glab dependency-firewall package
Check a package against the GitLab Dependency Firewall. (EXPERIMENTAL)
Synopsis
Check a single package coordinate against the GitLab Dependency Firewall policy for the current project and report the outcome (allow, warning, blocked). No package manager binary is required.
Supported package URL (PURL) types are npm, pypi, maven, gem, and cargo. The PURL must include a version, for example pkg:npm/[email protected].
This command does not write to the CI log at .gitlab/df/ci-log.json, so glab dependency-firewall ci-summary does not include its result.
Exit codes:
| Exit code | Meaning |
|---|---|
0 | Allow or warning. |
1 | Misconfiguration or transport error. |
3 | Blocked. |
This feature is an experiment and is not ready for production use. It might be unstable or removed at any time. For more information, see https://docs.gitlab.com/policy/development_stages_support/.
glab dependency-firewall package <purl> [flags]Examples
# Check an npm package version
glab dependency-firewall package pkg:npm/[email protected]
# Check a PyPI package version
glab dependency-firewall package pkg:pypi/[email protected]
# Check a Maven package version
glab dependency-firewall package pkg:maven/org.slf4j/[email protected]
# Check a RubyGems package version
glab dependency-firewall package pkg:gem/[email protected]
# Check a Cargo package version
glab dependency-firewall package pkg:cargo/[email protected]
Options inherited from parent commands
-h, --help Show help for this command.