stella CLI — Risk Workflows

The stella risk command group manages risk profiles, simulates risk scoring against SBOMs and assets, retrieves evaluation results, and verifies signed risk bundles. It is intended for security engineers and release operators who tune risk profiles and gate releases on risk grades.

This page is a pointer. The authoritative, command-by-command reference — including flags, output columns, exit codes, and automation recipes — lives in the command guide below.

Where to go next

• stella risk command guide — full reference for risk profile, risk simulate, risk export, and risk verify, with flags, exit codes, and sample output.
• Parity matrix — how CLI risk surfaces map to the Findings/RiskEngine service APIs and offline behaviour.
• Policy commands — gate releases by combining risk grades with policy evaluation.

Determinism & offline posture

Risk outputs are deterministic: results are stably ordered and timestamps are UTC ISO-8601, so simulations and bundle verifications can be reproduced and audited. Signed risk bundles can be verified offline against cached trust roots. See the output-determinism contract for the cross-command guarantees the CLI upholds.