Tekton Integration Guide

Integrate Vulnetix CLI into Tekton pipelines for cloud-native vulnerability scanning.

Add Vulnetix to Tekton

Create vulnetix-task.yaml and run the Vulnetix CLI in your Tekton pipeline. It collects SARIF, CycloneDX and SPDX artifacts automatically and uploads them for centralised vulnerability management:

apiVersion: tekton.dev/v1beta1
kind: Task
metadata:
  name: vulnetix-scan
spec:
  steps:
  - name: scan
    image: golang:1.21
    env:
    - name: VULNETIX_ORG_ID
      valueFrom:
        secretKeyRef:
          name: vulnetix-secrets
          key: org-id
    script: |
      go install github.com/vulnetix/cli/v3@latest
      vulnetix auth verify
      vulnetix scan --severity high

Why run Vulnetix in Tekton?

Every scan from every job lands in one queue, deduplicated and prioritised with EPSS, CISA KEV and Coalition ESS exploit intelligence, so your Tekton pipeline gates merges on what is actually exploitable, not raw scanner noise.

All CI/CD integrations →  ·  All scanner integrations →