Socket CLI

CLI for Socket.dev security analysis

Usage

npm install -g socket
socket --help

socket npm [args...] and socket npx [args...] - Wraps npm/npx with Socket security scanning
socket fix - Fix CVEs in dependencies
socket optimize - Optimize dependencies with @socketregistry overrides
socket cdxgen [command] - Run cdxgen for SBOM generation

All aliases support the flags and arguments of the commands they alias.

socket ci - Alias for socket scan create --report (creates report and exits with error if unhealthy)

Socket CLI reads socket.yml configuration files. Supports version 2 format with projectIgnorePaths for excluding files from reports.

SOCKET_CLI_API_TOKEN - Socket API token
SOCKET_CLI_CONFIG - JSON configuration object
SOCKET_CLI_GITHUB_API_URL - GitHub API base URL
SOCKET_CLI_GIT_USER_EMAIL - Git user email (default: github-actions[bot]@users.noreply.github.com)
SOCKET_CLI_GIT_USER_NAME - Git user name (default: github-actions[bot])
SOCKET_CLI_GITHUB_TOKEN - GitHub token with repo access (alias: GITHUB_TOKEN)
SOCKET_CLI_NO_API_TOKEN - Disable default API token
SOCKET_CLI_NPM_PATH - Path to npm directory
SOCKET_CLI_ORG_SLUG - Socket organization slug
SOCKET_CLI_ACCEPT_RISKS - Accept npm/npx risks
SOCKET_CLI_VIEW_ALL_RISKS - Show all npm/npx risks

Run locally:

npm install
npm run build
npm exec socket

SOCKET_CLI_API_BASE_URL - API base URL (default: https://api.socket.dev/v0/)
SOCKET_CLI_API_PROXY - Proxy for API requests (aliases: HTTPS_PROXY, https_proxy, HTTP_PROXY, http_proxy)
SOCKET_CLI_API_TIMEOUT - API request timeout in milliseconds
SOCKET_CLI_DEBUG - Enable debug logging
DEBUG - Enable debug package logging