Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/agrea/go-test-runner
The go-test-runner
is a simple way of running lint checks (via gometalinter
)
and execute tests (via go test
) on your projects.
If you like the project, please star it! If you feel really generous, please follow @AgreaIO on Twitter
go get -u github.com/agrea/go-test-runner
go install github.com/agrea/go-test-runner
Below is an example command to run go-test-runner
via a Docker image. Replace
<PACKAGE>
with your package path (like github.com/agrea/go-test-runner
). Any
parameters to go-test-runner
can be appended to the command.
docker run -it --rm \
-v $(pwd):/go/src/<PACKAGE> \
agrea/go-test-runner:latest \
go-test-runner \
-package <PACKAGE>
Usage of ./go-test-runner:
-disable-go-test
Disable go test execution
-disable-gometalinter
Disable gometalinter checks
-go-test-flags string
Send custom flags to go test as parameters
-go-test-short
Enable -short mode for go test
-gometalinter-config string
Path to configuration file for gometalinter
-gometalinter-flags string
Send custom flags to gometalinter
-gometalinter-path string
Path for gometalinter to lint. Set it to ./... for recursion (default ".")
-ignore-errors
Continue with the next check on errors
-package string
Package name to test
-recursive
Run tests recursivly
-verbose
Enable verbose output
We usually run gometalinter
with a configuration file. You can specify a
Gometalinter configuration file for go-test-runner
to use with the
-gometalinter-config
parameter. Here's an example configuration:
{
"Enable": [
"deadcode",
"vet",
"gosimple",
"goimports",
"gofmt",
"gocyclo",
"golint",
"ineffassign"
],
"Install": false,
"Deadline": "30s",
"Test": true
}
The default behaviour for go-test-runner
is to exit if a check has failed. To
override that behaviour and run all checks, please provide the -ignore-errors
flag.
The go-test-runner
is by no means done. It works well for most of our use
cases. But if you have other use cases you'd like it to cover, please submit an
issue.
If you'd like to contribute by implementing more features or fixing bugs, please don't hesitate to raise a PR. If you need any guidance, check with @sebdah or @AgreaIO, we'd love to help get you started.
MIT license
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.