@socketsecurity/cli-with-sentry 0.15.38 → 0.15.40

package/dist/cli.js

@@ -303,9 +303,9 @@ async function handleAnalytics({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$M
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$N
 } = constants;
-const config$R = {
+const config$S = {
   commandName: 'analytics',
   description: `Look up analytics data`,
   hidden: false,
@@ -367,16 +367,16 @@ const config$R = {
   .replace(/\n(?: *\n)+/g, '\n\n')
 };
 const cmdAnalytics = {
-  description: config$R.description,
-  hidden: config$R.hidden,
-  run: run$R
+  description: config$S.description,
+  hidden: config$S.hidden,
+  run: run$S
 };
-async function run$R(argv, importMeta, {
+async function run$S(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$R,
+    config: config$S,
     importMeta,
     parentName
   });
@@ -480,7 +480,7 @@ async function run$R(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$M);
+    logger.logger.log(DRY_RUN_BAILING_NOW$N);
     return;
   }
   return await handleAnalytics({
@@ -660,10 +660,10 @@ async function handleAuditLog({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$L,
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$M,
   SOCKET_WEBSITE_URL: SOCKET_WEBSITE_URL$3
 } = constants;
-const config$Q = {
+const config$R = {
   commandName: 'audit-log',
   description: 'Look up the audit log for an organization',
   hidden: false,
@@ -717,16 +717,16 @@ const config$Q = {
   `
 };
 const cmdAuditLog = {
-  description: config$Q.description,
-  hidden: config$Q.hidden,
-  run: run$Q
+  description: config$R.description,
+  hidden: config$R.hidden,
+  run: run$R
 };
-async function run$Q(argv, importMeta, {
+async function run$R(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$Q,
+    config: config$R,
     importMeta,
     parentName
   });
@@ -767,7 +767,7 @@ async function run$Q(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$L);
+    logger.logger.log(DRY_RUN_BAILING_NOW$M);
     return;
   }
   await handleAuditLog({
@@ -857,7 +857,7 @@ async function runCdxgen(yargvWithYes) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$K
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$L
 } = constants;
 
 // TODO: Convert yargs to meow.
@@ -1059,7 +1059,7 @@ const yargsConfig = {
   'usages-slices-file' // hidden
   ]
 };
-const config$P = {
+const config$Q = {
   commandName: 'cdxgen',
   description: 'Create an SBOM with CycloneDX generator (cdxgen)',
   hidden: false,
@@ -1069,17 +1069,17 @@ const config$P = {
   help: () => ''
 };
 const cmdManifestCdxgen = {
-  description: config$P.description,
-  hidden: config$P.hidden,
-  run: run$P
+  description: config$Q.description,
+  hidden: config$Q.hidden,
+  run: run$Q
 };
-async function run$P(argv, importMeta, {
+async function run$Q(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     // Don't let meow take over --help.
     argv: argv.filter(a => !utils.isHelpFlag(a)),
-    config: config$P,
+    config: config$Q,
     importMeta,
     parentName
   });
@@ -1101,7 +1101,7 @@ async function run$P(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$K);
+    logger.logger.log(DRY_RUN_BAILING_NOW$L);
     return;
   }
 
@@ -1130,15 +1130,15 @@ async function handleCdxgen(argv, importMeta, {
   });
 }
 
-const config$O = {
+const config$P = {
   description: 'Create an SBOM with CycloneDX generator (cdxgen)',
   hidden: true};
 const cmdCdxgen = {
-  description: config$O.description,
-  hidden: config$O.hidden,
-  run: run$O
+  description: config$P.description,
+  hidden: config$P.hidden,
+  run: run$P
 };
-async function run$O(argv, importMeta, {
+async function run$P(argv, importMeta, {
   parentName
 }) {
   logger.logger.warn('Warning: The `socket cdxgen` command moved to `socket manifest cdxgen` and will be removed as a toplevel command in the next major bump.');
@@ -2371,9 +2371,9 @@ async function handleCI(autoManifest) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$J
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$K
 } = constants;
-const config$N = {
+const config$O = {
   commandName: 'ci',
   description: 'Create a new scan and report whether it passes your security policy',
   hidden: true,
@@ -2391,7 +2391,7 @@ const config$N = {
       $ ${parentName}
 
     Options
-      ${utils.getFlagListOutput(config$N.flags, 6)}
+      ${utils.getFlagListOutput(config$O.flags, 6)}
 
