Loom CLI command reference
This page is generated from deterministic --help output captured from the built loom executable. Do not edit it by hand.
$ loom --help
loom (Stage 0 scaffold)
Usage:
loom [flags]
loom [command]
Available Commands:
check Validate a Loom or GitLab workflow and emit a receipt
compile Compile a Loom workflow or produce a GitLab plan report
completion Generate the autocompletion script for the specified shell
config Inspect layered runtime config
help Help about any command
run Execute a Loom or GitLab workflow locally
secrets Manage Loom secrets providers
version Print the version
Flags:
-h, --help help for loom
Use "loom [command] --help" for more information about a command.
$ loom check --help
Validate a Loom or GitLab workflow and emit a receipt
Usage:
loom check [flags]
Flags:
--context string Project-relative GitLab pipeline context JSON path
--format string Workflow source format: loom or gitlab
-h, --help help for check
--workflow string Project-relative workflow path
$ loom compile --help
Compile a Loom workflow or produce a GitLab plan report
Usage:
loom compile [flags]
Flags:
--context string Project-relative GitLab pipeline context JSON path
--format string Workflow source format: loom or gitlab
-h, --help help for compile
--workflow string Project-relative workflow path
$ loom config --help
Inspect layered runtime config
Usage:
loom config [command]
Available Commands:
init Create a starter runtime config file
show Print the effective layered runtime config
Flags:
-h, --help help for config
Use "loom config [command] --help" for more information about a command.
$ loom config init --help
Create a starter runtime config file
Usage:
loom config init [flags]
Flags:
-h, --help help for init
--user Create ~/.config/loom/config.yml instead of the repo-scoped .loom/config.yml
$ loom config show --help
Print the effective layered runtime config
Usage:
loom config show [flags]
Flags:
-h, --help help for show
$ loom run --help
Execute a Loom or GitLab workflow locally
Usage:
loom run [flags]
Flags:
--cache-diff Run twice with pinned inputs (cache=off, then cache=on) and quarantine cache-hit keys on mechanical divergence
--context string Project-relative GitLab pipeline context JSON path
--docker-workspace-mount string Docker workspace mount mode override: bind_mount or ephemeral_volume
--format string Workflow source format: loom or gitlab
-h, --help help for run
--local Run locally (required for now). Nodes with an image use Docker; otherwise run on the host shell
--parallel int Maximum number of jobs to run concurrently (must be positive)
--privileged-service stringArray Allow one GitLab privileged service alias (repeatable)
-q, --quiet Print only minimal local execution output
--stream Stream job stdout/stderr while local execution is running
-v, --verbose Print additional metadata for local execution
--workflow string Project-relative workflow path
$ loom version --help
Print the version
Usage:
loom version [flags]
Flags:
-h, --help help for version
$ loom secrets --help
Manage Loom secrets providers
Usage:
loom secrets [command]
Available Commands:
keepass Manage KeePass-backed vaults and items
op Manage 1Password-backed vault metadata and items
Flags:
-h, --help help for secrets
Use "loom secrets [command] --help" for more information about a command.
$ loom secrets keepass --help
Manage KeePass vault and item metadata via create/update/list operations. Secret-value read/show commands are intentionally not available.
Usage:
loom secrets keepass [command]
Available Commands:
item Manage KeePass item metadata
vault Manage KeePass vault definitions
Flags:
-h, --help help for keepass
Use "loom secrets keepass [command] --help" for more information about a command.
$ loom secrets keepass vault --help
Manage KeePass vault definitions
Usage:
loom secrets keepass vault [command]
Available Commands:
create Create a KeePass vault definition
list List KeePass vaults without exposing secret values
update Update KeePass vault credentials for an existing mapped vault
Flags:
-h, --help help for vault
Use "loom secrets keepass vault [command] --help" for more information about a command.
$ loom secrets keepass vault create --help
Create a local KeePass `.kdbx` vault file. Credentials are provided via `--password-from-env` and/or `--keyfile-from-env`. This command never prints credential values.
Usage:
loom secrets keepass vault create [flags]
Flags:
--database-path .kdbx Path to write the KeePass .kdbx file (default: .loom/keepass/<alias>.kdbx)
--force Overwrite existing vault file if it already exists
-h, --help help for create
--keyfile-from-env string Environment variable name containing the KeePass keyfile path
--password-from-env string Environment variable name containing the KeePass master password
--vault-path string Vault path override (defaults to Git origin path in slash format, e.g. group/project/repo)
$ loom secrets keepass vault update --help
Rotate credentials on an existing KeePass vault file using the runtime mapping for `--vault-path`.
