Complete reference for every dobbe command, subcommand, and option.
dobbe [OPTIONS] COMMAND
| Option | Type | Default | Description |
|---|---|---|---|
--version / -v |
bool |
False |
Show version and exit |
--no-color |
bool |
False |
Disable colored output (also respects NO_COLOR env var) |
Scan a repository for Dependabot vulnerabilities and triage with AI.
When run from inside a git repository with no flags, auto-detects the repo from the current directory.
dobbe vuln scan [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--repo / -r |
str |
- | Single repo to scan (org/repo). Auto-detected from CWD if omitted. |
--severity / -s |
str |
critical,high,medium,low |
Comma-separated severity filter. Env: DOBBE_SEVERITY |
--format / -f |
str |
table |
Output format: table, json, markdown. Env: DOBBE_FORMAT |
--verbose / -V |
bool |
False |
Show evidence, CVEs, and upgrade paths |
--quiet / -q |
bool |
False |
Suppress progress output, only show final result |
--output |
str |
- | Write output to file instead of stdout |
--notify |
str |
- | Send report to platform (slack, jira) |
--channel |
str |
- | Notification channel (e.g., #security-alerts) |
--no-cache |
bool |
False |
Skip response cache, force fresh analysis |
Scan, fix, and verify vulnerable dependencies with an agentic feedback loop.
When run from inside a git repository with no flags, auto-detects the repo from the current directory.
dobbe vuln resolve [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--repo / -r |
str |
- | Repository to fix (org/repo). Auto-detected from CWD if omitted. |
--severity / -s |
str |
critical,high,medium,low |
Comma-separated severity filter. Env: DOBBE_SEVERITY |
--max-iterations |
int |
3 |
Max fix-verify iterations (1-10) |
--base |
str |
auto | Base branch (auto-detected if not specified) |
--branch |
str |
auto | Branch name for fixes |
--create-pr / --no-pr |
bool |
True |
Create PR on convergence |
--dry-run |
bool |
False |
Preview mode - scan only, no edits |
--skip-verify |
bool |
False |
Skip verification step |
--format / -f |
str |
table |
Output format: table, json, markdown. Env: DOBBE_FORMAT |
--timeout |
int |
config or 600 |
Timeout per step in seconds. Env: DOBBE_TIMEOUT_CLAUDE |
--from-scan |
str |
- | Path to scan JSON from dobbe vuln scan --format json. Use '-' for stdin. |
--yes / -y |
bool |
False |
Skip confirmation prompt |
Show persistent vulnerability tracking status and SLA breaches. Tracks vulnerabilities across runs. Use vuln scan to populate data.
dobbe vuln status [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--format / -f |
str |
table |
Output format: table, json, markdown |
--output |
str |
- | Write output to file |
--quiet / -q |
bool |
False |
Suppress progress output |
Analyze PRs with AI and output a prioritized review digest.
Repo resolution order: --repo flag > config [review] watch_repos > CWD auto-detect.
dobbe review digest [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--pr |
str |
- | PR number or URL (e.g., 42 or https://github.com/org/repo/pull/42) |
--repo / -r |
str |
- | Repository (org/repo). Auto-detected from CWD if omitted. |
--reviewer |
str |
@me |
GitHub username to filter by |
--stale-days |
int |
7 |
Days before flagging PR as stale |
--format / -f |
str |
table |
Output format: table, json, markdown. Env: DOBBE_FORMAT |
--verbose / -V |
bool |
False |
Show diff stats, recommendations, concerns |
--output |
str |
- | Write output to file instead of stdout |
--notify |
str |
- | Send digest to platform (slack) |
--channel |
str |
- | Notification channel (e.g., #pr-reviews) |
--skip-label |
str |
- | Skip PRs with these labels (comma-separated) |
--skip-author |
str |
- | Skip PRs by these authors (comma-separated) |
--max-diff-lines |
int |
2000 |
Max diff lines per PR |
--quiet / -q |
bool |
False |
Suppress progress output, only show final result |
--rebuild-context |
bool |
False |
Force rebuild codebase context |
--context-ttl |
int |
7 |
Context cache TTL in days |
--no-context |
bool |
False |
Skip codebase context (diff-only review) |
--rebuild-context, --context-ttl, and --no-context are mutually exclusive approaches to context management. Use --no-context for fast diff-only reviews, or --rebuild-context to force a fresh context build.
