Gradle task API

root

Aggregates retained analysis-configuration evidence for the root stigCheckAnalysis task.

root

stig - check

Derives one IDE SARIF view from every registered canonical problems.jsonl output.

element

stig - analysis

P1: Runs bazel build and fingerprints native C++ action inputs.

element

stig - analysis

P1: Generates raw + canonical compile_commands.json via Bazel aquery.

element

stig - analysis

P1: Applies configurable source patches before native build.

element

stig - analysis

P2: Converts every native compile command to the pinned LLVM toolchain recipe.

element

stig - analysis

P3: Builds provenance LLVM bitcode (module.bc / module.ll).

element

stig - analysis

Compiles raw LLVM source units for stigAnalysisP3BuildProvenanceBitcode.

element

stig - analysis

P3: Selects provenance compile commands from the complete P2 LLVM database.

element

stig - analysis

P4: Selects software-under-analysis compilation units (mode=EXPLICIT).

element

stig - analysis

P5: Applies semantic transforms and validates the final analyzer input.

element

stig - analysis

P5: Builds and links the untransformed analyzer input.

element

stig - analysis

Compiles raw LLVM source units for stigAnalysisP5BuildUntransformedAnalyzerInput.

element

stig - analysis

P5: Derives component interface points (LLVM symbols + ASIL) from the final analyzer-input module.

element

stig - analysis

P5: Generates PhASAR run-plan for actual analysis execution.

element

Produces retained P5 transform and analyzer-input validation evidence.

element

stig - analysis

P5: Selects analyzer-input compile commands for the P4 software-under-analysis units.

element

stig - analysis

P6: Executes stig-code-analyzer; --start-with=transformed uses captured inputs without local P1-P5 producers.

--analyzer-executable <string>

element

string

Existing stig-code-analyzer executable for transformed mode. Skips analyzer build/install and records its identity and SHA-256.

--from <string>

element

string

Evidence ZIP or extracted evidence directory for --start-with=transformed; relative paths use the root project.

--output-directory <string>

element

string

Separate task-owned diagnostic output directory, required with --start-with=transformed.

--password <string>

element

string

Password for an encrypted transformed evidence ZIP.

--run <string>

element

string

One exact captured run name in transformed mode; omit to execute every captured run.

--solver-workers <string>

element

string

Maximum concurrent source solvers per run; 0 (default) shares CPUs minus one and available RAM across the build.

--start-with <TRANSFORMED>

element

TRANSFORMED

Run from a captured transformed checkpoint. Only transformed is supported; omit for the local pipeline.

element

stig - analysis

P6: Slices per-root LLVM modules from analyzer run-plan roots.

element

stig - analysis

P7: Collects function descriptions from code comments.

--codeBrowserBaseUrl <string>

element

string

Optional override for code browser repo URL (for example https://host/org/repo).

--codeBrowserCommitRef <string>

element

string

Commit reference for fileUrl in report: current \| upstream-parent (default current).

--compileCommands <string>

element

string

Path to compile_commands JSON.

--elementDir <string>

element

string

Element/component directory to analyze.

--outputFile <string>

element

string

Output report file path (json\|yaml based on --outputFormat).

--outputFormat <string>

element

string

Output format: json \| yaml.

--projectRoot <string>

element

string

Project root directory.

--sourceGlobs <string>

element

string

Comma-separated source globs relative to elementDir (default includes cpp/cc/cxx and h/hpp/hh/hxx).

element

stig - analysis

P7: Collects per-function complexity metrics via clang-tidy (from=sourceCodeSelection.compileCommands).

--clangTidyBinary <string>

element

string

clang-tidy executable override; defaults to the pinned STIG LLVM toolchain binary.

--codeBrowserBaseUrl <string>

element

string

Optional override for code browser repo URL (for example https://host/org/repo).

--codeBrowserCommitRef <string>

element

string

Commit reference for fileUrl in metrics report: current \| upstream-parent (default current).

