> ## Documentation Index
> Fetch the complete documentation index at: https://doc.entelligence.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Incident and security CLI workflows

> List and investigate incident patterns, trigger reviewed fixes, run security scans, and filter findings from the CLI.

## Incident commands

The incident command family contains:

* `entelligence incident list`
* `entelligence incident show`
* `entelligence incident archive`
* `entelligence incident unarchive`
* `entelligence incident logs`
* `entelligence incident fix`
* `entelligence incident attach-fix`
* `entelligence incident attach-ticket`
* `entelligence incident monitor`
* `entelligence incident track`
* `entelligence incident refresh`

Start with read-only triage:

```bash theme={null}
entelligence incident list --status active
entelligence incident show <eku-id>
entelligence incident logs <eku-id>
```

Trigger a reviewed fix and watch progress:

```bash theme={null}
entelligence incident fix <eku-id> --repo acme/backend --watch
entelligence incident monitor
```

<Warning>
  `archive`, `unarchive`, `fix`, `attach-fix`, and `attach-ticket` change incident or linked-system state. Inspect the target ID and run the relevant `--help` command first.
</Warning>

## Security commands

The security command family contains:

* `entelligence security scan`
* `entelligence security status`
* `entelligence security list`
* `entelligence security summary`
* `entelligence security issues`
* `entelligence security suggest`
* `entelligence security dashboard`

Example scan and review flow:

```bash theme={null}
entelligence security scan org/repo --wait
entelligence security status
entelligence security list
entelligence security summary <scan-id>
entelligence security issues <scan-id> --severity CRITICAL
```

Request a suggestion only after checking the scan and rule identifiers:

```bash theme={null}
entelligence security suggest <scan-id> python:S1481 org/repo
```

Use `entelligence security dashboard` to invoke the installed dashboard entry point. Run subcommand help for required arguments and supported output modes.