> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/reference-and-developer-docs/cortex-cli/cortex-cli-for-code-security/cortex-cli-usage-for-application-security.md). # Cortex CLI usage for Cortex Cloud Application Security ## Run Cortex Cloud Application Security scans To scan Cortex Cloud Application Security, run: ```programlisting cortexcli –-api-base-url --api-key --api-key-id code scan --directory {{DIRECTORY}} --branch main --repo-id organization/repo-name –output json --output-file-path ./output.json ``` ## Command line structure The command structure includes global flags which are used for authentication, and then specifies the module name and command specific to Cortex Cloud Application Security which are followed by dedicated flags unique to this module as well as flags common to all modules. * **Global flags**: These flags are part of the initial `cortexcli` command and are necessary to authenticate and connect to Cortex Cloud * `--api-base-url`: (Required = true). The public facing API URL. Refer to [Connect Cortex CLI](/cortex-xsiam/reference-and-developer-docs/cortex-cli/connect-cortex-cli.md) for more information * `--api-key`: (Required = true). The Cortex Cloud API key generated when onboarding the CLI as a data source. Refer to [Connect Cortex CLI](/cortex-xsiam/reference-and-developer-docs/cortex-cli/connect-cortex-cli.md) for more information * `--api-key-id`: (Required = true). The Cortex Cloud API key ID generated when onboarding the CLI as a data source For a comprehensive list of Cortex Cloud Application Security global flags, refer to [Cortex CLI Cortex Cloud Application Security command line reference](/cortex-xsiam/reference-and-developer-docs/cortex-cli/cortex-cli-for-code-security/cortex-cli-application-security-command-line-reference.md) * **Cortex Cloud Application Security specifics**: Following the global flags, the command specifies the module and the commands required for initiating a scan using the Cortex Cloud Application Security module: * `code scan`: Required - true. This command instructs the CLI to perform an Cortex Cloud Application Security scan. * For the optional flags, refer to the dedicated Cortex Cloud Application Security [command line reference](/cortex-xsiam/reference-and-developer-docs/cortex-cli/cortex-cli-for-code-security/cortex-cli-application-security-command-line-reference.md) ## CLI usage examples * **Send output to a file**: Direct the command's output to a specified file instead of displaying it in the console ```programlisting ./cortexcli --api-base-url --api-key --api-key-id code scan --branch --repo-id --directory --output json --output-file-path ``` * **Perform a scan without upload**: Run a scan for local analysis or testing without uploading the results to Cortex Cloud. This command runs a code scan and saves all standard output (human-readable format) to `scan_results.txt` ```programlisting ./cortexcli --api-base-url --api-key --api-key-id code scan --upload-mode no-upload --branch --repo-id --directory ``` #### Sample outputs The `cortexcli` provides different options for how scan results are presented. * **Standard output** (stdout): When no specific output format flags (such as `--output json` or `--output sarif)` are provided, the Cortex CLI will produce standard output directly to your terminal or console * **JSON output**: To obtain the output of a scan command as a JSON file, specify the flags `--output json --output-file-path ./output.json`. This command will save the detailed scan results in JSON format to output.json in the current directory. ## Supported flags The Cortex Cloud Application Security CLI supports both common Cortex CLI and dedicated Cortex Cloud Application Security flags. * For dedicated Cortex Cloud Application Security flags, refer to [Cortex CLI Cortex Cloud Application Security command line reference](/cortex-xsiam/reference-and-developer-docs/cortex-cli/cortex-cli-for-code-security/cortex-cli-application-security-command-line-reference.md) * For common flags, refer to [Cortex CLI common command line reference guide](/cortex-xsiam/reference-and-developer-docs/cortex-cli/cortex-cli-common-command-line-reference-guide.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/reference-and-developer-docs/cortex-cli/cortex-cli-for-code-security/cortex-cli-usage-for-application-security.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.