Research
Security News
Malicious PyPI Package ‘pycord-self’ Targets Discord Developers with Token Theft and Backdoor Exploit
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
github.com/lexis-project/yorc-heappe-plugin
The Yorc HEAppE plugin implements a Yorc (Ystia orchestrator) plugin as described in Yorc documentation, allowing the orchestrator to use the HEappE ((High-End Application Execution) API to manage jobs executions on HPC infrastructures.
You need first to have a working Go environment. Then to build, execute the following instructions:
mkdir -p $GOPATH/src/lexis-project
cd $GOPATH/src/lexis-project
git clone https://github.com/lexis-project/yorc-heappe-plugin
cd yorc-heappe-plugin
make
The plugin is then available at bin/heappe-plugin
.
This plugin provides the following TOSCA components defined in the TOSCA file a4c/ddi-types-a4c.yaml that can be uploaded in Alien4Cloud catalog of TOSCA components:
HEAppE job implementing the standard operations create, submit, run, cancel, delete. Custom operations are also implemented to provide the correspondind HEAppE API features:
changed_files
.HEAppE job for which the task parameters are not properties configured before the deployment, but are attributes defined at runtime by another TOSCA component.
Component associated to a HEAppE job, allowing to wait for a given file to be generated by the job,
and to get the content of this file. The content of the file is provide by this component attribute filecontent
.
This plugin is licensed under the Apache 2.0 License.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.