
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
kubepack.dev/module
make manifests fmt
kubectl apply -f config/crd/bases/pkg.x-helm.dev_modules.yaml
kubectl apply -f config/crd/bases/pkg.x-helm.dev_moduleexecstatuses.yaml
make run
kubectl create ns demo
kubectl apply -f cmd/myflow.yaml
helm repo add module-testdata https://raw.githubusercontent.com/kubepack/module-testdata/master/stable/
helm repo update
--set values
Render Templates
Zero Template Chart
** ToDos **
Multi-chart
metadata:
annotations:
meta.helm.sh/release-name: first
meta.helm.sh/release-namespace: default
labels:
app.kubernetes.io/managed-by: Helm
// apply labels
lbs.set("name", rls.Name)
lbs.set("owner", "helm")
lbs.set("status", rls.Info.Status.String())
lbs.set("version", strconv.Itoa(rls.Version))
** Chart Annotations **
// Annotations are additional mappings uninterpreted by Helm,
// made available for inspection by other applications.
Annotations map[string]string `json:"annotations,omitempty"`
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.