Security
The `hanzo security` commands.
Also for this capability: API · CLI · MCP · SDKs
Secret scanning for your code: submit sources, get findings, masked never raw.
hanzo security scans listEvery command takes --json for the raw response and --help for its own flags. Sign in once with hanzo auth login; the commands below use that session, and the org they act in is the one it carries.
| Command | What it does |
|---|---|
hanzo security health | Reports that the scanning subsystem is serving and how many secret-detection rules the engine holds. |
hanzo security rules | Is the secret-detection catalog the engine scans with. |
findings
| Command | What it does |
|---|---|
hanzo security findings get <id> | Returns a single finding: which rule fired, where (path and line), the masked preview and the SHA-256 fingerprint of… |
hanzo security findings list | Is the org's findings — rule, severity, path, line, masked preview and fingerprint — newest first, across scans or… |
scans
| Command | What it does |
|---|---|
hanzo security scans create --files '[{"content":"<content>","path":"<path>"}]' | Runs the detection engine over a batch of files and answers 201 with the scan summary: how many files were read, how… |
hanzo security scans get <id> | Returns one scan together with every finding on it, so the detail view is one round-trip rather than a list call per… |
hanzo security scans list | Is the org's scan history, newest first, each as the same summary the submission answered — files read, findings fired,… |
How is this guide?