Socket is quick and easy to install.

• Takes 2 minutes to install
• Very minimal permissions
• Never uploads your source code
• The easiest security product you’ve ever installed! ✨

Step 1

Install the Socket Security App from the GitHub Marketplace by visiting: github.com/apps/socket-security.

Step 2

Select the repositories you want to protect.

Step 3.

🥳

You’re done! There’s no step 3.

We told you this would be the easiest security product you ever installed!

What next?

You can always add or remove Socket from additional repositories by visiting the Socket Security app settings within GitHub.

When you install the GitHub app to your GitHub user account or organization, Socket will begin analyzing all pull requests for changes to manifest files associated with the various supported ecosystem. See Socket Ecosystem Support for information on the currently supported ecosystems and manifest files.

For each commit to the default branch with supported dependency manifests, a project report will be generated, which lists all dependencies found in the project.

If a pull request contains a dependency change in any supported ecosystem (see Socket Ecosystem Support) that introduces any of the following issues, a comment will be created in the pull request with more details about the change.

• Potential Typo Squat
• Malware
• Install scripts
• Telemetry
• Troll Package
• Native code
• Bin script confusion
• Bin script shell injection
• Git dependency
• HTTP dependency
• Unresolved require

Updated 28 days ago

Feel free to read up on how you can ignore dependencies and configure Socket for GitHub:

• Ignoring pull request alerts
• socket.yml