drift command group detects, lists, and manages configuration drift — cases where live infrastructure diverges from its expected or baseline state. Drift findings are categorized by severity and type.
drift detect
Trigger a drift detection scan across all resources from all connected providers:
--provider on drift list after the scan, or use the provider sync command first to ensure resources are up to date.
drift list
List drift findings with optional filters.
Synopsis:
| Flag | Values | Description |
|---|---|---|
--severity | critical, high, medium, low | Filter by severity level |
--status | detected, investigating, resolved | Filter by resolution status |
--type | configuration, security, compliance | Filter by drift category |
--provider | provider ID | Filter by provider |