Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/dlechevalier/terraform-provider-keycloak
Terraform provider for Keycloak.
https://mrparkers.github.io/terraform-provider-keycloak/
This project uses Go Modules which requires Go 1.11. You can initialize your local development environment and build the provider like so:
GO111MODULE=on go mod download && make build
Currently, this provider is tested against Terraform v0.12.1 and Keycloak v8.0.1. I personally use this provider with Terraform v0.11.x and Keycloak 4.8.3.Final.
In the future, it would be nice to run acceptance tests using different versions of Terraform / Keycloak. Please feel free to submit a PR if you believe you can help with this.
Every resource supported by this provider will have a reasonable amount of acceptance test coverage
For local development, you can spin up a local instance of Keycloak, backed by Postgres and OpenLDAP using make local
.
Once the environment is ready, you can run the acceptance tests after setting the required environment variables:
KEYCLOAK_CLIENT_ID=terraform \
KEYCLOAK_CLIENT_SECRET=884e0f95-0f42-4a63-9b1f-94274655669e \
KEYCLOAK_CLIENT_TIMEOUT=5 \
KEYCLOAK_REALM=master \
KEYCLOAK_URL="http://localhost:8080" \
make testacc
These tests will also run in CI when opening a PR and on master.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.