Jump to Content
Socket
DocumentationAPI Reference
Socket
Documentation
Log In
Jump to Content
Socket
DocumentationAPI Reference
Log In
All
Pages
Start typing to search…
  • Getting started
  • FAQ
  • Reachability Analysis
    • Dependency Reachability
    • Precomputed Reachability
    • Full Application Reachability
    • Static Reachability Analysis
    • Phantom Dependencies
    • Reachability Results
  • Ecosystem Support
    • Scala setup instructions
    • Kotlin setup instructions
    • Gradle setup instructions (for Java, Kotlin, and Scala)
    • Anaconda setup instructions
  • Alert Types
    • Alert Types Support
    • Alert Categories
    • Vulnerability
      • Critical CVE
      • High CVE
      • Medium CVE
      • Low CVE
    • Supply Chain Risk
      • Known malware
      • Possible typosquat attack
      • AI-detected potential malware
      • Git dependency
      • GitHub dependency
      • HTTP dependency
      • Obfuscated code
      • Protestware or potentially unwanted behavior
      • Telemetry
      • Unstable ownership
      • AI-detected potential security risk
      • Native code
      • Network access
      • Non-existent author
      • Potential vulnerability
      • Shell access
      • Trivial Package
      • Uses eval
      • AI-detected potential code anomaly
      • Environment variable access
      • Filesystem access
      • High entropy strings
      • New author
      • JS-only: NPM Shrinkwrap
      • JS-only: Install scripts
      • JS-only: Manifest confusion
      • JS-only: Debug access
      • JS-only: Dynamic require
    • Quality
      • Unpopular package
      • Minified code
      • JS-only: Bad dependency semver
      • JS-only: Wildcard dependency
    • Maintenance
      • Deprecated
      • Unmaintained
    • License
      • Explicitly Unlicensed Item
      • Misc. License Issues
      • Ambiguous License Classifier
      • Copyleft License
      • License Exception
      • No License Found
      • Non-permissive License
      • Unidentified License
  • Alert Actions
  • Alert Purpose Definitions
  • Alert Actions and Triage Functionality
  • Package Scores
  • Manifest File Detection
  • Organization Alerts
  • Dependency Search
  • Repositories
  • Scans
  • Security Policy (Default Enabled Alerts)
    • Customizable Security Policies
  • License Policy
  • Threat Feed
  • Package Search
  • Users
  • Settings
    • API Tokens
    • Audit Log
  • Integrations
    • Slack
    • Vanta
    • SSO (Single Sign-On)
  • SCIM
  • SSO (Single Sign-On)
  • Slack alerts
  • Vanta integration
  • Webhooks
  • Guide to Socket for GitHub
  • Install the App
  • Ignoring pull request alerts
  • socket.yml
  • What to do when you receive an alert
  • GitHub App Permissions
  • Enable branch protection
  • Understanding "Act on Your Behalf" Permission
  • Socket for GitHub Actions
  • Socket for Gitlab Pipeline
  • Socket for Bitbucket Pipeline
  • Socket for Jenkins Jobs
  • Socket for Azure DevOps
    • Socket for Azure DevOps (Yaml)
    • Socket for Azure DevOps (ADO Classic)
    • Create Variable Group for ADO
  • Create Socket API Key for CI/CD
  • Guide to Socket CLI
    • v1 Migration guide
  • Socket CLI Commands
    • socket analytics
    • socket audit-log
    • socket ci
    • socket login
    • socket logout
    • socket manifest
    • socket manifest cdxgen
    • socket npm & socket npx
    • socket organization
    • socket optimize
    • socket package
    • socket raw-npm
    • socket raw-npx
    • socket repository
    • socket scan
    • socket scan github
    • socket threat-feed
    • socket wrapper
    • socket fix
  • Socket CLI FAQ
  • safe-npm FAQ
  • Supported Node.js Versions
  • socket.json
  • Guide to Socket MCP
  • Remote Socket MCP
  • Local Socket MCP
  • Socket MCP for Claude Desktop
  • Socket Firewall Overview
  • Socket Firewall Free
  • Socket Firewall Enterprise
  • Enterprise Wrapper Mode
  • Enterprise Proxy Service Setup
  • Generating Keys for Proxy Service
  • Enterprise Proxy Client Setup
  • Enterprise Configuration
  • Socket Firewall: Registry Mode
    • Installations
    • Downstream Deployment Guide
    • Upstream Deployment Guide
    • Configuration Reference
    • Artifactory Configuration
    • Nexus Configuration
  • Guide to Socket for VS Code
  • Socket REST API
  • Socket JavaScript SDK
  • Socket Python SDK
  • Guide to Socket Chrome Extension
  • Extension Permissions
  • Deploying via Google Workspace
  • Join the community
  • Contact support
  • Sample Test Packages
  • Known issues
  • Incremental Rollout
  • Tool Configuration Files
  1. CI:CD INTEGRATIONS

Socket for Azure DevOps


  • Azure DevOps (YAML)
  • Classic Azure DevOps pipeline

Updated about 3 hours ago


Socket for Jenkins Jobs
Socket for Azure DevOps (Yaml)