
Security News
NIST Under Federal Audit for NVD Processing Backlog and Delays
As vulnerability data bottlenecks grow, the federal government is formally investigating NIST’s handling of the National Vulnerability Database.
gitlab.com/ribtoks/healthcheck-timer
HealthCheck Timer is pretty much a HealthChecks.io/Cronitor, but for one-time jobs.
HealthCheck Timer is a simple monitoring tool, built out of AWS services. It's purpose is to send you a notification when a certain condition is not met.
npm install
inside this repository (needs to be done only once)cp secrets.example.yml secrets.your-stage.yml
and edit it's self-documented contents to your likingSTAGE=your-stage make deploy
Here are the endpoints:
Endpoint | Type | Description |
---|---|---|
/healthcheck | POST | Create new monitor |
/ping/{id} | GET | Mark monitor as healthy |
These are the "form fields" that can be sent with the request.
Argument | Required | Type | Description |
---|---|---|---|
id | Yes | String (<= 64 chars) | User ID of this monitor |
description | Yes | String (<= 200 chars) | Name of this monitor |
seconds | Yes | Integer | TTL of this monitor |
link | No | String (<= 100 chars) | Call to action link for alert emails |
Create a monitor by sending an HTML form with arguments (see Endpoints section)
curl -X POST \
-H "X-Api-Key: your-api-key-here" \
-F "id=custom-id" \
-F "description=description-of-the-monitor" \
-F "seconds=ttl-seconds" \
-F "link=cta-link" \
https://some-id-here.execute-api.eu-west-1.amazonaws.com/your-stage/healthcheck
This will return you a unique ID, that you can ping using
NOTE: if ping api key is empty in
secrets.yml
, you don't need to specify it with the request
curl -H "X-Api-Key: ping-api-key" https://some-id-here.execute-api.eu-west-1.amazonaws.com/your-stage/ping/{unique-id}
If you wish to receive SMS or push notifications instead of the email, you need to update Subscription
part of the creation of SNS topic. Check official AWS docs.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
As vulnerability data bottlenecks grow, the federal government is formally investigating NIST’s handling of the National Vulnerability Database.
Research
Security News
Socket’s Threat Research Team has uncovered 60 npm packages using post-install scripts to silently exfiltrate hostnames, IP addresses, DNS servers, and user directories to a Discord-controlled endpoint.
Security News
TypeScript Native Previews offers a 10x faster Go-based compiler, now available on npm for public testing with early editor and language support.