     This command is intended to use in CI runs to allow automated systems to
     accept or reject a current build. When the scan does not pass your security
@@ -2406,21 +2406,21 @@ const config$N = {
   `
 };
 const cmdCI = {
-  description: config$N.description,
-  hidden: config$N.hidden,
-  run: run$N
+  description: config$O.description,
+  hidden: config$O.hidden,
+  run: run$O
 };
-async function run$N(argv, importMeta, {
+async function run$O(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$N,
+    config: config$O,
     importMeta,
     parentName
   });
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$J);
+    logger.logger.log(DRY_RUN_BAILING_NOW$K);
     return;
   }
   await handleCI(Boolean(cli.flags['autoManifest']));
@@ -2664,9 +2664,9 @@ async function handleConfigAuto({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$I
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$J
 } = constants;
-const config$M = {
+const config$N = {
   commandName: 'auto',
   description: 'Automatically discover and set the correct value config item',
   hidden: false,
@@ -2695,16 +2695,16 @@ ${Array.from(utils.supportedConfigKeys.entries()).map(([key, desc]) => `     - $
   `
 };
 const cmdConfigAuto = {
-  description: config$M.description,
-  hidden: config$M.hidden,
-  run: run$M
+  description: config$N.description,
+  hidden: config$N.hidden,
+  run: run$N
 };
-async function run$M(argv, importMeta, {
+async function run$N(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$M,
+    config: config$N,
     importMeta,
     parentName
   });
@@ -2730,7 +2730,7 @@ async function run$M(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$I);
+    logger.logger.log(DRY_RUN_BAILING_NOW$J);
     return;
   }
   await handleConfigAuto({
@@ -2778,9 +2778,9 @@ async function handleConfigGet({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$H
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$I
 } = constants;
-const config$L = {
+const config$M = {
   commandName: 'get',
   description: 'Get the value of a local CLI config item',
   hidden: false,
@@ -2804,16 +2804,16 @@ ${Array.from(utils.supportedConfigKeys.entries()).map(([key, desc]) => `     - $
   `
 };
 const cmdConfigGet = {
-  description: config$L.description,
-  hidden: config$L.hidden,
-  run: run$L
+  description: config$M.description,
+  hidden: config$M.hidden,
+  run: run$M
 };
-async function run$L(argv, importMeta, {
+async function run$M(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$L,
+    config: config$M,
     importMeta,
     parentName
   });
@@ -2839,7 +2839,7 @@ async function run$L(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$H);
+    logger.logger.log(DRY_RUN_BAILING_NOW$I);
     return;
   }
   await handleConfigGet({
@@ -2916,9 +2916,9 @@ async function outputConfigList({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$G
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$H
 } = constants;
-const config$K = {
+const config$L = {
   commandName: 'list',
   description: 'Show all local CLI config items and their values',
   hidden: false,
@@ -2947,16 +2947,16 @@ ${Array.from(utils.supportedConfigKeys.entries()).map(([key, desc]) => `     - $
   `
 };
 const cmdConfigList = {
-  description: config$K.description,
-  hidden: config$K.hidden,
-  run: run$K
+  description: config$L.description,
+  hidden: config$L.hidden,
+  run: run$L
 };
-async function run$K(argv, importMeta, {
+async function run$L(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$K,
+    config: config$L,
     importMeta,
     parentName
   });
@@ -2977,7 +2977,7 @@ async function run$K(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$G);
+    logger.logger.log(DRY_RUN_BAILING_NOW$H);
     return;
   }
   await outputConfigList({
@@ -3026,9 +3026,9 @@ async function handleConfigSet({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$F
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$G
 } = constants;
-const config$J = {
+const config$K = {
   commandName: 'set',
   description: 'Update the value of a local CLI config item',
   hidden: false,
@@ -3057,16 +3057,16 @@ ${Array.from(utils.supportedConfigKeys.entries()).map(([key, desc]) => `     - $
   `
 };
 const cmdConfigSet = {
-  description: config$J.description,
-  hidden: config$J.hidden,
-  run: run$J
+  description: config$K.description,
+  hidden: config$K.hidden,
+  run: run$K
 };
-async function run$J(argv, importMeta, {
+async function run$K(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$J,
+    config: config$K,
     importMeta,
     parentName
   });
@@ -3099,7 +3099,7 @@ async function run$J(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$F);
+    logger.logger.log(DRY_RUN_BAILING_NOW$G);
     return;
   }
   await handleConfigSet({
@@ -3148,9 +3148,9 @@ async function handleConfigUnset({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$E
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$F
 } = constants;
-const config$I = {
+const config$J = {
   commandName: 'unset',
   description: 'Clear the value of a local CLI config item',
   hidden: false,
@@ -3174,16 +3174,16 @@ ${Array.from(utils.supportedConfigKeys.entries()).map(([key, desc]) => `     - $
   `
 };
 const cmdConfigUnset = {
-  description: config$I.description,
-  hidden: config$I.hidden,
-  run: run$I
+  description: config$J.description,
+  hidden: config$J.hidden,
+  run: run$J
 };
-async function run$I(argv, importMeta, {
+async function run$J(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$I,
+    config: config$J,
     importMeta,
     parentName
   });
@@ -3209,7 +3209,7 @@ async function run$I(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$E);
+    logger.logger.log(DRY_RUN_BAILING_NOW$F);
     return;
   }
   await handleConfigUnset({
@@ -3318,9 +3318,9 @@ async function handleDependencies({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$D
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$E
 } = constants;
-const config$H = {
+const config$I = {
   commandName: 'dependencies',
   description: 'Search for any dependency that is being used in your organization',
   hidden: false,
@@ -3356,16 +3356,16 @@ const config$H = {
   `
 };
 const cmdScanCreate$1 = {
-  description: config$H.description,
-  hidden: config$H.hidden,
-  run: run$H
+  description: config$I.description,
+  hidden: config$I.hidden,
+  run: run$I
 };
-async function run$H(argv, importMeta, {
+async function run$I(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$H,
+    config: config$I,
     importMeta,
     parentName
   });
@@ -3394,7 +3394,7 @@ async function run$H(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$D);
+    logger.logger.log(DRY_RUN_BAILING_NOW$E);
     return;
   }
   await handleDependencies({
@@ -3491,9 +3491,9 @@ async function handleDiffScan$1({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$C
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$D
 } = constants;
-const config$G = {
+const config$H = {
   commandName: 'get',
   description: 'Get a diff scan for an organization',
   hidden: false,
@@ -3552,16 +3552,16 @@ const config$G = {
   `
 };
 const cmdDiffScanGet = {
-  description: config$G.description,
-  hidden: config$G.hidden,
-  run: run$G
+  description: config$H.description,
+  hidden: config$H.hidden,
+  run: run$H
 };
-async function run$G(argv, importMeta, {
+async function run$H(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$G,
+    config: config$H,
     importMeta,
     parentName
   });
@@ -3606,7 +3606,7 @@ async function run$G(argv, importMeta, {
   }
   logger.logger.fail('Warning: this command is deprecated in favor of `socket scan diff` and will be removed in the next major bump.');
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$C);
+    logger.logger.log(DRY_RUN_BAILING_NOW$D);
     return;
   }
   await handleDiffScan$1({
@@ -3698,6 +3698,7 @@ function getSocketBranchPattern(options) {
 function createSocketBranchParser(options) {
   const pattern = getSocketBranchPattern(options);
   return function parse(branch) {
+    debug.debugFn('pattern', pattern);
     const match = pattern.exec(branch);
     if (!match) {
       return null;
@@ -4747,6 +4748,8 @@ async function pnpmFix(pkgEnvDetails, {
   }) : [];
   if (openPrs.length) {
     debug.debugFn(`found: ${openPrs.length} open PRs\n`, openPrs);
+  } else {
+    debug.debugFn('miss: 0 open PRs found');
   }
   let count = isCi ? openPrs.length : 0;
   let actualTree;
@@ -5329,7 +5332,7 @@ async function handleFix({
 const {
   DRY_RUN_NOT_SAVING
 } = constants;
-const config$F = {
+const config$G = {
   commandName: 'fix',
   description: 'Update dependencies with "fixable" Socket alerts',
   hidden: false,
@@ -5397,16 +5400,16 @@ const config$F = {
   `
 };
 const cmdFix = {
-  description: config$F.description,
-  hidden: config$F.hidden,
-  run: run$F
+  description: config$G.description,
+  hidden: config$G.hidden,
+  run: run$G
 };
-async function run$F(argv, importMeta, {
+async function run$G(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$F,
+    config: config$G,
     importMeta,
     parentName
   });
@@ -5608,9 +5611,9 @@ async function handlePackageInfo({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$B
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$C
 } = constants;
-const config$E = {
+const config$F = {
   commandName: 'info',
   description: 'Look up info regarding a package',
   hidden: true,
@@ -5635,16 +5638,16 @@ const config$E = {
   `
 };
 const cmdInfo = {
-  description: config$E.description,
-  hidden: config$E.hidden,
-  run: run$E
+  description: config$F.description,
+  hidden: config$F.hidden,
+  run: run$F
 };
-async function run$E(argv, importMeta, {
+async function run$F(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$E,
+    config: config$F,
     importMeta,
     parentName
   });
@@ -5681,11 +5684,11 @@ async function run$E(argv, importMeta, {
   const pkgName = versionSeparator < 1 ? rawPkgName : rawPkgName.slice(0, versionSeparator);
   const pkgVersion = versionSeparator < 1 ? 'latest' : rawPkgName.slice(versionSeparator + 1);
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$B);
+    logger.logger.log(DRY_RUN_BAILING_NOW$C);
     return;
   }
   await handlePackageInfo({
-    commandName: `${parentName} ${config$E.commandName}`,
+    commandName: `${parentName} ${config$F.commandName}`,
     includeAllIssues: Boolean(all),
     outputKind,
     pkgName,
@@ -5813,9 +5816,9 @@ async function handleInstallCompletion(targetName) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$A
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$B
 } = constants;
-const config$D = {
+const config$E = {
   commandName: 'completion',
   description: 'Install bash completion for Socket CLI',
   hidden: true,
@@ -5853,22 +5856,22 @@ const config$D = {
   `
 };
 const cmdInstallCompletion = {
-  description: config$D.description,
-  hidden: config$D.hidden,
-  run: run$D
+  description: config$E.description,
+  hidden: config$E.hidden,
+  run: run$E
 };
-async function run$D(argv, importMeta, {
+async function run$E(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$D,
+    config: config$E,
     importMeta,
     parentName
   });
   const targetName = cli.input[0] || 'socket';
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$A);
+    logger.logger.log(DRY_RUN_BAILING_NOW$B);
     return;
   }
   await handleInstallCompletion(String(targetName));
@@ -5986,9 +5989,9 @@ async function attemptLogin(apiBaseUrl, apiProxy) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$z
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$A
 } = constants;
-const config$C = {
+const config$D = {
   commandName: 'login',
   description: 'Socket API login',
   hidden: false,
@@ -6021,23 +6024,23 @@ const config$C = {
   `
 };
 const cmdLogin = {
-  description: config$C.description,
-  hidden: config$C.hidden,
-  run: run$C
+  description: config$D.description,
+  hidden: config$D.hidden,
+  run: run$D
 };
-async function run$C(argv, importMeta, {
+async function run$D(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$C,
+    config: config$D,
     importMeta,
     parentName
   });
   const apiBaseUrl = cli.flags['apiBaseUrl'];
   const apiProxy = cli.flags['apiProxy'];
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$z);
+    logger.logger.log(DRY_RUN_BAILING_NOW$A);
     return;
   }
   if (!vendor.isInteractiveExports()) {
@@ -6067,9 +6070,9 @@ function attemptLogout() {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$y
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$z
 } = constants;
-const config$B = {
+const config$C = {
   commandName: 'logout',
   description: 'Socket API logout',
   hidden: false,
@@ -6084,30 +6087,30 @@ const config$B = {
   `
 };
 const cmdLogout = {
-  description: config$B.description,
-  hidden: config$B.hidden,
-  run: run$B
+  description: config$C.description,
+  hidden: config$C.hidden,
+  run: run$C
 };
-async function run$B(argv, importMeta, {
+async function run$C(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$B,
+    config: config$C,
     importMeta,
     parentName
   });
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$y);
+    logger.logger.log(DRY_RUN_BAILING_NOW$z);
     return;
   }
   attemptLogout();
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$x
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$y
 } = constants;
-const config$A = {
+const config$B = {
   commandName: 'auto',
   description: 'Auto-detect build and attempt to generate manifest file',
   hidden: false,
@@ -6140,16 +6143,16 @@ const config$A = {
   `
 };
 const cmdManifestAuto = {
-  description: config$A.description,
-  hidden: config$A.hidden,
-  run: run$A
+  description: config$B.description,
+  hidden: config$B.hidden,
+  run: run$B
 };
-async function run$A(argv, importMeta, {
+async function run$B(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$A,
+    config: config$B,
     importMeta,
     parentName
   });
@@ -6165,7 +6168,7 @@ async function run$A(argv, importMeta, {
   // If given path is absolute then cwd should not affect it.
   cwd = path.resolve(process.cwd(), cwd);
   if (verbose) {
-    logger.logger.group('- ', parentName, config$A.commandName, ':');
+    logger.logger.group('- ', parentName, config$B.commandName, ':');
     logger.logger.group('- flags:', cli.flags);
     logger.logger.groupEnd();
     logger.logger.log('- input:', cli.input);
@@ -6176,7 +6179,7 @@ async function run$A(argv, importMeta, {
   const detected = await detectManifestActions(socketJson, cwd);
   debug.debugLog('[DEBUG]', detected);
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$x);
+    logger.logger.log(DRY_RUN_BAILING_NOW$y);
     return;
   }
   if (!detected.count) {
@@ -6198,9 +6201,9 @@ async function run$A(argv, importMeta, {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$w
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$x
 } = constants;
-const config$z = {
+const config$A = {
   commandName: 'conda',
   description: '[beta] Convert a Conda environment.yml file to a python requirements.txt',
   hidden: false,
@@ -6251,16 +6254,16 @@ const config$z = {
   `
 };
 const cmdManifestConda = {
-  description: config$z.description,
-  hidden: config$z.hidden,
-  run: run$z
+  description: config$A.description,
+  hidden: config$A.hidden,
+  run: run$A
 };
-async function run$z(argv, importMeta, {
+async function run$A(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$z,
+    config: config$A,
     importMeta,
     parentName
   });
@@ -6318,7 +6321,7 @@ async function run$z(argv, importMeta, {
     verbose = false;
   }
   if (verbose) {
-    logger.logger.group('- ', parentName, config$z.commandName, ':');
+    logger.logger.group('- ', parentName, config$A.commandName, ':');
     logger.logger.group('- flags:', cli.flags);
     logger.logger.groupEnd();
     logger.logger.log('- target:', cwd);
@@ -6343,7 +6346,7 @@ async function run$z(argv, importMeta, {
   }
   logger.logger.warn('Warning: This will approximate your Conda dependencies using PyPI. We do not yet officially support Conda. Use at your own risk.');
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$w);
+    logger.logger.log(DRY_RUN_BAILING_NOW$x);
     return;
   }
   await handleManifestConda({
@@ -6356,9 +6359,9 @@ async function run$z(argv, importMeta, {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$v
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$w
 } = constants;
-const config$y = {
+const config$z = {
   commandName: 'gradle',
   description: '[beta] Use Gradle to generate a manifest file (`pom.xml`) for a Gradle/Java/Kotlin/etc project',
   hidden: false,
@@ -6411,16 +6414,16 @@ const config$y = {
   `
 };
 const cmdManifestGradle = {
-  description: config$y.description,
-  hidden: config$y.hidden,
-  run: run$y
+  description: config$z.description,
+  hidden: config$z.hidden,
+  run: run$z
 };
-async function run$y(argv, importMeta, {
+async function run$z(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$y,
+    config: config$z,
     importMeta,
     parentName
   });
@@ -6467,7 +6470,7 @@ async function run$y(argv, importMeta, {
     }
   }
   if (verbose) {
-    logger.logger.group('- ', parentName, config$y.commandName, ':');
+    logger.logger.group('- ', parentName, config$z.commandName, ':');
     logger.logger.group('- flags:', cli.flags);
     logger.logger.groupEnd();
     logger.logger.log('- input:', cli.input);
@@ -6495,7 +6498,7 @@ async function run$y(argv, importMeta, {
     logger.logger.groupEnd();
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$v);
+    logger.logger.log(DRY_RUN_BAILING_NOW$w);
     return;
   }
   await convertGradleToMaven({
@@ -6507,7 +6510,7 @@ async function run$y(argv, importMeta, {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$u
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$v
 } = constants;
 
