Package org.jenkinsci.plugins.cortexcloud.shared

Class CortexConstants

java.lang.Object

org.jenkinsci.plugins.cortexcloud.shared.CortexConstants

public final class CortexConstants
extends Object

Constants describing the confirmed Cortex CLI contract. All values here were verified empirically against a live tenant. They intentionally supersede earlier documentation-based assumptions.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ARCH_AMD64
static final String	ARCH_ARM64
static final String	ARCHIVE_FORMAT_DOCKER
static final String	ARCHIVE_FORMAT_OCI
static final String	CLI_BINARY_NAME	The downloaded binary is a static Go executable — no JRE/Java is required on the agent.
static final String	CMD_IMAGE
static final String	CMD_SCAN
static final String	DOWNLOAD_LINK_PATH
static final String	DOWNLOAD_PARAM_ARCH
static final String	DOWNLOAD_PARAM_OS
static final String	ENV_API_BASE_URL	Base URL of the tenant API, e.g.
static final String	ENV_API_KEY	API key (secret).
static final String	ENV_API_KEY_ID	API key ID - a small integer (e.g.
static final int	EXIT_ERROR	Error (bad args, license/service unavailable, etc.).
static final int	EXIT_FAIL	Scan completed but FAILED policy (documented; to be confirmed against a blocking image).
static final int	EXIT_PASS	Scan completed and PASSED policy.
static final String	FLAG_ARCHIVE	Required when the source is a tar archive; without it the CLI treats the path as an image reference.
static final String	FLAG_ARCHIVE_FORMAT	docker-archive (default) | oci-archive.
static final String	FLAG_CI_BUILD_ID	CI build identifier.
static final String	FLAG_CI_PIPELINE_ID	CI pipeline identifier.
static final String	FLAG_DOCKER_HOST	Docker daemon socket to connect to (note: NOT --docker-address).
static final String	FLAG_NAME	Name assigned to the scanned image.
static final String	FLAG_OUTPUT_FORMAT	human-readable (default) | json.
static final String	FLAG_SOURCE	Scan source, used by the tenant to scope source-based policies to CI scans.
static final String	FLAG_TIMEOUT	Timeout in seconds (CLI default: 60).
static final String	FLAG_UPLOAD_MODE	Controls how much scan data is uploaded to / retained by the tenant.
static final String	HEADER_AUTH_ID
static final String	HEADER_AUTHORIZATION
static final String	OS_DARWIN
static final String	OS_LINUX
static final String	OS_WINDOWS
static final String	OUTPUT_FORMAT_HUMAN
static final String	OUTPUT_FORMAT_JSON

Method Summary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ENV_API_BASE_URL

public static final String ENV_API_BASE_URL

Base URL of the tenant API, e.g. https://api-<tenant>.xdr.<region>.paloaltonetworks.com.

See Also:

• Constant Field Values

ENV_API_KEY

public static final String ENV_API_KEY

API key (secret).

See Also:

• Constant Field Values

ENV_API_KEY_ID

public static final String ENV_API_KEY_ID

API key ID - a small integer (e.g. 158); maps to the x-xdr-auth-id header.

See Also:

• Constant Field Values

HEADER_AUTH_ID

public static final String HEADER_AUTH_ID

See Also:

• Constant Field Values

HEADER_AUTHORIZATION

public static final String HEADER_AUTHORIZATION

See Also:

• Constant Field Values

CMD_IMAGE

public static final String CMD_IMAGE

See Also:

• Constant Field Values

CMD_SCAN

public static final String CMD_SCAN

See Also:

• Constant Field Values

FLAG_ARCHIVE

public static final String FLAG_ARCHIVE

Required when the source is a tar archive; without it the CLI treats the path as an image reference.

See Also:

• Constant Field Values

FLAG_ARCHIVE_FORMAT

public static final String FLAG_ARCHIVE_FORMAT

docker-archive (default) | oci-archive.

See Also:

• Constant Field Values

FLAG_OUTPUT_FORMAT

public static final String FLAG_OUTPUT_FORMAT

human-readable (default) | json.

See Also:

• Constant Field Values

FLAG_NAME

public static final String FLAG_NAME

Name assigned to the scanned image.

See Also:

• Constant Field Values

FLAG_DOCKER_HOST

public static final String FLAG_DOCKER_HOST

Docker daemon socket to connect to (note: NOT --docker-address).

See Also:

• Constant Field Values

FLAG_CI_PIPELINE_ID

public static final String FLAG_CI_PIPELINE_ID

CI pipeline identifier.

See Also:

• Constant Field Values

FLAG_CI_BUILD_ID

public static final String FLAG_CI_BUILD_ID

CI build identifier.

See Also:

• Constant Field Values

FLAG_TIMEOUT

public static final String FLAG_TIMEOUT

Timeout in seconds (CLI default: 60).

See Also:

• Constant Field Values

FLAG_SOURCE

public static final String FLAG_SOURCE

Scan source, used by the tenant to scope source-based policies to CI scans.

See Also:

• Constant Field Values

FLAG_UPLOAD_MODE

public static final String FLAG_UPLOAD_MODE

Controls how much scan data is uploaded to / retained by the tenant.

See Also:

• Constant Field Values

ARCHIVE_FORMAT_DOCKER

public static final String ARCHIVE_FORMAT_DOCKER

See Also:

• Constant Field Values

ARCHIVE_FORMAT_OCI

public static final String ARCHIVE_FORMAT_OCI

See Also:

• Constant Field Values

OUTPUT_FORMAT_JSON

public static final String OUTPUT_FORMAT_JSON

See Also:

• Constant Field Values

OUTPUT_FORMAT_HUMAN

public static final String OUTPUT_FORMAT_HUMAN

See Also:

• Constant Field Values

EXIT_PASS

public static final int EXIT_PASS

Scan completed and PASSED policy.

See Also:

• Constant Field Values

EXIT_FAIL

public static final int EXIT_FAIL

Scan completed but FAILED policy (documented; to be confirmed against a blocking image).

See Also:

• Constant Field Values

EXIT_ERROR

public static final int EXIT_ERROR

Error (bad args, license/service unavailable, etc.).

See Also:

• Constant Field Values

DOWNLOAD_LINK_PATH

public static final String DOWNLOAD_LINK_PATH

See Also:

• Constant Field Values

DOWNLOAD_PARAM_OS

public static final String DOWNLOAD_PARAM_OS

See Also:

• Constant Field Values

DOWNLOAD_PARAM_ARCH

public static final String DOWNLOAD_PARAM_ARCH

See Also:

• Constant Field Values

OS_LINUX

public static final String OS_LINUX

See Also:

• Constant Field Values

OS_DARWIN

public static final String OS_DARWIN

See Also:

• Constant Field Values

OS_WINDOWS

public static final String OS_WINDOWS

See Also:

• Constant Field Values

ARCH_AMD64

public static final String ARCH_AMD64

See Also:

• Constant Field Values

ARCH_ARM64

public static final String ARCH_ARM64

See Also:

• Constant Field Values

CLI_BINARY_NAME

public static final String CLI_BINARY_NAME

The downloaded binary is a static Go executable — no JRE/Java is required on the agent.

See Also:

• Constant Field Values