DevSkim Integration Guide

Integrate DevSkim with Vulnetix. Scan code for security anti-patterns across multiple languages. SARIF is the default output format.

Install & scan

$ dotnet tool install --global Microsoft.CST.DevSkim.CLI
$ devskim analyze -I /path/to/source -O devskim.sarif

Run DevSkim in CI

Scan on every push and upload the results to Vulnetix:

- name: Install DevSkim
  run: dotnet tool install --global Microsoft.CST.DevSkim.CLI
- name: Run DevSkim
  run: devskim analyze -I . -O devskim.sarif
- name: Upload to Vulnetix
  run: vulnetix upload --file devskim.sarif

Centralise DevSkim results in Vulnetix

Upload DevSkim SARIF output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

DevSkim documentation ↗  ·  Source repository ↗

Wire DevSkim into your CI/CD pipeline →