codeant-cli

library1.0.3jsnpmunverified

A command-line tool for code review and secret scanning that integrates with the CodeAnt platform. Current version is 0.4.7. It is actively developed with weekly releases. Key differentiators include: staged-only scanning, confidence-level-based exit codes (HIGH/MEDIUM/FALSE_POSITIVE), flexible file filtering via glob patterns, and easy setup as a Git pre-commit hook. The tool supports scanning staged, uncommitted, last-commit, or all changed files, and provides a login-based authentication flow with configurable API base URL.

devops auth-security

npm install codeant-cli

package ↗homepage ↗

INSTALL

IMPORT

SIG · CODEANT-CLI

codeant-cli

devopsjavascriptv1.0.3

Install

—

Import

—

Disk

—

Pass rate

0/ 6

Env Coverage0 / 6

glibc

18–22

musl

18–22

Install & Compatibility

Where this runs

tested against v? · npm install

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

node 18–226 runs

build_error

glibc

node 18–226 runs

build_error

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

codeant (CLI)

✓ npx codeant-cli secrets

✗ node codeant-cli.js secrets

The package is a CLI tool, not a library. Use via npx or global install.

Demonstrates global install, login, and common scanning commands with file filtering and severity threshold options.

# Install globally npm install -g codeant-cli # Login to CodeAnt (opens browser) codeant login # Scan staged files for secrets codeant secrets # Scan all changed files codeant secrets --all # Scan last commit codeant secrets --last-commit # Fail on MEDIUM or HIGH confidence secrets codeant secrets --fail-on MEDIUM # Only scan JavaScript files codeant secrets --include '**/*.js' # Exclude test files and node_modules codeant secrets --exclude 'node_modules/**,*.test.*'

codeant --version

Debug

Known issues

gotchaRunning 'codeant secrets' without arguments only scans staged files by default.

fix

Use --all to scan all changed files, or --uncommitted, --last-commit as appropriate.

affects: >=0.0.0

gotchaThe --exclude and --include patterns are comma-separated and do not support multi-extension syntax correctly? Verified: works with '**/*.{js}' but not with '*.{js,ts}' as shown?

fix

Use separate patterns per extension: --include '**/*.js' --include '**/*.ts'

affects: >=0.4.0

gotchaConfidence level FALSE_POSITIVE is always ignored and never blocks the build.

fix

Do not rely on FALSE_POSITIVE for blocking; set --fail-on to HIGH or MEDIUM to block real secrets.

affects: >=0.4.7

gotchaThe config file is stored in ~/.codeant/config.json; environment variables override config values.

fix

Use CODEANT_API_BASE_URL env var instead of set-base-url command for CI/CD.

affects: >=0.4.7

gotchaLogin requires a browser; headless environments may fail.

fix

Set CODEANT_API_TOKEN environment variable directly to bypass login.

affects: >=0.4.7

Errors

Common errors & fixes

codeant: command not found

CLI not installed globally or not in PATH.

fix

Run 'npm install -g codeant-cli' or use 'npx codeant-cli'

Error: Not authenticated. Please run 'codeant login'.

User is not logged in and no token is set.

fix

Run 'codeant login' or set CODEANT_API_TOKEN environment variable.

Error: Failed to fetch api endpoint. Please check your internet connection.

Network issue or incorrect API base URL.

fix

Verify internet connectivity and check API URL with 'codeant get-base-url' or set CODEANT_API_BASE_URL env var.

Upgrade

Version history

1.0.3latest on npm

Audit

Dependencies

No dependency data recorded yet.

Agent activity

28 hits · last 30 days

node

Amazon

Bingbot

OpenAI (training)

Resources

packagehttps://www.npmjs.com/package/codeant-cli ↗

homepagehttps://codeant.ai ↗