Vulnetix
Try Vulnetix Request Demo
CI/CD integration

Forgejo Actions Integration Guide

Security scanning in Forgejo Actions

Get a Free API Key

Integrate Vulnetix CLI into Forgejo Actions workflows for vulnerability scanning.

Add Vulnetix to Forgejo Actions

Create .forgejo/workflows/vulnetix.yml and run the Vulnetix CLI in your Forgejo Actions pipeline. It collects SARIF, CycloneDX and SPDX artifacts automatically and uploads them for centralised vulnerability management:

name: Vulnetix
on: [push, pull_request]
jobs:
  vulnetix:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - run: |
        curl -fsSL https://cli.vulnetix.com/install.sh | sh
        export PATH=$PATH:$HOME/.local/bin
        vulnetix auth verify
        vulnetix scan --severity high
      env:
        VULNETIX_ORG_ID: ${{ secrets.VULNETIX_ORG_ID }}

Why run Vulnetix in Forgejo Actions?

Every scan from every job lands in one queue, deduplicated and prioritised with EPSS, CISA KEV and Coalition ESS exploit intelligence, so your Forgejo Actions pipeline gates merges on what is actually exploitable, not raw scanner noise.

All CI/CD integrations →  ·  All scanner integrations →