Application Security Cortex CLI

The Cortex CLI Application Security (AppSec) module is part of the broader Cortex CLI, a unified command-line tool that integrates Application Security (Code Security), Cloud Workload Protection (CWP), and API Security into a single executable. The AppSec module enables you to embed code security checks directly into your local application development workflows and automated pipelines.

Key capabilities

• Unified code scanning: Analyzes local directories to detect Infrastructure-as-Code (IaC) misconfigurations, Software Composition Analysis (SCA) issues (including CVE vulnerabilities, license miscompliance, and package operational risks), and exposed secrets
• Shift-left integration: Enforces security guardrails early in the development lifecycle using Git pre-commit and pre-receive hooks
• CI/CD automation: Serves as a wrapper to dynamically block risky deployments in CI/CD pipelines like Jenkins, GitHub Actions, AWS CodeBuild, and CircleCI
• Flexible upload modes: Test code locally without uploading results (no-upload), upload findings without the source code (no-code), or push everything directly to your Cortex tenant for policy evaluation (upload)

For detailed information about the Cortex Cloud CLI, refer to Cortex CLI.