--compileCommands <string>

element

string

Path to compile_commands JSON used by clang-tidy.

--compositeMinimumRecommendedTests <string>

element

string

Minimum recommended tests derived from function metrics.

--compositeScaleBranches <string>

element

string

NEXY low-to-medium reference for branch count.

--compositeScaleCognitiveComplexity <string>

element

string

NEXY low-to-medium reference for cognitive complexity.

--compositeScaleLines <string>

element

string

NEXY low-to-medium reference for line count.

--compositeScaleParameters <string>

element

string

NEXY low-to-medium reference for parameter count.

--compositeScaleStatements <string>

element

string

NEXY low-to-medium reference for statement count.

--compositeScaleVariables <string>

element

string

NEXY low-to-medium reference for variable count.

--compositeScoreGain <string>

element

string

Deprecated compatibility option; NEXY ignores final gain.

--compositeScoreOffset <string>

element

string

Deprecated compatibility option; NEXY ignores final offset.

--compositeWeightBranches <string>

element

string

NEXY weight for branch count.

--compositeWeightCognitiveComplexity <string>

element

string

NEXY weight for cognitive complexity.

--compositeWeightLines <string>

element

string

NEXY weight for line count.

--compositeWeightParameters <string>

element

string

NEXY weight for parameter count.

--compositeWeightStatements <string>

element

string

NEXY weight for statement count.

--compositeWeightVariables <string>

element

string

NEXY weight for variable count.

--elementDir <string>

element

string

Element/component directory to analyze.

--excludedSourceGlobs <string>

element

string

Comma-separated source exclude globs/prefixes applied after sourceGlobs.

--outputFile <string>

element

string

Output report file path (json\|yaml based on --outputFormat).

--outputFormat <string>

element

string

Output format: json \| yaml.

--projectRoot <string>

element

string

Project root directory.

--sourceGlobs <string>

element

string

Comma-separated source include globs/prefixes. Empty means all C/C++ files in compile_commands.

element

stig - analysis

P7: Builds report-ready applied-transformations function table data.

element

stig - analysis

P7: Generates SVG, Cytoscape, and Sigma diagrams directly from analyzer JSON.

element

stig - analysis

P7: Selects source-code compile commands (from=analyzerInput.compileCommands, includes=0, excludes=0).

root

stig - docs

Packages STIG's development class directories for Dokka's plugin classpath.

root

stig - analysis

Audits captured evidence integrity and LLVM transform accounting, stopping before expensive checks when blocked.

--all-checks

root

flag

Continue independent mechanical checks after a recorded blocker; never use corrupt payloads.

--evidence-directory <list>

root

list

Extracted stigCheckAnalysis archive directory; repeat for multiple activities.

--evidence-index <list>

root

list

Existing local review_evidence_index.json; selects no pipeline producer.

--evidence-zip <list>

root

list

stigCheckAnalysis ZIP; repeat for multiple activities.

--no-all-checks

root

flag

Disables option --all-checks.

--output-directory <string>

root

string

Directory for generated evidence reports, outside the input evidence.

--password <string>

root

string

Password for the supplied encrypted evidence ZIPs.

element

stig - analysis

Builds the configured untransformed analyzer-input inventory for configuration maintenance.

element

stig - analysis

Builds the complete untransformed LLVM ownership inventory from the shared P2 database.

element

stig - analysis

Checks the complete analysis chain and optionally exports LLVM, analyzer, and report evidence.

root

stig - analysis

Checks selected source-analysis modules and optionally exports one combined evidence ZIP.

--accept-partial-results

element, root

flag

Retain available evidence after pipeline failures (enabled by default). Use --continue to attempt other activities.

--configuration-only

element, root

flag

Stop after P5 and collect configuration evidence and Markdown review tables without running P6, P7, or HTML generation.

