Go Cortex Git is a Rust-based CLI tool designed to serve as a lightweight abstraction layer between local Git operations and the Cortex XSIAM REST API. It enables security teams to version-control and deploy XSIAM configuration objects.
Maintained by GoCortex, an independent publisher of open-source tooling for the Palo Alto Networks Cortex platform.
About GCGit
Git-based version control for Cortex platform security configurations.
gcgit is a command-line tool that synchronises security configurations between Palo Alto Networks Cortex platform instances and local Git repositories. It pulls configurations from Cortex XSIAM, Cortex Cloud AppSec, Agent Configurations, and Cortex Cloud Workload Protection (CWP) APIs, stores them as YAML files, and tracks all changes through Git.
Cortex platform instances have no built-in version control for security configurations. gcgit fills this gap by providing a Git-based audit trail and change tracking mechanism that works across multiple Cortex modules and platform instances.
Key features
Pulls security configurations from Cortex platform instances via REST APIs
Stores each configuration object as an individual YAML file
Commits all changes to a local Git repository with descriptive messages
Supports multiple Cortex platform modules from a single tool
Compares local configurations against remote platform state
Multi-module support for Cortex Platform, Cortex Cloud AppSec, Agent Configurations, and Cortex Cloud Workload Protection (CWP)
Related projects
SignalBenchMITRE ATT&CK endpoint telemetry for Linux