CLI Reference

Authentication

Command	Description
hawk login	Authenticate via OAuth2 Device Authorization flow
hawk auth access-token	Print a valid access token to stdout
hawk auth refresh-token	Print the current refresh token

Evaluations

Command	Description
hawk eval-set CONFIG	Submit an evaluation set
hawk local eval-set CONFIG	Run eval locally

hawk eval-set options:

Option	Description
--image-tag TAG	Specify runner image tag
--secrets-file FILE	Load secrets from file (repeatable)
--secret NAME	Pass env var as secret (repeatable)
--skip-confirm	Skip unknown field warnings
--log-dir-allow-dirty	Allow dirty log directory
--skip-dependency-validation	Skip pre-flight dependency validation

Scans

Command	Description
hawk scan run CONFIG	Start a Scout scan
hawk scan resume [ID]	Resume an interrupted scan
hawk local scan CONFIG	Run scan locally

Monitoring

Command	Description
hawk logs [JOB_ID]	View logs (-f to follow, -n for line count)
hawk status [JOB_ID]	JSON status report (--hours for log window)

hawk logs options:

Option	Description
-n, --lines INT	Number of lines to show (default: 100)
-f, --follow	Follow mode — continuously poll for new logs
--hours INT	Hours of data to search (default: 5 years)
--poll-interval FLOAT	Seconds between polls in follow mode (default: 3.0)

Viewing Results

Command	Description
hawk web [EVAL_SET_ID]	Open eval set in browser
hawk view-sample UUID	Open a specific sample in browser
hawk list eval-sets	List all eval sets
hawk list evals [ID]	List evals in an eval set
hawk list samples [ID]	List samples in an eval set
hawk transcript UUID	Download a sample transcript
hawk transcripts [ID]	Download all transcripts for an eval set

hawk list samples options:

Option	Description
--eval TEXT	Filter to a specific eval file
--limit INT	Max samples to show (default: 50)

hawk transcript / hawk transcripts options:

Option	Description
--output-dir DIR	Write to files instead of stdout
--raw	Raw JSON instead of markdown
--limit INT	Limit number of transcripts

When EVAL_SET_ID is omitted, Hawk uses the last eval set from the current session.

Management

Command	Description
hawk delete [EVAL_SET_ID]	Delete eval set's Kubernetes resources (logs are kept)
hawk edit-samples FILE	Submit sample edits (JSON or JSONL)