stella CLI — Reachability Workflows

The stella reachability command group uploads call graphs and queries reachability analyses, letting you assess whether a vulnerability is actually exploitable in your code rather than merely present. It is intended for security engineers and developers triaging findings, and for CI authors who feed reachability signals into policy gates.

This page is a pointer. The authoritative, command-by-command reference — including the stella scan graph call-graph extractors, flags, exit codes, and CI recipes — lives in the command guides below.

Where to go next

• stella reachability command guide — full reference for upload-callgraph, list, and explain, plus generating a call graph with stella scan graph.
• Reachability reference — detailed flag and field reference.
• Parity matrix — how CLI reachability surfaces map to the ReachGraph service APIs and offline behaviour.
• Policy commands — fold reachability signals into policy evaluation and release gates.

Determinism & offline posture

Reachability outputs are deterministic: stable ordering, UTC ISO-8601 timestamps, and cursor-based paging where applicable. Keep examples offline-friendly and reproducible — pin extractor versions and fix seeds — and record the source or approver for any captured graphs or schemas used as fixtures. See the output-determinism contract for the cross-command guarantees the CLI upholds.