deno --versionDisplay the deno version.

deno check module.tsType check a script.
deno check --all module.tsAlso type check remote modules and npm packages.
deno run --check module.tsType check and run a script.(By default, deno run does not check types.)
deno run --check=all module.tsAlso type check remote modules and npm packages.

deno run -R script.ts deno run --allow-read script.tsAllow all reads from file system.
deno run --allow-read=foo.txt,bar.txt script.tsAllow reads from file foo.txt and bar.txt only.
deno run --allow-read=node_modules script.tsAllow reads from any file in any subdirectory of ./node_modules.
deno run --allow-read=/etc --deny-read=/etc/hosts script.tsAllow reading files in /etc but disallow reading /etc/hosts.
deno run --deny-read script.tsDeny all read access to disk, disabling permission prompts for reads.
deno run -W script.ts deno run --allow-write script.tsAllow all writes to file system.
deno run --allow-write=foo.txt,bar.txt script.tsAllow writes to file foo.txt and bar.txt only.
deno run --allow-write=./ --deny-write=./secrets script.tsAllow reading files in current working directory but disallow writing to ./secrets directory.
deno run --deny-write script.tsDeny all write access to disk, disabling permission prompts.
deno run -N script.ts
deno run --allow-net script.ts
Allow network access.
deno run --allow-net=github.com,jsr.io script.tsAllow network access to github.com and jsr.io.
deno run --allow-net=example.com:80 script.tsAllow a hostname at port 80.
deno run --allow-net=1.1.1.1:443 script.tsAllow an IPv4 address on port 443.
deno run --allow-net=[2606:4700:4700::1111] script.tsAllow an IPv6 address, all ports allowed.
deno run --allow-net --deny-net=github.com,jsr.io script.tsAllow access to network, but deny access to github.com and jsr.io.
deno run --deny-net script.tsDeny all network access, disabling permission prompts.
deno run -E script.ts
deno run --allow-env script.ts
Allow access to all environment variables.
deno run --allow-env=HOME,FOO script.tsAllow HOME and FOO environment variables.
deno run --allow-env="AWS_*" script.tsAllow access to all environment variables starting with AWS_.
deno run --allow-env --deny-env=AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY script.tsAllow all environment variables except AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY.
deno run --deny-env script.tsDeny all access to env variables, disabling permission prompts.
deno run -S script.ts
deno run --allow-sys script.ts
Allow all system information APIs.
deno run --allow-sys="systemMemoryInfo,osRelease" script.tsAllow systemMemoryInfo and osRelease APIs.
deno run --allow-sys --deny-sys="networkInterfaces" script.tsAllow accessing all system information but networkInterfaces.
deno run --deny-sys script.tsDeny all access to system information, disabling permission prompts.
deno run --allow-run script.tsAllow running all subprocesses.
deno run --allow-run="curl,whoami" script.tsAllow running curl and whoami subprocesses.
deno run --allow-run --deny-run="whoami,ps" script.tsAllow running running all programs, but whoami and ps.
deno run --deny-run script.tsDeny all access for spawning subprocessing, disabling permission prompts.
deno run --allow-ffi script.tsAllow loading dynamic all libraries
deno run --allow-ffi=./libfoo.so script.tsAllow loading dynamic libraries from a specific path.
deno run --allow-ffi --deny-ffi=./libfoo.so script.tsAllow loading all dynamic libraries, but ./libfoo.so.
deno run --deny-ffi script.tsDeny loading all dynamic libraries, disabling permission prompts.