Brigs for Developers

# Authenticate (pick one)
brigs auth login                        # browser OAuth
brigs auth login --api-key brigs_sk_... # paste key

# Scan and review
brigs scan run
brigs finding list --severity CRITICAL

# Posture score (machine-readable)
brigs posture --json | jq '.score'

# Local analysis (no auth needed)
brigs agent-scan . --sarif > results.sarif
brigs ai-inventory . --json

# List findings
curl https://api.brigs.ai/findings \
  -H "Authorization: Bearer $BRIGS_API_KEY"

# Response: { "findings": [...], "total": 42 }

# Trigger a scan
curl -X POST https://api.brigs.ai/scans \
  -H "Authorization: Bearer $BRIGS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"repoId": "repo_123"}'

# Response: { "scan": { "id": "scn_...", "status": "QUEUED" } }

import requests

API_KEY = "brigs_sk_..."
BASE = "https://api.brigs.ai"
headers = {"Authorization": f"Bearer {API_KEY}"}

# Get posture score
r = requests.get(f"{BASE}/posture/summary", headers=headers)
data = r.json()
print(f"Score: {data['score']}, Coverage: {data['coverage']}")

# List open findings
r = requests.get(f"{BASE}/findings?status=OPEN", headers=headers)
for f in r.json()["findings"]:
    print(f"{f['severity']} {f['controlKey']}: {f['summary']}")

const API_KEY = process.env.BRIGS_API_KEY;
const BASE = "https://api.brigs.ai";

const headers = {
  Authorization: `Bearer ${API_KEY}`,
  "Content-Type": "application/json",
};

// Trigger a scan and poll until complete
const { scan } = await fetch(`${BASE}/scans`, {
  method: "POST", headers, body: JSON.stringify({})
}).then(r => r.json());

console.log("Scan started:", scan.id, scan.status);