--modules <list>

root

list

Comma-separated absolute Gradle project paths; repeatable. Defaults to all eligible source-analysis modules.

--no-accept-partial-results

element, root

flag

Disables option --accept-partial-results.

--no-configuration-only

element, root

flag

Disables option --configuration-only.

--no-sync-evidence-repositories

root

flag

Disables option --sync-evidence-repositories.

--no-zip

element, root

flag

Disables option --zip.

--password <string>

element, root

string

Encrypt ZIP contents with AES-256; requires --zip and must not be blank.

--sync-evidence-repositories

root

flag

Synchronize evidence repositories before running the selected activity analysis chains.

--zip

element, root

flag

Create one self-contained evidence ZIP for the selected modules (disabled by default).

--zip-directory <string>

element, root

string

Export directory, relative to the root project or absolute; requires --zip. Defaults to ../<project-name>-check-analysis-evidence/.

element

stig - check

Validates that file paths and DSL settings in this module's stig { element } block are correct (paths exist, no contradictory settings).

root

stig - check

[root aggregator] Validates file paths in stig { element } blocks across all modules (existence, kind, repo containment).

element

stig - check

[per-module] Writes canonical specification/configuration problems and derived IDE SARIF.

root

stig - check

[full-model] Loads the complete model once and checks each module with its own settings.

--checks <all|automatic|manual>

element, root

all\|automatic\|manual

Checks to report: automatic (default), all (automatic and manual), or manual.

--reportDir <string>

element, root

string

Directory for reports.

--reportFormat <string>

element, root

string

Report format: text \| json \| sarif \| junit \| html.

--ruleset <string>

element, root

string

Ruleset/profile selector (optional).

--viewpoints <list>

element, root

list

Viewpoint to check. Repeat the option to check multiple viewpoints.

element

stig - check

Builds P1-P5 and reports unresolved application symbols as HIGH findings for provisional analysis.

root

stig - check

Checks final P5 symbol completeness for every analyzed activity.

element

stig - analysis

Classifies missing symbols into inactive real-unit, other-element, or unresolved candidates.

element

Collects retained LLVM and configuration evidence for stigCheckAnalysis.

root

stig - docs

Collects P5 scope and P6 execution measurements without launching analysis.

element

stig - analysis

Captures current native symbol-provider candidates for active activity transform rules.

element

stig - analysis

Compiles raw LLVM source units for stigBuildConfiguredAnalyzerInputInventory.

element

stig - analysis

Compiles raw LLVM source units for stigBuildFullLlvmOwnershipInventory.

element

stig - edit

Creates or reconciles this element's analysis configuration; --preview writes only build candidates.

--activitySourceRoot <string>

element

string

Conditionally required. Logical native activity directory as repo:path; reuses element configuration.

--analysisDepth <string>

element

string

Optional. Marker depth GROUP, LEAF, or BOTH. Reuses enabled analyzerExecution modes; default LEAF.

--analysisSource <list>

element

list

Optional, repeatable exact override (repo:path). When both source options are omitted, reuses configured target source trees or selects nativeTarget actions under activitySourceRoot.

--analysisSourceTree <list>

element

list

Optional, repeatable repo:path tree. Selects only compile actions owned by nativeTarget whose logical source path is beneath the tree; may be combined with exact --analysisSource values.

--compileCommandsFile <string>

element

string

Optional path to compile_commands.json. Defaults to the selected element's P1 extraction output.

--implementationClass <string>

element

string

Conditionally required. C++ implementation class; reuses implementationClassName when omitted.

--implementationHeader <string>

element

string

Optional repo:path override. Defaults to <implementationDir>/<moduleName>_activity.h in the owning repository.

--implementationNamespace <string>

element

string

Conditionally required. C++ namespace; reuses implementationNamespace when omitted.

--interfacePointsAnnotationFile <string>

element

string

Required for LEAF/BOTH, optional for GROUP. Coordinate repo:path; reuses the configured file.

