Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@app-config/exec
Advanced tools
Run arbitrary programs or shell commands to generate config.
$exec: echo Hello World!
$exec: echo Hello World!
$exec:
command: curl https://my-api.example.com
parseOutput: true
$exec: node ./my-custom-config-generator.js
Node v8 version:
$exec: node -p -e "process.versions.v8"
System's architecture:
$exec: uname -p
aws
& jq
CLI:$exec:
command: aws s3api list-buckets --output json | jq -r '.Buckets'
parseOutput: true
Note: When possible, we encourage you to build a dedicated extension to better support features you are looking for (and help out the community). eg. $aws
directive instead of the above.
Install and use:
yarn add @app-config/exec
In .app-config.meta.yml
file:
parsingExtensions:
- '@app-config/exec'
The following options can be passed to each $exec
directive:
$exec:
command: echo Hello World!
trimWhitespace: true
parseOutput: false
failOnStderr: false
command: string
:The command to run. Should be a single string
containing both command and arguments. The command's stdout
will be used as the resulting value. Runs in a shell, /bin/sh
on Unix and process.env.ComSpec
on Windows.
trimWhitespace: boolean
:If true
, automatically trim whitespace from the start and end of the command's output. Useful to remove the trailing newline produced by most commands. If false
, output will be left in its raw form. Default true
.
parseOutput: boolean
:If true
, automatically guess output content type (YAML, TOML, JSON, or JSON5) and parse. Throws if parse fails. If false
, output will be read as a string
. Default false
.
failOnStderr: boolean
:If true
, fail if any output is found in command's stderr
. Default false
.
v2.7.2
Ensures that window._appConfig
is always written in webpack and rollup loaders.
FAQs
Generate config by running arbitrary programs
The npm package @app-config/exec receives a total of 6 weekly downloads. As such, @app-config/exec popularity was classified as not popular.
We found that @app-config/exec demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.