Skip to main content

CLI Integrations

Learn how to integrate Pentora CLI with automation tools, CI/CD pipelines, and scripting environments.

Cron Scheduling​

Schedule periodic scans using cron:

# /etc/cron.d/pentora-scan
0 2 * * * pentora-user /usr/local/bin/pentora scan --targets /etc/pentora/targets.txt --quiet

CI/CD Pipeline​

GitLab CI​

# .gitlab-ci.yml
security-scan:
  stage: test
  image: pentora/pentora:latest
  script:
    - pentora scan --targets $CI_ENVIRONMENT_URL --output report.json
  artifacts:
    reports:
      pentora: report.json

GitHub Actions​

# .github/workflows/security-scan.yml
name: Security Scan
on: [push, pull_request]

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Run Pentora scan
        uses: pentora/pentora-action@v1
        with:
          targets: ${{ secrets.SCAN_TARGETS }}
          profile: standard

Jenkins​

// Jenkinsfile
pipeline {
    agent any
    stages {
        stage('Security Scan') {
            steps {
                sh 'pentora scan --targets ${TARGET_NETWORK} --output report.json'
                archiveArtifacts artifacts: 'report.json'
            }
        }
    }
}

Ansible Playbook​

- name: Run Pentora scan
  command: >
    pentora scan
    --targets {{ target_network }}
    --profile standard
    --output /tmp/scan-results.json
  register: scan_result

- name: Parse scan results
  set_fact:
    vulnerabilities: "{{ lookup('file', '/tmp/scan-results.json') | from_json }}"

Python Script​

import subprocess
import json

result = subprocess.run(
    ['pentora', 'scan', '--targets', '192.168.1.100', '--output', 'json'],
    capture_output=True,
    text=True
)

if result.returncode == 0:
    scan_data = json.loads(result.stdout)
    print(f"Found {len(scan_data['results'])} hosts")
else:
    print(f"Scan failed: {result.stderr}")

Bash Script​

#!/bin/bash

# Run scan and capture output
pentora scan --targets 192.168.1.0/24 --output json > scan.json

# Check exit code
if [ $? -eq 0 ]; then
    # Parse results with jq
    vulnerabilities=$(jq '[.results[].vulnerabilities[]] | length' scan.json)
    echo "Found $vulnerabilities vulnerabilities"

    # Send to webhook
    curl -X POST https://alerts.company.com/webhook \
         -H "Content-Type: application/json" \
         -d @scan.json
else
    echo "Scan failed"
    exit 1
fi

Terraform​

resource "null_resource" "security_scan" {
  provisioner "local-exec" {
    command = "pentora scan --targets ${aws_instance.web.public_ip} --output report.json"
  }

  depends_on = [aws_instance.web]
}

Docker Integration​

FROM pentora/pentora:latest

COPY targets.txt /app/targets.txt
WORKDIR /app

ENTRYPOINT ["pentora", "scan"]
CMD ["--targets", "targets.txt", "--output", "results.json"]

Run as container:

docker run -v $(pwd)/results:/app/results pentora-scanner

Kubernetes CronJob​

apiVersion: batch/v1
kind: CronJob
metadata:
  name: pentora-scan
spec:
  schedule: "0 2 * * *"
  jobTemplate:
    spec:
      template:
        spec:
          containers:
          - name: pentora
            image: pentora/pentora:latest
            args:
            - scan
            - --targets
            - "10.0.0.0/16"
            - --output
            - /results/scan.json
            volumeMounts:
            - name: results
              mountPath: /results
          volumes:
          - name: results
            persistentVolumeClaim:
              claimName: pentora-results
          restartPolicy: OnFailure