
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
gitlab.com/dctx/devcon-contact-tracer.git/api-service
The API Service provides the entrypoint for accessing the different services.
To clone the repo:
git clone git@gitlab.com/dctx/contact-tracer/devcon-contact-tracer.git
cd api-service
A docker image is also avaible in Docker Hub:
docker pull dctx/api-service:latest
Run the following to build the binary:
make build
The binary will be located in: build/bin/api-service
Configuration is handled by viper which allows configuration using a config file or by environment variables.
A sample configuration file can be found in config/.api-service.yaml
. Copy this to the $HOME
directory to override the defaults.
Setting environment variables can also override the default configuration:
Environment Variable | Description | Default |
---|---|---|
API_SERVICE_SERVER_HOST | Name of the host or interface to bind the server | 0.0.0.0 |
API_SERVICE_SERVER_PORT | Port to bind the server | 8080 |
API_SERVICE_KAFKA_BROKERS | Addresses of the Kafka Brokers | broker1:9092,broker2:9092 |
API_SERVICE_KAFKA_TOPIC | The topic to publish/subscribe to | dctx-commands |
API_SERVICE_KAFKA_PARTITION | The topic partition | 0 |
API_SERVICE_KAFKA_MINBYTES | Min Bytes when reading messages | 10000 |
API_SERVICE_KAFKA_MAXBYTES | Max Bytes when reading messages | 10000000 |
make run
To create the docker image:
make package
To publish the image to docker hub:
make publish
Note that publishing the image requires access to the dctx group in docker hub.
This project follows gitlab flow. The general flow is:
master
Read more about gitlab flow here.
api-service
|- build/ # build artifacts are generated here
|- cmd/ # command line commands live here. Checkout cobra library
|- config/ # configuration files are here
|- db/ # for database migration files
|- helm/ # helm chart for kubernetes deployment
|- internal/ # for internal go packages
| |- server
| |- ...
|- pkg/ # for public go packages
|- .dockerignore # ignore list for docker
|- .gitignore # ignore list for git
|- go.mod # dependencies for project
|- go.sum # checksum for dependencies, do not manually change
|- main.go # the main go file
|- Makefile # build scripts
|- README.md # this file
To add dependencies, run the following:
go get -u {dependency}
make deps
Initial ToDo list:
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.