Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@aircall/ci-scripts
Advanced tools
Centralize CircleCI scripts for all project
prerelease
job in the .circleci/config.yml
file of your projectexecutors:
(...)
node:
docker:
- image: circleci/node:10.11.0
jobs:
(...)
create-prerelease:
executor: node
steps:
- run:
name: Create pre-release
command: npx @aircall/ci-scripts prerelease
workflows:
version: 2
commit-workflow:
jobs:
(...)
- create-prerelease:
requires:
- {job_name}
release
jobjobs:
(...)
convert-release:
executor: node
steps:
- run:
name: Convert pre-release to release
command: npx @aircall/ci-scripts release
Use the node executor and insert the job in a workflow just like for the prerelease
job.
Add JIRA_BASE_URL
and GITHUB_CREDENTIALS
env vars in CircleCI.
Authorize our deployment Github account to access to your GitHub project as a Collaborator: https://github.com/{username}/{project}/settings/collaboration
Verify if there is an ongoing Workflow on CircleCI, and if there is one, make a pause. This script is particularly usefull when run on deployment jobs, to ensure no overlapping deployment is possible.
npx ci-scripts check-running-jobs
This will launch a test suite on a Jenkins instance with the Parameterized Build plugin. The script then watches the queue, waits for the test suite to end and notifies on Slack if the test suite fails.
npx ci-scripts e2e-tests
Create a pre-release with a generated changelog based on merged Pull Requests from the last release to the CircleCI Workflow current commit.
Example: https://github.com/aircall/pulse/releases
npx ci-scripts prerelease
Same as above, but the changelog will be generated from the last release to the last merged Pull Request
npx ci-scripts prerelease --to-last-commit
Create the prerelease on an existing tag, based on CIRCLE_TAG
npx ci-scripts prerelease --from-circle-ci-tag
npx ci-scripts release
npx ci-scripts changelog
npx ci-scripts next_version
FAQs
Centralize CircleCI scripts for all project
The npm package @aircall/ci-scripts receives a total of 0 weekly downloads. As such, @aircall/ci-scripts popularity was classified as not popular.
We found that @aircall/ci-scripts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.