--lifecycleProfile <string>

element

string

Optional. Values: EXECUTE_INIT_THEN_EXPLICIT_CYCLE or EXPLICIT_CYCLE_ONLY. Default EXECUTE_INIT_THEN_EXPLICIT_CYCLE.

--nativeTarget <string>

element

string

Conditionally required. Native target label; reuses the configured target when omitted.

--no-preview

element

flag

Disables option --preview.

--preview

element

flag

Write configuration candidates and review findings under build/ without editing project sources.

--topicsFile <string>

element

string

Conditionally required. Topics metadata coordinate repo:path; reuses interfacePoints.topicsFile.

root

stig - analysis

Records completed semantic review as CONFIRMED on shared project registry rules.

--function <list>

root

list

Exact project registry rule identity whose semantic review is complete; repeatable. Omit to confirm every selected rule.

--modules <list>

root

list

Select shared rules used by these comma-separated absolute activity project paths; repeatable. Omit to select project registry rules directly.

--no-preview

root

flag

Disables option --preview.

--preview

root

flag

Write the proposed root Gradle file and status report without updating the project registry.

element

build

Assembles stig context classes.

element

Packages this element's Context declarations independently of its other viewpoints.

element

stig - analysis

Derives a non-mutating source-code-analysis configuration proposal from maintenance evidence.

root

stig - docs

Exports selected Highway model roots or the Kotlin-defined native JSON schema.

--element <list>

root

list

Canonical element name or ID; repeat to select several.

--format <string>

root

string

Output encoding: highway-json.

--output <string>

root

string

Output file, relative to the STIG project or absolute.

--viewpoints <string>

root

string

Comma-separated Context, Requirements, Design, Analysis viewpoint selection.

--what <string>

root

string

Export model or schema; schema export does not load the consumer model.

root

stig - check

[root aggregator] Runs stigCheckModel plus a whole-repository scan with the free pinned Qodana Community linter (native mode, no Docker/license or manual installation). Requires complete evidence and zero unsuppressed findings.

element

stig - analysis

Scans compiled C++ topics into the shared specification and harness interface inventory.

root

stig - docs

Extracts STIG's bundled Dokka assets and templates from the plugin classpath into build/stig/dokka-resources/ so Dokka can consume them as on-disk inputs.

element

stig - analysis

Generates temporary C++ harness files and the contract consumed directly by P5.

root

stig - analysis

[root aggregator] Generates temporary analysis harnesses for all STIG elements.

root

stig - analysis

Generates review worksheets from existing evidence; optionally creates editable copies at a chosen destination.

--evidence-directory <list>

root

list

Extracted stigCheckAnalysis archive directory; repeat for multiple activities.

--evidence-index <list>

root

list

Existing local review_evidence_index.json; selects no pipeline producer.

--evidence-zip <list>

root

list

stigCheckAnalysis ZIP; repeat for multiple activities.

--output-directory <string>

root

string

Directory for generated evidence reports, outside the input evidence.

--password <string>

root

string

Password for the supplied encrypted evidence ZIPs.

--working-review-directory <string>

root

string

Optional destination for editable per-activity reviews, outside input evidence and task outputs.

element

stig - docs

Issue 13: emits diagrams.md indexing every file in the new 5-axis diagrams tree.

element

stig - docs

[per-module] Builds standalone HTML, validates its exact inventory, and reports large files.

root

stig - docs

[root] Builds all modules' Dokka HTML, validates its exact inventory, and reports large files.

--exclude <list>

element, root

list

Exclude one STIG module from the root aggregate report and its STIG report pipeline. Use an absolute Gradle project path and repeat the option for multiple modules.

--no-serve

element, root

flag

Disables option --serve.

--serve

element, root

flag

Start or reuse a managed background HTTP server for the generated report.