 // TODO: we may want to dedupe some pieces for all gradle languages. I think it
@@ -6515,7 +6518,7 @@ const {
 //       sense for the help panels to note the requested language, rather than
 //       `socket manifest kotlin` to print help screens with `gradle` as the
 //       command. Room for improvement.
-const config$x = {
+const config$y = {
   commandName: 'kotlin',
   description: '[beta] Use Gradle to generate a manifest file (`pom.xml`) for a Kotlin project',
   hidden: false,
@@ -6568,16 +6571,16 @@ const config$x = {
   `
 };
 const cmdManifestKotlin = {
-  description: config$x.description,
-  hidden: config$x.hidden,
-  run: run$x
+  description: config$y.description,
+  hidden: config$y.hidden,
+  run: run$y
 };
-async function run$x(argv, importMeta, {
+async function run$y(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$x,
+    config: config$y,
     importMeta,
     parentName
   });
@@ -6624,7 +6627,7 @@ async function run$x(argv, importMeta, {
     }
   }
   if (verbose) {
-    logger.logger.group('- ', parentName, config$x.commandName, ':');
+    logger.logger.group('- ', parentName, config$y.commandName, ':');
     logger.logger.group('- flags:', cli.flags);
     logger.logger.groupEnd();
     logger.logger.log('- input:', cli.input);
@@ -6652,7 +6655,7 @@ async function run$x(argv, importMeta, {
     logger.logger.groupEnd();
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$u);
+    logger.logger.log(DRY_RUN_BAILING_NOW$v);
     return;
   }
   await convertGradleToMaven({
@@ -6664,9 +6667,9 @@ async function run$x(argv, importMeta, {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$t
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$u
 } = constants;
-const config$w = {
+const config$x = {
   commandName: 'scala',
   description: "[beta] Generate a manifest file (`pom.xml`) from Scala's `build.sbt` file",
   hidden: false,
@@ -6732,16 +6735,16 @@ const config$w = {
   `
 };
 const cmdManifestScala = {
-  description: config$w.description,
-  hidden: config$w.hidden,
-  run: run$w
+  description: config$x.description,
+  hidden: config$x.hidden,
+  run: run$x
 };
-async function run$w(argv, importMeta, {
+async function run$x(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$w,
+    config: config$x,
     importMeta,
     parentName
   });
@@ -6802,7 +6805,7 @@ async function run$w(argv, importMeta, {
     verbose = false;
   }
   if (verbose) {
-    logger.logger.group('- ', parentName, config$w.commandName, ':');
+    logger.logger.group('- ', parentName, config$x.commandName, ':');
     logger.logger.group('- flags:', cli.flags);
     logger.logger.groupEnd();
     logger.logger.log('- input:', cli.input);
@@ -6831,7 +6834,7 @@ async function run$w(argv, importMeta, {
     logger.logger.groupEnd();
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$t);
+    logger.logger.log(DRY_RUN_BAILING_NOW$u);
     return;
   }
   await convertSbtToMaven({
@@ -6969,7 +6972,7 @@ async function setupManifestConfig(cwd, defaultOnReadError = false) {
       }
     default:
       {
-        result = canceledByUser();
+        result = canceledByUser$1();
       }
   }
   if (!result.ok || result.data.canceled) {
@@ -6992,12 +6995,12 @@ async function setupManifestConfig(cwd, defaultOnReadError = false) {
   })) {
     return await utils.writeSocketJson(cwd, socketJson);
   }
-  return canceledByUser();
+  return canceledByUser$1();
 }
 async function setupConda(config) {
   const on = await askForEnabled(!config.disabled);
   if (on === undefined) {
-    return canceledByUser();
+    return canceledByUser$1();
   } else if (on) {
     delete config.disabled;
   } else {
@@ -7005,7 +7008,7 @@ async function setupConda(config) {
   }
   const inf = await askForInputFile(config.infile || 'environment.yml');
   if (inf === undefined) {
-    return canceledByUser();
+    return canceledByUser$1();
   } else if (inf.trim() === '-') {
     config.stdin = true;
   } else {
@@ -7018,7 +7021,7 @@ async function setupConda(config) {
   }
   const stdout = await askForStdout(config.stdout);
   if (stdout === undefined) {
-    return canceledByUser();
+    return canceledByUser$1();
   } else if (stdout === 'yes') {
     config.stdout = true;
   } else if (stdout === 'no') {
@@ -7029,7 +7032,7 @@ async function setupConda(config) {
   if (!config.stdout) {
     const out = await askForOutputFile(config.outfile || 'requirements.txt');
     if (out === undefined) {
-      return canceledByUser();
+      return canceledByUser$1();
     } else if (out === '-') {
       config.stdout = true;
     } else {
@@ -7043,18 +7046,18 @@ async function setupConda(config) {
   }
   const verbose = await askForVerboseFlag(config.verbose);
   if (verbose === undefined) {
-    return canceledByUser();
+    return canceledByUser$1();
   } else if (verbose === 'yes' || verbose === 'no') {
     config.verbose = verbose === 'yes';
   } else {
     delete config.verbose;
   }
-  return notCanceled();
+  return notCanceled$1();
 }
 async function setupGradle(config) {
   const bin = await askForBin(config.bin || './gradlew');
   if (bin === undefined) {
-    return canceledByUser();
+    return canceledByUser$1();
   } else if (bin.trim()) {
     config.bin = bin.trim();
   } else {
@@ -7067,7 +7070,7 @@ async function setupGradle(config) {
     // validate: async string => bool
   });
   if (opts === undefined) {
-    return canceledByUser();
+    return canceledByUser$1();
   } else if (opts.trim()) {
     config.gradleOpts = opts.trim();
   } else {
@@ -7075,18 +7078,18 @@ async function setupGradle(config) {
   }
   const verbose = await askForVerboseFlag(config.verbose);
   if (verbose === undefined) {
-    return canceledByUser();
+    return canceledByUser$1();
   } else if (verbose === 'yes' || verbose === 'no') {
     config.verbose = verbose === 'yes';
   } else {
     delete config.verbose;
   }
-  return notCanceled();
+  return notCanceled$1();
 }
 async function setupSbt(config) {
   const bin = await askForBin(config.bin || 'sbt');
   if (bin === undefined) {
-    return canceledByUser();
+    return canceledByUser$1();
   } else if (bin.trim()) {
     config.bin = bin.trim();
   } else {
@@ -7099,7 +7102,7 @@ async function setupSbt(config) {
     // validate: async string => bool
   });
   if (opts === undefined) {
-    return canceledByUser();
+    return canceledByUser$1();
   } else if (opts.trim()) {
     config.sbtOpts = opts.trim();
   } else {
@@ -7107,7 +7110,7 @@ async function setupSbt(config) {
   }
   const stdout = await askForStdout(config.stdout);
   if (stdout === undefined) {
-    return canceledByUser();
+    return canceledByUser$1();
   } else if (stdout === 'yes') {
     config.stdout = true;
   } else if (stdout === 'no') {
@@ -7118,7 +7121,7 @@ async function setupSbt(config) {
   if (config.stdout !== true) {
     const out = await askForOutputFile(config.outfile || 'sbt.pom.xml');
     if (out === undefined) {
-      return canceledByUser();
+      return canceledByUser$1();
     } else if (out === '-') {
       config.stdout = true;
     } else {
@@ -7132,13 +7135,13 @@ async function setupSbt(config) {
   }
   const verbose = await askForVerboseFlag(config.verbose);
   if (verbose === undefined) {
-    return canceledByUser();
+    return canceledByUser$1();
   } else if (verbose === 'yes' || verbose === 'no') {
     config.verbose = verbose === 'yes';
   } else {
     delete config.verbose;
   }
-  return notCanceled();
+  return notCanceled$1();
 }
 async function askForStdout(defaultValue) {
   return await prompts.select({
@@ -7146,12 +7149,10 @@ async function askForStdout(defaultValue) {
     choices: [{
       name: 'no',
       value: 'no',
-      selected: defaultValue === false,
       description: 'Write output to a file, not stdout'
     }, {
       name: 'yes',
       value: 'yes',
-      selected: defaultValue === true,
       description: 'Print in stdout (this will supersede --out)'
     }, {
       name: '(leave default)',
@@ -7167,12 +7168,10 @@ async function askForEnabled(defaultValue) {
     choices: [{
       name: 'Enable',
       value: true,
-      selected: defaultValue === true,
       description: 'Generate manifest files for this language when detected'
     }, {
       name: 'Disable',
       value: false,
-      selected: defaultValue === false,
       description: 'Do not generate manifest files for this language when detected, unless explicitly asking for it'
     }, {
       name: 'Cancel',
@@ -7212,12 +7211,10 @@ async function askForVerboseFlag(current) {
     choices: [{
       name: 'no',
       value: 'no',
-      selected: current === false,
       description: 'Do not run this manifest in verbose mode'
     }, {
       name: 'yes',
       value: 'yes',
-      selected: current === true,
       description: 'Run this manifest in verbose mode'
     }, {
       name: '(leave default)',
@@ -7227,7 +7224,7 @@ async function askForVerboseFlag(current) {
     default: current === true ? 'yes' : current === false ? 'no' : ''
   });
 }
-function canceledByUser() {
+function canceledByUser$1() {
   logger.logger.log('');
   logger.logger.info('User canceled');
   logger.logger.log('');
@@ -7238,7 +7235,7 @@ function canceledByUser() {
     }
   };
 }
-function notCanceled() {
+function notCanceled$1() {
   return {
     ok: true,
     data: {
@@ -7253,9 +7250,9 @@ async function handleManifestSetup(cwd, defaultOnReadError) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$s
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$t
 } = constants;
-const config$v = {
+const config$w = {
   commandName: 'setup',
   description: 'Start interactive configurator to customize default flag values for `socket manifest` in this dir',
   hidden: false,
@@ -7299,16 +7296,16 @@ const config$v = {
   `
 };
 const cmdManifestSetup = {
-  description: config$v.description,
-  hidden: config$v.hidden,
-  run: run$v
+  description: config$w.description,
+  hidden: config$w.hidden,
+  run: run$w
 };
-async function run$v(argv, importMeta, {
+async function run$w(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$v,
+    config: config$w,
     importMeta,
     parentName
   });
@@ -7320,13 +7317,13 @@ async function run$v(argv, importMeta, {
   // If given path is absolute then cwd should not affect it.
   cwd = path.resolve(process.cwd(), cwd);
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$s);
+    logger.logger.log(DRY_RUN_BAILING_NOW$t);
     return;
   }
   await handleManifestSetup(cwd, Boolean(defaultOnReadError));
 }
 
