Bitbucket

Configure Cortex CLI code scanning in Bitbucket Pipelines.

ARM64

image: node:22-bookworm
pipelines:
  default:
    - step:
        name: Cortex CLI Code Scan
        runs-on:
          - self.hosted
          - linux.arm64
        script:
          - set -euo pipefail
          - apt-get update && apt-get install -y --no-install-recommends curl jq ca-certificates file
          - export CORTEXCLI_HOME="/root/.cortexcli"; rm -rf "$CORTEXCLI_HOME" || true; mkdir -p "$CORTEXCLI_HOME"
          - |
            set +x
            CRTX_URL=$(curl -fsSL "${CORTEX_API_URL%/}/public_api/v1/unified-cli/releases/download-link?os=linux&architecture=arm64" \
              -H "x-xdr-auth-id: ${CORTEX_API_KEY_ID}" \
              -H "Authorization: ${CORTEX_API_KEY}" | jq -r '.signed_url')
            set -x
            curl -fsSL -o cortexcli "$CRTX_URL"
            chmod +x cortexcli
            ./cortexcli --version
          - |
            ./cortexcli \
              --api-base-url "${CORTEX_API_URL}" \
              --api-key "${CORTEX_API_KEY}" \
              --api-key-id "${CORTEX_API_KEY_ID}" \
              code scan \
              --directory "${BITBUCKET_CLONE_DIR}" \
              --repo-id "${BITBUCKET_REPO_FULL_NAME}" \
              --branch "${BITBUCKET_BRANCH}" \
              --source "CORTEX_CLI" \
              --create-repo-if-missing
        artifacts:
          - cortexcli

AMD64

image: ubuntu:24.04

clone:
  depth: full

pipelines:
  default:
    - step:
        name: Cortex CLI Code Scan (Hosted AMD64)
        script:
          - |
            set -euo pipefail
            apt-get update
            apt-get install -y --no-install-recommends curl jq ca-certificates tar gzip file
            curl -fsSL https://deb.nodesource.com/setup_22.x | bash -
            apt-get install -y nodejs
            node -v
            npm -v
            export CORTEXCLI_HOME="/root/.cortexcli"
            rm -rf "$CORTEXCLI_HOME"
            mkdir -p "$CORTEXCLI_HOME"
            CRTX_URL=$(curl -fsSL "${CORTEX_API_URL%/}/public_api/v1/unified-cli/releases/download-link?os=linux&architecture=amd64" \
              -H "x-xdr-auth-id: ${CORTEX_API_KEY_ID}" \
              -H "Authorization: ${CORTEX_API_KEY}" | jq -r '.signed_url')
            curl -fsSL -o cortexcli "$CRTX_URL"
            chmod +x cortexcli
            ./cortexcli --version
            ./cortexcli \
              --api-base-url "${CORTEX_API_URL}" \
              --api-key "${CORTEX_API_KEY}" \
              --api-key-id "${CORTEX_API_KEY_ID}" \
              code scan \
              --directory "${BITBUCKET_CLONE_DIR}" \
              --repo-id "${BITBUCKET_REPO_FULL_NAME}" \
              --branch "${BITBUCKET_BRANCH}" \
              --source "CORTEX_CLI" \
              --create-repo-if-missing
        artifacts:
          - cortexcli