS] <version> |
Bump version across pyproject.toml and source, update changelog, and sync docs. | |
devops release pr [OPTIONS] |
Create release branch, commit version bumps, and open a GitHub Release Pull Request. | |
devops release check [OPTIONS] |
Verify release readiness (version consistency, docs freshness, and CI quality gates). | |
devops release notes [OPTIONS] |
Print markdown release notes for a specified or current release version. | |
devops release tag [OPTIONS] |
Create release commit and annotated git tag. | |
| pr | devops pr list [OPTIONS] |
List pull requests with base targeting and review status. |
devops pr view [OPTIONS] <number> |
View details of a pull request. | |
devops pr checks [OPTIONS] <number> |
Check remote CI quality gate status on a pull request. | |
devops pr edit [OPTIONS] <number> |
Edit pull request base branch, title, or body. | |
devops pr create [OPTIONS] |
Create a pull request with automatic release branch target validation. | |
devops pr threads COMMAND [ARGS]... |
GitHub Pull Request workflows and reviews. | |
| gh | devops gh labels COMMAND [ARGS]... |
GitHub Views, Projects, Issues, Pages, Milestones, and Labels automation. |
devops gh milestones COMMAND [ARGS]... |
GitHub Views, Projects, Issues, Pages, Milestones, and Labels automation. | |
devops gh project COMMAND [ARGS]... |
GitHub Views, Projects, Issues, Pages, Milestones, and Labels automation. | |
devops gh views COMMAND [ARGS]... |
GitHub Views, Projects, Issues, Pages, Milestones, and Labels automation. | |
devops gh pages COMMAND [ARGS]... |
GitHub Views, Projects, Issues, Pages, Milestones, and Labels automation. | |
devops gh issues COMMAND [ARGS]... |
GitHub Views, Projects, Issues, Pages, Milestones, and Labels automation. | |
devops gh pr COMMAND [ARGS]... |
GitHub Views, Projects, Issues, Pages, Milestones, and Labels automation. | |
| tf | devops tf init [OPTIONS] <directory> |
Initialize an OpenTofu working directory. |
devops tf plan [OPTIONS] <directory> |
Generate and show an OpenTofu execution plan. | |
devops tf apply [OPTIONS] <directory> |
Create or update OpenTofu infrastructure. | |
devops tf destroy [OPTIONS] <directory> |
Destroy OpenTofu-managed infrastructure. | |
devops tf output [OPTIONS] <directory> |
Read an output variable from the OpenTofu state. | |
devops tf validate [OPTIONS] <directory> |
Validate the OpenTofu configuration files in a directory. | |
devops tf fmt [OPTIONS] <directory> |
Rewrites OpenTofu configuration files to canonical format. | |
devops tf status <directory> |
Show OpenTofu directory state, initialization status, and provider plugins. | |
devops tf deploy-cloud [OPTIONS] |
Deploy cloud Kubernetes infrastructure for AWS, Azure, or GCP. | |
devops tf lint [OPTIONS] <directory> |
Run TFLint static analysis on Terraform/OpenTofu configurations. | |
devops tf notify-plan [OPTIONS] |
Format and post structured, collapsible OpenTofu/Terraform plan diffs to PR comments. | |
devops tf cost COMMAND [ARGS]... |
OpenTofu and Terraform Infrastructure-as-Code operations. | |
| tls | devops tls ca [OPTIONS] |
Generate a self-signed Root Certificate Authority (CA) key pair. |
devops tls cert [OPTIONS] |
Generate an X.509 TLS certificate signed by local CA or self-signed. | |
devops tls homelab [OPTIONS] |
Generate complete Homelab TLS bundle (Root CA, Wildcard + Stack Services Cert). | |
devops tls inspect <cert_path> |
Inspect and display metadata of an X.509 certificate. | |
devops tls verify [OPTIONS] <cert_path> |
Verify an X.509 certificate cryptographic chain against a CA certificate. | |
devops tls enable-k8s [OPTIONS] |
Generate and apply TLS secrets (kubernetes.io/tls) across Kubernetes namespaces. | |
| telemetry | devops telemetry status |
Check OpenTelemetry collector health, Jaeger endpoint, and trace propagation status. |
devops telemetry logfire [OPTIONS] |
Display Logfire structured observability bridge status and token metrics. | |
devops telemetry test [OPTIONS] |
Emit a test OpenTelemetry trace span and metric to the configured collector. | |
devops telemetry profile [OPTIONS] <command> |
Display terminal-rendered waterfall breakdown and latency heatmap of OpenTelemetry spans. | |
devops telemetry open-ui |
Print and show the Jaeger Query UI endpoint for inspecting traces. | |
| serve | devops serve [OPTIONS] |
FastAPI REST & OpenAPI Service Engine for remote automation, health probes, and metrics. |
| test | devops test run [OPTIONS] <target> |
Execute pytest test suite with optional git-diff aware test selection. |
devops test load [OPTIONS] <script_path> |
Execute developer-centric load, spike, and latency tests against services using k6. | |
devops test sandbox [OPTIONS] <command> |
Execute test command inside an isolated, disposable Docker container sandbox. | |
| pipeline | devops pipeline [OPTIONS] <pipeline_path> |
Execute reproducible, containerized developer pipelines with Dagger. |
| vault | devops vault status [OPTIONS] |
Inspect HashiCorp Vault cluster health and initialization status. |
devops vault get [OPTIONS] <path> |
Fetch secret value from Vault or OS Keyring fallback. | |
devops vault set [OPTIONS] <path> <key_values> |
Store secret key-value pairs in HashiCorp Vault KV-v2 engine. | |
devops vault sync [OPTIONS] <path> |
Synchronize secrets from Vault into OS Keyring for offline/local CLI operations. | |
| valkey | devops valkey ping [OPTIONS] |
Test connection and measure round-trip latency to the Valkey server. |
devops valkey info [OPTIONS] |
Inspect server configuration, memory allocation, and operational metrics. | |
devops valkey stats [OPTIONS] |
Display quick diagnostic summary of server health, memory, and keys. | |
devops valkey keys [OPTIONS] <pattern> |
List keys matching a glob pattern. | |
devops valkey get [OPTIONS] <key> |
Retrieve string value stored at key. | |
devops valkey set [OPTIONS] <key> <value> |
Set string value of key with optional expiration TTL. | |
devops valkey flush [OPTIONS] |
Flush and purge keys from current or all databases. | |
devops valkey backup [OPTIONS] |
Trigger background RDB persistence snapshot (BGSAVE). | |
devops valkey cli [OPTIONS] <command_args> |
Execute raw Valkey commands directly against the server. | |
| sandbox | devops sandbox deploy [OPTIONS] <command> |
Deploy an isolated background container sandbox with security containment. |
devops sandbox status [OPTIONS] <instance_id> |
Inspect status of deployed sandbox containers. | |
devops sandbox stop [OPTIONS] <instance_id> |
Gracefully stop and tear down a sandbox container. | |
devops sandbox exec [OPTIONS] <instance_id> <command> |
Execute a command inside an active sandbox container. | |
| dashboard | devops dashboard [OPTIONS] |
Interactive terminal UI dashboard for workstation situational awareness. |
| tui | devops tui [OPTIONS] |
Interactive terminal UI dashboard for workstation situational awareness. |
| format | devops format [OPTIONS] |
Format codebase with ruff format (or verify in check-only mode with --check). |
| lint | devops lint [OPTIONS] |
Run ruff linter across the project, automatically applying fixes by default. |
Distributed under the MIT License. See LICENSE for details.