---
name: "glab-dependency-firewall-ci-summary"
section: "1"
platform: "linux"
package: "glab"
version: "1.126.0-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/glab-dependency-firewall-ci-summary"
---

# glab-dependency-firewall-ci-summary(1)

Summarize Dependency Firewall activity from the CI log. (BETA)

## NAME

glab-dependency-firewall-ci-summary - Summarize Dependency Firewall activity from the CI log. (BETA)

## SYNOPSIS

**glab dependency-firewall ci-summary \[flags\]**

## DESCRIPTION

Read **.gitlab/df/ci-log.json** and print blocked and flagged packages recorded during a **glab dependency-firewall** run.

The log is read from the current working directory. Run this command from the same directory as the **glab dependency-firewall** run that wrote the log, otherwise no activity is reported.

To fail a CI/CD job when any package was blocked, run this command as the last command in **script**. This catches a block even when a package manager continues after a refused download. In **after\_script**, the command prints the report but can't fail the job, because GitLab ignores **after\_script** exit codes.

```
install:
  variables:
    GLAB_ENABLE_CI_AUTOLOGIN: "true"
  script:
    - glab dependency-firewall npm ci
    - glab dependency-firewall pip install -r requirements.txt
    - glab dependency-firewall ci-summary
```

Entries accumulate across runs, and the command never clears them. A block from an earlier run keeps the command exiting with **3** until you delete **.gitlab/df/ci-log.json**.

| | |
| --- | --- |
| **Exit code** | **Meaning** |
| **0** | No blocked entries in the log (allow-only or warnings). |
| **1** | The log could not be read. |
| **3** | At least one entry in the log is blocked. |

This feature is in beta and might not be ready for production use. It might be unstable and breaking changes can occur outside of major releases. For more information, see https://docs.gitlab.com/policy/development\_stages\_support/.

## OPTIONS INHERITED FROM PARENT COMMANDS

**-h**, **--help**\[=false\]\
 	Show help for this command.

## EXAMPLE

```
# Show blocked and flagged packages from the last firewall run
glab dependency-firewall ci-summary
```

## SEE ALSO

**[glab-dependency-firewall(1)](/glab-dependency-firewall/1.md)**