Tool integration

BinSkim Integration Guide

Microsoft binary security analyzer

Get a Free API Key

Integrate BinSkim with Vulnetix. Analyze compiled binaries for security issues. SARIF is the default output format.

Windows PE, ELF, Mach-O binariesCLI toolSARIF

Install & scan

$ dotnet tool install --global Microsoft.CodeAnalysis.BinSkim
$ binskim analyze myapp.exe --output binskim.sarif

Run BinSkim in CI

Scan on every push and upload the results to Vulnetix:

- name: Install BinSkim
  run: dotnet tool install --global Microsoft.CodeAnalysis.BinSkim
- name: Run BinSkim
  run: binskim analyze "build/**/*.dll" --output binskim.sarif
- name: Upload to Vulnetix
  run: vulnetix upload --file binskim.sarif

Centralise BinSkim results in Vulnetix

Upload BinSkim SARIF output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

BinSkim documentation ↗  ·  Source repository ↗

Wire BinSkim into your CI/CD pipeline →