Is there any CLI options to check security patch is applied or not ? How many are pending.
I have tried with online tool magereport and many of patch status is unknown. That is why am asking for a CLI option , that can check better.
This isn't specifically a cli tool but you can check the contents of app/etc/applied.patches.list. This will give a list of patches applied and files changed. Using cli
cat app/etc/applied.patches.list from your magento root directory.
https://github.com/integer-net/DevDashboard - it is not a CLI script, but an open source module that shows this information based on
etc/applied.patches.list and the Hypernode API. You could take the code and build a CLI script around it if you like.
Disclaimer: I wrote it
On top of what Andrew said, Philip "Winkle" Jackson developed a module that lets you check the applied patches from the backend: https://github.com/philwinkle/Philwinkle_AppliedPatches
There is extension that is checking all security paches installation from the back end and do many other security checks. Magefence - https://www.extensionsmall.com/mage-fence-security.html