tigergate/tigergate-cli repository overview

⁠TigerGate CLI – Code Quality & Security Analysis Tool

TigerGate CLI is a lightweight, developer-first command-line tool designed to perform code quality analysis and security scanning directly from your terminal or CI/CD pipelines. It enables teams to shift security left by identifying vulnerabilities, misconfigurations, and code issues early in the development lifecycle.

Built as part of the broader TigerGate⁠ platform, the CLI integrates seamlessly with modern DevOps workflows and supports automated scanning across repositories, containers, and infrastructure-as-code.

⁠Key Features

• Static Code Analysis (SAST) Detect security vulnerabilities, bad coding practices, and logic flaws in your source code before deployment.

• Dependency & Supply Chain Security (SCA) Identify vulnerable libraries, outdated dependencies, and generate SBOMs for compliance and risk visibility.

• Secrets Detection Scan for exposed credentials, API keys, and sensitive data in code repositories.

• Infrastructure-as-Code (IaC) Scanning Analyze Terraform, Kubernetes manifests, and cloud configs for misconfigurations.

• CI/CD Integration Easily integrate with pipelines like GitHub Actions, GitLab CI, Jenkins, and more for automated scans on every commit.

• Fast, Scriptable CLI Run scans locally or in pipelines with simple commands, enabling automation and headless execution similar to modern CLI tools.

• Unified Code-to-Cloud Security Extend beyond code with optional integration into cloud, container, and runtime security capabilities.

• Quality Gate Enforcement Define security and quality thresholds to automatically pass or fail builds based on scan results. Enforce policies for vulnerabilities, code quality, and compliance before allowing deployments.

⁠Why TigerGate CLI?

TigerGate CLI goes beyond traditional code quality tools by combining code security, cloud security, and runtime insights into a single workflow. Unlike standalone tools, it is part of a CNAPP (Cloud Native Application Protection Platform) that covers the full lifecycle—from development to production.

⁠Typical Use Cases

• Secure pull requests before merge
• Enforce security policies in CI/CD pipelines
• Scan repositories for vulnerabilities and secrets
• Validate IaC configurations before deployment
• Generate compliance-ready reports (SOC 2, ISO 27001, etc.)

⁠Quick Start

docker run --rm -v "$(pwd):/workspace" -e $TIGERGATE_API_KEY tigergate/tigergate-cli:latest scan

Run a full security and quality scan on your project in seconds.