Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
github.com/corsc/pagerduty-gcal
Use Google Calendar "Out of office" events to detect PagerDuty schedule issues
Go to https://console.developers.google.com/projectselector/apis/credentials (must be logged into your Company Google Account)
In the top left corner, click "Select a project" and choose "PagerDuty vs Google Calendar"
Click on "Create credentials" - OAuth client ID
Save the credentials in a file called credentials.json
next to the binary (or the base of this repo if you are using go run main.go
)
Login to PagerDuty
Click your avatar on the far right corner of the menu and choose "My Profile"
Select the "User Settings" tag
Click "Create API User token"
Set the API key as an environment variable called PD_API_KEY
go run main.go
in the base of this repo)token.json
in the same directory as the binary (or the main.go
file). Do not delete this file or the credentials.json
The full command for this app is:
pdgcal -schedule=[scheduleID] -start=[date in format YYYY-MM-DD]
scheduleID
is the last part of the URL when viewing the schedule in PagerDuty
In order to achieve this you will need:
Note: this was a quick hack, so I was lazy and the tests make calls to the real APIs. They currently do not modify anything but this means you will need to configure somethings and have a working internet connection.
TEST_PD_API_KEY
which is your PagerDuty API key (see above)TEST_PD_USER_ID
which is an PagerDuty User ID (the last few characters of the URL when viewing a user)TEST_PD_SCHEDULE_ID
which is an PagerDuty Schedule ID (the last few characters of the URL when viewing a schedule)TEST_GC_USER_EMAIL
which is the google calendar email that matches the TEST_PD_USER_ID
user and the Google Calendarout
; these are defaults when using the "Out of Office" feature via Google Calendar UI)-start
flag plus 30 daysFAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.