
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
github.com/redesignhealth/codebuild-slack-notifier
AWS lambda function to send Slack notifications for CodeBuild events
Create a new app for your slack team with the following scopes: channels:history channels:read channels:write channels:write:bot
A valid Slack oauth token needs to be stored as a secure string in the SSM parameter store as /codebuild-slack-notifier/slack_token
.
aws ssm put-parameter --name "/codebuild-slack-notifier/slack_token" --value "xoxp-XXXXX" --type SecureString --overwrite
To configure the channels that will be notified for a particular build:
aws ssm put-parameter --name "/codebuild-slack-notifier/<YOUR BUILD NAME>_channels" --value "channel1,channel2" --type SecureString --overwrite
Edit the region in serverless.yml to your region
Then run
npm install
npm run deploy
With AWS credentials that have access to read from SSM and deploy a lambda.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.