Rorix.Cli 0.1.4

Rorix CLI

Rorix scans .NET and Node.js dependency manifests for known vulnerabilities, generates SBOMs, and evaluates supply-chain policy from a terminal or CI runner.

Install

Rorix CLI runs with the .NET 9 runtime or a newer major .NET runtime, including .NET 10. Install a supported, up-to-date runtime or SDK before installing the tool.

dotnet tool install --global Rorix.Cli
rorix --version

Authenticate and scan

Create an API key in the Rorix dashboard, then run:

rorix login rxk_your_api_key_here
rorix scan .

Rorix detects NuGet manifests such as .csproj, .sln, packages.config, Directory.Packages.props, and packages.lock.json, plus npm package.json, package-lock.json, and npm-shrinkwrap.json manifests. A NuGet lockfile includes resolved transitive dependencies; a project file alone does not.

Common commands

# Fail with a non-zero exit code when vulnerabilities are found
rorix scan . --exit-code

# Generate a CycloneDX SBOM
rorix sbom . --format cyclonedx --output sbom.cdx.json

# Evaluate .rorix.yml
rorix policy . --config .rorix.yml

See the CLI documentation for command options and the Rorix website for product details.