commands

var DocsCmd = &cobra.Command{
	Use:   "docs [output-dir]",
	Short: "Generate markdown documentation for devguard-scanner into output-dir (default: docs/scanner)",
	Args:  cobra.MaximumNArgs(1),
	RunE:  runDocs,
}

var LogsCmd = &cobra.Command{
	Use:   "logs",
	Short: "Analyze log files",
	Long: `Analyze log files from any devguard component.

Supported formats (auto detected, override with --format):

  api       devguard-api / scanner (zerolog console writer)
  kratos    ory kratos (logfmt)
  postgres  postgresql server log
  web       devguard-web (Next.js server output)

Levels are normalised to DBG/INF/WRN/ERR/FTL across all formats, so --level and
the errors and timeline subcommands behave identically whichever log you point
them at. Logs collected with "kubectl logs --timestamps" are also accepted; the
prefix supplies the timestamp, which is the only way to place the web log on a
timeline.`,
}

var ReleaseCICmd = &cobra.Command{
	Use:   "ci-components <tag>",
	Short: "Update, tag, and push devguard-ci-components (auto-detects latest scanner version)",
	Args:  cobra.ExactArgs(1),
	RunE:  runReleaseCI,
}

var ReleaseDevguardCmd = &cobra.Command{
	Use:   "devguard <tag>",
	Short: "Tag and push the devguard backend only",
	Args:  cobra.ExactArgs(1),
	RunE:  runReleaseDevguard,
}

var ReleaseHelmCmd = &cobra.Command{
	Use:   "helm-chart <tag>",
	Short: "Update docker-compose and Helm chart, then commit, push, and tag",
	Args:  cobra.ExactArgs(1),
	RunE:  runReleaseHelm,
}

var ReleaseK8sIntegrationCmd = &cobra.Command{
	Use:   "k8s-integration <tag>",
	Short: "Tag and push the devguard-k8s-image-inventory repo only",
	Args:  cobra.ExactArgs(1),
	RunE:  runReleaseK8sIntegration,
}

var ReleaseWebCmd = &cobra.Command{
	Use:   "web <tag>",
	Short: "Bump package.json, tag, and push devguard-web only",
	Args:  cobra.ExactArgs(1),
	RunE:  runReleaseWeb,
}

var VerifyDigestsCmd = &cobra.Command{
	Use:   "verify-digests",
	Short: "Verify GitHub and GitLab builds of every DevGuard image are bitwise identical",
	Long: `Compares the manifest digest of the "main" tag and every "v*" tag from
` + minVerifyTag + ` onward between the GitHub Actions (ghcr.io) and GitLab CI
(registry.opencode.de) builds of each DevGuard image (devguard, scanner,
kratos, postgresql).

Images are considered bitwise identical when their digest matches, since the
digest is a content hash of the manifest.

All images/tags are checked concurrently. Only mismatching or missing tags
are printed, as a summary table.

Requires registry credentials to already be available (e.g. via "docker
login" / a populated docker config) for the GitLab registry.`,
	Example: `  devguard-maint verify-digests`,
	Args:    cobra.NoArgs,
	RunE:    runVerifyDigests,
}