Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/NetRiseInc/provenance-cli/llms.txt

Use this file to discover all available pages before exploring further.

Configuration is resolved in priority order: CLI flags > environment variables > config file > defaults.

Config file

Location: ~/.config/provenance/config.yaml
~/.config/provenance/config.yaml
token: <your-token>
api_url: https://provenance.netrise.io/v1/provenance
default_format: human
concurrency: 10
timeout: 30
FieldTypeDefaultDescription
tokenstringAPI authentication token
api_urlstringhttps://provenance.netrise.io/v1/provenanceAPI base URL
default_formatstringhumanDefault output format: human, json, or sarif
concurrencyinteger10Maximum concurrent API requests
timeoutinteger30Per-request timeout in seconds
View the effective configuration (with token redacted) at any time:
provenance config show

Environment variables

VariableDescription
PROVENANCE_API_TOKENAPI authentication token (required)
PROVENANCE_API_URLAPI base URL
NO_COLORDisable colored output (no-color.org)
The legacy variables NETRISE_API_TOKEN and NETRISE_API_URL are still supported as fallbacks. Prefer the PROVENANCE_ prefix for new configurations.

Global CLI flags

These flags are available on every command:
FlagDescription
--token <TOKEN>API token (overrides env var and config file)
--api-url <URL>API base URL
--format <FORMAT>Output format: human, json, sarif (default: human)
-v / -vvVerbose / debug output
-q / --quietMinimal output — verdict/summary only
--no-colorDisable colors
--asciiASCII-only table borders (no Unicode box drawing)
--concurrency <N>Max concurrent API requests (default: 10)
--timeout <SECS>Per-request timeout in seconds (default: 30)

Examples

# Override format for a single command
provenance query package 'pkg:deb/debian/curl@7.68.0-1' --format json

# Limit concurrency for rate-sensitive environments
provenance scan sbom sbom.json --concurrency 3

# Debug mode — shows HTTP requests and responses
provenance scan sbom sbom.json -vv

Build docs developers (and LLMs) love