`dart_shield analyze`

The analyze command runs the security analysis on your codebase. It is designed to be used both locally by developers and in CI/CD pipelines.

Usage

dart_shield analyze [path] [options]

[path]: The directory to analyze. Defaults to the current directory (.) if not specified.

Option	Abbreviation	Description	Default
`--reporter`	`-r`	Defines the output format. Options: `console` (human-readable), `json` (machine-readable), `both`.	`console`
`--only`		Run only the specified analyzers, ignoring configuration settings. Useful for targeted checks.	All enabled
`--exclude`		Exclude specific analyzers from the run.	None
`--help`	`-h`	Prints usage information.

Currently, the main analyzer is code, which performs static code analysis for security flaws (hardcoded secrets, weak crypto, etc.).

Run a standard scan on the current project:

dart_shield analyze

Generate a JSON report for easy parsing by other tools:

dart_shield analyze --reporter json

Run only the code analyzer on the lib/ directory:

dart_shield analyze lib/ --only code