-const config$u = {
+const config$v = {
   commandName: 'manifest',
   description: 'Generate a dependency manifest for given file or dir',
   hidden: false,
@@ -7334,11 +7331,11 @@ const config$u = {
     ...utils.commonFlags
   }};
 const cmdManifest = {
-  description: config$u.description,
-  hidden: config$u.hidden,
-  run: run$u
+  description: config$v.description,
+  hidden: config$v.hidden,
+  run: run$v
 };
-async function run$u(argv, importMeta, {
+async function run$v(argv, importMeta, {
   parentName
 }) {
   await utils.meowWithSubcommands({
@@ -7353,23 +7350,23 @@ async function run$u(argv, importMeta, {
     argv,
     aliases: {
       yolo: {
-        description: config$u.description,
+        description: config$v.description,
         hidden: true,
         argv: ['auto']
       }
     },
-    description: config$u.description,
+    description: config$v.description,
     importMeta,
-    flags: config$u.flags,
-    name: `${parentName} ${config$u.commandName}`
+    flags: config$v.flags,
+    name: `${parentName} ${config$v.commandName}`
   });
 }
 
 const require$3 =Module.createRequire(require$$0.pathToFileURL(__filename).href)
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$r
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$s
 } = constants;
-const config$t = {
+const config$u = {
   commandName: 'npm',
   description: `npm wrapper functionality`,
   hidden: false,
@@ -7382,21 +7379,21 @@ const config$t = {
   `
 };
 const cmdNpm = {
-  description: config$t.description,
-  hidden: config$t.hidden,
-  run: run$t
+  description: config$u.description,
+  hidden: config$u.hidden,
+  run: run$u
 };
-async function run$t(argv, importMeta, {
+async function run$u(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$t,
+    config: config$u,
     importMeta,
     parentName
   });
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$r);
+    logger.logger.log(DRY_RUN_BAILING_NOW$s);
     return;
   }
 
@@ -7407,9 +7404,9 @@ async function run$t(argv, importMeta, {
 
 const require$2 =Module.createRequire(require$$0.pathToFileURL(__filename).href)
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$q
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$r
 } = constants;
-const config$s = {
+const config$t = {
   commandName: 'npx',
   description: `npx wrapper functionality`,
   hidden: false,
@@ -7422,21 +7419,21 @@ const config$s = {
   `
 };
 const cmdNpx = {
-  description: config$s.description,
-  hidden: config$s.hidden,
-  run: run$s
+  description: config$t.description,
+  hidden: config$t.hidden,
+  run: run$t
 };
-async function run$s(argv, importMeta, {
+async function run$t(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$s,
+    config: config$t,
     importMeta,
     parentName
   });
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$q);
+    logger.logger.log(DRY_RUN_BAILING_NOW$r);
     return;
   }
 
@@ -7446,9 +7443,9 @@ async function run$s(argv, importMeta, {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$p
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$q
 } = constants;
-const config$r = {
+const config$s = {
   commandName: 'oops',
   description: 'Trigger an intentional error (for development)',
   hidden: true,
@@ -7464,16 +7461,16 @@ const config$r = {
   `
 };
 const cmdOops = {
-  description: config$r.description,
-  hidden: config$r.hidden,
-  run: run$r
+  description: config$s.description,
+  hidden: config$s.hidden,
+  run: run$s
 };
-async function run$r(argv, importMeta, {
+async function run$s(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$r,
+    config: config$s,
     importMeta,
     parentName
   });
@@ -7482,7 +7479,7 @@ async function run$r(argv, importMeta, {
     markdown
   } = cli.flags;
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$p);
+    logger.logger.log(DRY_RUN_BAILING_NOW$q);
     return;
   }
   if (json) {
@@ -8238,9 +8235,9 @@ async function handleOptimize({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$o
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$p
 } = constants;
-const config$q = {
+const config$r = {
   commandName: 'optimize',
   description: 'Optimize dependencies with @socketregistry overrides',
   hidden: false,
@@ -8270,16 +8267,16 @@ const config$q = {
   `
 };
 const cmdOptimize = {
-  description: config$q.description,
-  hidden: config$q.hidden,
-  run: run$q
+  description: config$r.description,
+  hidden: config$r.hidden,
+  run: run$r
 };
-async function run$q(argv, importMeta, {
+async function run$r(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$q,
+    config: config$r,
     importMeta,
     parentName
   });
@@ -8297,7 +8294,7 @@ async function run$q(argv, importMeta, {
   // If given path is absolute then cwd should not affect it.
   cwd = path.resolve(process.cwd(), cwd);
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$o);
+    logger.logger.log(DRY_RUN_BAILING_NOW$p);
     return;
   }
   await handleOptimize({
@@ -8373,9 +8370,9 @@ async function handleOrganizationList(outputKind = 'text') {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$n
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$o
 } = constants;
-const config$p = {
+const config$q = {
   commandName: 'list',
   description: 'List organizations associated with the API key used',
   hidden: false,
@@ -8392,20 +8389,20 @@ const config$p = {
       - Permissions: none (does need a token)
 
     Options
-      ${utils.getFlagListOutput(config$p.flags, 6)}
+      ${utils.getFlagListOutput(config$q.flags, 6)}
   `
 };
 const cmdOrganizationList = {
-  description: config$p.description,
-  hidden: config$p.hidden,
-  run: run$p
+  description: config$q.description,
+  hidden: config$q.hidden,
+  run: run$q
 };
-async function run$p(argv, importMeta, {
+async function run$q(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$p,
+    config: config$q,
     importMeta,
     parentName
   });
@@ -8432,7 +8429,7 @@ async function run$p(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$n);
+    logger.logger.log(DRY_RUN_BAILING_NOW$o);
     return;
   }
   await handleOrganizationList(outputKind);
@@ -8478,11 +8475,11 @@ async function handleLicensePolicy(orgSlug, outputKind) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$m
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$n
 } = constants;
 
 // TODO: secret toplevel alias `socket license policy`?
-const config$o = {
+const config$p = {
   commandName: 'license',
   description: 'Retrieve the license policy of an organization',
   hidden: true,
@@ -8508,7 +8505,7 @@ const config$o = {
       - Permissions: license-policy:read
 
     Options
-      ${utils.getFlagListOutput(config$o.flags, 6)}
+      ${utils.getFlagListOutput(config$p.flags, 6)}
 
     Your API token will need the \`license-policy:read\` permission otherwise
     the request will fail with an authentication error.
@@ -8519,16 +8516,16 @@ const config$o = {
   `
 };
 const cmdOrganizationPolicyLicense = {
-  description: config$o.description,
-  hidden: config$o.hidden,
-  run: run$o
+  description: config$p.description,
+  hidden: config$p.hidden,
+  run: run$p
 };
-async function run$o(argv, importMeta, {
+async function run$p(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$o,
+    config: config$p,
     importMeta,
     parentName
   });
@@ -8565,7 +8562,7 @@ async function run$o(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$m);
+    logger.logger.log(DRY_RUN_BAILING_NOW$n);
     return;
   }
   await handleLicensePolicy(orgSlug, outputKind);
@@ -8612,11 +8609,11 @@ async function handleSecurityPolicy(orgSlug, outputKind) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$l
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$m
 } = constants;
 
 // TODO: secret toplevel alias `socket security policy`?
-const config$n = {
+const config$o = {
   commandName: 'security',
   description: 'Retrieve the security policy of an organization',
   hidden: true,
@@ -8642,7 +8639,7 @@ const config$n = {
       - Permissions: security-policy:read
 
     Options
-      ${utils.getFlagListOutput(config$n.flags, 6)}
+      ${utils.getFlagListOutput(config$o.flags, 6)}
 
     Your API token will need the \`security-policy:read\` permission otherwise
     the request will fail with an authentication error.
@@ -8653,16 +8650,16 @@ const config$n = {
   `
 };
 const cmdOrganizationPolicyPolicy = {
-  description: config$n.description,
-  hidden: config$n.hidden,
-  run: run$n
+  description: config$o.description,
+  hidden: config$o.hidden,
+  run: run$o
 };
-async function run$n(argv, importMeta, {
+async function run$o(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$n,
+    config: config$o,
     importMeta,
     parentName
   });
@@ -8699,7 +8696,7 @@ async function run$n(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$l);
+    logger.logger.log(DRY_RUN_BAILING_NOW$m);
     return;
   }
   await handleSecurityPolicy(orgSlug, outputKind);
@@ -8768,9 +8765,9 @@ async function handleQuota(outputKind = 'text') {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$k
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$l
 } = constants;
-const config$m = {
+const config$n = {
   commandName: 'quota',
   description: 'List organizations associated with the API key used',
   hidden: true,
@@ -8783,20 +8780,20 @@ const config$m = {
       $ ${command}
 
