v1.4.0

Armis CLI v1.4.0

Enterprise-grade CLI tool for static application security scanning.

Installation

Quick Install Script:

curl -sSL https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.sh | bash

Windows (PowerShell):

irm https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.ps1 | iex

Go Install:

go install github.com/ArmisSecurity/armis-cli/cmd/armis-cli@latest

Manual Download:
Download the appropriate binary for your platform below.

Verification

All binaries are signed with cosign. To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/ArmisSecurity/armis-cli/.github/workflows/release.yml@refs/tags/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature armis-cli-checksums.txt.sig \
  armis-cli-checksums.txt

Changelog

Features

• 189ce43: [PPSC-181] feat(api): implement streaming multipart uploads (#91) (@yiftach-armis)
• e237621: [PPSC-522] feat(auth): enable JWT authentication flags (#95) (@yiftach-armis)
• 87bde01: [PPSC-525] feat(cmd): add output flag and improve CI/progress (#92) (@yiftach-armis)
• eb91b0d: [PPSC-526] feat(scan): add --changed flag for scanning only git-changed files (#93) (@yiftach-armis)
• 2f5ab89: [PPSC-563] feat(auth): remove auth-endpoint flag (#98) (@yiftach-armis)

Bug Fixes

• f29f266: [PPSC-539] fix(update): display update notification consistently after commands (#94) (@yiftach-armis)

Others

• 95e7b28: [PPSC-579] docs(auth): establish JWT as primary authentication method (#99) (@yiftach-armis)
• 992dabf: [PPSC-581] docs: update CHANGELOG for v1.4.0 (#100) (@yiftach-armis)
• 5c090e9: chore(deps): bump actions/download-artifact from 7 to 8 (#89) (@dependabot[bot])
• 3830e02: chore(deps): bump actions/upload-artifact from 6 to 7 (#87) (@dependabot[bot])
• 7f923b2: chore(deps): bump anchore/sbom-action from 0.22.2 to 0.23.0 (#90) (@dependabot[bot])
• b8fc318: chore(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.0 (#88) (@dependabot[bot])

---

Full Changelog: v1.2.1...v1.4.0

For issues or questions, visit: https://github.com/ArmisSecurity/armis-cli/issues

v1.3.0

Armis CLI v1.3.0

Enterprise-grade CLI tool for static application security scanning.

Installation

Quick Install Script:

curl -sSL https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.sh | bash

Windows (PowerShell):

irm https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.ps1 | iex

Go Install:

go install github.com/ArmisSecurity/armis-cli/cmd/armis-cli@latest

Manual Download:
Download the appropriate binary for your platform below.

Verification

All binaries are signed with cosign. To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/ArmisSecurity/armis-cli/.github/workflows/release.yml@refs/tags/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature armis-cli-checksums.txt.sig \
  armis-cli-checksums.txt

Changelog

Features

• 189ce43: [PPSC-181] feat(api): implement streaming multipart uploads (#91) (@yiftach-armis)
• 87bde01: [PPSC-525] feat(cmd): add output flag and improve CI/progress (#92) (@yiftach-armis)
• eb91b0d: [PPSC-526] feat(scan): add --changed flag for scanning only git-changed files (#93) (@yiftach-armis)

Bug Fixes

• f29f266: [PPSC-539] fix(update): display update notification consistently after commands (#94) (@yiftach-armis)

Others

• 5c090e9: chore(deps): bump actions/download-artifact from 7 to 8 (#89) (@dependabot[bot])
• 3830e02: chore(deps): bump actions/upload-artifact from 6 to 7 (#87) (@dependabot[bot])
• 7f923b2: chore(deps): bump anchore/sbom-action from 0.22.2 to 0.23.0 (#90) (@dependabot[bot])
• b8fc318: chore(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.0 (#88) (@dependabot[bot])

---

Full Changelog: v1.2.1...v1.3.0

For issues or questions, visit: https://github.com/ArmisSecurity/armis-cli/issues

v1.2.1

Armis CLI v1.2.1

Enterprise-grade CLI tool for static application security scanning.

Installation

Quick Install Script:

curl -sSL https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.sh | bash

Windows (PowerShell):

irm https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.ps1 | iex

Go Install:

go install github.com/ArmisSecurity/armis-cli/cmd/armis-cli@latest

Manual Download:
Download the appropriate binary for your platform below.

