
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
github.com/wyllisMonteiro/mvc_go
Advanced tools
It's a student project for building an application that allows user to create articles. I used strategy design pattern with Golang and MVC architecture.
/warticle/.envUSERDB like this USERDB=rootPASSDB like this PASSDB=rootNAMEDB like this NAMEDB=wikidocker-compose.yml
MYSQL_ROOT_PASSWORD, MYSQL_DATABASE, MYSQL_USER, MYSQL_PASSWORDAt the begining there is no articles because db is empty
Use docker-compose up --build -d
If you need to update Golang code you can execute docker-compose up --build -d app
Application at http://localhost:9000
Godoc at http://localhost:6060
$ sudo nano $HOME/.config/Code/User/settings.json
{
"go.lintTool":"golangci-lint",
"go.lintFlags": [
"--fast"
],
.golangci.yml file, there are all the necessary toolsExample :
For example, you want to create unit tests to a file called auth.go Create a new file called auth_test.go at the same location than auth.go In that file, add all functions needed to make tests with Test in prefix function name like TestLogin(), TestLogout(). For more details about writting tests check this link : https://medium.com/better-programming/easy-guide-to-unit-testing-in-golang-4fc1e9d96679
$ go test ./...
$ golangci-lint run
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.