korext

KOREXT CLI

AI Code Governance for your terminal and CI/CD pipelines.

Enforce compliance policies on human written and AI generated code. 72 policy packs. 532 detection rules. 13 languages. Cryptographically signed proof bundles.

Install

npm install -g korext

Quick Start

# Sign in
korext login

# Initialize your project
korext init

# Enforce policies on your code
korext enforce .

# Enforce with specific packs
korext enforce . --pack web,pci-dss-v1

# Enforce with a specific region
korext enforce . --region eu --pack web

# Generate a signed proof bundle
korext enforce . --pack web --sign

Commands

Command	Description
korext login	Sign in to your KOREXT account
korext init	Initialize a project with korext.json
korext enforce <path>	Run policy enforcement on files
korext packs list	List all available policy packs
korext industries	List industries and their packs
korext bundle list	List your recent proof bundles
korext bundle export <id>	Download a proof bundle as PDF
korext bundle verify <id>	Verify a proof bundle signature
korext status	Show current configuration and region

Enforce Options

Flag	Description	Default
--pack <ids>	Comma separated pack IDs	web
--region <name>	Data region (us, eu, apac)	us
--format <type>	Output format (text, json, sarif)	text
--sign	Request signed proof bundle	false
--industry <name>	Select packs by industry	(none)
--offline	Run with local engine only	false

Output Formats

Text (default): Human readable violation list with governance context.

JSON: Machine readable output with full violation details, confidence scores, and proof bundle metadata.

SARIF: Static Analysis Results Interchange Format for CI/CD integration. Compatible with GitHub Code Scanning, Azure DevOps, and other SARIF consumers.

CI/CD Integration

GitHub Actions

- uses: korext/enforce-action@v3
  with:
    pack: web,pci-dss-v1
    region: eu
  env:
    KOREXT_API_TOKEN: ${{ secrets.KOREXT_API_TOKEN }}

Pre-commit Hook

# .husky/pre-commit
korext enforce . --pack web

Generic CI

npm install -g korext
korext login --token $KOREXT_API_TOKEN
korext enforce . --pack web --format sarif --sign

Exit Codes

Code	Meaning
0	PASS (no violations)
1	BLOCK (violations found)
2	ERROR (invalid input, network, auth)

CI pipelines should fail on exit code 1 to block non-compliant code from merging.

Configuration

korext.json

{
  "project": "my-app",
  "targetPacks": ["web", "pci-dss-v1"],
  "region": "eu",
  "industry": "finance"
}

Environment Variables

Variable	Description
KOREXT_API_TOKEN	API token for CI/CD (from dashboard)

Data Sovereignty

Choose your data processing region: US, EU, or Asia Pacific. Set via --region flag, korext.json, or korext init. All enforcement data stays in your chosen region.

Links

• Website
• Dashboard
• Documentation
• GitHub Action
• VS Code Extension

License

Proprietary. See Terms of Service.