Verification

All binaries are signed with cosign. To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/ArmisSecurity/armis-cli/.github/workflows/release.yml@refs/tags/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature armis-cli-checksums.txt.sig \
  armis-cli-checksums.txt

Changelog

Bug Fixes

• 1cc4e40: [PPSC-484] fix(ci): use GitHub theme-aware markdown for AppSec logo (#84) (@yiftach-armis)

Others

• 1fc6069: chore(ci): optimize CI testing workflow [PPSC-485] (#85) (@yiftach-armis)
• de00134: chore(deps): bump github.com/mattn/go-runewidth from 0.0.19 to 0.0.20 (#82) (@dependabot[bot])
• 25e066b: chore(deps): bump golang.org/x/term from 0.38.0 to 0.40.0 (#76) (@dependabot[bot])
• a789f2c: chore(deps): bump goreleaser/goreleaser-action from 6 to 7 (#83) (@dependabot[bot])

---

Full Changelog: v1.2.0...v1.2.1

For issues or questions, visit: https://github.com/ArmisSecurity/armis-cli/issues

v1.2.0

Armis CLI v1.2.0

Enterprise-grade CLI tool for static application security scanning.

Installation

Quick Install Script:

curl -sSL https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.sh | bash

Windows (PowerShell):

irm https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.ps1 | iex

Go Install:

go install github.com/ArmisSecurity/armis-cli/cmd/armis-cli@latest

Manual Download:
Download the appropriate binary for your platform below.

Verification

All binaries are signed with cosign. To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/ArmisSecurity/armis-cli/.github/workflows/release.yml@refs/tags/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature armis-cli-checksums.txt.sig \
  armis-cli-checksums.txt

Changelog

Features

• 5b2706b: [PPSC-437] feat(output): add defense-in-depth secret masking (#77) (@yiftach-armis)
• f9ce933: [PPSC-475] feat(ci): add AppSec logo to security scan results (#79) (@yiftach-armis)
• 86f73d4: feat(update): show notification after any command (@yiftach-armis)

Bug Fixes

• 4872eb3: [PPSC-466] fix(ci): support empty fail-on for informational mode (#78) (@yiftach-armis)
• 27f674e: fix(ci): align golangci-lint version in release workflow (@yiftach-armis)

Others

• 489ebf6: [PPSC-474] feat(scan/image): smart local image detection (#80) (@yiftach-armis)

---

Full Changelog: v1.1.0...v1.2.0

For issues or questions, visit: https://github.com/ArmisSecurity/armis-cli/issues

v1.1.0

Armis CLI v1.1.0

Enterprise-grade CLI tool for static application security scanning.

Installation

Quick Install Script:

curl -sSL https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.sh | bash

Windows (PowerShell):

irm https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.ps1 | iex

Go Install:

go install github.com/ArmisSecurity/armis-cli/cmd/armis-cli@latest

Manual Download:
Download the appropriate binary for your platform below.

Verification

All binaries are signed with cosign. To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/ArmisSecurity/armis-cli/.github/workflows/release.yml@refs/tags/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature armis-cli-checksums.txt.sig \
  armis-cli-checksums.txt

Changelog

Features

• 2c4ec8b: [PPSC-272] feat(auth): add JWT/VIPR token authentication support (#55) (@yiftach-armis)
• 61138e6: [PPSC-349] feat(output): add --summary-top flag for summary positioning (#67) (@yiftach-armis)
• 58c2d99: [PPSC-402] feat(cli): improve CLI usability with color support and update checks (#69) (@yiftach-armis)
• 068e836: [PPSC-418] feat(output): redesign CLI with enhanced diff handling and color support (#70) (@yiftach-armis)

Bug Fixes

• 8f04334: [PPSC-420] fix(security): mask secrets and fix user-facing bugs for 1.1.0 (#72) (@yiftach-armis)
• 205bfe4: [PPSC-424] fix(output): skip syntax highlighting for redacted code snippets (#75) (@yiftach-armis)
• 68feaa1: fix(ci): pin Go version to 1.24 in release workflow (@yiftach-armis)
• 7063abf: fix(security): address findings from security scan (#71) (@yiftach-armis)

