
Product
Introducing Module Reachability: Focus on the Vulnerabilities That Matter
Module Reachability filters out unreachable CVEs so you can focus on vulnerabilities that actually matter to your application.
github.com/project-n-oss/sidekick
Sidekick is a sidecar proxy process that helps you integrate with the granica crunch platform.
Sidekick runs as a sidecar next to you application code and acts as a proxy to S3. If sidecar finds a crunched version of the file you are trying to query it will always return a 409. This garantees an error on the client side during the crunching of a file.
You will need to create a config.yml file in the root of the project. You can use the following template:
App:
CloudPlatform: AWS
These config values can also be set from ENV variable like so:
export SIDEKICK_APP_CLOUDPLATFORM=AWS
You can then run sidekick directly from the command line:
go run main.go serve
This will run sidekick localy on your machine on localhost:7075
.
run the following command to learn more about the options:
go run main.go serve --help
You can pull the docker image from the containers page
You can then run the docker image with the following command:
docker run -p 7075:7075 --env SIDEKICK_APP_CLOUDPLATFORM=AWS <sidekick-image> serve
Sidekick binaries are hosted and released from GitHub. Please check our releases page. To download any release of our linux amd64 binary run:
wget https://github.com/project-n-oss/sidekick/releases/download/${release}/sidekick-linux-amd64.tar.gz
You can then run the binary directly:
SIDEKICK_APP_CLOUDPLATFORM=AWS ./sidekick serve
Document on how to integrate sidekick with various services can be found in the integrations folder.
This repository uses release-please to create and manage release.
We follow conventional commits for our commits and PR titles. This allows us to use release-please to manage our releases.
The most important prefixes you should have in mind are:
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Module Reachability filters out unreachable CVEs so you can focus on vulnerabilities that actually matter to your application.
Company News
Socket is bringing best-in-class reachability analysis into the platform — cutting false positives, accelerating triage, and cementing our place as the leader in software supply chain security.
Product
Socket is introducing a new way to organize repositories and apply repository-specific security policies.