cnspec run

Run an MQL query.

Synopsis

Run an MQL query on the CLI and displays its results.

cnspec run [flags]

Options

      --ask-pass                         Prompt for connection password.
      --ast                              Parse the query and return the abstract syntax tree (AST).
  -c, --command string                   MQL query to execute.
      --discover string                  Enable the discovery of nested assets. Supported: 'all|auto|instances|host-instances|host-machines|container|container-images|pods|cronjobs|statefulsets|deployments|jobs|replicasets|daemonsets' (default "auto")
      --discover-filter stringToString   Additional filter for asset discovery. (default [])
  -h, --help                             help for run
      --host-machines                    Also scan host machines like ESXi servers.
  -i, --identity-file string             Select a file from which to read the identity (private key) for public key authentication.
      --insecure                         Disable TLS/SSL checks or SSH hostkey config.
      --instances                        Also scan instances. This only applies to API targets like AWS, Azure, or GCP.
  -j, --json                             Run the query and return the object in a JSON structure.
      --option --option key=value        Additional connection options. You can pass in multiple options using --option key=value (default [])
      --parse                            Parse the query and return the logical structure.
  -p, --password string                  Connection password, such as for SSH/WinRM.
      --path string                      Path to a local file or directory for the connection to use.
      --platform-id string               Select a specific target asset by providing its platform ID.
      --sudo                             Elevate privileges with sudo.

Options inherited from parent commands

      --api-proxy string   Set proxy for communications with Mondoo API
      --config string      Set config file path (default $HOME/.config/mondoo/mondoo.yml)
      --log-level string   Set log level: error, warn, info, debug, trace (default "info")
  -v, --verbose            Enable verbose output

SEE ALSO

• cnspec - cnspec CLI
• cnspec run arista - Run an MQL query against an Arista endpoint.
• cnspec run aws - Run an MQL query against an AWS account or instance.
• cnspec run azure - Run an MQL query against a Microsoft Azure subscription or virtual machine.
• cnspec run container - Run an MQL query against a container, image, or registry.
• cnspec run docker - Run an MQL query against a Docker container or image.
• cnspec run filesystem - Run an MQL query against a mounted file system target.
• cnspec run gcp - Run an MQL query against a Google Cloud Platform (GCP) organization, project, or folder.
• cnspec run github - Run an MQL query against a GitHub organization or repository.
• cnspec run gitlab - Run an MQL query against a GitLab group.
• cnspec run google-workspace - Run an MQL query against a Google Workspace organization.
• cnspec run host - Run an MQL query against a host endpoint (domain name).
• cnspec run k8s - Run an MQL query against a Kubernetes cluster or local manifest file(s).
• cnspec run local - Run an MQL query against your local system.
• cnspec run mock - Run an MQL query against a mock target (a simulated asset).
• cnspec run ms365 - Run an MQL query against a Microsoft 365 tenant.
• cnspec run oci - Run an MQL query against an Oracle Cloud Infrastructure (OCI) tenancy.
• cnspec run okta - Run an MQL query against an Okta organization.
• cnspec run opcua - Run an MQL query against an OPC UA endpoint.
• cnspec run slack - Run an MQL query against a Slack team.
• cnspec run ssh - Run an MQL query against an SSH target.
• cnspec run terraform - Run an MQL query against Terraform HCL (files.tf and directories), plan files (json), and state files (json).
• cnspec run vagrant - Run an MQL query against a Vagrant host.
• cnspec run vcd - Run an MQL query against a VMware Virtual Cloud Director organization.
• cnspec run vsphere - Run an MQL query against a VMware vSphere API endpoint.
• cnspec run winrm - Run an MQL query against a WinRM target.