Others

• 6be1411: [PPSC-422] chore(release): remove JWT from release documentation (#73) (@yiftach-armis)
• 515808c: [PPSC-423] test(output): add SARIF schema validation and coverage measurement (#74) (@yiftach-armis)
• d32f7fb: chore(deps): bump anchore/sbom-action from 0.22.1 to 0.22.2 (#68) (@dependabot[bot])
• 7924f58: chore(release): prepare CHANGELOG for v1.1.0 (@yiftach-armis)

---

Full Changelog: v1.0.7...v1.1.0

For issues or questions, visit: https://github.com/ArmisSecurity/armis-cli/issues

v1.0.7

Armis CLI v1.0.7

Enterprise-grade CLI tool for static application security scanning.

Installation

Quick Install Script:

curl -sSL https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.sh | bash

Windows (PowerShell):

irm https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.ps1 | iex

Go Install:

go install github.com/ArmisSecurity/armis-cli/cmd/armis-cli@latest

Manual Download:
Download the appropriate binary for your platform below.

Verification

All binaries are signed with cosign. To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/ArmisSecurity/armis-cli/.github/workflows/release.yml@refs/tags/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature armis-cli-checksums.txt.sig \
  armis-cli-checksums.txt

Changelog

Others

• 08b836a: [PPSC-335] feat(output,sarif): add standard fixes and improve progress output (#63) (@yiftach-armis)
• c4cbf15: chore(deps): bump actions/checkout from 4 to 6 (#49) (@dependabot[bot])
• 2c4d69c: chore(deps): bump anchore/sbom-action from 0.21.1 to 0.22.1 (#64) (@dependabot[bot])
• dccc2ec: chore(deps): bump tj-actions/changed-files from 46 to 47 (#50) (@dependabot[bot])

---

Full Changelog: v1.0.6...v1.0.7

For issues or questions, visit: https://github.com/ArmisSecurity/armis-cli/issues

v1.0.6

Armis CLI v1.0.6

Enterprise-grade CLI tool for static application security scanning.

Installation

Quick Install Script:

curl -sSL https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.sh | bash

Windows (PowerShell):

irm https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.ps1 | iex

Go Install:

go install github.com/ArmisSecurity/armis-cli/cmd/armis-cli@latest

Manual Download:
Download the appropriate binary for your platform below.

Verification

All binaries are signed with cosign. To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/ArmisSecurity/armis-cli/.github/workflows/release.yml@refs/tags/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature armis-cli-checksums.txt.sig \
  armis-cli-checksums.txt

Changelog

Features

• f046bc1: [PPSC-315] feat(scan): add sbom and vex document generation (#56) (@yiftach-armis)
• 658caa5: [PPSC-323] feat(output): add hybrid scan summary with brief status at top (#57) (@yiftach-armis)
• bfff936: [PPSC-331] feat(findings): add proposed fix support with AI validation (#60) (@yiftach-armis)

Bug Fixes

• ec8f3ec: fix: add missing permissions to security-scan workflow (#48) (@yiftach-armis)

Others

• cc35187: Use published armis-cli action in reusable workflow (#51) (@yiftach-armis)
• 46dba34: [PPSC-268] docs: add comprehensive CI integration guide (#52) (@yiftach-armis)
• 5a2938a: [PPSC-280] docs: add oss best practices and developer tooling (#53) (@yiftach-armis)
• f7d2a67: [PPSC-324] test: increase test coverage to 81.1% (#59) (@yiftach-armis)
• 85f3f3f: [PPSC-325] docs: add theme-aware logo support (#58) (@yiftach-armis)
• 9254d4b: [PPSC-332] fix(scan,output): fix workflow condition and avoid duplicated titles (#61) (@yiftach-armis)
• c554439: [PPSC-333] chore: prepare v1.0.6 release (#62) (@yiftach-armis)

---

Full Changelog: v1.0.5...v1.0.6

For issues or questions, visit: https://github.com/ArmisSecurity/armis-cli/issues

v1.0.5

Armis CLI v1.0.5

Enterprise-grade CLI tool for static application security scanning.