     Options
-      ${utils.getFlagListOutput(config$m.flags, 6)}
+      ${utils.getFlagListOutput(config$n.flags, 6)}
   `
 };
 const cmdOrganizationQuota = {
-  description: config$m.description,
-  hidden: config$m.hidden,
-  run: run$m
+  description: config$n.description,
+  hidden: config$n.hidden,
+  run: run$n
 };
-async function run$m(argv, importMeta, {
+async function run$n(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$m,
+    config: config$n,
     importMeta,
     parentName
   });
@@ -8821,7 +8818,7 @@ async function run$m(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$k);
+    logger.logger.log(DRY_RUN_BAILING_NOW$l);
     return;
   }
   await handleQuota(outputKind);
@@ -9069,9 +9066,9 @@ function parsePackageSpecifiers(ecosystem, pkgs) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$j
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$k
 } = constants;
-const config$l = {
+const config$m = {
   commandName: 'score',
   description: '[beta] Look up score for one package which reflects all of its transitive dependencies as well',
   hidden: false,
@@ -9113,16 +9110,16 @@ const config$l = {
   `
 };
 const cmdPackageScore = {
-  description: config$l.description,
-  hidden: config$l.hidden,
-  run: run$l
+  description: config$m.description,
+  hidden: config$m.hidden,
+  run: run$m
 };
-async function run$l(argv, importMeta, {
+async function run$m(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$l,
+    config: config$m,
     importMeta,
     parentName
   });
@@ -9164,7 +9161,7 @@ async function run$l(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$j);
+    logger.logger.log(DRY_RUN_BAILING_NOW$k);
     return;
   }
   await handlePurlDeepScore(purls[0] || '', outputKind);
@@ -9301,9 +9298,9 @@ async function handlePurlsShallowScore({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$i
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$j
 } = constants;
-const config$k = {
+const config$l = {
   commandName: 'shallow',
   description: '[beta] Look up info regarding one or more packages but not their transitives',
   hidden: false,
@@ -9345,23 +9342,23 @@ const config$k = {
   `
 };
 const cmdPackageShallow = {
-  description: config$k.description,
-  hidden: config$k.hidden,
+  description: config$l.description,
+  hidden: config$l.hidden,
   alias: {
     shallowScore: {
-      description: config$k.description,
+      description: config$l.description,
       hidden: true,
       argv: []
     }
   },
-  run: run$k
+  run: run$l
 };
-async function run$k(argv, importMeta, {
+async function run$l(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$k,
+    config: config$l,
     importMeta,
     parentName
   });
@@ -9396,7 +9393,7 @@ async function run$k(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$i);
+    logger.logger.log(DRY_RUN_BAILING_NOW$j);
     return;
   }
   await handlePurlsShallowScore({
@@ -9450,10 +9447,10 @@ async function runRawNpm(argv) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$h,
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$i,
   NPM
 } = constants;
-const config$j = {
+const config$k = {
   commandName: 'raw-npm',
   description: `Temporarily disable the Socket ${NPM} wrapper`,
   hidden: false,
@@ -9467,21 +9464,21 @@ const config$j = {
   `
 };
 const cmdRawNpm = {
-  description: config$j.description,
-  hidden: config$j.hidden,
-  run: run$j
+  description: config$k.description,
+  hidden: config$k.hidden,
+  run: run$k
 };
-async function run$j(argv, importMeta, {
+async function run$k(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$j,
+    config: config$k,
     importMeta,
     parentName
   });
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$h);
+    logger.logger.log(DRY_RUN_BAILING_NOW$i);
     return;
   }
   await runRawNpm(argv);
@@ -9506,10 +9503,10 @@ async function runRawNpx(argv) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$g,
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$h,
   NPX
 } = constants;
-const config$i = {
+const config$j = {
   commandName: 'raw-npx',
   description: `Temporarily disable the Socket ${NPX} wrapper`,
   hidden: false,
@@ -9523,27 +9520,27 @@ const config$i = {
   `
 };
 const cmdRawNpx = {
-  description: config$i.description,
-  hidden: config$i.hidden,
-  run: run$i
+  description: config$j.description,
+  hidden: config$j.hidden,
+  run: run$j
 };
-async function run$i(argv, importMeta, {
+async function run$j(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$i,
+    config: config$j,
     importMeta,
     parentName
   });
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$g);
+    logger.logger.log(DRY_RUN_BAILING_NOW$h);
     return;
   }
   await runRawNpx(argv);
 }
 
-const config$h = {
+const config$i = {
   commandName: 'create',
   description: '[Deprecated] Create a project report',
   hidden: false,
@@ -9557,16 +9554,16 @@ const config$h = {
   `
 };
 const cmdReportCreate = {
-  description: config$h.description,
-  hidden: config$h.hidden,
-  run: run$h
+  description: config$i.description,
+  hidden: config$i.hidden,
+  run: run$i
 };
-async function run$h(argv, importMeta, {
+async function run$i(argv, importMeta, {
   parentName
 }) {
   utils.meowOrExit({
     argv,
-    config: config$h,
+    config: config$i,
     importMeta,
     parentName
   });
@@ -9574,7 +9571,7 @@ async function run$h(argv, importMeta, {
   process.exitCode = 1;
 }
 
-const config$g = {
+const config$h = {
   commandName: 'view',
   description: '[Deprecated] View a project report',
   hidden: false,
@@ -9588,16 +9585,16 @@ const config$g = {
   `
 };
 const cmdReportView = {
-  description: config$g.description,
-  hidden: config$g.hidden,
-  run: run$g
+  description: config$h.description,
+  hidden: config$h.hidden,
+  run: run$h
 };
-async function run$g(argv, importMeta, {
+async function run$h(argv, importMeta, {
   parentName
 }) {
   utils.meowOrExit({
     argv,
-    config: config$g,
+    config: config$h,
     importMeta,
     parentName
   });
@@ -9685,9 +9682,9 @@ async function handleCreateRepo({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$f
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$g
 } = constants;
-const config$f = {
+const config$g = {
   commandName: 'create',
   description: 'Create a repository in an organization',
   hidden: false,
@@ -9750,16 +9747,16 @@ const config$f = {
   `
 };
 const cmdReposCreate = {
-  description: config$f.description,
-  hidden: config$f.hidden,
-  run: run$f
+  description: config$g.description,
+  hidden: config$g.hidden,
+  run: run$g
 };
-async function run$f(argv, importMeta, {
+async function run$g(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$f,
+    config: config$g,
     importMeta,
     parentName
   });
@@ -9804,7 +9801,7 @@ async function run$f(argv, importMeta, {
     return;
   }
   if (dryRun) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$f);
+    logger.logger.log(DRY_RUN_BAILING_NOW$g);
     return;
   }
   await handleCreateRepo({
@@ -9847,9 +9844,9 @@ async function handleDeleteRepo(orgSlug, repoName, outputKind) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$e
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$f
 } = constants;
-const config$e = {
+const config$f = {
   commandName: 'del',
   description: 'Delete a repository in an organization',
   hidden: false,
@@ -9882,16 +9879,16 @@ const config$e = {
   `
 };
 const cmdReposDel = {
-  description: config$e.description,
-  hidden: config$e.hidden,
-  run: run$e
+  description: config$f.description,
+  hidden: config$f.hidden,
+  run: run$f
 };
-async function run$e(argv, importMeta, {
+async function run$f(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$e,
+    config: config$f,
     importMeta,
     parentName
   });
@@ -9928,7 +9925,7 @@ async function run$e(argv, importMeta, {
     return;
   }
   if (dryRun) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$e);
+    logger.logger.log(DRY_RUN_BAILING_NOW$f);
     return;
   }
   await handleDeleteRepo(orgSlug, repoName, outputKind);
@@ -10090,9 +10087,9 @@ async function handleListRepos({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$d
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$e
 } = constants;
-const config$d = {
+const config$e = {
   commandName: 'list',
   description: 'List repositories in an organization',
   hidden: false,
@@ -10153,16 +10150,16 @@ const config$d = {
   `
 };
 const cmdReposList = {
-  description: config$d.description,
-  hidden: config$d.hidden,
-  run: run$d
+  description: config$e.description,
+  hidden: config$e.hidden,
+  run: run$e
 };
-async function run$d(argv, importMeta, {
+async function run$e(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$d,
+    config: config$e,
     importMeta,
     parentName
   });
@@ -10207,7 +10204,7 @@ async function run$d(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$d);
+    logger.logger.log(DRY_RUN_BAILING_NOW$e);
     return;
   }
   await handleListRepos({
@@ -10279,9 +10276,9 @@ async function handleUpdateRepo({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$c
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$d
 } = constants;
-const config$c = {
+const config$d = {
   commandName: 'update',
   description: 'Update a repository in an organization',
   hidden: false,
@@ -10344,16 +10341,16 @@ const config$c = {
   `
 };
 const cmdReposUpdate = {
-  description: config$c.description,
-  hidden: config$c.hidden,
-  run: run$c
+  description: config$d.description,
+  hidden: config$d.hidden,
+  run: run$d
 };
-async function run$c(argv, importMeta, {
+async function run$d(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$c,
+    config: config$d,
     importMeta,
     parentName
   });
@@ -10398,7 +10395,7 @@ async function run$c(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$c);
+    logger.logger.log(DRY_RUN_BAILING_NOW$d);
     return;
   }
   await handleUpdateRepo({
@@ -10466,9 +10463,9 @@ async function handleViewRepo(orgSlug, repoName, outputKind) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$b
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$c
 } = constants;
-const config$b = {
+const config$c = {
   commandName: 'view',
   description: 'View repositories in an organization',
   hidden: false,
@@ -10506,16 +10503,16 @@ const config$b = {
   `
 };
 const cmdReposView = {
-  description: config$b.description,
-  hidden: config$b.hidden,
-  run: run$b
+  description: config$c.description,
+  hidden: config$c.hidden,
+  run: run$c
 };
-async function run$b(argv, importMeta, {
+async function run$c(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$b,
+    config: config$c,
     importMeta,
     parentName
   });
@@ -10565,7 +10562,7 @@ async function run$b(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$b);
+    logger.logger.log(DRY_RUN_BAILING_NOW$c);
     return;
   }
   await handleViewRepo(orgSlug, String(repoName), outputKind);
@@ -10613,9 +10610,9 @@ async function suggestTarget() {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$a
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$b
 } = constants;
-const config$a = {
+const config$b = {
   commandName: 'create',
   description: 'Create a scan',
   hidden: false,
@@ -10624,13 +10621,11 @@ const config$a = {
     ...utils.outputFlags,
     autoManifest: {
       type: 'boolean',
-      default: false,
       description: 'Run `socket manifest auto` before collecting manifest files? This would be necessary for languages like Scala, Gradle, and Kotlin, See `socket manifest auto --help`.'
     },
     branch: {
       type: 'string',
       shortFlag: 'b',
-      default: 'socket-default-branch',
       description: 'Branch name'
     },
     commitMessage: {
@@ -10682,12 +10677,10 @@ const config$a = {
     repo: {
       type: 'string',
       shortFlag: 'r',
-      default: 'socket-default-repository',
       description: 'Repository name'
     },
     report: {
       type: 'boolean',
-      default: false,
       description: 'Wait for the scan creation to complete, then basically run `socket scan report` on it'
     },
     setAsAlertsPage: {
@@ -10706,25 +10699,29 @@ const config$a = {
   // TODO: your project's "socket.yml" file's "projectIgnorePaths"
   help: (command, config) => `
     Usage
-      $ ${command} [...options]${utils.isTestingV1() ? '' : ' <org>'} <TARGET> [TARGET...]
+      $ ${command} [options]${utils.isTestingV1() ? '' : ' <org>'} [TARGET...]
 
