References

Command references, configuration files, debugging guides, and experimental CLI features.

1 min readUpdated Jul 9, 2026

Overview

Lookup tables for CLI commands, configuration files, debugging workflows, and in-development features.

All guides

Debugging FOSSA CLI

Path Dependency

How FOSSA represents dependencies resolved from local filesystem paths instead of registries.

Binary Discovery

Multi Stage Builds

Subcommands

fossa-deps

Declare manual, vendored, and custom dependencies in fossa-deps YAML or JSON.

.fossa.yml

Configure analysis targets, paths, and CLI behavior with an optional .

fossa analyze

Discover build targets, resolve dependency graphs, and upload analysis results to FOSSA.

fossa container

Analyze and test container images for license and vulnerability policy violations.

fossa init

Generate starter fossa-deps and .

fossa list targets

List analysis targets the CLI would run in a directory without uploading results.

fossa project

Create, view, and manage FOSSA projects from the command line.

fossa release-group

Manage FOSSA release groups and their member projects from the command line.

fossa report

Download compliance or attribution reports for the latest project revision.

fossa sbom

Upload SPDX or CycloneDX SBOMs to FOSSA and run policy tests against them.

fossa test

Fail CI when the latest scan has license or security policy violations.

Analyze

Container

Project

Release Group