Cortex CLI

The Cortex CLI (cortexcli) runs Cortex Cloud security scans wherever you build code. Use it on developer workstations, Git hooks, and CI/CD platforms.

Supported modules

• Code Security: Scan for IaC misconfigurations, SCA vulnerabilities, secrets, and license issues. Generate SBOMs
• Cloud Workload Protection: Scan container images for vulnerabilities, malware, and secrets
• API Security: Scan API endpoints for security risks

Integrate security into delivery workflows

The CLI evaluates findings against your Unified Application Security Policies. Output and exit-code options vary by module.

• Code Security supports JSON, SARIF, CycloneDX, SPDX, and JUnit XML output
• Cloud Workload Protection scans support human-readable and JSON output. Its SBOM exports support JSON and XML
• API Security supports its own scan options. Review its module reference before configuring output or automation

Use each module's supported results to enforce CI/CD security gates.

Get started

Find installation methods and integration options in the Cortex CLI documentation.