Command-Line Interface

Security Scanning For Your Pipeline.

Integrate VEXLIT into any CI/CD workflow with a single command. Scan locally, in GitHub Actions, GitLab CI, or any pipeline - with SARIF output for automated reporting.

Install CLI View Documentation

$npm install -g @vexlit/cli

Key Features

One Command, Full Scan

Run 'vexlit scan .' to analyze your entire project. Results include severity, CWE, OWASP mapping, and suggested fixes for every finding.

SARIF Export

Generate SARIF reports that integrate directly with GitHub's Security tab. Every PR gets automatic security annotations.

Git Diff Scanning

Scan only changed files with 'vexlit scan --diff'. Perfect for pre-commit hooks and PR checks - fast feedback on what matters.

Exit Codes for CI/CD

Non-zero exit codes when vulnerabilities are found. Configure severity thresholds to fail builds only on critical or high-severity issues.

JSON & Table Output

Human-readable table output for terminals, JSON for programmatic consumption. Pipe results into any downstream tool.

Offline & Private

All scanning happens locally. Your code never leaves your machine - no cloud uploads, no telemetry, no data collection.

Usage Examples

# Scan current directory

vexlit scan .

# Scan with SARIF output

vexlit scan . --format sarif -o results.sarif

# Scan only changed files

vexlit scan --diff

# Fail on critical/high severity

vexlit scan . --fail-on high

CI/CD Ecosystem

Works with any CI/CD platform. Add a single command to your pipeline - VEXLIT handles the rest.

GitHub Actions

GitLab CI

Jenkins

Bitbucket

Ready to secure your code?

Start scanning in seconds - no credit card, no setup, just results.

Install CLI Try Live Demo