The Microsoft.Security.DevOps.Cli is available for download from nuget.org.

To easily access it from the command line, add the tools directory of the nuget package to your path. It can then be accessed via it's codename guardian through either the shell or cmd launchers, decided by your operating system.

Note: [..] blocks indicate optional parameters.

Initialize MSDO in your repo

guardian init

Run MSDO with tools configured by the Microsoft policy (default experience)

guardian run [-p Microsoft]

Run MSDO with tools configured specifically for GitHub

guardian run -p GitHub

Run MSDO with only Infrastructure as Code analyzers

guardian run --categories IaC

Each stage of guardian run can be executed independently. To see what commands are available, check the command line help.

See command line help

guardian
guardian help
guardian --help

Interactively configure a tool

guardian configure -t binskim

Run the tool with the custom configuration

guardian run -c binskim