> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/sast-and-sca/cli/reference/overview.md).

# Overview

Once [installed](/sast-and-sca/cli/install.md), you can invoke the CLI using `sl`:

```
sl [global options] command [command options] [arguments...]
```

![](/files/DfHDmRpYn5HJOmhRtTva) ![](/files/P5vj8JOtHNJWVEvAqKym)

Windows PowerShell users can invoke the CLI as follows:

```
# Be sure to execute this command from the directory where you
# saved the sl executable. Alternatively, you can provide the
# relative path (i.e., `<path>\sl.exe`)

sl.exe [global options] command [command options] [arguments...]
```

![](/files/DfHDmRpYn5HJOmhRtTva) ![](/files/P5vj8JOtHNJWVEvAqKym)

The CLI accepts the following commands:

| **Command**                                                                                                   | **Description**                                                                                                     |
| ------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------- |
| [analyze](/sast-and-sca/cli/reference/analyze.md)                                                             | Analyze applications using Qwiet AI by Harness                                                                      |
| [auth](/sast-and-sca/cli/reference/auth.md)                                                                   | Authenticates the CLI with your Qwiet AI by Harness account and associates your applications with your organization |
| [check-analysis](https://github.com/iKettles/harness-gitbook/tree/main/qwiet/cli/reference/check-analysis.md) | Check analysis results against pre-defined build rules                                                              |
| [check-environment](/sast-and-sca/cli/reference/check-environment.md)                                         | Check local environment to ensure connectivity and installation of required tools                                   |
| [count-lines](/sast-and-sca/cli/reference/count-lines.md)                                                     | Count the lines of code in a given directory                                                                        |
| [ocular](broken://spaces/w59KBC5RUR1uHzodGm1U/pages/m7RXikWqfnz2wASRxpfS)                                     | Start [Ocular](broken://spaces/w59KBC5RUR1uHzodGm1U/pages/m7RXikWqfnz2wASRxpfS)                                     |
| [policy](/sast-and-sca/cli/reference/policy.md)                                                               | Manage custom policies                                                                                              |
| [remediation](/sast-and-sca/cli/reference/remediation.md)                                                     | Suppress findings                                                                                                   |
| [subscription](/sast-and-sca/cli/reference/subscription.md)                                                   | Get subscription information                                                                                        |
| [update](/sast-and-sca/cli/reference/update.md)                                                               | Update CLI components                                                                                               |

## Global options <a href="#global-options" id="global-options"></a>

You can use the following global options with any `sl` command.

For easy reuse in future analyses, you can store some command-related information as environment variables (we've provided the specific environment variable below). Note that the values for options set via environment variables override those set in a configuration file (which, in turn, are overridden by those specified via command-line flags).

| **Option**                             | **Environment variable**                       | **Description**                                                                                                                                             |
| -------------------------------------- | ---------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `--diagnostic`                         | `SHIFTLEFT_DIAGNOSTIC`                         | Allows the submission of diagnostic data to Qwiet                                                                                                           |
| `--help`, `-h`                         |                                                | List CLI commands and accepted options                                                                                                                      |
| `--no-auto-update`                     | `SHIFTLEFT_NO_AUTO_UPDATE=true`                | Disables automatic updating of the CLI                                                                                                                      |
| `--no-diagnostic`                      | `SHIFTLEFT_NO_DIAGNOSTIC=true`                 | Disables the submission of diagnostic data; this is the default setting                                                                                     |
| `--sl-home <path>`                     | `SHIFTLEFT_HOME=<path>`                        | The Qwiet home path for general config and artifacts. Defaults to `$HOME/.shiftleft` when `$HOME` exists, and to `/etc/shiftleft` if `$HOME` does not exist |
| `--updates-download-timeout <timeout>` | `SHIFTLEFT_UPDATES_DOWNLOAD_TIMEOUT=<timeout>` | Timeout (e.g. '15m') userd when downloading updates; if this isn't set, the CLI applies no timeouts                                                         |
| `--updates-read-timeout <timeout>`     | `SHIFTLEFT_UPDATES_READ_TIMEOUT=<timeout>`     | Idle timeout (e.g. '30s') used when downloading data updates; if this isn't set, the CLI applies no timeouts. Default: 3 minutes (`3m0s`)                   |
| `--verbose`                            | `SHIFTLEFT_VERBOSE=true`                       | Verbose mode                                                                                                                                                |
| `--version`, `-v`                      |                                                | Displays the Qwiet CLI version                                                                                                                              |
|                                        | `https_proxy=<proxy>`                          | Proxy configuration                                                                                                                                         |
| `--strict`                             | `SHIFTLEFT_STRICT=true`                        | Treat failures (including a timeout) as errors and exit with an error code accordingly                                                                      |

## Response codes <a href="#response-codes" id="response-codes"></a>

The `sl` command returns exit code `0` unless:

* [check-analysis](/sast-and-sca/cli/reference/check-analysis-v2.md) determines that a [build rule](broken://spaces/lJyA24omPa8yzz8MNf2k/pages/S8PQnxYOyIZVUjDZUzFp) fails;
* There are issues with the configuration file (e.g., invalid configuration, corrupted file);
* There is an error of any type (e.g., missing access token, missing artifact), and the user passes in the `--strict` flag.

If any of the above conditions exist, `sl` exits and returns error code `1`.