Analyze PRs with AI and post reviews to GitHub.
Repo resolution order: --repo flag > config [review] watch_repos > CWD auto-detect.
dobbe review post [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--repo / -r |
str |
- | Single repo (org/repo) |
--pr |
str |
- | PR number or URL (e.g., 42 or https://github.com/org/repo/pull/42) |
--all |
bool |
False |
Review all open PRs |
--reviewer |
str |
- | GitHub username to filter by |
--dry-run |
bool |
False |
Preview without posting |
--format / -f |
str |
table |
Output format: table, json, markdown. Env: DOBBE_FORMAT |
--verbose / -V |
bool |
False |
Show concern details with file:line and suggestions |
--output |
str |
- | Write output to file instead of stdout |
--skip-label |
str |
- | Skip PRs with these labels (comma-separated) |
--skip-author |
str |
- | Skip PRs by these authors (comma-separated) |
--max-diff-lines |
int |
2000 |
Max diff lines per PR |
--quiet / -q |
bool |
False |
Suppress progress output, only show final result |
--rebuild-context |
bool |
False |
Force rebuild codebase context |
--context-ttl |
int |
7 |
Context cache TTL in days |
--no-context |
bool |
False |
Skip codebase context (diff-only review) |
--yes / -y |
bool |
False |
Skip confirmation prompt |
Defaults to --all when neither --pr nor --all given. Cannot use --pr and --all together. --pr requires --repo (auto-detected from URL if a full URL is provided).
Check PR review SLAs and escalate overdue PRs.
dobbe review sla [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--target / -t |
str |
- | Org or repo to check SLAs for |
--notify |
str |
- | Send escalation to platform (slack) |
--channel |
str |
- | Notification channel (e.g., #pr-reviews) |
--format / -f |
str |
table |
Output format: table, json, markdown |
--output |
str |
- | Write output to file |
--quiet / -q |
bool |
False |
Suppress progress output |
Run a comprehensive security posture audit on a repository.
When run from inside a git repository with no flags, auto-detects the repo from the current directory.
dobbe audit report [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--repo / -r |
str |
- | Single repo to audit (org/repo). Auto-detected from CWD if omitted. |
--checks / -c |
str |
vuln,license,secrets,quality |
Comma-separated checks: vuln, license, secrets, quality |
--template / -t |
str |
internal |
Compliance template: soc2, internal, custom |
--format / -f |
str |
markdown |
Output format: json, markdown |
--output |
str |
- | Write output to file instead of stdout |
--notify |
str |
- | Send report to platform (slack, jira) |
--channel |
str |
- | Notification channel (e.g., #security-audits) |
--quiet / -q |
bool |
False |
Suppress progress output, only show final result |
--no-cache |
bool |
False |
Skip response cache, force fresh analysis |
Analyze repository dependencies for health, licensing, and usage issues.
When run from inside a git repository with no flags, auto-detects the repo from the current directory.
dobbe deps analyze [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--repo / -r |
str |
- | Single repo to analyze (org/repo). Auto-detected from CWD if omitted. |
--checks / -c |
str |
outdated,unused,license,health |
Comma-separated checks: outdated, unused, license, health, all |
--ecosystem / -e |
str |
- | Filter to ecosystem (npm, pip, cargo, go, etc.) |
--format / -f |
str |
table |
Output format: table, json, markdown |
--verbose / -V |
bool |
False |
Show evidence and recommendations |
--output |
str |
- | Write output to file instead of stdout |
--notify |
str |
- | Send report to platform (slack, jira) |
--channel |
str |
- | Notification channel (e.g., #deps-alerts) |
--quiet / -q |
bool |
False |
Suppress progress output, only show final result |
--no-cache |
bool |
False |
Skip response cache, force fresh analysis |
Generate tests for untested code paths using AI.
