cli

command module

v3.2.1 Latest Latest Go to latest Published: May 18, 2026 License: AGPL-3.0 Imports: 2 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/vulnetix/cli

Links

Open Source Insights

README ¶

Vulnetix CLI & GitHub Action

Automated vulnerability management for your CI/CD pipelines and development workflows.

GitHub Action

This GitHub Action provides the Vulnetix CLI for your workflows, enabling automated vulnerability scanning directly in your CI/CD pipeline.

Basic Usage

- name: Vulnetix Scan
  uses: Vulnetix/cli@main
  with:
    org-id: ${{ secrets.VULNETIX_ORG_ID }}

Workflow Examples

Scan on Pull Request

name: Security Scan
on: [pull_request]

jobs:
  vulnetix:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: Vulnetix/cli@main
        with:
          org-id: ${{ secrets.VULNETIX_ORG_ID }}

Upload Artifacts

- uses: Vulnetix/cli@main
  with:
    org-id: ${{ secrets.VULNETIX_ORG_ID }}
    task: upload
    artifact-path: ./reports/

See GitHub Actions documentation for complete configuration options, and Artifact Upload guide for uploading workflow artifacts to Vulnetix.

Other CI/CD Platforms

Platform	Guide
GitLab CI	GitLab pipeline integration
Azure DevOps	Azure pipeline integration
Bitbucket	Bitbucket pipeline integration

Claude Code Plugin

Integrate Vulnetix vulnerability intelligence directly into Claude Code with automated pre-commit scanning, six interactive analysis skills, and multi-hook architecture.

Install

Add the marketplace:

/plugin marketplace add Vulnetix/pix-ai-coding-assistant

Install the plugin:

/plugin install vulnetix@vulnetix-plugins

Upgrade

/plugin update vulnetix

Requires: Vulnetix CLI installed and authenticated (vulnetix auth login).

Full plugin documentation | Plugin repository

CLI Installation

Method	Platforms	Installation
Install Script	Linux, macOS	`curl -fsSL https://cli.vulnetix.com/install.sh \| sh`
Homebrew	Linux, macOS	`brew install vulnetix/tap/vulnetix`
Scoop	Windows	`scoop install vulnetix`
Nix	Linux, macOS	`nix profile install github:Vulnetix/cli`
Go Install	All	`go install github.com/vulnetix/cli/v3@latest`
Binary Download	All	Direct download
From Source	All	Build from source

Architecture support: AMD64, ARM64, ARM, 386.

Quick Start

brew install vulnetix/tap/vulnetix
vulnetix auth login
vulnetix vdb status

See CLI Documentation for complete usage and command reference.

Available Tasks

Task	Description	Use Case
`info`	Auth healthcheck (default)	Verify credential setup

Documentation

Documentation ¶

There is no documentation for this package.

Source Files ¶

View all Source files

main.go

Directories ¶

Path	Synopsis
cmd
internal
analytics Package analytics provides Google Analytics 4 (GA4) Measurement Protocol integration for server-side event tracking from the Vulnetix CLI.	Package analytics provides Google Analytics 4 (GA4) Measurement Protocol integration for server-side event tracking from the Vulnetix CLI.
cdx
cdx/schema Package schema provides CycloneDX BOM validation against embedded JSON schemas.	Package schema provides CycloneDX BOM validation against embedded JSON schemas.
config
display
filetree
gitctx
github
license
memory Package memory manages the .vulnetix/memory.yaml file that persists scan state between runs — last scan summary, history, and cached findings.	Package memory manages the .vulnetix/memory.yaml file that persists scan state between runs — last scan summary, history, and cached findings.
purl
reachability Package reachability runs tree-sitter S-expression queries supplied by vdb-manager against source files to determine whether a known- vulnerable code pattern is present (direct mode) or reachable from first-party code (transitive mode).	Package reachability runs tree-sitter S-expression queries supplied by vdb-manager against source files to determine whether a known- vulnerable code pattern is present (direct mode) or reachable from first-party code (transitive mode).
sast
scan
testutils
treesitter Package treesitter wires the vdb-manager language identifiers used in x_treeSitterQueries.language to concrete tree-sitter grammars bundled via github.com/smacker/go-tree-sitter.	Package treesitter wires the vdb-manager language identifiers used in x_treeSitterQueries.language to concrete tree-sitter grammars bundled via github.com/smacker/go-tree-sitter.
triage Package triage provides a provider abstraction for fetching vulnerability alerts from external sources (GitHub Dependabot, Snyk, etc.) and enriching them with VDB remediation data.	Package triage provides a provider abstraction for fetching vulnerability alerts from external sources (GitHub Dependabot, Snyk, etc.) and enriching them with VDB remediation data.
tui
update
upload
pkg
auth
cache
tty
vdb

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL