cycode

library3.16.2pypypiunverified

Cycode CLI (v3.15.0) is a security scanning tool for SAST, SCA, Secrets, and IaC scanning, integrating into developer workflows via CLI or CI/CD. It requires Python >=3.9 and is actively maintained with frequent releases.

devops testing

pip install cycode

github ↗package ↗homepage ↗

INSTALL

IMPORT

SIG · CYCODE

cycode

devopspythonv3.16.2

Install

9.2s avg

Import

—

Disk

80MB

Pass rate

10/ 10

Env Coverage10 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v3.16.2 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

py 3.10–3.95 runs

installs and imports cleanly · install 0.0s · import 0.000s · 84.4MB

glibc

py 3.10–3.95 runs

installs and imports cleanly · install 9.2s · import 0.000s · 84MB

80MB installed

● package 80MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

CycodeClient

✓ from cycode import CycodeClient

✗ from cycode.cli.client import CycodeClient

Initialize the Cycode client with environment variables and perform a scan.

import os from cycode.cli.client import CycodeClient client = CycodeClient( client_id=os.environ.get('CYCODE_CLIENT_ID', ''), client_secret=os.environ.get('CYCODE_CLIENT_SECRET', '') ) # Example: scan a file (requires auth) result = client.scan_file(path='main.py') print(result)

cycode --version

Debug

Known issues

breakingIn v3.14.0, Cycode API v4 was exposed through CLI commands. API v3 endpoints may be deprecated. Update any custom integrations.

fix

Review your usage of Cycode API endpoints; migrate to v4 endpoints as documented in the changelog.

affects: >=3.14.0

gotchaThe CLI must be authenticated before scanning. Many users forget to set CYCODE_CLIENT_ID and CYCODE_CLIENT_SECRET environment variables.

fix

Set environment variables: export CYCODE_CLIENT_ID='your_id' CYCODE_CLIENT_SECRET='your_secret'

affects: all

gotchaScanning large repositories may slow down due to file collection and upload. Use --stop-on-error flag to handle scan errors gracefully.

fix

Add --stop-on-error flag to cycode scan commands to stop file collection on errors.

affects: >=3.12.1

Upgrade

Version history

3.16.2latest on PyPI · released Jun 17, 2026

Audit

Dependencies

gitpythonoptionalUsed for Git operations

pyjwtrequiredJWT token handling

pygmentsoptionalSyntax highlighting in output

Agent activity

5 hits · last 30 days

node

Amazon

Resources

githubhttps://github.com/cycodehq/cycode-cli ↗

packagehttps://pypi.org/project/cycode/ ↗

homepagehttps://cycode.com ↗