Tool integration

Phylum Integration Guide

Package origin and malware detection platform protecting against supply chain attacks

Get a Free API Key

Integrate Phylum with Vulnetix. Use the Phylum CLI and REST API to analyse dependencies for malware, suspicious behaviour, and supply chain risks, then export findings to Vulnetix.

SaaS platformJSON

Run Phylum in CI

Scan on every push and upload the results to Vulnetix:

- name: Phylum analysis
  uses: phylum-dev/phylum-analyze-pr-action@main
  with:
    phylum_token: ${{ secrets.PHYLUM_TOKEN }}
    lockfiles: 'package-lock.json'

- name: Export findings
  run: phylum analyze package-lock.json --format json > phylum-analysis.json

- name: Upload to Vulnetix
  run: vulnetix upload --file phylum-analysis.json

Centralise Phylum results in Vulnetix

Upload Phylum JSON output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

Phylum documentation ↗

Wire Phylum into your CI/CD pipeline →