Semaphore CI Integration Guide

Integrate Vulnetix CLI into Semaphore CI pipelines for automated vulnerability scanning.

Add Vulnetix to Semaphore CI

Create .semaphore/semaphore.yml and run the Vulnetix CLI in your Semaphore CI pipeline. It collects SARIF, CycloneDX and SPDX artifacts automatically and uploads them for centralised vulnerability management:

version: v1.0
name: Vulnetix Security
agent:
  machine:
    type: e1-standard-2
    os_image: ubuntu2004
blocks:
  - name: Security Scan
    task:
      secrets:
        - name: vulnetix
      jobs:
        - name: Vulnetix
          commands:
            - curl -fsSL https://cli.vulnetix.com/install.sh | sh
            - export PATH=$PATH:$HOME/.local/bin
            - vulnetix auth verify
            - vulnetix scan --severity high

Why run Vulnetix in Semaphore CI?

Every scan from every job lands in one queue, deduplicated and prioritised with EPSS, CISA KEV and Coalition ESS exploit intelligence, so your Semaphore CI pipeline gates merges on what is actually exploitable, not raw scanner noise.

All CI/CD integrations →  ·  All scanner integrations →