Argo Workflows Integration Guide

Run Vulnetix CLI as Argo Workflow steps for Kubernetes-native vulnerability scanning.

Add Vulnetix to Argo Workflows

Create vulnetix-workflow.yaml and run the Vulnetix CLI in your Argo Workflows pipeline. It collects SARIF, CycloneDX and SPDX artifacts automatically and uploads them for centralised vulnerability management:

apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata:
  name: vulnetix-scan
spec:
  entrypoint: scan
  templates:
  - name: scan
    container:
      image: golang:1.21
      command: [bash, -c]
      args:
      - |
        go install github.com/vulnetix/cli/v3@latest
        vulnetix auth verify
        vulnetix scan --severity high
      env:
      - name: VULNETIX_ORG_ID
        valueFrom:
          secretKeyRef:
            name: vulnetix-secrets
            key: org-id

Why run Vulnetix in Argo Workflows?

Every scan from every job lands in one queue, deduplicated and prioritised with EPSS, CISA KEV and Coalition ESS exploit intelligence, so your Argo Workflows pipeline gates merges on what is actually exploitable, not raw scanner noise.

All CI/CD integrations →  ·  All scanner integrations →