Current credentials are loaded from `LOOM_KEEPASS_DB_<ALIAS>_*` env mapping; new credentials come from `--password-from-env` and/or `--keyfile-from-env`.
This command only updates vault credentials and does not print secret values.
Usage:
loom secrets keepass vault update [flags]
Flags:
-h, --help help for update
--keyfile-from-env string Environment variable name containing the new KeePass keyfile path
--password-from-env string Environment variable name containing the new KeePass master password
--vault-path string Vault path override (defaults to Git origin path in slash format, e.g. group/project/repo)
$ loom secrets keepass vault list --help
List KeePass vaults without exposing secret values
Usage:
loom secrets keepass vault list [flags]
Flags:
-h, --help help for list
--vault-path string Vault path override (defaults to Git origin path in slash format, e.g. group/project/repo)
$ loom secrets keepass item --help
Manage KeePass item metadata
Usage:
loom secrets keepass item [command]
Available Commands:
create Create a KeePass item field from an environment variable
list List KeePass items without exposing secret values
update Update a KeePass item field from an environment variable
Flags:
-h, --help help for item
Use "loom secrets keepass item [command] --help" for more information about a command.
$ loom secrets keepass item create --help
Create a KeePass item field from an environment variable
Usage:
loom secrets keepass item create [flags]
Flags:
--field string Item field name to set (for example username or password)
-h, --help help for create
--item-path string Vault item path to create/update
--value-from-env string Name of environment variable that supplies the field value
--vault-path string Vault path override (defaults to Git origin path in slash format, e.g. group/project/repo)
$ loom secrets keepass item update --help
Update a KeePass item field from an environment variable
Usage:
loom secrets keepass item update [flags]
Flags:
--field string Item field name to set (for example username or password)
-h, --help help for update
--item-path string Vault item path to create/update
--value-from-env string Name of environment variable that supplies the field value
--vault-path string Vault path override (defaults to Git origin path in slash format, e.g. group/project/repo)
$ loom secrets keepass item list --help
List KeePass items without exposing secret values
Usage:
loom secrets keepass item list [flags]
Flags:
-h, --help help for list
--item-prefix string Optional item path prefix filter
--vault-path string Vault path override (defaults to Git origin path in slash format, e.g. group/project/repo)
$ loom secrets op --help
Manage 1Password vault and item metadata via list/create/update operations.
These commands require OP_SERVICE_ACCOUNT_TOKEN and intentionally never print secret values.
Usage:
loom secrets op [command]
Available Commands:
item Manage 1Password item metadata
vault List 1Password vaults
Flags:
-h, --help help for op
Use "loom secrets op [command] --help" for more information about a command.
$ loom secrets op vault --help
List 1Password vaults
Usage:
loom secrets op vault [command]
Available Commands:
list List 1Password vaults without exposing secret values
Flags:
-h, --help help for vault
Use "loom secrets op vault [command] --help" for more information about a command.
$ loom secrets op vault list --help
List 1Password vaults without exposing secret values
Usage:
loom secrets op vault list [flags]
Flags:
-h, --help help for list
$ loom secrets op item --help
Manage 1Password item metadata
Usage:
loom secrets op item [command]
Available Commands:
create Create a 1Password item field from an environment variable
list List 1Password items without exposing secret values
update Update a 1Password item field from an environment variable
Flags:
-h, --help help for item
Use "loom secrets op item [command] --help" for more information about a command.
$ loom secrets op item create --help
Create a 1Password item field from an environment variable
Usage:
loom secrets op item create [flags]
Flags:
--field string Item field name to set (for example username or password)
-h, --help help for create
--item-path string Item path/title to create or update
--value-from-env string Name of environment variable that supplies the field value
--vault string 1Password vault name or UUID
$ loom secrets op item update --help
Update a 1Password item field from an environment variable
Usage:
loom secrets op item update [flags]
Flags:
--field string Item field name to set (for example username or password)
-h, --help help for update
--item-path string Item path/title to create or update
--value-from-env string Name of environment variable that supplies the field value
--vault string 1Password vault name or UUID
$ loom secrets op item list --help
List 1Password items without exposing secret values
Usage:
loom secrets op item list [flags]
Flags:
-h, --help help for list
--item-prefix string Optional item path prefix filter
--vault string 1Password vault name or UUID