Fix tests

src/commands/cdxgen/cmd-cdxgen.test.mts

@@ -40,13 +40,13 @@ describe('socket cdxgen', async () => {
             --project-id             Dependency track project id. Either provide the id or the project name and version together  [string]
             --parent-project-id      Dependency track parent project id  [string]
             --required-only          Include only the packages with required scope on the SBOM. Would set compositions.aggregate to incomplete unless --no-auto-compositions is passed.  [boolean]
-            --fail-on-error          Fail if any dependency extractor fails.  [boolean] [default: true]
+            --fail-on-error          Fail if any dependency extractor fails.  [boolean]
             --no-babel               Do not use babel to perform usage analysis for JavaScript/TypeScript projects.  [boolean]
             --generate-key-and-sign  Generate an RSA public/private key pair and then sign the generated SBOM using JSON Web Signatures.  [boolean]
             --server                 Run cdxgen as a server  [boolean]
             --server-host            Listen address  [default: "127.0.0.1"]
             --server-port            Listen port  [default: "9090"]
-            --install-deps           Install dependencies automatically for some projects. Defaults to true but disabled for containers and oci scans. Use --no-install-deps to disable this feature.  [boolean] [default: false]
+            --install-deps           Install dependencies automatically for some projects. Defaults to true but disabled for containers and oci scans. Use --no-install-deps to disable this feature.  [boolean] [default: true]
             --validate               Validate the generated SBOM using json schema. Defaults to true. Pass --no-validate to disable.  [boolean] [default: true]
             --evidence               Generate SBOM with evidence for supported languages.  [boolean] [default: false]
             --spec-version           CycloneDX Specification version to use. Defaults to 1.6  [number] [choices: 1.4, 1.5, 1.6] [default: 1.6]

src/shadow/npm/bin.mts

@@ -29,7 +29,7 @@ export default async function shadowBin(
   const progressArg = rawBinArgs.findLast(isProgressFlag) !== '--no-progress'
   const otherArgs = terminatorPos === -1 ? [] : args.slice(terminatorPos)
   const permArgs =
-    binName === 'npx' &&
+    binName === 'npm' &&
     // Lazily access constants.SUPPORTS_NODE_PERMISSION_FLAG.
     constants.SUPPORTS_NODE_PERMISSION_FLAG
       ? await (async () => {