--serve-port <string>

element, root

string

Override the preview-server port for this invocation (0 selects a free port; implies --serve).

root

stig - docs

Optionally requires clean source repositories and logs the HTML-pipeline wall-clock start.

element

stig - docs

Generates documentation from STIG viewpoints (stub implementation).

root

stig - docs

[root aggregator] Generates STIG viewpoint documentation for all subprojects.

--enableModelListings <string>

element

string

Generate markdown files containing Kotlin viewpoint source (default false).

--format <string>

element

string

Docs format: MKDOCS \| WRITERSIDE \| DOKKA.

--navigationFile <string>

element

string

Navigation file to update (format-specific).

--outputDir <string>

element

string

Output directory for generated docs.

--updateNavigation <string>

element

string

Update navigation files (default true).

--viewpoints <list>

element

list

Viewpoint to generate. Repeat the option to generate multiple viewpoints.

element

stig - edit

Imports this module's root-configured code input into its ordinary Kotlin Context.

root

stig - edit

Reads configured SYML/Highway/code inputs and explicitly overwrites selected Kotlin specifications.

--from <string>

element, root

string

Input kind: syml, c-header, highway-json or code at the root; code only for an element task. Omit to use configured inputs.

--into <string>

element, root

string

Project-relative target module root for the ad hoc SYML input.

--root-folder <string>

element, root

string

SYML component root for a single ad hoc import; otherwise use the configured roots.

--type <string>

element, root

string

Canonical ElementType for SYML, for example component or activity.

root

stig - edit

Creates a new element module and initializes STIG viewpoints.

--asil <string>

root

string

Optional. Element ASIL written to build.gradle.kts. Syntax: --asil <value>. Values: QM, A, B, C, D or decompositions such as QM_B, B_D. Default: none; no ASIL setting is generated.

--basePackage <string>

root

string

Optional. Base Kotlin package. Syntax: --basePackage <package>. Default: derived from --elementDir and the project prefix.

--createBuildFile <string>

root

string

Optional. Whether to create the module build.gradle.kts. Syntax: --createBuildFile <boolean>. Values: true, false, 1, 0. Default: true.

--createTemplates <string>

root

string

Optional. Whether to create Kotlin and Markdown templates. Syntax: --createTemplates <boolean>. Values: true, false, 1, 0. Default: true.

--dryRun <string>

root

string

Optional. Whether to preview changes without writing files. Syntax: --dryRun <boolean>. Values: true, false, 1, 0. Default: false.

--elementDir <string>

root

string

Required. Element directory relative to the root project. Syntax: --elementDir <path>.

--elementName <string>

root

string

Canonical Kotlin element name; defaults to the name derived from elementDir.

--elementType <string>

root

string

Optional. Element type written to build.gradle.kts. Syntax: --elementType <value>. Values: VEHICLE, ITEM, SYSTEM, SUBSYSTEM, CLUSTER, COMPONENT, ACTIVITY, UNIT. Default: COMPONENT.

--gradlePath <string>

root

string

Optional. Gradle project path. Syntax: --gradlePath <project-path>. Default: colon-separated --elementDir.

--group <string>

root

string

Optional. Element group written to build.gradle.kts. Syntax: --group <name>. Default: none; a commented placeholder is generated and project defaults apply.

--importEnabled <string>

root

string

Optional. Model import policy written to the element configuration. Syntax: --importEnabled <boolean>. Values: true, false, 1, 0. Default: false.

--mode <string>

root

string

Optional. Existing-file policy. Syntax: --mode <value>. Values: CREATE_MISSING, OVERWRITE, FAIL_IF_EXISTS. Default: CREATE_MISSING.

--placement <string>

root

string

Optional. Viewpoint placement. Syntax: --placement <value>. Values: DIRECT, STIG_SUBDIR. Default: DIRECT.

--sourceCodeAnalysis <string>

root

string

Optional. Initial source-code-analysis policy. Syntax: --sourceCodeAnalysis <value>. Values: DISABLED, INHERIT. Default: DISABLED; a safe-off phased scaffold is generated.

