app security review

Shows the combined results of an app security check: the deterministic scan from app security check, and the findings that your coding agent recorded with app security record. Each check is listed with its findings, status, and source, most severe first.

Agent findings are optional. Without them, the command shows the deterministic scan results. Each finding names a check ID, and that check's page under app security checks explains how to fix it.

Pass the same --path, --config, --client-id, and --without-app-config flags that you passed to app security check, so that the command finds the same results.

Anchor to flagsFlags

The following flags are available for the app security review command:

Anchor to --blocking <value> --blocking <value> string env: SHOPIFY_FLAG_APP_SECURITY_BLOCKING: The minimum finding severity that causes a non-zero exit code: high, medium, or low. Defaults to none, which never fails on findings.
Anchor to --check-id <value> --check-id <value> string env: SHOPIFY_FLAG_CHECK_ID: Show only this check. Repeat the flag to show several checks.
Anchor to --client-id <value> --client-id <value> string env: SHOPIFY_FLAG_CLIENT_ID: The Client ID of your app.
Anchor to --json-schema --json-schema env: SHOPIFY_FLAG_JSON_SCHEMA: Print the command's JSON schemas.
Anchor to --no-color --no-color env: SHOPIFY_FLAG_NO_COLOR: Disable color output.
Anchor to --no-input --no-input env: SHOPIFY_FLAG_NO_INPUT: Disable interactive prompts and browser authentication.
Anchor to --path <value> --path <value> string env: SHOPIFY_FLAG_PATH: The path to your app directory.
Anchor to --verbose --verbose env: SHOPIFY_FLAG_VERBOSE: Increase the verbosity of the output. May include sensitive data.
Anchor to --without-app-config --without-app-config env: SHOPIFY_FLAG_WITHOUT_APP_CONFIG: Scan --path as an app with no app configuration file. Config checks are skipped. Requires --client-id.
Anchor to -c, --config <value> -c, --config <value> string env: SHOPIFY_FLAG_APP_CONFIG: The name of the app configuration.

Examples