     API Token Requirements
       - Quota: 1 unit
       - Permissions: full-scans:create
 
-    Uploads the specified "package.json" and lock files for JavaScript, Python,
-    Go, Scala, Gradle, and Kotlin dependency manifests.
-    If any folder is specified, the ones found in there recursively are uploaded.
-
-    Supports globbing such as "**/package.json", "**/requirements.txt", etc.
+    Options
+      ${utils.getFlagListOutput(config.flags, 6)}
 
-    Ignores any file specified in your project's ".gitignore" and also has a
-    sensible set of default ignores from the "ignore-by-default" module.
+    Uploads the specified dependency manifest files for Go, Gradle, JavaScript,
+    Kotlin, Python, and Scala. Files like "package.json" and "requirements.txt".
+    If any folder is specified, the ones found in there recursively are uploaded.
 
-    TARGET should be a FILE or DIR that _must_ be inside the CWD.
+    Details on TARGET:
 
-    When a FILE is given only that FILE is targeted. Otherwise any eligible
-    files in the given DIR will be considered.
+    - Defaults to the current dir (cwd) if none given
+    - Multiple targets can be specified
+    - If a target is a file, only that file is checked
+    - If it is a dir, the dir is scanned for any supported manifest files
+    - Dirs MUST be within the current dir (cwd), you can use --cwd to change it
+    - Supports globbing such as "**/package.json", "**/requirements.txt", etc.
+    - Ignores any file specified in your project's ".gitignore"
+    - Also a sensible set of default ignores from the "ignore-by-default" module
 
     The --repo and --branch flags tell Socket to associate this Scan with that
     repo/branch. The names will show up on your dashboard on the Socket website.
@@ -10739,31 +10736,28 @@ const config$a = {
     this by using --no-setAsAlertsPage. This flag is ignored for any branch that
     is not designated as the "default branch". It is disabled when using --tmp.
 
-    Options
-      ${utils.getFlagListOutput(config.flags, 6)}
+    You can use \`socket scan setup\` to configure certain repo flag defaults.
 
     Examples
-      $ ${command}${utils.isTestingV1() ? '' : ' FakeOrg'} .
+      $ ${command}${utils.isTestingV1() ? '' : ' FakeOrg'}
       $ ${command} --repo=test-repo --branch=main${utils.isTestingV1() ? '' : ' FakeOrg'} ./package.json
   `
 };
 const cmdScanCreate = {
-  description: config$a.description,
-  hidden: config$a.hidden,
-  run: run$a
+  description: config$b.description,
+  hidden: config$b.hidden,
+  run: run$b
 };
-async function run$a(argv, importMeta, {
+async function run$b(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$a,
+    config: config$b,
     importMeta,
     parentName
   });
   const {
-    autoManifest = false,
-    branch: branchName = 'socket-default-branch',
     commitHash,
     commitMessage,
     committers,
@@ -10776,11 +10770,15 @@ async function run$a(argv, importMeta, {
     org: orgFlag,
     pullRequest,
     readOnly,
-    repo: repoName = 'socket-default-repository',
-    report,
     setAsAlertsPage: pendingHeadFlag,
     tmp
   } = cli.flags;
+  let {
+    autoManifest,
+    branch: branchName,
+    repo: repoName,
+    report
+  } = cli.flags;
   const outputKind = utils.getOutputKind(json, markdown);
   const pendingHead = tmp ? false : pendingHeadFlag;
   let [orgSlug, defaultOrgSlug] = await utils.determineOrgSlug(String(orgFlag || ''), cli.input[0] || '', interactive, dryRun);
@@ -10788,8 +10786,45 @@ async function run$a(argv, importMeta, {
     // Tmp. just for TS. will drop this later.
     defaultOrgSlug = '';
   }
-  let targets = cli.input.slice(utils.isTestingV1() || defaultOrgSlug ? 0 : 1);
-  const cwd = cwdOverride && cwdOverride !== 'process.cwd()' ? String(cwdOverride) : process.cwd();
+
+  // Accept zero or more paths. Default to cwd() if none given.
+  let targets = cli.input.slice(utils.isTestingV1() || defaultOrgSlug ? 0 : 1) || process.cwd();
+  const cwd = cwdOverride && cwdOverride !== 'process.cwd()' ? path.resolve(process.cwd(), String(cwdOverride)) : process.cwd();
+  const socketJson = await utils.readOrDefaultSocketJson(cwd);
+
+  // Note: This needs meow booleanDefault=undefined
+  if (typeof autoManifest !== 'boolean') {
+    if (socketJson.defaults?.scan?.create?.autoManifest !== undefined) {
+      autoManifest = socketJson.defaults.scan.create.autoManifest;
+      logger.logger.info('Using default --autoManifest from socket.json:', autoManifest);
+    } else {
+      autoManifest = false;
+    }
+  }
+  if (!branchName) {
+    if (socketJson.defaults?.scan?.create?.branch) {
+      branchName = socketJson.defaults.scan.create.branch;
+      logger.logger.info('Using default --branch from socket.json:', branchName);
+    } else {
+      branchName = 'socket-default-branch';
+    }
+  }
+  if (!repoName) {
+    if (socketJson.defaults?.scan?.create?.repo) {
+      repoName = socketJson.defaults.scan.create.repo;
+      logger.logger.info('Using default --repo from socket.json:', repoName);
+    } else {
+      repoName = 'socket-default-repository';
+    }
+  }
+  if (typeof report !== 'boolean') {
+    if (socketJson.defaults?.scan?.create?.report !== undefined) {
+      report = socketJson.defaults.scan.create.report;
+      logger.logger.info('Using default --report from socket.json:', report);
+    } else {
+      report = false;
+    }
+  }
 
   // We're going to need an api token to suggest data because those suggestions
   // must come from data we already know. Don't error on missing api token yet.
@@ -10817,7 +10852,6 @@ async function run$a(argv, importMeta, {
       updatedInput = true;
     }
   }
-  const socketJson = await utils.readOrDefaultSocketJson(cwd);
   const detected = await detectManifestActions(socketJson, cwd);
   if (detected.count > 0 && !autoManifest) {
     logger.logger.info(`Detected ${detected.count} manifest targets we could try to generate. Please set the --autoManifest flag if you want to include languages covered by \`socket manifest auto\` in the Scan.`);
@@ -10870,7 +10904,7 @@ async function run$a(argv, importMeta, {
 
   // Note exiting earlier to skirt a hidden auth requirement
   if (dryRun) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$a);
+    logger.logger.log(DRY_RUN_BAILING_NOW$b);
     return;
   }
   await handleCreateNewScan({
@@ -10924,9 +10958,9 @@ async function handleDeleteScan(orgSlug, scanId, outputKind) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$9
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$a
 } = constants;
-const config$9 = {
+const config$a = {
   commandName: 'del',
   description: 'Delete a scan',
   hidden: false,
@@ -10959,16 +10993,16 @@ const config$9 = {
   `
 };
 const cmdScanDel = {
-  description: config$9.description,
-  hidden: config$9.hidden,
-  run: run$9
+  description: config$a.description,
+  hidden: config$a.hidden,
+  run: run$a
 };
-async function run$9(argv, importMeta, {
+async function run$a(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$9,
+    config: config$a,
     importMeta,
     parentName
   });
@@ -11005,7 +11039,7 @@ async function run$9(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$9);
+    logger.logger.log(DRY_RUN_BAILING_NOW$a);
     return;
   }
   await handleDeleteScan(orgSlug, scanId, outputKind);
@@ -11199,14 +11233,14 @@ async function handleDiffScan({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$8,
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$9,
   SOCKET_WEBSITE_URL: SOCKET_WEBSITE_URL$1
 } = constants;
 const SOCKET_SBOM_URL_PREFIX = `${SOCKET_WEBSITE_URL$1}/dashboard/org/SocketDev/sbom/`;
 const {
   length: SOCKET_SBOM_URL_PREFIX_LENGTH
 } = SOCKET_SBOM_URL_PREFIX;
-const config$8 = {
+const config$9 = {
   commandName: 'diff',
   description: 'See what changed between two Scans',
   hidden: false,
@@ -11258,16 +11292,16 @@ const config$8 = {
   `
 };
 const cmdScanDiff = {
-  description: config$8.description,
-  hidden: config$8.hidden,
-  run: run$8
+  description: config$9.description,
+  hidden: config$9.hidden,
+  run: run$9
 };
-async function run$8(argv, importMeta, {
+async function run$9(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$8,
+    config: config$9,
     importMeta,
     parentName
   });
@@ -11319,7 +11353,7 @@ async function run$8(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$8);
+    logger.logger.log(DRY_RUN_BAILING_NOW$9);
     return;
   }
   await handleDiffScan({
@@ -11951,9 +11985,9 @@ async function handleCreateGithubScan({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$7
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$8
 } = constants;
-const config$7 = {
+const config$8 = {
   commandName: 'github',
   description: 'Create a scan for given GitHub repo',
   hidden: true,
@@ -11971,7 +12005,6 @@ const config$7 = {
     },
     githubApiUrl: {
       type: 'string',
-      default: 'https://api.github.com',
       description: 'Base URL of the GitHub API (default: https://api.github.com)'
     },
     interactive: {
@@ -11994,7 +12027,7 @@ const config$7 = {
   },
   help: (command, config) => `
     Usage
-      $ ${command}
+      $ ${command} [options] [CWD=.]
 