When run from inside a git repository with no --repo flag, auto-detects the repo from the current directory.
dobbe test gen [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--repo / -r |
str |
- | Repository (org/repo). Auto-detected from CWD if omitted. |
--file / -f |
str |
- | Target specific file for test generation |
--pr |
int |
- | Generate tests for changes in a specific PR number |
--framework |
str |
- | Test framework: pytest, jest, go, mocha |
--max-iterations |
int |
3 |
Max generate-verify iterations (1-10) |
--create-pr / --no-pr |
bool |
True |
Create PR with generated tests |
--dry-run |
bool |
False |
Analyze only - don’t generate tests |
--coverage-threshold |
float |
0.0 |
Minimum coverage target in percent (0-100) |
--base |
str |
auto | Base branch (auto-detected if not specified) |
--format |
str |
table |
Output format: table, json, markdown |
--quiet / -q |
bool |
False |
Suppress progress output |
Generate a changelog between two git refs.
When run from inside a git repository with no --repo flag, auto-detects the repo from the current directory.
dobbe changelog gen [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--repo / -r |
str |
- | Repository (org/repo). Auto-detected from CWD if omitted. |
--from |
str |
required | Starting git ref (tag, branch, SHA) |
--to |
str |
HEAD |
Ending git ref |
--format / -f |
str |
markdown |
Output format: markdown, json, conventional |
--output |
str |
- | Write output to file instead of stdout |
--include-prs |
bool |
False |
Fetch associated PR numbers |
--group-by |
str |
category |
Group by: category, author |
--notify |
str |
- | Send changelog to platform (slack) |
--channel |
str |
- | Notification channel (e.g., #releases) |
--quiet / -q |
bool |
False |
Suppress progress output, only show final result |
--from is required. All other options have defaults.
Analyze a repository and generate a dependency migration plan.
When run from inside a git repository with no --repo flag, auto-detects the repo from the current directory.
dobbe migration plan [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--repo / -r |
str |
- | Repository to analyze (org/repo). Auto-detected from CWD if omitted. |
--from |
str |
required | Source dependency (e.g., requests==2.28.0) |
--to |
str |
required | Target dependency (e.g., httpx==0.25.0) |
--format / -f |
str |
table |
Output format: table, json, markdown |
--output |
str |
- | Write output to file instead of stdout |
--quiet / -q |
bool |
False |
Suppress progress output |
Execute a dependency migration with an agentic apply-verify loop.
When run from inside a git repository with no --repo flag, auto-detects the repo from the current directory.
dobbe migration run [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--repo / -r |
str |
- | Repository to migrate (org/repo). Auto-detected from CWD if omitted. |
--from |
str |
required | Source dependency (e.g., requests==2.28.0) |
--to |
str |
required | Target dependency (e.g., httpx==0.25.0) |
--max-iterations |
int |
3 |
Max apply-verify iterations (1-10) |
--create-pr / --no-pr |
bool |
True |
Create PR on convergence |
--base |
str |
auto | Base branch (auto-detected if not specified) |
--dry-run |
bool |
False |
Generate plan only, no code changes |
--format / -f |
str |
table |
Output format: table, json, markdown |
--notify |
str |
- | Send report to platform (slack, jira) |
--channel |
str |
- | Notification channel (e.g., #migrations) |
--quiet / -q |
bool |
False |
Suppress progress output |
Triage unresolved Sentry incidents with AI analysis.
