Publishing & Distribution

This document outlines how Vulnetix CLI is published and distributed.

Overview

Vulnetix CLI is distributed through the following channels:

Publishing Process

1. GitHub Releases (Binary Distribution)

Trigger: Git tags matching v* (e.g., v1.2.3)

Artifacts:

• Multi-platform binaries (Linux, macOS, Windows)
• Multiple architectures (AMD64, ARM64, ARM, 386)
• Checksums file
• Release notes

Workflow: .github/workflows/release.yml -> release job

Usage by end users:

# Direct download
curl -L https://github.com/vulnetix/cli/releases/latest/download/vulnetix-linux-amd64 -o vulnetix
chmod +x vulnetix

# Go install (uses GitHub releases via Go module proxy)
go install github.com/vulnetix/cli@latest
go install github.com/vulnetix/cli@v1.2.3

2. Go Install (Module Distribution)

Go install works automatically once a tagged release exists on GitHub. The Go module proxy (proxy.golang.org) indexes the module and makes it available for installation.

No separate publishing process needed – tagging a release on GitHub is sufficient.

Usage by end users:

go install github.com/vulnetix/cli@latest
go install github.com/vulnetix/cli@v1.2.3

3. GitHub Actions (CI/CD Integration)

Marketplace: GitHub Actions Marketplace

Action: vulnetix/cli@v1

Configuration: action.yml in repository root

No separate publishing process – the action is automatically available when action.yml exists in the repository.

Usage by end users:

- name: Run Vulnetix
  uses: vulnetix/cli@v1
  with:
    org-id: ${{ secrets.VULNETIX_ORG_ID }}

Shared Resources

GitHub Releases for Multiple Use Cases

The same GitHub releases serve all distribution methods:

• Go install: go install github.com/vulnetix/cli@latest
• Direct downloads: curl -L https://github.com/.../vulnetix-linux-amd64
• Install script: curl -fsSL https://raw.githubusercontent.com/vulnetix/cli/main/install.sh | sh

No separate publishing needed – one release serves multiple distribution methods.

Release Checklist

When creating a new release:

1. Tag the release: git tag v1.2.3 && git push --tags
2. Monitor automation: Check GitHub Actions workflows
3. Verify distributions:
   • GitHub releases created with binaries
   • go install github.com/vulnetix/cli@v1.2.3 works
   • Install script downloads correct version
4. Test installation methods:
   • go install github.com/vulnetix/cli@v1.2.3
   • curl -L https://github.com/vulnetix/cli/releases/latest/download/vulnetix-linux-amd64 -o vulnetix

Troubleshooting

Go Install Not Working

1. Check module proxy: Ensure the module is available on proxy.golang.org
2. Verify tags: Make sure git tags are properly pushed
3. Module cache: Users may need to clear their module cache with go clean -modcache

Release Not Available

• Check if release workflow completed successfully
• Verify tag format matches v* pattern
• Allow time for Go module proxy to sync (5-15 minutes)

Binary Not Found

1. Release artifacts: Verify all platform binaries are uploaded
2. File permissions: Ensure binaries are executable
3. Download URLs: Check that URLs in documentation match actual release assets