Sending Packages to Cortex
Packages are automatically scraped from your Git repos when using a supported Git integration, or they can be submitted via the API. If using a Git integration to submit packages, the package file must be in the root of your repository to be scraped by Cortex.
Supported Package Types
- Javascript:
package.json,package-lock.json,yarn.lockor via the API - Python:
requirements.txt,pipfile.lockor via the API - Java:
pom.xmlof via the API - .NET (C#):
packages.lock.json- Nuget
csprojfiles must be uploaded via the API
- Nuget
- Go:
go.sumfiles or via the API
Note: If you are uploading packages via the API, for each entity and package type, only one package file is supported at a time. When you upload a new file for the same entity, Cortex fully overwrites the existing package data for that package type
Packages in the Cortex UI
Packages can be located in the Cortex UI in your entity's Integrations tab:
Package CQL Rules can be used to determine package version in scorecards: packageVersion(packageName: Text): Semver | Null