armoctl-repo-posture
Repository posture — IaC scanning of a connected git repo for config issues, with per-file and per-control views. Use when reviewing posture findings tied to a repo, not a live cluster.
Install
With your agent
Install OMGSkills skill "armosec/armoctl:skills/armoctl-repo-posture" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/armosec/armoctl /tmp/armoctl && ln -s /tmp/armoctl/skills/armoctl-repo-posture ~/.claude/skills/armoctl-repo-postureFrom README
armoctl-repo-posture Same control surface as cluster posture, but the resources are files in a connected git repo. Findings carry both file path and control ID, so they can be deep-linked back to the IaC source. Commands failed-controls — List failed controls per repo Flags: --kind (string) Entity kind: repo or file --report-guid (string) Report GUID (required) fields [scope] — Print the repo-posture resource cheatsheet (optionally filtered by scope) files — List files Flags: --repository (string) Filter by repository name repositories — List repositories resources — List resources (IaC objects) Resource fields failed-controls | Field | Description | |---|---| | id | Control ID. | | name | Control name. | | severity | Severity bucket. | | framework | Owning framework. | | scoreFactor | Weighting factor. | | complianceScore | Per-control compliance 0..1. | files | Field | Description | |---|---| | path | Path within the repo. | | name | File name.
More from this repo
armoctl
ARMO security platform CLI — JSON-first agent-friendly access to runtime incidents, vulnerabilities, posture, risks,...
armoctl-attack-chains
Attack chains — multi-step kill-chain views built by ARMO from runtime + posture signal.
armoctl-cloud-accounts
Cloud account onboarding — list/connect/disconnect ECS accounts.