Cortex CLI API Security command line reference guide

Reference commands and flags for Cortex CLI API Security scans.

This reference guide describes the dedicated API Security commands and flags, including the structure of base commands and subcommands. Refer to Cortex CLI common command line reference guide for Cortex CLI commands common to all supported modules.

Value	Description
--scanned-app-url (string)	Base URL of the app to scan (required)
--api-spec-file (string)	Path to the API specification file (required)
--api-spec-type (string)	Type of the API specification ('openapi) (default "openapi")
--auth-file (string)	Path to the authentication file (optional). For more information on authentication, refer to Cortex CLI for API Security
--concurrency (int)	Concurrency limit for scan requests (default 5)
--java-location (string)	Path to the Java (version >= 11) binary file (default: Java)
--no-publish (boolean)	Avoid publish results to Cortex
--output-file (string)	Output path for the report file (optional)
--timeout (int)	Scan timeout in seconds (default 300)
--zap-port (int)	Listening port to be used by ZAP (default 35391)