Installation

Quick Install Script:

curl -sSL https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.sh | bash

Windows (PowerShell):

irm https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.ps1 | iex

Go Install:

go install github.com/ArmisSecurity/armis-cli/cmd/armis-cli@latest

Manual Download:
Download the appropriate binary for your platform below.

Verification

All binaries are signed with cosign. To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/ArmisSecurity/armis-cli/.github/workflows/release.yml@refs/tags/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature armis-cli-checksums.txt.sig \
  armis-cli-checksums.txt

Changelog

Features

• cda36b8: feat: add --include-files flag for targeted file scanning (#46) (@yiftach-armis)

Bug Fixes

• 8c295d1: fix: address security vulnerabilities across credential, path, and command handling (#47) (@yiftach-armis)
• d97cd56: fix: increase default scan timeout to 1 hour (#43) (@yiftach-armis)
• 55d891a: fix: preserve severity levels in GitHub Code Scanning (#45) (@yiftach-armis)

---

Full Changelog: v1.0.4...v1.0.5

For issues or questions, visit: https://github.com/ArmisSecurity/armis-cli/issues

v1.0.4

Armis CLI v1.0.4

Enterprise-grade CLI tool for static application security scanning.

Installation

Quick Install Script:

curl -sSL https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.sh | bash

Windows (PowerShell):

irm https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.ps1 | iex

Go Install:

go install github.com/ArmisSecurity/armis-cli/cmd/armis-cli@latest

Manual Download:
Download the appropriate binary for your platform below.

Verification

All binaries are signed with cosign. To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/ArmisSecurity/armis-cli/.github/workflows/release.yml@refs/tags/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature armis-cli-checksums.txt.sig \
  armis-cli-checksums.txt

Changelog

Bug Fixes

• d4edbf1: fix: address security vulnerabilities in CLI and workflows (#41) (@yiftach-armis)
• 3380df4: fix: handle empty fail-on argument in GitHub Action (#42) (@yiftach-armis)
• ce4131b: fix: improve security scan failure handling with better error messages (#40) (@yiftach-armis)

Others

• 47bf770: Fix finding type mapping: CODE_VULNERABILITY now correctly maps to VULNERABILITY type (@YoavNathaniel-Silk)

---

Full Changelog: v1.0.3...v1.0.4

For issues or questions, visit: https://github.com/ArmisSecurity/armis-cli/issues

v1.0.3

Armis CLI v1.0.3

Enterprise-grade CLI tool for static application security scanning.

Installation

Quick Install Script:

curl -sSL https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.sh | bash

Windows (PowerShell):

irm https://raw.githubusercontent.com/ArmisSecurity/armis-cli/main/scripts/install.ps1 | iex

Go Install:

go install github.com/ArmisSecurity/armis-cli/cmd/armis-cli@latest

Manual Download:
Download the appropriate binary for your platform below.

Verification

All binaries are signed with cosign. To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/ArmisSecurity/armis-cli/.github/workflows/release.yml@refs/tags/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature armis-cli-checksums.txt.sig \
  armis-cli-checksums.txt

Changelog

Features

• 8fbc89f: feat: add reusable workflow for security scanning (@yiftach-armis)

Bug Fixes

• a18baca: fix: ensure stdout is flushed before exit in scan commands (#37) (@yiftach-armis)
• 46410a1: fix: exact filename match in checksum verification (@YoavNathaniel-Silk)
• c1b3085: fix: implement disableColors and add git blame debug logging (@yiftach-armis)
• d2a469a: fix: preserve request body during HTTP client retries (@yiftach-armis)
• 79da5a2: fix: redirect output to stderr for proper stream separation (#39) (@yiftach-armis)
• 36347b0: fix: redirect spinner output in tests to prevent false failures (@yiftach-armis)
• 175a86e: fix: resolve data race in spinner message field (@yiftach-armis)
• 9bbebb4: fix: use correct flag for version command in action.yml (#38) (@yiftach-armis)

