Azure Pipelines

Configure Cortex CLI code scanning in Azure Pipelines.

ARM64

trigger:
  branches:
    include: ['*']
pr:
  branches:
    include: ['*']
variables:
  CORTEX_API_URL: <your_cortex_api_url>
pool:
  name: arm
  demands:
    - Agent.OS -equals Linux
steps:
- checkout: self
  clean: true
- task: NodeTool@0
  displayName: "Use Node.js 22.x"
  inputs:
    versionSpec: "22.x"
- bash: |
    set -euo pipefail
    BASE="${CORTEX_API_URL%/}"
    URL="$BASE/public_api/v1/unified-cli/releases/download-link?os=linux&architecture=arm64"
    set +x
    CRTX_URL=$(curl -fsSL "$URL" \
      -H "x-xdr-auth-id: ${CORTEX_API_KEY_ID}" \
      -H "Authorization: ${CORTEX_API_KEY}" | jq -r '.signed_url')
    set -x
    curl -fsSL -o cortexcli "$CRTX_URL"
    chmod +x cortexcli
  displayName: "Download cortexcli (arm64)"
  env:
    CORTEX_API_URL: $(CORTEX_API_URL)
    CORTEX_API_KEY_ID: $(CORTEX_API_KEY_ID)
    CORTEX_API_KEY: $(CORTEX_API_KEY)
- bash: |
    set -euo pipefail
    ./cortexcli \
      --api-base-url "${CORTEX_API_URL}" \
      --api-key "${CORTEX_API_KEY}" \
      --api-key-id "${CORTEX_API_KEY_ID}" \
      code scan \
      --directory "$(Build.SourcesDirectory)" \
      --repo-id "$(Build.Repository.Name)" \
      --branch "$(Build.SourceBranchName)" \
      --source "CORTEX_CLI" \
      --create-repo-if-missing
  displayName: "Cortex CLI Code Scan (ARM64)"
  env:
    CORTEX_API_URL: $(CORTEX_API_URL)
    CORTEX_API_KEY_ID: $(CORTEX_API_KEY_ID)
    CORTEX_API_KEY: $(CORTEX_API_KEY)

AMD64

trigger:
  branches:
    include: ['*']
pr:
  branches:
    include: ['*']
pool:
  vmImage: ubuntu-latest
variables:
  CORTEX_API_URL: <your_cortex_api_url>
  MIN_LOG_LEVEL: "DEBUG"
steps:
- checkout: self
  clean: true
- task: NodeTool@0
  displayName: "Use Node.js 22.x"
  inputs:
    versionSpec: "22.x"
- bash: |
    set -euo pipefail
    sudo apt-get update
    sudo apt-get install -y --no-install-recommends jq ca-certificates curl
    BASE="${CORTEX_API_URL%/}"
    URL="$BASE/public_api/v1/unified-cli/releases/download-link?os=linux&architecture=amd64"
    set +x
    CRTX_URL=$(curl -fsSL "$URL" \
      -H "x-xdr-auth-id: ${CORTEX_API_KEY_ID}" \
      -H "Authorization: ${CORTEX_API_KEY}" | jq -r '.signed_url')
    set -x
    curl -fsSL -o cortexcli "$CRTX_URL"
    chmod +x cortexcli
  displayName: "Download cortexcli (amd64)"
  env:
    CORTEX_API_URL: $(CORTEX_API_URL)
    CORTEX_API_KEY_ID: $(CORTEX_API_KEY_ID)
    CORTEX_API_KEY: $(CORTEX_API_KEY)
- bash: |
    set -euo pipefail
    ./cortexcli \
      --api-base-url "${CORTEX_API_URL}" \
      --api-key "${CORTEX_API_KEY}" \
      --api-key-id "${CORTEX_API_KEY_ID}" \
      code scan \
      --directory "$(Build.SourcesDirectory)" \
      --repo-id "$(Build.Repository.Name)" \
      --branch "$(Build.SourceBranchName)" \
      --source "CORTEX_CLI" \
      --create-repo-if-missing
  displayName: "Cortex CLI Code Scan"
  env:
    CORTEX_API_URL: $(CORTEX_API_URL)
    CORTEX_API_KEY_ID: $(CORTEX_API_KEY_ID)
    CORTEX_API_KEY: $(CORTEX_API_KEY)
    MIN_LOG_LEVEL: $(MIN_LOG_LEVEL)