You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Commands/files inspected: All pkg/cli/*.go command files and docs/src/content/docs/setup/cli.md Method: Static source analysis (pre-collected CLI help output was empty; source used directly) Total issues found: 15
Severity Breakdown
Severity
Count
High
1
Medium
6
Low
8
High Severity
pr transfer command missing Options section in docs
Quoted docs text: Section ends immediately after code block with no **Options:** entry
Expected:**Options:** \--repo/-r``
Priority: High — users cannot discover available flags
Medium Severity
6 medium severity findings
audit diff Short description does not indicate deprecation
Affected command:audit diff subcommand
Location:pkg/cli/audit_diff_command.go:21
Quoted CLI output:Short: "Compare behavior across workflow runs"
Issue: Long description immediately says "Deprecated: pass multiple run IDs directly to the audit command instead." but Short gives no hint of deprecation — users will continue using deprecated subcommand
Issue: Message tells users to "use --raw-field instead" — but -F IS the shorthand for --raw-field. The message is circular.
Suggested fix:"use the long form --raw-field instead"
Priority: Medium
--disable-X naming outlier
Affected commands:fix, upgrade
Issue: Codebase uses --no-X for negation flags throughout (e.g., --no-fix, --no-actions, --no-compile, --no-merge) but --disable-codemod does not follow this pattern.
Note:--disable-codemod is repeatable and takes a value (ID), so --no-codemod is not a direct equivalent — but the naming is still inconsistent with the rest of the CLI.
Priority: Medium — consider --skip-codemod or document the rationale
logs command Options list missing --evals
Affected command:logs
Location:docs/src/content/docs/setup/cli.md logs Options line
Quoted source:logsCmd.Flags().Bool("evals", false, "Filter to runs containing evals results (evals.jsonl)...")
Issue:--evals is implemented but absent from the logsOptions list in docs; audit docs correctly include it
Suggested fix: Add --evals between --end-date and --exclude-staged in the logs Options list
Priority: Medium
secrets bootstrap missing -e short form in docs Options
CLI Consistency Inspection — 2026-07-23
Commands/files inspected: All
pkg/cli/*.gocommand files anddocs/src/content/docs/setup/cli.mdMethod: Static source analysis (pre-collected CLI help output was empty; source used directly)
Total issues found: 15
Severity Breakdown
High Severity
pr transfercommand missing Options section in docspr transferdocs/src/content/docs/setup/cli.md(~line 837)**Options:**entry**Options:** \--repo/-r``Medium Severity
6 medium severity findings
audit diffShort description does not indicate deprecationaudit diffsubcommandpkg/cli/audit_diff_command.go:21Short: "Compare behavior across workflow runs""Deprecated: pass multiple run IDs directly to the audit command instead."but Short gives no hint of deprecation — users will continue using deprecated subcommand"[Deprecated] Compare workflow runs (use: gh aw audit <id1> <id2>)"Root command branding may be stale
gh aw --helpcmd/gh-aw/main.go:83Short: "GitHub Agentic Workflows CLI from GitHub Next""GitHub Agentic Workflows CLI"or update to current org branding-Fshorthand deprecation message is self-referentialruncmd/gh-aw/main.go:814MarkShorthandDeprecated("raw-field", "use --raw-field instead")-FIS the shorthand for--raw-field. The message is circular."use the long form --raw-field instead"--disable-Xnaming outlierfix,upgrade--no-Xfor negation flags throughout (e.g.,--no-fix,--no-actions,--no-compile,--no-merge) but--disable-codemoddoes not follow this pattern.--disable-codemodis repeatable and takes a value (ID), so--no-codemodis not a direct equivalent — but the naming is still inconsistent with the rest of the CLI.--skip-codemodor document the rationalelogscommand Options list missing--evalslogsdocs/src/content/docs/setup/cli.mdlogs Options linelogsCmd.Flags().Bool("evals", false, "Filter to runs containing evals results (evals.jsonl)...")--evalsis implemented but absent from thelogsOptions list in docs;auditdocs correctly include it--evalsbetween--end-dateand--exclude-stagedin thelogsOptions listsecrets bootstrapmissing-eshort form in docs Optionssecrets bootstrapdocs/src/content/docs/setup/cli.md(~line 268)cmd.Flags().StringVarP(&engineFlag, "engine", "e", ...)--enginewithout the-eshort form that is implemented--engine/-ein Options listLow Severity
8 low severity findings
lintShort description says "workflows" not "workflow files"pkg/cli/lint_command.go:37"Lint existing .lock.yml workflows with actionlint only""Lint existing .lock.yml workflow files with actionlint only"env get/env updatehave swapped adjective orderpkg/cli/env_command.go:137,174get→"Download default compiler variables"vsupdate→"Upload compiler default variables"— adjective order swapped between siblings"compiler default variables"mcp-serverShort vs Long inconsistent phrasingpkg/cli/mcp_server_command.go:22"...exposing gh aw commands as tools"vs Long:"...that exposes gh aw CLI commands as MCP tools."--repodescription varies across 4+ commandsflags.go:27,deploy_command.go:93,doctor_command.go:62,env_command.go:162doctormissing default note;envmissingHOST/in format spec; inconsistent "in" preposition placement"Target repository ([HOST/]owner/repo format). Defaults to current repository"validatedefines--jsoninline instead of usingAddJSONFlaghelperpkg/cli/validate_command.go:79cmd.Flags().BoolP("json", "j", false, ...)instead of calling theAddJSONFlag(cmd)helper fromflags.go; breaks single-source-of-truthAddJSONFlag(cmd)calldeploymissing--pralias present on all sibling commandspkg/cli/deploy_command.goadd,update,upgrade,initall have hidden--pralias for--create-pull-request;deploydoes not--pralias todeploycompilemissing prose for--syft,--grype,--runner-guarddocs/src/content/docs/setup/cli.mdcompile section--grantand--yamllintwhich have descriptions--syft(SBOM scanner),--grype(vulnerability scanner),--runner-guard(taint analysis)envShort says "GitHub variables" — ambiguouspkg/cli/env_command.go:116"Manage compiler defaults as GitHub variables""Manage compiler defaults as GitHub Actions variables"Inspection Metadata
pkg/cli/*.go+docs/src/content/docs/setup/cli.md)/tmp/gh-aw/agent/all-help.txt) was empty (0 lines); source code used as primary inputWarning
Firewall blocked 1 domain
The following domain was blocked by the firewall during workflow execution:
releaseassets.githubusercontent.comSee Network Configuration for more information.