Tool integration

ktlint Integration Guide

Anti-bikeshedding Kotlin linter with native SARIF output

Get a Free API Key

Integrate ktlint with Vulnetix. Lint Kotlin code for style violations and formatting issues, then upload SARIF results for centralised tracking.

KotlinCLI toolSARIF

Install & scan

$ # Download the latest standalone binary
curl -sSLO https://github.com/pinterest/ktlint/releases/latest/download/ktlint
chmod +x ktlint && sudo mv ktlint /usr/local/bin/

# Or via Homebrew on macOS
brew install ktlint
$ ktlint --reporter=sarif,output=ktlint.sarif "src/**/*.kt" "**/*.kts"

Run ktlint in CI

Scan on every push and upload the results to Vulnetix:

- name: Download ktlint
  run: |
    curl -sSLO https://github.com/pinterest/ktlint/releases/latest/download/ktlint
    chmod +x ktlint && sudo mv ktlint /usr/local/bin/

- name: Run ktlint
  run: ktlint --reporter=sarif,output=ktlint.sarif

- name: Upload to Vulnetix
  run: vulnetix upload --file ktlint.sarif

Centralise ktlint results in Vulnetix

Upload ktlint SARIF output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

ktlint documentation ↗  ·  Source repository ↗

Wire ktlint into your CI/CD pipeline →