fix(fix): exit 5 when computed fixes go unapplied

CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [Unreleased]
+
+### Changed
+- `socket fix` now exits with code 5 when it computed fixes it could not apply, matching the Coana CLI. Automation can tell this apart from a failed run, which still exits with 1. The `--output-file` JSON lists the unapplied fixes under `notApplied`.
+
 ## [1.8.3](https://github.com/SocketDev/socket-cli/releases/tag/v1.8.3) - 2026-10-15
 
 ### Changed

src/commands/fix/coana-fix.mts

@@ -252,6 +252,7 @@ function readWrittenFiles(outputFile: string): Set<string> | undefined {
 type CoanaFixResult = CResult<{ fixedAll: boolean; ghsaDetails: unknown[] }>
 
 // Coana exits with this code after writing an --output-file that lists computed fixes it left unapplied.
+// Local mode exits with it too, so automation can tell unapplied fixes from a failed run.
 const COANA_FIXES_NOT_APPLIED_EXIT_CODE = 5
 
 type NotAppliedFix = {
@@ -585,6 +586,7 @@ async function coanaFixWithFacts(
       if (!fixCResult.ok || notApplied.length) {
         return {
           ok: false,
+          code: COANA_FIXES_NOT_APPLIED_EXIT_CODE,
           message:
             fixesResultJson?.type === 'no-fixes-applied'
               ? 'No computed fixes were applied'

src/commands/fix/handle-fix-limit.test.mts

@@ -609,6 +609,7 @@ describe('socket fix --pr-limit behavior verification', () => {
 
       expect(result).toEqual({
         ok: false,
+        code: 5,
         message: 'No computed fixes were applied',
         cause: expect.stringContaining('no supported lockfile found'),
         data: {
@@ -642,6 +643,7 @@ describe('socket fix --pr-limit behavior verification', () => {
       })
 
       expect(result.ok).toBe(false)
+      expect(result.code).toBe(5)
       expect(result.message).toBe('Some computed fixes were not applied')
       expect(result.data).toEqual({ fixedAll: false, ghsaDetails: [output] })
       expect(JSON.parse(await fs.readFile(outputFile, 'utf8'))).toEqual(output)