CI Mode Authentication

For automated environments like CI/CD pipelines, DepFixer supports API key authentication via environment variables.

Setup

1. Generate API Key

Log in to app.depfixer.com
Go to Settings → API Keys
Click Generate New Key
Copy the key (shown only once)

2. Add to CI Environment

Store the key as a secret in your CI platform. GitHub Actions:

Go to Settings → Secrets and variables → Actions
Click New repository secret
Name: DEPFIXER_TOKEN
Value: Your API key

GitLab CI:

Go to Settings → CI/CD → Variables
Add variable with key DEPFIXER_TOKEN and mask it

3. Use in Pipeline

npx depfixer --ci

The CLI automatically uses DEPFIXER_TOKEN when --ci flag is present.

GitHub Actions Example

name: Dependency Check

on:
  pull_request:
    paths:
      - 'package.json'
      - 'package-lock.json'

jobs:
  check-deps:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'

      - name: Check Dependencies
        run: npx depfixer --ci
        env:
          DEPFIXER_TOKEN: ${{ secrets.DEPFIXER_TOKEN }}

GitLab CI Example

dependency-check:
  image: node:20
  script:
    - npx depfixer --ci
  rules:
    - changes:
        - package.json
        - package-lock.json

Exit Codes

Code	Meaning	Pipeline
`0`	No critical/high issues	Pass
`1`	Critical or high issues found	Fail
`2`	Error (auth, network)	Fail

CI Output

  CI Mode - Dependency Analysis
  ────────────────────────────────────────
  Health Score: 72/100
  Total Packages: 45
  Issues Found: 10
    Critical: 1
    High: 3
    Medium: 2
    Low: 4

  Pipeline should fail - critical/high issues detected

JSON Output

For parsing in scripts:

npx depfixer --ci --json

{
  "success": true,
  "mode": "ci",
  "healthScore": 85,
  "totalPackages": 45,
  "summary": {
    "critical": 0,
    "high": 1,
    "medium": 3,
    "low": 2
  },
  "requiresAttention": true
}

Security Best Practices

Never commit API keys - Use environment variables
Rotate keys periodically - Generate new keys quarterly
One key per purpose - Separate keys for CI, scripts, etc.
Monitor usage - Check key activity in dashboard

Getting Started

CLI Commands

Authentication

Guides

Pricing

CI Mode

CI Mode Authentication

Setup

1. Generate API Key

2. Add to CI Environment

3. Use in Pipeline

GitHub Actions Example

GitLab CI Example

Exit Codes

CI Output

JSON Output

Security Best Practices

​CI Mode Authentication

​Setup

​1. Generate API Key

​2. Add to CI Environment

​3. Use in Pipeline

​GitHub Actions Example

​GitLab CI Example

​Exit Codes

​CI Output

​JSON Output

​Security Best Practices

CI Mode Authentication

Setup

1. Generate API Key

2. Add to CI Environment

3. Use in Pipeline

GitHub Actions Example

GitLab CI Example

Exit Codes

CI Output

JSON Output

Security Best Practices