Wire Chainsaw into your CI and package managers in ten lines

CI providers

Copy-paste snippets for your pipeline

Replace chainsaw.acme.example with your Chainsaw URL, substitute @default for your org slug, and store CHAINSAW_CLIENT_ID + CHAINSAW_CLIENT_SECRET in your CI's secret store. Snippets use npm; the same shape works for every package manager Chainsaw supports.

- name: Configure Chainsaw
  env:
    CHAINSAW_CLIENT_ID: ${{ secrets.CHAINSAW_CLIENT_ID }}
    CHAINSAW_CLIENT_SECRET: ${{ secrets.CHAINSAW_CLIENT_SECRET }}
  run: |
    AUTH=$(printf '%s' "$CHAINSAW_CLIENT_ID:$CHAINSAW_CLIENT_SECRET" | base64)
    echo "registry=https://chainsaw.acme.example/repository/@default/npmjs/" >> .npmrc
    echo "//chainsaw.acme.example/repository/@default/npmjs/:_auth=$AUTH" >> .npmrc
    echo "//chainsaw.acme.example/repository/@default/npmjs/:always-auth=true" >> .npmrc
- name: Install
  run: npm ci

install:
  script:
    - AUTH=$(printf '%s' "$CHAINSAW_CLIENT_ID:$CHAINSAW_CLIENT_SECRET" | base64)
    - echo "registry=https://chainsaw.acme.example/repository/@default/npmjs/" >> ~/.npmrc
    - echo "//chainsaw.acme.example/repository/@default/npmjs/:_auth=$AUTH" >> ~/.npmrc
    - echo "//chainsaw.acme.example/repository/@default/npmjs/:always-auth=true" >> ~/.npmrc
    - npm ci

withCredentials([usernamePassword(credentialsId: 'chainsaw',
  usernameVariable: 'CHAINSAW_CLIENT_ID', passwordVariable: 'CHAINSAW_CLIENT_SECRET')]) {
  sh '''
    AUTH=$(printf '%s' "$CHAINSAW_CLIENT_ID:$CHAINSAW_CLIENT_SECRET" | base64)
    echo "registry=https://chainsaw.acme.example/repository/@default/npmjs/" > .npmrc
    echo "//chainsaw.acme.example/repository/@default/npmjs/:_auth=$AUTH" >> .npmrc
    echo "//chainsaw.acme.example/repository/@default/npmjs/:always-auth=true" >> .npmrc
    npm ci
  '''
}

- run:
    name: Configure Chainsaw
    command: |
      AUTH=$(printf '%s' "$CHAINSAW_CLIENT_ID:$CHAINSAW_CLIENT_SECRET" | base64)
      echo "registry=https://chainsaw.acme.example/repository/@default/npmjs/" >> ~/.npmrc
      echo "//chainsaw.acme.example/repository/@default/npmjs/:_auth=$AUTH" >> ~/.npmrc
      echo "//chainsaw.acme.example/repository/@default/npmjs/:always-auth=true" >> ~/.npmrc
- run: npm ci

- script: |
    AUTH=$(printf '%s' "$(CHAINSAW_CLIENT_ID):$(CHAINSAW_CLIENT_SECRET)" | base64)
    echo "registry=https://chainsaw.acme.example/repository/@default/npmjs/" >> ~/.npmrc
    echo "//chainsaw.acme.example/repository/@default/npmjs/:_auth=$AUTH" >> ~/.npmrc
    echo "//chainsaw.acme.example/repository/@default/npmjs/:always-auth=true" >> ~/.npmrc
    npm ci
  displayName: Install via Chainsaw

steps:
  - label: "Install"
    command: |
      AUTH=$(printf '%s' "$CHAINSAW_CLIENT_ID:$CHAINSAW_CLIENT_SECRET" | base64)
      echo "registry=https://chainsaw.acme.example/repository/@default/npmjs/" >> .npmrc
      echo "//chainsaw.acme.example/repository/@default/npmjs/:_auth=$AUTH" >> .npmrc
      echo "//chainsaw.acme.example/repository/@default/npmjs/:always-auth=true" >> .npmrc
      npm ci

kind: pipeline
type: docker
name: default

steps:
  - name: install
    image: node:20
    environment:
      CHAINSAW_CLIENT_ID:
        from_secret: chainsaw_client_id
      CHAINSAW_CLIENT_SECRET:
        from_secret: chainsaw_client_secret
    commands:
      - AUTH=$(printf '%s' "$CHAINSAW_CLIENT_ID:$CHAINSAW_CLIENT_SECRET" | base64)
      - echo "registry=https://chainsaw.acme.example/repository/@default/npmjs/" >> .npmrc
      - echo "//chainsaw.acme.example/repository/@default/npmjs/:_auth=$AUTH" >> .npmrc
      - echo "//chainsaw.acme.example/repository/@default/npmjs/:always-auth=true" >> .npmrc
      - npm ci

Full guide with per-ecosystem variations: Integrate with CI/CD pipelines →