Apiiro Diff Scan

Compare two git references for security risks via the Apiiro CLI. Primary CI/CD integration point.

Commands

apiiro diff-scan -b main -c feature-branch -r https://github.com/org/repo --wait
apiiro diff-scan -b main -c feature-branch -r https://github.com/org/repo --wait --wait-external
apiiro diff-scan -b abc123 -c def456 -r <repo-url> --baseline-type Commit --candidate-type Commit --wait
apiiro diff-scan -s <scan-id>                     # Check existing scan status
apiiro diff-scan -i                               # Interactive mode

Exit codes: 0 = success/warn, 1 = blocked/failed, 2 = scan still pending.

Wait & Timeout

--wait polls until results land. --timeout <seconds> bounds the wait (default: 300). When the timeout elapses, exit code 2 is returned along with the scan ID so the user can re-check later with -s <scan-id>.