Integrate Vulnetix CLI into Spacelift for infrastructure security scanning.
Add Vulnetix to Spacelift
Create .spacelift/vulnetix.sh and run the Vulnetix CLI in your Spacelift pipeline. It collects SARIF, CycloneDX and SPDX artifacts automatically and uploads them for centralised vulnerability management:
#!/bin/bash # Spacelift before_init hook curl -fsSL https://cli.vulnetix.com/install.sh | sh export PATH=$PATH:$HOME/.local/bin vulnetix auth verify vulnetix scan --severity high
Why run Vulnetix in Spacelift?
Every scan from every job lands in one queue, deduplicated and prioritised with EPSS, CISA KEV and Coalition ESS exploit intelligence, so your Spacelift pipeline gates merges on what is actually exploitable, not raw scanner noise.