--templateMode <string>

root

string

Optional. Template content mode. Syntax: --templateMode <value>. Values: SKELETON, EXAMPLE. Default: SKELETON.

--viewpoints <list>

root

list

Optional. Viewpoints to create. Syntax: --viewpoints <value> (repeatable). Values: context, requirements, design, analysis, tests. Default: all five viewpoints.

root

stig - edit

Creates a Kotlin model library without architectural elements or CREATE viewpoints.

--basePackage <string>

root

string

Kotlin package for shared declarations; defaults to the project prefix and module directory.

--mode <string>

root

string

Existing-file policy: CREATE_MISSING (default), OVERWRITE, or FAIL_IF_EXISTS.

--moduleDir <string>

root

string

Required. New module directory relative to the root project, e.g. interfaces/pecu.

--no-preview

root

flag

Disables option --preview.

--preview

root

flag

Show the intended files without changing project sources or settings.

element

stig

Install the OS toolchain (LLVM/Z3/clang/cmake) via scripts/setup.sh (sudo). Run once per machine before building.

root

stig

Install the OS toolchain (LLVM/Z3/clang/cmake) via scripts/setup.sh (sudo). Run once per machine before building.

root

stig

Install or update the bundled STIG Codex plugin for this user. Explicit only; normal builds never run it.

--codex-executable <string>

root

string

Use this Codex executable instead of the pinned managed distribution.

--codex-home <string>

root

string

Codex configuration home; defaults to CODEX_HOME or ~/.codex.

--login <AUTO|DEVICE|NEVER>

root

AUTO\|DEVICE\|NEVER

AUTO prompts when connected; DEVICE explicitly starts device login; NEVER never prompts.

--no-smoke-test

root

flag

Disables option --smoke-test.

--smoke-test

root

flag

Check that Codex answers 1+1 with 2 (default true). Disable with --no-smoke-test.

--smoke-test-timeout <string>

root

string

Maximum seconds for the model smoke test (default 120).

root

stig - help (introspection)

Lists every STIG element configured in build.gradle.kts with its project path, module directory, implementation directory, build system, and Bazel target (when set).

root

stig - check

Generates HTML, writes the complete deduplicated problem aggregate, and lists typed filters.

--atLeast <string>

root

string

List problems at least as severe as this ProblemSeverity value.

--category <string>

root

string

List exact ProblemCategory values; comma-separate multiple values.

--failAt <string>

root

string

After writing and printing the complete result, fail at this ProblemSeverity threshold.

--severity <string>

root

string

List only problems with exactly this ProblemSeverity value.

element

Protects analysis inputs and outputs from another Gradle invocation in this checkout.

root

Protects analysis inputs and outputs from another Gradle invocation in this checkout.

element

stig - analysis

Materializes the resolved analysis transform rules, including current review state.

element

stig - docs

Stages this module's STIG markdown (provenance file, flow/complexity viewpoint .md files, source-tree READMEs) into Dokka's includes directory.

element

stig - docs

Prepares this module and its model dependency context for checks and a standalone HTML report.

root

stig - docs

Prepares one shared compiled model for all included modules' checks and HTML reports.

root

stig - docs

[root] Fetches and prepares retained Pages releases for Dokka versioning.

element

Prepares non-secret browser review settings for Dokka HTML generation.

root

Prepares non-secret browser review settings for Dokka HTML generation.

element

stig - analysis

Collects original LLVM definition coverage and exact P3/P5 input matches for transform review.

root

stig - help (introspection)

Prints the consumer project name/version and the selected STIG source and loaded plugin version.

root

stig - docs

[root] Publishes the exact bounded Dokka inventory through a single-commit Pages branch and reports size.

--exclude <list>

root

list

Exclude one STIG module from the generated aggregate before publishing. Use an absolute Gradle project path and repeat the option for multiple modules.