     API Token Requirements
       - Quota: 1 unit
@@ -12010,49 +12043,85 @@ const config$7 = {
     requires local access to the repo while this command runs entirely through the
     GitHub for file access.
 
+    You can use \`socket scan setup\` to configure certain repo flag defaults.
+
     Options
       ${utils.getFlagListOutput(config.flags, 6)}
 
     Examples
       $ ${command}
+      $ ${command} ./proj
   `
 };
 const cmdScanGithub = {
-  description: config$7.description,
-  hidden: config$7.hidden,
-  run: run$7
+  description: config$8.description,
+  hidden: config$8.hidden,
+  run: run$8
 };
-async function run$7(argv, importMeta, {
+async function run$8(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$7,
+    config: config$8,
     importMeta,
     parentName
   });
   const {
-    all = false,
     dryRun = false,
-    githubApiUrl = 'https://api.github.com',
     // Lazily access constants.ENV.SOCKET_CLI_GITHUB_TOKEN.
     githubToken = constants.ENV.SOCKET_CLI_GITHUB_TOKEN,
     interactive = true,
     json,
     markdown,
-    org: orgFlag,
-    orgGithub: orgGithubFlag,
+    org: orgFlag
+  } = cli.flags;
+  let {
+    all,
+    githubApiUrl,
+    orgGithub,
     repos
   } = cli.flags;
   const outputKind = utils.getOutputKind(json, markdown);
+  let [cwd = '.'] = cli.input;
+  // Note: path.resolve vs .join:
+  // If given path is absolute then cwd should not affect it.
+  cwd = path.resolve(process.cwd(), cwd);
   let [orgSlug, defaultOrgSlug] = await utils.determineOrgSlug(String(orgFlag || ''), cli.input[0] || '', interactive, dryRun);
   if (!defaultOrgSlug) {
     // Tmp. just for TS. will drop this later.
     defaultOrgSlug = '';
   }
-
-  // Default to Socket org slug. Often that's fine. Vanity and all that.
-  const orgGithub = orgGithubFlag || orgSlug;
+  const socketJson = await utils.readOrDefaultSocketJson(cwd);
+  if (all === undefined) {
+    if (socketJson.defaults?.scan?.github?.all !== undefined) {
+      all = socketJson.defaults?.scan?.github?.all;
+    } else {
+      all = false;
+    }
+  }
+  if (!githubApiUrl) {
+    if (socketJson.defaults?.scan?.github?.githubApiUrl !== undefined) {
+      githubApiUrl = socketJson.defaults.scan.github.githubApiUrl;
+    } else {
+      githubApiUrl = 'https://api.github.com';
+    }
+  }
+  if (!orgGithub) {
+    if (socketJson.defaults?.scan?.github?.orgGithub !== undefined) {
+      orgGithub = socketJson.defaults.scan.github.orgGithub;
+    } else {
+      // Default to Socket org slug. Often that's fine. Vanity and all that.
+      orgGithub = orgSlug;
+    }
+  }
+  if (!all && !repos) {
+    if (socketJson.defaults?.scan?.github?.repos !== undefined) {
+      repos = socketJson.defaults.scan.github.repos;
+    } else {
+      repos = '';
+    }
+  }
 
   // We're going to need an api token to suggest data because those suggestions
   // must come from data we already know. Don't error on missing api token yet.
@@ -12102,7 +12171,7 @@ async function run$7(argv, importMeta, {
 
   // Note exiting earlier to skirt a hidden auth requirement
   if (dryRun) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$7);
+    logger.logger.log(DRY_RUN_BAILING_NOW$8);
     return;
   }
   await handleCreateGithubScan({
@@ -12113,7 +12182,7 @@ async function run$7(argv, importMeta, {
     orgSlug,
     orgGithub,
     outputKind,
-    repos: String(repos || '')
+    repos
   });
 }
 
@@ -12219,9 +12288,9 @@ async function handleListScans({
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$6
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$7
 } = constants;
-const config$6 = {
+const config$7 = {
   commandName: 'list',
   description: 'List the scans for an organization',
   hidden: false,
@@ -12298,16 +12367,16 @@ const config$6 = {
   `
 };
 const cmdScanList = {
-  description: config$6.description,
-  hidden: config$6.hidden,
-  run: run$6
+  description: config$7.description,
+  hidden: config$7.hidden,
+  run: run$7
 };
-async function run$6(argv, importMeta, {
+async function run$7(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$6,
+    config: config$7,
     importMeta,
     parentName
   });
@@ -12346,7 +12415,7 @@ async function run$6(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$6);
+    logger.logger.log(DRY_RUN_BAILING_NOW$7);
     return;
   }
   await handleListScans({
@@ -12406,9 +12475,9 @@ async function handleOrgScanMetadata(orgSlug, scanId, outputKind) {
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$5
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$6
 } = constants;
-const config$5 = {
+const config$6 = {
   commandName: 'metadata',
   description: "Get a scan's metadata",
   hidden: false,
@@ -12441,16 +12510,16 @@ const config$5 = {
   `
 };
 const cmdScanMetadata = {
-  description: config$5.description,
-  hidden: config$5.hidden,
-  run: run$5
+  description: config$6.description,
+  hidden: config$6.hidden,
+  run: run$6
 };
-async function run$5(argv, importMeta, {
+async function run$6(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$5,
+    config: config$6,
     importMeta,
     parentName
   });
@@ -12493,16 +12562,16 @@ async function run$5(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$5);
+    logger.logger.log(DRY_RUN_BAILING_NOW$6);
     return;
   }
   await handleOrgScanMetadata(orgSlug, scanId, outputKind);
 }
 
 const {
-  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$4
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$5
 } = constants;
-const config$4 = {
+const config$5 = {
   commandName: 'report',
   description: 'Check whether a scan result passes the organizational policies (security, license)',
   hidden: false,
@@ -12565,16 +12634,16 @@ const config$4 = {
   `
 };
 const cmdScanReport = {
-  description: config$4.description,
-  hidden: config$4.hidden,
-  run: run$4
+  description: config$5.description,
+  hidden: config$5.hidden,
+  run: run$5
 };
-async function run$4(argv, importMeta, {
+async function run$5(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
     argv,
-    config: config$4,
+    config: config$5,
     importMeta,
     parentName
   });
@@ -12623,7 +12692,7 @@ async function run$4(argv, importMeta, {
     return;
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAILING_NOW$4);
+    logger.logger.log(DRY_RUN_BAILING_NOW$5);
     return;
   }
   await handleScanReport({
@@ -12638,6 +12707,366 @@ async function run$4(argv, importMeta, {
   });
 }
 
