Skip to main content

stave inspect

Low-level security analysis primitives

Usage

stave inspect

Description

Inspect provides direct access to Stave's domain analysis engines.

Each subcommand reads JSON from --file or stdin and outputs analysis results as JSON. These are building blocks for custom tooling and debugging.

Subcommands: policy S3 bucket policy analysis acl S3 ACL grant analysis exposure Exposure classification risk Risk scoring compliance Framework crosswalk aliases Predicate alias listing

Offline-only: reads local files; makes zero network connections; no cloud credentials.

Subcommands

CommandDescription
stave inspect aclAnalyze S3 ACL grants
stave inspect aliasesList predicate aliases with metadata
stave inspect complianceResolve compliance framework crosswalk
stave inspect exposureClassify resource exposure vectors
stave inspect policyAnalyze an S3 bucket policy document
stave inspect riskScore risk from policy statement context