
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
gorun runs, monitors and stops external programs from Go, capturing their output and shutting them down gracefully.
Without gorun, managing external processes requires repetitive boilerplate: exec.Command, channel synchronization, handling stdout/stderr, and manually tracking PIDs to ensure proper termination.
With gorun, process management becomes declarative. A single RunProgram call handles execution and output forwarding, while StopProgram ensures cross-platform graceful termination without dangling processes.
Install the package:
go get webtyp.com/gorun
Minimal example demonstrating execution and graceful termination:
package main
import (
"log"
"time"
"webtyp.com/gorun"
)
func main() {
cfg := &gorun.Config{
ExecProgramPath: "./my-server",
WorkingDir: "/abs/path/to/project", // optional
ExitChan: make(chan bool),
KillAllOnStop: true,
}
r := gorun.New(cfg)
if err := r.RunProgram(); err != nil {
log.Fatalf("Failed to run: %v", err)
}
// Wait for program to run
time.Sleep(5 * time.Second)
if err := r.StopProgram(); err != nil {
log.Fatalf("Failed to stop: %v", err)
}
}
With KillAllOnStop, RunProgram and StopProgram also kill orphans of the same executable path (left by a crashed parent). Two programs with the same file name in different folders never touch each other. DisableGlobalCleanup: true turns that off.
| Topic | File |
|---|---|
| Process execution and monitoring | RunProgram.go |
| Graceful cross-platform termination | StopProgram.go |
| Orphan process cleanup by path | cleanup.go |
FAQs
Unknown package

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.