--no-prune-all-in-project

root

flag

Disables option --prune-all-in-project.

--no-prune-snapshots-in-project

root

flag

Disables option --prune-snapshots-in-project.

--no-replace-existing-release-in-project

root

flag

Disables option --replace-existing-release-in-project.

--prune-all-in-project

root

flag

Replace this project's Pages subtree and publish only the current version.

--prune-snapshots-in-project

root

flag

Remove all previously published snapshots in this project's Pages subtree before publishing.

--replace-existing-release-in-project

root

flag

Permit deliberate replacement of the same named, non-snapshot release.

element

stig - check

Compiles this element's main source set. Model import is a separate source-editing command.

root

stig - check

[root aggregator] Runs stigQuickCheck for every active STIG element.

root

stig - analysis

Replays one analyzer run from an extracted stigCheckAnalysis archive without compiling product source.

--debug-fact-filter <string>

root

string

Literal fact-label substring used with at least one --debug-facts-at-function option.

--debug-facts-at-function <list>

root

list

Exact mangled LLVM function to inspect after the solve. Repeat for multiple functions; prefer this targeted diagnostic before --debug-trace.

--debug-trace

root

flag

Enable the analyzer's high-volume PhASAR trace. Use only after targeted fact diagnostics.

--evidence-directory <string>

root

string

Absolute or root-project-relative directory containing an extracted stigCheckAnalysis ZIP.

--module <string>

root

string

Exact Gradle module path to replay from a multi-module evidence collection.

--no-debug-trace

root

flag

Disables option --debug-trace.

--output-directory <string>

root

string

Fresh task-owned directory for replay JSON, logs, command, and concise sink summary.

--run <string>

root

string

Exact archived runStem from selected_p6_modules.json, for example cascading-faults-A.

element

stig - analysis

Selects the configured analyzer-input units from the shared P2 LLVM database.

element

stig

Run stig environment checks. Scaffold today — real checks land via #38.

root

stig

Run stig environment checks. Scaffold today — real checks land via #38.

element

stig

Build / refresh the stig-code-analyzer binary on this host (build-analyzer.sh; idempotent; assumes deps installed).

root

stig

Build / refresh the stig-code-analyzer binary on this host (build-analyzer.sh; idempotent; assumes deps installed).

element

stig - docs

Stops this project's managed background HTML preview server, if running.

root

stig - docs

Stops this project's managed background HTML preview server, if running.

root

stig - analysis

Runs the consumer's explicit pull/push git-subrepo synchronization before root analysis collection.

root

stig

Update to the latest stable published STIG release by default; --keep-devel retains local source. Align Gradle, Java, shared pins and IDEA settings; repair and strictly verify dependency locks and checksums.

--dependencies

root

flag

Write missing SHA-256 checksums and strictly verify current dependencies and IDEA sources without changing the STIG version.

--devel

root

flag

Align dependencies with the configured local STIG checkout.

--keep-devel

root

flag

Retain the local STIG checkout, record its actual version and synchronize its pins (alias: --devel).

--major

root

flag

Update to the latest stable STIG release, including major upgrades, and refresh dependency checksums.

--minor

root

flag

Update to the latest stable STIG release within the current major version and refresh dependency checksums.

--no-dependencies

root

flag

Disables option --dependencies.

--no-devel

root

flag

Disables option --devel.

--no-keep-devel

root

flag

Disables option --keep-devel.

--no-major

root

flag

Disables option --major.

--no-minor

root

flag

Disables option --minor.

--no-none

root

flag

Disables option --none.

--no-patch

root

flag

Disables option --patch.

--no-yes

root

flag

Disables option --yes.

--none

root

flag

Keep the selected STIG version and repair dependency locks and checksums.

--patch

root

flag

Update to the latest stable STIG patch release and refresh dependency checksums.

--yes

root

flag

Accept new checksum additions after the existing-pin and signing-policy checks.