stave inspect
Low-level security analysis primitives
Usage
stave inspect
Description
Inspect provides direct access to Stave's domain analysis engines.
Each subcommand reads JSON from --file or stdin and outputs analysis results as JSON. These are building blocks for custom tooling and debugging.
Subcommands: policy S3 bucket policy analysis acl S3 ACL grant analysis exposure Exposure classification risk Risk scoring compliance Framework crosswalk aliases Predicate alias listing
Offline-only: reads local files; makes zero network connections; no cloud credentials.
Subcommands
| Command | Description |
|---|---|
stave inspect acl | Analyze S3 ACL grants |
stave inspect aliases | List predicate aliases with metadata |
stave inspect compliance | Resolve compliance framework crosswalk |
stave inspect exposure | Classify resource exposure vectors |
stave inspect policy | Analyze an S3 bucket policy document |
stave inspect risk | Score risk from policy statement context |