# `once lint`

Run static analysis for a declared target.

## Synopsis

```text
once lint [OPTIONS] [TARGET]
```

## Description

Executes the target's `lint` capability, normalizes its report, and returns a failing status when a finding meets `--fail-on`. With no target and no `--all`, Once lints every workspace-owned target that exposes `lint`, runs each one to completion, and returns a failing status when any finding meets `--fail-on`. Pass `--all` to include every lint-capable target in the loaded graph, including targets reached through vendored dependencies.

## Arguments

| Argument | Required | Description |
| --- | --- | --- |
| `<TARGET>` | no | Target id, such as `quality/python` or `./python`. Omit it to lint every workspace-owned lint target discovered in the graph. |

## Options

| Flag | Value | Default | Description |
| --- | --- | --- | --- |
| `--sandbox` | `<SANDBOX>` | `off` | Local filesystem sandbox policy for command actions. |
| `--config` | `<KEY=VALUE>` |  | Override the workspace build configuration. See `once build --config`. |
| `--fail-on` | `<FAIL_ON>` | `warning` | Lowest finding severity that makes this command fail. |
| `--all` | (flag) |  | Lint every lint-capable target in the loaded graph, including targets reached through vendored dependencies. Without it the targetless default lints only workspace-owned targets. |