stella analytics — Command Guide

Audience: Operators, security leads, and reporting engineers who query estate-wide SBOM analytics. Scope: Read-only SBOM-lake aggregates — suppliers, licenses, vulnerabilities, backlog, attestation coverage, and trends.

The stella analytics sbom-lake commands query precomputed estate-wide aggregates from the SBOM lake. They are read-only, support deterministic ordering, and render to table, json, or csv for piping into reports. All endpoints require the analytics.read scope.

Commands

• stella analytics sbom-lake suppliers [--environment <env>] [--limit <n>] [--format table|json|csv] [--output <path>]
• stella analytics sbom-lake licenses [--environment <env>] [--limit <n>] [--format table|json|csv] [--output <path>]
• stella analytics sbom-lake vulnerabilities [--environment <env>] [--min-severity <level>] [--limit <n>] [--format table|json|csv] [--output <path>]
• stella analytics sbom-lake backlog [--environment <env>] [--limit <n>] [--format table|json|csv] [--output <path>]
• stella analytics sbom-lake attestation-coverage [--environment <env>] [--limit <n>] [--format table|json|csv] [--output <path>]
• stella analytics sbom-lake trends [--environment <env>] [--days <n>] [--series vulnerabilities|components|all] [--limit <n>] [--format table|json|csv] [--output <path>]

Flags (common)

• --format: Output format for rendering (table, json, csv).
• --output: Write output to a file path instead of stdout.
• --limit: Cap the number of rows returned.
• --environment: Filter by environment name.

SBOM lake notes

• --min-severity accepts critical, high, medium, low.
• --series controls trend output (vulnerabilities, components, all).
• Tables use deterministic ordering (severity and counts first, then names).

Examples

# Top suppliers
stella analytics sbom-lake suppliers --limit 20

# License distribution as CSV (prod)
stella analytics sbom-lake licenses --environment prod --format csv --output licenses.csv

# Vulnerability exposure in prod (high+)
stella analytics sbom-lake vulnerabilities --environment prod --min-severity high

# Fixable backlog with table output
stella analytics sbom-lake backlog --environment prod --limit 50

# Attestation coverage in staging, JSON output
stella analytics sbom-lake attestation-coverage --environment stage --format json

# 30-day trend snapshot (both series)
stella analytics sbom-lake trends --days 30 --series all --format csv --output trends.csv

Offline/verification note

• If analytics exports arrive via offline bundles, verify the bundle first with stella bundle verify before importing data into downstream reports.