CLI workflow

Take the same project rules from your editor to CI.

Use the CLI to check files and workspaces, audit dependencies, install hooks, and return a clear pass or fail in your pipeline. It reads the same .irisconfig.json as the editor, so you do not maintain a second standard for CI.

Get started Full CLI reference

Local verification

Run Iris Code before you push so the same scoring rules fire locally, in hooks, and in CI. One policy, three checkpoints — editor, hook, pipeline.

iris check

Full workspace scan

Score every file in one pass. Iris Code uses the same engine as the editor sidebar — no drift between what you see and what the gate checks.

$iris check .

$iris check path/to/file.ts --verbose

$iris secrets

iris check src/api/users.ts --verbose

✗ src/api/users.ts 43/100 [below threshold: 70] ↳ function exceeds complexity budget L42 function-too-long: exceeds 40 lines L58 console-log: console.log left in source L91 todo: TODO left in source Threshold: 70

iris check

Score a file or the whole workspace. Same engine as the editor sidebar — no drift between what you see and what the gate checks. Single-file scans are free; directory scans require Pro.

iris secrets

Scan for hardcoded API keys, tokens, and passwords across JS/TS/Go/Python/Ruby. No licence required.

Free

iris security

Scan for eval usage, SQL injection, insecure RNG, weak hashing, and more. No licence required.

Free

Hook installation

Install Git and build hooks when the team is ready to block pushes or builds that fall below the agreed threshold. One command, zero boilerplate.

Git hook

Block at the push boundary

The Git hook runs iris check on every push and blocks if any file falls below the configured threshold. Install it once — the hook lives in .git/hooks/ and runs locally for every developer.

$iris hook git install

$iris hook build install

$iris hook git status

git push origin main

Iris Code pre-push hook running… Iris Code — checking . ✓ src/db/queries.ts 91/100 ✓ src/core/scheduler.ts 82/100 ✓ src/auth/session.ts 74/100 ✗ src/api/users.ts 43/100 [below threshold: 70] 4 files checked · 3 passed · 1 failed FAILED Iris Code: Push blocked. Fix failing files or lower your threshold in .irisconfig.json

● Push blocked

Git hook

Runs on pre-push. Scans the whole workspace and blocks the push if any file falls below the threshold. Zero config after install.

Free

Build hook

Wires into your build command — npm prebuild for Node, a Makefile target for Go, Python, and Ruby. Fails the build when workspace health drops.

Pro

iris hook status

See which hooks are installed — git and build, in one command. Free.

Free

Team rollout

Use one committed .irisconfig.json so editor diagnostics, Gate Preview, and enforcement all speak the same policy. Every developer gets the same rules — no drift between machines.

Shared config

One file.
One policy.

Commit .irisconfig.json to your repo. The editor, hooks, and CI all read from the same source — a threshold change is a one-line diff that the whole team gets on pull.

$iris config init

$iris config validate

$iris gate --format json

.irisconfig.json

{ "presetId": "balanced", "minHealthScore": 70, "gateMaxSecrets": 0, "gateMaxSecuritySmells": 0, "ignoreFiles": [ "dist/**", "**/*.test.ts" ] }

iris config init

Interactively generate .irisconfig.json from a preset (legacy, balanced, or strict). Free — Pro users can also set custom gate limits.

Free

iris config validate

Checks your config for schema errors, unknown keys, and invalid values — before you commit.

Free

iris gate --format json

Full enforcement gate with machine-readable JSON output — pipe into CI reporters, dashboards, or any tool that reads JSON.

Pro

iris rules

Writes this project's limits, naming convention and gate rules into the files your coding agents read - AGENTS.md, CLAUDE.md, Cursor or Copilot - so an agent follows your standards while it writes instead of after review. Generated from your .irisconfig.json, and no AI model is involved. Free. How it works.

Free

Slack notifications

Set IRIS_SLACK_WEBHOOK in CI and an existing gate step posts its result to Slack. No pipeline edit, no flag. The message is built and sent by your own runner, carries file paths, scores and counts only, and never passes through an Iris Code server. Free. Setup guide.

Free

Every command

All fifteen Iris Code CLI commands in one place. Full flags and exit codes live in the command reference.

iris init

Set a project up in one command: three short questions, a recommended preset, a commented config, an AGENTS.md rules block, and the pre-push hook where your licence allows it. Safe to run again.

Free

iris auth

Free

iris check

Single-file scan is free. Directory, --staged, and --changed on Pro.

FreePro

iris fix

Remove the findings Iris Code can prove are safe to remove: an isolated debug statement, a literal-only unused variable, a standalone unused Java import. Previews first. One file is free; folder and workspace scope on Pro.

FreePro

iris secrets

Hardcoded credentials, API keys, and tokens. No auth required.

Free

iris security

Eval usage, SQL injection, insecure RNG, weak hashing, and more. No auth required.

Free

iris deps

Audit package.json, go.mod, and requirements.txt for CVEs. Lockfile-aware and monorepo-aware.

Pro

iris cve

Same scan as deps, but exits 1 only at or above a --severity threshold. Built for CI gates.

Pro

iris sbom

Export a CycloneDX 1.5 SBOM across npm, Go, Python, RubyGems, and NuGet. Fully offline.

Pro

iris todos

Collect every TODO, FIXME, and HACK comment across the codebase.

Pro

iris gate

Full enforcement gate. Exits 1 below threshold. Designed for CI.

Pro

iris slack

Set up and test Slack notifications for check and gate runs. setup validates your webhook and sends a test message; manifest creates a pre-configured Slack app.

Free

iris rules

Write this project's limits, naming convention, and gate rules into the file your coding agent reads. AGENTS.md by default, or Claude, Cursor, and Copilot targets.

Free

iris mcp

Serve Iris Code to AI agents over the Model Context Protocol. Single-file findings, project config, and safe fixes are free; workspace scope, gate status, rule detail, and dependency risk on Pro.

FreePro

iris report

Export a standalone HTML health report to the current directory.

Free

iris hook

Status check is free. Install/uninstall pre-push and build hooks on Pro.

FreePro

iris config

init generates a config with a preset; validate checks an existing one.

Free

→

Where to go next

Depending on where your team is, one of these paths gets you to enforcement fastest.

Evaluating Iris Code?

Install the extension first and run a first scan. See which files need attention before touching any config.

Install Iris Code ↗

Ready to enforce?

Jump straight into Git hook and build hook setup so the policy becomes real at the point where code ships.

Hook setup →

Full CLI reference

Every flag, every command, every exit code. The complete reference lives at docs.iriscode.co.

Open docs ↗

Take the same project rules from your editor to CI.

Take the same project rules from your editor to CI.

Local verification

Full workspace scan

Hook installation

Block at the push boundary

Team rollout

One file.One policy.

Every command

Where to go next

Take the same project rules from your editor to CI.

Local verification

Full workspace scan

Hook installation

Block at the push boundary

Team rollout

One file.One policy.

Every command

Where to go next

One file.
One policy.

One file.
One policy.