README
¶
Vulnetix CLI & GitHub Action
Automated vulnerability management for your CI/CD pipelines and development workflows.
Contents
- GitHub Action
- Claude Code Plugin
- CLI Installation
- Available Tasks
- Documentation
- CLI Documentation
- Claude Code Plugin Documentation
- VDB API Reference
- GitHub App
GitHub Action
This GitHub Action provides the Vulnetix CLI for your workflows, enabling automated vulnerability scanning directly in your CI/CD pipeline.
Basic Usage
- name: Vulnetix Scan
uses: Vulnetix/cli@main
with:
org-id: ${{ secrets.VULNETIX_ORG_ID }}
Workflow Examples
Scan on Pull Request
name: Security Scan
on: [pull_request]
jobs:
vulnetix:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: Vulnetix/cli@main
with:
org-id: ${{ secrets.VULNETIX_ORG_ID }}
Upload Artifacts
- uses: Vulnetix/cli@main
with:
org-id: ${{ secrets.VULNETIX_ORG_ID }}
task: upload
artifact-path: ./reports/
See GitHub Actions documentation for complete configuration options, and Artifact Upload guide for uploading workflow artifacts to Vulnetix.
Other CI/CD Platforms
| Platform | Guide |
|---|---|
| GitLab CI | GitLab pipeline integration |
| Azure DevOps | Azure pipeline integration |
| Bitbucket | Bitbucket pipeline integration |
Claude Code Plugin
Integrate Vulnetix vulnerability intelligence directly into Claude Code with automated pre-commit scanning, six interactive analysis skills, and multi-hook architecture.
Install
Add the marketplace:
/plugin marketplace add Vulnetix/pix-ai-coding-assistant
Install the plugin:
/plugin install vulnetix@vulnetix-plugins
Upgrade
/plugin update vulnetix
Requires: Vulnetix CLI installed and authenticated (vulnetix auth login).
Full plugin documentation | Plugin repository
CLI Installation
| Method | Platforms | Installation |
|---|---|---|
| Install Script | Linux, macOS | curl -fsSL https://cli.vulnetix.com/install.sh | sh |
| Homebrew | Linux, macOS | brew install vulnetix/tap/vulnetix |
| Scoop | Windows | scoop install vulnetix |
| Nix | Linux, macOS | nix profile install github:Vulnetix/cli |
| Go Install | All | go install github.com/vulnetix/cli@latest |
| Binary Download | All | Direct download |
| From Source | All | Build from source |
Architecture support: AMD64, ARM64, ARM, 386.
Quick Start
brew install vulnetix/tap/vulnetix
vulnetix auth login
vulnetix vdb status
See CLI Documentation for complete usage and command reference.
Available Tasks
| Task | Description | Use Case |
|---|---|---|
info |
Auth healthcheck (default) | Verify credential setup |
Documentation
Documentation
¶
There is no documentation for this package.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
internal
|
|
|
analytics
Package analytics provides Google Analytics 4 (GA4) Measurement Protocol integration for server-side event tracking from the Vulnetix CLI.
|
Package analytics provides Google Analytics 4 (GA4) Measurement Protocol integration for server-side event tracking from the Vulnetix CLI. |
|
cdx/schema
Package schema provides CycloneDX BOM validation against embedded JSON schemas.
|
Package schema provides CycloneDX BOM validation against embedded JSON schemas. |
|
memory
Package memory manages the .vulnetix/memory.yaml file that persists scan state between runs — last scan summary, history, and cached findings.
|
Package memory manages the .vulnetix/memory.yaml file that persists scan state between runs — last scan summary, history, and cached findings. |
|
triage
Package triage provides a provider abstraction for fetching vulnerability alerts from external sources (GitHub Dependabot, Snyk, etc.) and enriching them with VDB remediation data.
|
Package triage provides a provider abstraction for fetching vulnerability alerts from external sources (GitHub Dependabot, Snyk, etc.) and enriching them with VDB remediation data. |
|
pkg
|
|