OS Manuals

/usr/bin/capslock

Capslock is a capability analysis CLI for Go packages that informs users of which privileged operations a given package can access

From capslock 0.3.4-r2 (os), captured 2026-11-05 by running capslock --help (exit 0). permalink

Usage of /usr/bin/capslock:
  -buildtags string
    	command-separated list of build tags to use when loading packages
  -capabilities string
    	if non-empty, a comma-separated list of capabilities to consider for graph output.  Optionally, all capabilities can be prefixed with '-' to specify capabilities to ignore.
  -capability_map string
    	use a custom capability map file
  -cpuprofile string
    	write cpu profile to specified file
  -disable_builtin
    	when using a custom capability map, disable the builtin capability mappings
  -force_local_module
    	if the requested packages cannot be loaded in the current workspace, return an error immediately, instead of trying to load them in a temporary module
  -goarch string
    	GOARCH value to use when loading packages
  -goos string
    	GOOS value to use when loading packages
  -granularity string
    	the granularity to use for comparisons, either "package" or "function".
  -memprofile string
    	write memory profile to specified file
  -noisy
    	include output on unanalyzed function calls (can be noisy)
  -omit_paths
    	omit example call paths from output
  -output string
    	output mode to use; non-default options are json, m, package, v, graph, and compare
  -packages string
    	target patterns to be analysed; allows wildcarding
  -v int
    	verbosity level
  -version
    	report Capslock version and exit
Options (16)
OptionDescriptionSource
-buildtags stringcommand-separated list of build tags to use when loading packageshelp
-capabilities stringif non-empty, a comma-separated list of capabilities to consider for graph output.help
-capability_map stringuse a custom capability map filehelp
-cpuprofile stringwrite cpu profile to specified filehelp
-disable_builtinwhen using a custom capability map, disable the builtin capability mappingshelp
-force_local_moduleif the requested packages cannot be loaded in the current workspace, return an error immediately, instead of trying to load them in a temporary modulehelp
-goarch stringGOARCH value to use when loading packageshelp
-goos stringGOOS value to use when loading packageshelp
-granularity stringthe granularity to use for comparisons, either "package" or "function".help
-memprofile stringwrite memory profile to specified filehelp
-noisyinclude output on unanalyzed function calls (can be noisy)help
-omit_pathsomit example call paths from outputhelp
-output stringoutput mode to use;help
-packages stringtarget patterns to be analysed;help
-v intverbosity levelhelp
-versionreport Capslock version and exithelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.