Documentation menu

Commands

flog audit

Audit exact package versions in the committed Flog lock without changing the project.

Usage#

flog audit [options]

Examples#

flog audit
flog audit --prod
flog audit --workspace apps/website --prod
flog audit --json

Options and behaviour#

Use --prod to omit development-only roots, --workspace <selector> to select a workspace, and --json for schema-versioned CI output. Any finding makes a complete audit exit 4, regardless of severity. The check fails closed when any selected package or advisory source is uncovered.

Run flog help audit for the complete current options and exit-status contract.

Vulnerability audit model · Lock · Registry configuration