
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
github.com/corsc/pagerduty-gcal
Use Google Calendar "Out of office" events to detect PagerDuty schedule issues
Go to https://console.developers.google.com/projectselector/apis/credentials (must be logged into your Company Google Account)
In the top left corner, click "Select a project" and choose "PagerDuty vs Google Calendar"
Click on "Create credentials" - OAuth client ID
Save the credentials in a file called credentials.json
next to the binary (or the base of this repo if you are using go run main.go
)
Login to PagerDuty
Click your avatar on the far right corner of the menu and choose "My Profile"
Select the "User Settings" tag
Click "Create API User token"
Set the API key as an environment variable called PD_API_KEY
go run main.go
in the base of this repo)token.json
in the same directory as the binary (or the main.go
file). Do not delete this file or the credentials.json
The full command for this app is:
pdgcal -schedule=[scheduleID] -start=[date in format YYYY-MM-DD]
scheduleID
is the last part of the URL when viewing the schedule in PagerDuty
In order to achieve this you will need:
Note: this was a quick hack, so I was lazy and the tests make calls to the real APIs. They currently do not modify anything but this means you will need to configure somethings and have a working internet connection.
TEST_PD_API_KEY
which is your PagerDuty API key (see above)TEST_PD_USER_ID
which is an PagerDuty User ID (the last few characters of the URL when viewing a user)TEST_PD_SCHEDULE_ID
which is an PagerDuty Schedule ID (the last few characters of the URL when viewing a schedule)TEST_GC_USER_EMAIL
which is the google calendar email that matches the TEST_PD_USER_ID
user and the Google Calendarout
; these are defaults when using the "Out of Office" feature via Google Calendar UI)-start
flag plus 30 daysFAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.