Others

• b7e36e3: Add documentation for installation improvements (@YoavNathaniel-Silk)
• 0881312: Add edge case tests for symlink handling (@yiftach-armis)
• 03449a7: Add explicit symlink handling in tarball creation (@yiftach-armis)
• e4be2c9: Add graceful shutdown support with signal context handling (#35) (@yiftach-armis)
• c97a7ea: Add symlink skip to calculateDirSize for consistency (@yiftach-armis)
• 4be7ebd: Address Copilot code review comments (@yiftach-armis)
• 93794af: Address additional Copilot code review comments (@yiftach-armis)
• d66ea04: Address code review feedback on security fixes (@yiftach-armis)
• 968f43a: Address remaining Copilot code review comments (@yiftach-armis)
• ea7bed3: Auto-add install directory to PATH if missing (@YoavNathaniel-Silk)
• 02f4d1c: Auto-restart shell after PATH update in install script (@YoavNathaniel-Silk)
• 94651a0: Fix macOS installation checksum verification (@YoavNathaniel-Silk)
• fc42dc0: Fix race conditions in spinner with startTime and cancel fields (@yiftach-armis)
• 1c75e22: Fix security vulnerabilities from Armis scan (@yiftach-armis)
• cc5e1f4: Fix spinner flickering during CLI scan operations (@yiftach-armis)
• ddfd6c9: Improve install script: prioritize PATH directories, add smart detection, remove shell restart (@YoavNathaniel-Silk)
• 35b62ad: Improve installation experience and troubleshooting (@YoavNathaniel-Silk)
• 4ec05f1: Merge pull request #16 from ArmisSecurity/dependabot/github_actions/anchore/sbom-action-0.20.11 (@yiftach-armis)
• bcb3dad: Merge pull request #21 from ArmisSecurity/docs/add-claude-md (@yiftach-armis)
• e54ff8d: Merge pull request #22 from ArmisSecurity/ci/improve-coverage-comment (@yiftach-armis)
• 126b0e9: Merge pull request #23 from ArmisSecurity/fix/disable-colors-and-git-blame-debug (@yiftach-armis)
• 2cda7e9: Merge pull request #24 from ArmisSecurity/test/scan-coverage (@yiftach-armis)
• 27c2f7a: Merge pull request #25 from ArmisSecurity/fix/spinner-data-race (@yiftach-armis)
• 5fd099e: Merge pull request #26 from ArmisSecurity/fix/httpclient-retry-body (@yiftach-armis)
• 5040971: Merge pull request #27 from ArmisSecurity/fix/fix-prod-api-url (@yiftach-armis)
• 6701446: Merge pull request #28 from ArmisSecurity/fix/cli-findings (@yiftach-armis)
• df3005a: Merge pull request #29 from ArmisSecurity/feature/reusable-workflow (@yiftach-armis)
• 3dc541e: Merge pull request #30 from ArmisSecurity/dependabot/github_actions/anchore/sbom-action-0.21.1 (@yiftach-armis)
• fd8bf83: Merge pull request #31 from ArmisSecurity/dependabot/github_actions/actions/checkout-6 (@yiftach-armis)
• 7b938bb: Merge pull request #32 from ArmisSecurity/dependabot/github_actions/actions/github-script-8 (@yiftach-armis)
• 91a33ad: Merge pull request #33 from ArmisSecurity/dependabot/github_actions/actions/upload-artifact-6 (@yiftach-armis)
• 4333644: Merge pull request #34 from ArmisSecurity/dependabot/github_actions/github/codeql-action-4 (@yiftach-armis)
• c0875b4: Merge pull request #36 from ArmisSecurity/ci/check-checkout-update (@yiftach-armis)
• 2b0a0f2: Pin version (@yiftach-armis)
• 29af8ee: Remove unreachable baseURL validation checks (@yiftach-armis)
• d056127: chore(deps): bump actions/checkout from 4 to 6 (@dependabot[bot])
• 1ac0c64: chore(deps): bump actions/github-script from 7 to 8 (@dependabot[bot])
• e434fff: chore(deps): bump actions/upload-artifact from 4 to 6 (@dependabot[bot])
• 26e13c5: chore(deps): bump anchore/sbom-action from 0.17.7 to 0.20.11 (@dependabot[bot])
• 7fafc8c: chore(deps): bump anchore/sbom-action from 0.21.0 to 0.21.1 (@dependabot[bot])
• b10d1bd: chore(deps): bump github/codeql-action from 3 to 4 (@dependabot[bot])

---

Full Changelog: v1.0.2...v1.0.3

For issues or questions, visit: https://github.com/ArmisSecurity/armis-cli/issues