
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@aircall/ci-scripts
Advanced tools
Centralize CircleCI scripts for all project
prerelease
job in the .circleci/config.yml
file of your projectexecutors:
(...)
node:
docker:
- image: circleci/node:10.11.0
jobs:
(...)
create-prerelease:
executor: node
steps:
- run:
name: Create pre-release
command: npx @aircall/ci-scripts prerelease
workflows:
version: 2
commit-workflow:
jobs:
(...)
- create-prerelease:
requires:
- {job_name}
release
jobjobs:
(...)
convert-release:
executor: node
steps:
- run:
name: Convert pre-release to release
command: npx @aircall/ci-scripts release
Use the node executor and insert the job in a workflow just like for the prerelease
job.
Add JIRA_BASE_URL
(https://aircall.atlassian.net/browse/
) and GITHUB_CREDENTIALS
(the AircallDeployment
one, present in 1Password) env vars in CircleCI.
Authorize AircallDeployment
account to access to your GitHub project as a Collaborator: https://github.com/{username}/{project}/settings/collaboration
Verify if there is an ongoing Workflow on CircleCI, and if there is one, make a pause. This script is particularly usefull when run on deployment jobs, to ensure no overlapping deployment is possible.
npx ci-scripts check-running-jobs
This will launch a test suite on a Jenkins instance with the Parameterized Build plugin. The script then watches the queue, waits for the test suite to end and notifies on Slack if the test suite fails.
npx ci-scripts e2e-tests
Create a pre-release with a generated changelog based on merged Pull Requests from the last release to the CircleCI Workflow current commit.
Example: https://github.com/aircall/pulse/releases
npx ci-scripts prerelease
Same as above, but the changelog will be generated from the last release to the last merged Pull Request
npx ci-scripts prerelease --to-last-commit
Create the prerelease on an existing tag, based on CIRCLE_TAG
npx ci-scripts prerelease --from-circle-ci-tag
npx ci-scripts release
npx ci-scripts changelog
npx ci-scripts next_version
FAQs
Centralize CircleCI scripts for all project
The npm package @aircall/ci-scripts receives a total of 2 weekly downloads. As such, @aircall/ci-scripts popularity was classified as not popular.
We found that @aircall/ci-scripts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.