Cysmiq CLI

cysmiq version

base-url: https://app.cysmiq.com
tenant: my-workspace
# token: set via CYSMIQ_TOKEN for security

repo: my-org/my-repo
ref: main
poll-interval: 5s
wait-timeout: 15m

cysmiq tenants list

cysmiq repos list --tenant my-workspace

cysmiq applications list --tenant my-workspace

cysmiq check --repo my-org/my-repo --ref main

cysmiq check --repo my-org/my-repo --ref main --fail-on critical

cysmiq check --repo my-org/my-repo --sha abc123def456

cysmiq check --application app_01hxyz

cysmiq check --repo my-org/my-repo --sha abc123def456 --poll-interval 10s --wait-timeout 5m

cysmiq check --repo my-org/my-repo --ref main --max-count 10

cysmiq check --repo my-org/my-repo --ref main --output json

cysmiq vulns list --repo my-org/my-repo

cysmiq vulns list --repo my-org/my-repo --severity critical --all

cysmiq vulns list --application app_01hxyz --output table

cysmiq vulns list --repo my-org/my-repo --assignee me

cysmiq vulns list --repo my-org/my-repo --output json > vulns.json

cysmiq vulns list --repo my-org/my-repo --json id,title,severity,state,assignee

cysmiq vulns get VULN-123

cysmiq vulns get VULN-123 --json id,title,severity,state,status_version

cysmiq vulns get VULN-123 --include locations,advisory

cysmiq vulns locations VULN-123

cysmiq vulns locations VULN-123 --scope live --output table

cysmiq vulns assign VULN-123 --to me

cysmiq vulns unassign VULN-123

cysmiq vulns triage VULN-123 --state accepted --reason "Mitigated upstream"

cysmiq vulns summary --repo my-org/my-repo

cysmiq vulns summary --application app_01hxyz

cysmiq version

cysmiq update

cysmiq update --check

cysmiq skills list

cysmiq skills install --agent codex --scope project

cysmiq skills install --all-agents --scope project

cysmiq skills status

cysmiq skills doctor

cysmiq skills update

cysmiq skills remove --agent codex --scope project

name: Security Check

on: [push, pull_request]

jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install Cysmiq CLI
        run: |
          curl -fsSL https://github.com/cysmiq/cli-releases/releases/latest/download/cysmiq_linux_amd64.tar.gz | tar -xz
          sudo mv cysmiq /usr/local/bin/

      - name: Run security check
        env:
          CYSMIQ_BASE_URL: https://app.cysmiq.com
          CYSMIQ_TENANT: ${{ vars.CYSMIQ_TENANT }}
          CYSMIQ_TOKEN: ${{ secrets.CYSMIQ_TOKEN }}
          CYSMIQ_REPO: ${{ github.repository }}
          CYSMIQ_SHA: ${{ github.sha }}
        run: cysmiq check

security-check:
  image: alpine:latest
  before_script:
    - apk add --no-cache curl
    - curl -fsSL https://github.com/cysmiq/cli-releases/releases/latest/download/cysmiq_linux_amd64.tar.gz | tar -xz
    - mv cysmiq /usr/local/bin/
  script:
    - cysmiq check
  variables:
    CYSMIQ_BASE_URL: https://app.cysmiq.com
    CYSMIQ_TENANT: $CYSMIQ_TENANT
    CYSMIQ_TOKEN: $CYSMIQ_TOKEN
    CYSMIQ_REPO: $CI_PROJECT_PATH
    CYSMIQ_SHA: $CI_COMMIT_SHA

version: 2.1

jobs:
  security-check:
    docker:
      - image: cimg/base:current
    steps:
      - checkout
      - run:
          name: Install Cysmiq CLI
          command: |
            curl -fsSL https://github.com/cysmiq/cli-releases/releases/latest/download/cysmiq_linux_amd64.tar.gz | tar -xz
            sudo mv cysmiq /usr/local/bin/
      - run:
          name: Run security check
          command: cysmiq check --repo "$CIRCLE_PROJECT_USERNAME/$CIRCLE_PROJECT_REPONAME" --sha "$CIRCLE_SHA1"
          environment:
            CYSMIQ_BASE_URL: https://app.cysmiq.com

workflows:
  main:
    jobs:
      - security-check:
          context: cysmiq