+async function outputScanConfigResult(result) {
+  if (!result.ok) {
+    process.exitCode = result.code ?? 1;
+  }
+  if (!result.ok) {
+    logger.logger.fail(utils.failMsgWithBadge(result.message, result.cause));
+    return;
+  }
+  logger.logger.log('');
+  logger.logger.log('Finished');
+  logger.logger.log('');
+}
+
+async function setupScanConfig(cwd, defaultOnReadError = false) {
+  const jsonPath = path.join(cwd, `socket.json`);
+  if (fs$1.existsSync(jsonPath)) {
+    logger.logger.info(`Found socket.json at ${jsonPath}`);
+  } else {
+    logger.logger.info(`No socket.json found at ${cwd}, will generate a new one`);
+  }
+  logger.logger.log('');
+  logger.logger.log('Note: This tool will set up flag and argument defaults for certain');
+  logger.logger.log('      CLI commands. You can still override them by explicitly');
+  logger.logger.log('      setting the flag. It is meant to be a convenience tool.');
+  logger.logger.log('');
+  logger.logger.log('This command will generate a `socket.json` file in the target cwd.');
+  logger.logger.log('You can choose to add this file to your repo (handy for collab)');
+  logger.logger.log('or to add it to the ignored files, or neither. This file is only');
+  logger.logger.log('used in CLI workflows.');
+  logger.logger.log('');
+  logger.logger.log('Note: For details on a flag you can run `socket <cmd> --help`');
+  logger.logger.log('');
+  const socketJsonResult = await utils.readSocketJson(cwd, defaultOnReadError);
+  if (!socketJsonResult.ok) {
+    return socketJsonResult;
+  }
+  const socketJson = socketJsonResult.data;
+  if (!socketJson.defaults) {
+    socketJson.defaults = {};
+  }
+  if (!socketJson.defaults.scan) {
+    socketJson.defaults.scan = {};
+  }
+  const targetCommand = await prompts.select({
+    message: 'Which scan command do you want to configure?',
+    choices: [{
+      name: 'socket scan create',
+      value: 'create'
+    }, {
+      name: 'socket scan github',
+      value: 'github'
+    }, {
+      name: '(cancel)',
+      value: '',
+      description: 'Exit configurator, make no changes'
+    }]
+  });
+  switch (targetCommand) {
+    case 'create':
+      {
+        if (!socketJson.defaults.scan.create) {
+          socketJson.defaults.scan.create = {};
+        }
+        const result = await configureScan(socketJson.defaults.scan.create);
+        if (!result.ok || result.data.canceled) {
+          return result;
+        }
+        break;
+      }
+    case 'github':
+      {
+        if (!socketJson.defaults.scan.github) {
+          socketJson.defaults.scan.github = {};
+        }
+        const result = await configureGithub(socketJson.defaults.scan.github);
+        if (!result.ok || result.data.canceled) {
+          return result;
+        }
+        break;
+      }
+    default:
+      {
+        return canceledByUser();
+      }
+  }
+  logger.logger.log('');
+  logger.logger.log('Setup complete. Writing socket.json');
+  logger.logger.log('');
+  if (await prompts.select({
+    message: `Do you want to write the new config to ${jsonPath} ?`,
+    choices: [{
+      name: 'yes',
+      value: true,
+      description: 'Update config'
+    }, {
+      name: 'no',
+      value: false,
+      description: 'Do not update the config'
+    }]
+  })) {
+    return await utils.writeSocketJson(cwd, socketJson);
+  }
+  return canceledByUser();
+}
+async function configureScan(config) {
+  const defaultRepoName = await prompts.input({
+    message: '(--repo) What repo name (slug) should be reported to Socket for this dir?',
+    default: config.repo || 'socket-default-repository',
+    required: false
+    // validate: async string => bool
+  });
+  if (defaultRepoName === undefined) {
+    return canceledByUser();
+  }
+  if (defaultRepoName.trim()) {
+    // Even if it's 'socket-default-repository' store it because if we change
+    // this default then an existing user probably would not expect the change?
+    config.repo = defaultRepoName.trim();
+  } else {
+    delete config.repo;
+  }
+  const defaultBranchName = await prompts.input({
+    message: '(--branch) What branch name (slug) should be reported to Socket for this dir?',
+    default: config.branch || 'socket-default-branch',
+    required: false
+    // validate: async string => bool
+  });
+  if (defaultBranchName === undefined) {
+    return canceledByUser();
+  }
+  if (defaultBranchName.trim()) {
+    // Even if it's 'socket-default-branch' store it because if we change
+    // this default then an existing user probably would not expect the change?
+    config.branch = defaultBranchName.trim();
+  } else {
+    delete config.branch;
+  }
+  const autoManifest = await prompts.select({
+    message: '(--autoManifest) Do you want to run `socket manifest auto` before creating a scan? You would need this for sbt, gradle, etc.',
+    choices: [{
+      name: 'no',
+      value: 'no',
+      description: 'Do not generate local manifest files'
+    }, {
+      name: 'yes',
+      value: 'yes',
+      description: 'Locally generate manifest files for languages like gradle, sbt, and conda (see `socket manifest auto`), before creating a scan'
+    }, {
+      name: '(leave default)',
+      value: '',
+      description: 'Do not store a setting for this'
+    }],
+    default: config.autoManifest === true ? 'yes' : config.autoManifest === false ? 'no' : ''
+  });
+  if (autoManifest === undefined) {
+    return canceledByUser();
+  }
+  if (autoManifest === 'yes') {
+    config.autoManifest = true;
+  } else if (autoManifest === 'no') {
+    config.autoManifest = false;
+  } else {
+    delete config.autoManifest;
+  }
+  const alwaysReport = await prompts.select({
+    message: '(--report) Do you want to enable --report by default?',
+    choices: [{
+      name: 'no',
+      value: 'no',
+      description: 'Do not wait for Scan result and report by default'
+    }, {
+      name: 'yes',
+      value: 'yes',
+      description: 'After submitting a Scan request, wait for scan to complete, then show a report (like --report would)'
+    }, {
+      name: '(leave default)',
+      value: '',
+      description: 'Do not store a setting for this'
+    }],
+    default: config.report === true ? 'yes' : config.report === false ? 'no' : ''
+  });
+  if (alwaysReport === undefined) {
+    return canceledByUser();
+  }
+  if (alwaysReport === 'yes') {
+    config.report = true;
+  } else if (alwaysReport === 'no') {
+    config.report = false;
+  } else {
+    delete config.report;
+  }
+  return notCanceled();
+}
+async function configureGithub(config) {
+  // Do not store the github API token. Just leads to a security rabbit hole.
+
+  const all = await prompts.select({
+    message: '(--all) Do you by default want to fetch all repos from the GitHub API and scan all known repos?',
+    choices: [{
+      name: 'no',
+      value: 'no',
+      description: 'Fetch repos if not given and ask which repo to run on'
+    }, {
+      name: 'yes',
+      value: 'yes',
+      description: 'Run on all remote repos by default'
+    }, {
+      name: '(leave default)',
+      value: '',
+      description: 'Do not store a setting for this'
+    }],
+    default: config.all === true ? 'yes' : config.all === false ? 'no' : ''
+  });
+  if (all === undefined) {
+    return canceledByUser();
+  }
+  if (all === 'yes') {
+    config.all = true;
+  } else if (all === 'no') {
+    config.all = false;
+  } else {
+    delete config.all;
+  }
+  if (!all) {
+    const defaultRepos = await prompts.input({
+      message: '(--repos) Please enter the default repos to run this on, leave empty (backspace) to fetch from GitHub and ask interactive',
+      default: config.repos,
+      required: false
+      // validate: async string => bool
+    });
+    if (defaultRepos === undefined) {
+      return canceledByUser();
+    }
+    if (defaultRepos.trim()) {
+      config.repos = defaultRepos.trim();
+    } else {
+      delete config.repos;
+    }
+  }
+  const defaultGithubApiUrl = await prompts.input({
+    message: '(--githubApiUrl) Do you want to override the default github url?',
+    default: config.githubApiUrl || 'https://api.github.com',
+    required: false
+    // validate: async string => bool
+  });
+  if (defaultGithubApiUrl === undefined) {
+    return canceledByUser();
+  }
+  if (defaultGithubApiUrl.trim() && defaultGithubApiUrl.trim() !== 'https://api.github.com') {
+    config.githubApiUrl = defaultGithubApiUrl.trim();
+  } else {
+    delete config.githubApiUrl;
+  }
+  const defaultOrgGithub = await prompts.input({
+    message: '(--orgGithub) Do you want to change the org slug that is used when talking to the GitHub API? Defaults to your Socket org slug.',
+    default: config.orgGithub || '',
+    required: false
+    // validate: async string => bool
+  });
+  if (defaultOrgGithub === undefined) {
+    return canceledByUser();
+  }
+  if (defaultOrgGithub.trim()) {
+    config.orgGithub = defaultOrgGithub.trim();
+  } else {
+    delete config.orgGithub;
+  }
+  return notCanceled();
+}
+function canceledByUser() {
+  logger.logger.log('');
+  logger.logger.info('User canceled');
+  logger.logger.log('');
+  return {
+    ok: true,
+    data: {
+      canceled: true
+    }
+  };
+}
+function notCanceled() {
+  return {
+    ok: true,
+    data: {
+      canceled: false
+    }
+  };
+}
+
+async function handleScanConfig(cwd, defaultOnReadError = false) {
+  const result = await setupScanConfig(cwd, defaultOnReadError);
+  await outputScanConfigResult(result);
+}
+
+const {
+  DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$4
+} = constants;
+const config$4 = {
+  commandName: 'setup',
+  description: 'Start interactive configurator to customize default flag values for `socket scan` in this dir',
+  hidden: false,
+  flags: {
+    ...utils.commonFlags,
+    defaultOnReadError: {
+      type: 'boolean',
+      description: 'If reading the socket.json fails, just use a default config? Warning: This might override the existing json file!'
+    }
+  },
+  help: (command, config) => `
+    Usage
+      $ ${command} [options] [CWD=.]
+
+    Options
+      ${utils.getFlagListOutput(config.flags, 6)}
+
+    Interactive configurator to create a local json file in the target directory
+    that helps to set flag defaults for \`socket scan create\`.
+
+    This helps to configure the (Socket reported) repo and branch names, as well
+    as which branch name is the "default branch" (main, master, etc). This way
+    you don't have to specify these flags when creating a scan in this dir.
+
+    This generated configuration file will only be used locally by the CLI. You
+    can commit it to the repo (useful for collaboration) or choose to add it to
+    your .gitignore all the same. Only this CLI will use it.
+
+    Examples
+
+      $ ${command}
+      $ ${command} ./proj
+  `
+};
+const cmdScanSetup = {
+  description: config$4.description,
+  hidden: config$4.hidden,
+  run: run$4
+};
+async function run$4(argv, importMeta, {
+  parentName
+}) {
+  const cli = utils.meowOrExit({
+    argv,
+    config: config$4,
+    importMeta,
+    parentName
+  });
+  const {
+    defaultOnReadError = false
+  } = cli.flags;
+  let [cwd = '.'] = cli.input;
+  // Note: path.resolve vs .join:
+  // If given path is absolute then cwd should not affect it.
+  cwd = path.resolve(process.cwd(), cwd);
+  if (cli.flags['dryRun']) {
+    logger.logger.log(DRY_RUN_BAILING_NOW$4);
+    return;
+  }
+  await handleScanConfig(cwd, Boolean(defaultOnReadError));
+}
+
 async function fetchScan(orgSlug, scanId) {
   const result = await utils.queryApiSafeText(`orgs/${orgSlug}/full-scans/${encodeURIComponent(scanId)}`, 'a scan');
   if (!result.ok) {
@@ -12887,6 +13316,7 @@ const cmdScan = {
       list: cmdScanList,
       metadata: cmdScanMetadata,
       report: cmdScanReport,
+      setup: cmdScanSetup,
       view: cmdScanView
     }, {
       aliases: {
@@ -13680,5 +14110,5 @@ void (async () => {
     await utils.captureException(e);
   }
 })();
-//# debugId=76d79333-6e40-4be1-bec3-54745a17aac6
+//# debugId=85371cb1-52db-4ec0-9bf0-f5efd9b6ee43
 //# sourceMappingURL=cli.js.map