Skip to main content

stave metrics

Produce a stable Prometheus text format metrics file covering
posture score, findings by severity, SLA burn rates, chain
activations, and per-team metrics.

Designed for the node_exporter textfile collector. Run on a
schedule via cron to maintain continuous monitoring.

Inputs:
--history DIR Directory of assessment JSON files (required)
--out PATH Output .prom file path (required)

Exit Codes:
0 Metrics written
2 Invalid input

Usage:
stave metrics [flags]

Examples:
stave metrics --history ./history --out /var/lib/node_exporter/stave.prom
stave metrics --history ./history --out stave.prom

Flags:
-h, --help help for metrics
--history string directory of assessment JSON files (required)
--out string output .prom file path (required)

Global Flags:
--allow-symlink-output Allow writing output through symlinks (default: refuse)
--force Allow overwriting existing output files
--log-file string Write logs to file (default: stderr)
--log-format string Log format: text|json (default "text")
--log-level string Log level: debug|info|warn|error (overrides -v)
--log-timestamps Include timestamps in logs (breaks determinism)
--log-timings Include timing information (breaks determinism)
--no-color Disable ANSI colors in output
--path-mode string Path rendering in errors/logs: base (basename only) or full (absolute paths) Resolved default may come from STAVE_* env vars, stave.yaml, user config, or built-in.
--quiet Suppress output (exit code only) Resolved default may come from STAVE_* env vars, stave.yaml, user config, or built-in.
--require-offline Assert offline operation: fail if proxy env vars (HTTP_PROXY, HTTPS_PROXY, ALL_PROXY) are set
--sanitize Sanitize infrastructure identifiers (bucket names, ARNs, policies) from output Resolved default may come from STAVE_* env vars, stave.yaml, user config, or built-in.
--strict Enable strict integrity checks for embedded registries and references
-v, --verbose count Increase verbosity (-v=INFO, -vv=DEBUG)
-y, --yes Auto-confirm all interactive prompts (distinct from --force which controls file overwriting)