Skip to main content


mondoo exec

Run a Mondoo query


Run a Mondoo query on the CLI and process its raw results.

mondoo exec [flags]


      --ask-pass                         ask for connection password
--ast Parse the query and return the Abstract Syntax Tree (AST)
-t, --connection string The connection is the identifier a way to reach the asset. Supported connections are 'local://', 'docker://' and 'ssh://'
--discover string enables the discovery of nested assets. Supported are 'all|instances|host-instances|container|container-images'
--discover-filter stringToString additional filter for asset discovery (default [])
-h, --help help for exec
--host-machines also scan host machines like ESXi server
-i, --identity-file string Selects a file from which the identity (private key) for public key authentication is read.
--insecure disables TLS/SSL checks or SSH hostkey config
--instances also scan instances (only applies to api targets like aws, azure or gcp)
-j, --json Run the query and return the object in a JSON structure
--option stringToString addition connection options, multiple options can be passed in via --option key=value (default [])
--parse Parse the query and return the logical structure
-p, --password string connection password e.g. for ssh/winrm
--path string path to a local file or directory that the connection should use
--platform-id string select an specific asset by providing the platform id for the target
--sudo runs with sudo

Options inherited from parent commands

      --config string      config file (default is $HOME/.config/mondoo/mondoo.yml)
--log-level string set log-level: error, warn, info, debug, trace (default "info")
-v, --verbose verbose output