Requires the Sentry MCP to be configured.
dobbe incident triage [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--org / -o |
str |
config default | Sentry organization slug |
--project / -p |
str |
- | Sentry project slug (optional) |
--severity / -s |
str |
critical,high,medium,low |
Comma-separated severity filter |
--since |
str |
- | Time range: 24h, 7d, 30d |
--format / -f |
str |
table |
Output format: table, json, markdown |
--output |
str |
- | Write output to file instead of stdout |
--notify |
str |
- | Send report to platform (slack, jira) |
--channel |
str |
- | Notification channel (e.g., #incidents) |
--quiet / -q |
bool |
False |
Suppress progress output |
Resolve a specific Sentry incident by fixing its root cause.
dobbe incident resolve [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--repo / -r |
str |
required | Repository to fix (org/repo) |
--issue / -i |
str |
required | Sentry issue ID to resolve |
--max-iterations |
int |
3 |
Max fix-verify iterations (1-10) |
--create-pr / --no-pr |
bool |
True |
Create PR on success |
--base |
str |
auto | Base branch (auto-detected if not specified) |
--format / -f |
str |
table |
Output format: table, json, markdown |
--quiet / -q |
bool |
False |
Suppress progress output |
--repo and --issue are both required.
Show a snapshot of current engineering metrics and AI-generated insights.
dobbe insight dashboard [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--period / -p |
str |
30d |
Time period: 30d, 90d, 1y |
--org / -o |
str |
config default | Organization to scope insights to |
--format / -f |
str |
table |
Output format: table, json, markdown |
--output |
str |
- | Write output to file instead of stdout |
--quiet / -q |
bool |
False |
Suppress progress output |
Show trends over time with narrative insights and period comparison.
dobbe insight trends [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--period / -p |
str |
30d |
Time period: 30d, 90d, 1y |
--compare / -c |
str |
- | Compare with: last-month, last-quarter |
--org / -o |
str |
config default | Organization to scope insights to |
--format / -f |
str |
table |
Output format: table, json, markdown |
--output |
str |
- | Write output to file instead of stdout |
--notify |
str |
- | Send report to platform (slack, jira) |
--channel |
str |
- | Notification channel (e.g., #engineering) |
--quiet / -q |
bool |
False |
Suppress progress output |
Scan a repository for secrets using gitleaks/truffleHog with AI severity assessment.
dobbe scan secrets [PATH] [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
PATH (argument) |
str |
. |
Repository path to scan |
--no-ai |
bool |
False |
Skip AI severity assessment |
--format / -f |
str |
table |
Output format: table, json. Env: DOBBE_FORMAT |
--output |
str |
- | Write output to file |
--quiet / -q |
bool |
False |
Suppress progress output |
Show PR velocity metrics – merge cadence, review turnaround, cycle time.
When run with no --target, auto-detects the repo from the current directory, then falls back to the configured default org.
dobbe metrics velocity [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--target / -t |
str |
CWD or config default | Org or repo to analyze (owner/repo). Env: DOBBE_ORG |
--period / -p |
str |
30d |
Time period: 30d, 90d, 1y |
--format / -f |
str |
table |
Output format: table, json, markdown. Env: DOBBE_FORMAT |
--output |
str |
- | Write output to file |
--notify |
str |
- | Send report to platform (slack, jira) |
--channel |
str |
- | Notification channel |
--quiet / -q |
bool |
False |
Suppress progress output |
--target must be in OWNER/REPO format.
Show DORA metrics – deploy frequency, lead time, failure rate, MTTR.
When run with no --target, auto-detects the repo from the current directory, then falls back to the configured default org.
dobbe metrics dora [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--target / -t |
str |
CWD or config default | Org or repo to analyze (owner/repo). Env: DOBBE_ORG |
--period / -p |
str |
30d |
Time period: 30d, 90d, 1y |
--format / -f |
str |
table |
Output format: table, json, markdown. Env: DOBBE_FORMAT |
--output |
str |
- | Write output to file |
--notify |
str |
- | Send report to platform (slack, jira) |
--channel |
str |
- | Notification channel |
--quiet / -q |
bool |
False |
Suppress progress output |
--target must be in OWNER/REPO format.
