iltero-cli 0.4.1

Iltero CLI - Infrastructure compliance scanning and management

Iltero CLI

Infrastructure compliance scanning and management from the command line.

Features

• Compliance Scanning — Static analysis, plan evaluation, and runtime monitoring for Terraform
• Policy Enforcement — OPA and Checkov policy evaluation with multi-framework support
• Stack Management — Create, configure, and manage infrastructure stacks
• Workspace & Environment Management — Organize stacks across workspaces and environments
• Compliance Posture — Query scans, violations, trends, and generate reports
• Token Management — Create and manage API authentication tokens
• CI/CD Integration — Auto-detects GitHub Actions, GitLab CI, CircleCI, and Jenkins

Installation

pip install iltero-cli

# With scanner support (Checkov, OPA)
pip install iltero-cli[scanners]

Requires Python 3.11+.

Quick Start

1. Authenticate

# Set your API token
export ILTERO_TOKEN=your_token_here

# Verify authentication
iltero auth status

2. Initialize a Project

# Set up .iltero/config.yml with stack registration and compliance frameworks
iltero init

3. Run a Scan

# Static analysis of Terraform code
iltero scan static --path ./terraform \
  --stack-id stack-123 \
  --environment production

# Evaluate a Terraform plan
iltero scan evaluation tfplan.json \
  --stack-id stack-123 \
  --environment production

Commands

Auth

Command	Description
iltero auth status	Show authentication status and token type
iltero auth oidc	Exchange a CI/CD OIDC token for short-lived Iltero API credentials

Init

Command	Description
iltero init	Initialize Iltero project configuration for a repository

Scan

Command	Description
iltero scan static [path]	Static analysis of Terraform source code (Checkov + OPA)
iltero scan evaluation <plan_file>	Evaluate Terraform plan JSON against compliance policies
iltero scan runtime <policy_path>	Runtime compliance monitoring of cloud resources
iltero scan generate-source-map	Generate resource source map from .tf files

Scanner

Command	Description
iltero scanner check	Check if required scanners are installed and available

Token

Command	Description
iltero token create	Create a new API token (personal, service, or pipeline)
iltero token list	List all API tokens
iltero token revoke <token_id>	Revoke an API token

Stack

Command	Description
iltero stack list	List all stacks in the current workspace
iltero stack create <name>	Create a new stack
iltero stack show <stack_id>	Show stack details
iltero stack update <stack_id>	Update stack settings
iltero stack delete <stack_id>	Delete a stack
iltero stack authorize-deployment	Authorize a deployment against compliance gates

Workspace

Command	Description
iltero workspace list	List all workspaces
iltero workspace create <name>	Create a new workspace
iltero workspace show <workspace_id>	Show workspace details
iltero workspace update <workspace_id>	Update workspace settings
iltero workspace delete <workspace_id>	Delete a workspace

Environment

Command	Description
iltero environment list	List all environments
iltero environment create <name>	Create a new environment
iltero environment show <environment_id>	Show environment details
iltero environment update <environment_id>	Update environment settings
iltero environment delete <environment_id>	Delete an environment

Compliance

Command	Description
iltero compliance summary	Get compliance dashboard summary
iltero compliance trends	Get violation trend data over time
iltero compliance scans list	List compliance scans
iltero compliance scans get <scan_id>	Get scan details
iltero compliance violations list	List compliance violations
iltero compliance violations get <violation_id>	Get violation details
iltero compliance reports list <stack_id>	List compliance reports for a stack
iltero compliance reports generate <stack_id>	Generate a compliance report

Config

Command	Description
iltero config get [key]	Get a configuration value
iltero config set <key> <value>	Set a configuration value
iltero config list	List all configuration settings

Run iltero <command> --help for detailed usage information.

Configuration

Configure via environment variables or config file (~/.iltero/config.yaml):

Variable	Description	Default
ILTERO_TOKEN	API authentication token	Required
ILTERO_API_URL	Backend API URL	https://api.iltero.io
ILTERO_WORKSPACE	Default workspace slug	—
ILTERO_OUTPUT_FORMAT	Output format: table, json, yaml	table
ILTERO_DEBUG	Enable debug logging	false
ILTERO_NO_COLOR	Disable colored output	false

License

Apache License 2.0