Create a new workflow definition.
dobbe workflow create <name> [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
name (argument) |
str |
required | Name for the workflow |
--from-template / -t |
str |
- | Use a built-in template: vuln-scan-and-fix, review-digest |
--description / -d |
str |
"" |
Workflow description |
Run a saved workflow.
dobbe workflow run <name> [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
name (argument) |
str |
required | Name of the workflow to run |
--dry-run |
bool |
False |
Simulate execution without running steps |
--on-failure |
str |
workflow default | Override on_failure policy: stop, continue, notify |
--quiet / -q |
bool |
False |
Minimal output |
List all saved workflows.
dobbe workflow list
No options.
Show run history for a workflow.
dobbe workflow logs <name> [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
name (argument) |
str |
required | Workflow name |
--last / -n |
int |
10 |
Number of recent runs to show |
Delete a saved workflow.
dobbe workflow delete <name> [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
name (argument) |
str |
required | Name of the workflow to delete |
--force / -f |
bool |
False |
Skip confirmation |
Add a new scheduled task.
dobbe schedule add <name> --command <cmd> --every <interval> [--args <args>]
| Option | Type | Default | Description |
|---|---|---|---|
name (argument) |
str |
required | Unique schedule name |
--command / -c |
str |
required | dobbe command to schedule |
--args / -a |
str |
"" |
Command arguments |
--every / -e |
ScheduleInterval |
required | hourly, every_4h, every_12h, daily, weekly |
List all scheduled tasks.
dobbe schedule list
No options.
Remove a scheduled task.
dobbe schedule remove <name> [--force]
| Option | Type | Default | Description |
|---|---|---|---|
name (argument) |
str |
required | Schedule name |
--force / -f |
bool |
False |
Skip confirmation |
Check for overdue schedules and run them.
dobbe schedule check [--quiet] [--dry-run]
| Option | Type | Default | Description |
|---|---|---|---|
--quiet / -q |
bool |
False |
Minimal output (for shell hook) |
--dry-run |
bool |
False |
Show what would run without executing |
Run a schedule immediately regardless of overdue status.
dobbe schedule run <name>
| Option | Type | Default | Description |
|---|---|---|---|
name (argument) |
str |
required | Schedule name |
View recent run logs.
dobbe schedule logs [name] [--limit N]
| Option | Type | Default | Description |
|---|---|---|---|
name (argument) |
str |
- | Schedule name (omit for all) |
--limit / -n |
int |
10 |
Number of recent logs |
Install automatic schedule checking.
dobbe schedule install [--trigger <type>] [--shell <shell>] [--uninstall]
| Option | Type | Default | Description |
|---|---|---|---|
--trigger |
str |
shell |
Trigger type: shell or login |
--shell |
str |
auto-detect | Force shell type: bash, zsh, fish |
--uninstall |
bool |
False |
Remove the installed hook |
Check environment health and diagnose issues.
dobbe doctor [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--json |
bool |
False |
Output results as JSON |
--quiet / -q |
bool |
False |
Suppress output, exit 1 if any check fails |
Runs 14 automatic health checks: Claude CLI, authentication, JSON schema, config file, config permissions, default org, watch repos, GitHub MCP, Slack MCP, plugin MCPs, extra tools, bundled skills, gh CLI, and shell completions.
Display the current configuration.
dobbe config show
No options.
Validate config.toml against the expected schema.
dobbe config validate
No options. Exits with code 1 if any issues are found.
Deprecated – redirects to dobbe doctor.
dobbe config check
No options.
Interactive setup wizard for dobbe.
dobbe setup [OPTIONS]
| Option | Type | Default | Description |
|---|---|---|---|
--advanced |
bool |
False |
Step-by-step setup with all options |
--non-interactive |
bool |
False |
No prompts (CI/scripts) |
--org |
str |
- | Default GitHub organization |
--repos |
str |
- | Comma-separated repo paths or auto |
--schedule |
str |
- | Preset: daily-vuln, weekly-review |
--skip-first-command |
bool |
False |
Skip guided scan |
In interactive mode (default), runs a QuickStart flow that auto-detects your environment and asks for confirmation. Use --advanced for step-by-step control over all 7 setup steps. Use --non-interactive with --org for CI/script usage.