Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@assistant/gactions
Advanced tools
This repository contains source code for the CLI used to communicate with Actions SDK.
The latest version of this tool can be installed directly from developers.google.com or via NPM:
npm install -g @assistant/gactions
Command Line Interface for Google Actions SDK
Usage:
gactions [command]
Available Commands:
decrypt Decrypt client secret.
deploy Deploy an Action to the specified channel.
encrypt Encrypt client secret.
help Help about any command
init Initialize a directory for a new project.
login Authenticate gactions CLI to your Google account via web browser.
logout Log gactions CLI out of your Google Account.
pull This command pulls files from Actions Console into the local file system.
push This command pushes changes in the local files to Actions Console.
release-channels This is the main command for viewing and managing release channels. See below for a complete list of sub-commands.
third-party-notices Prints license files of third-party software used.
version Prints current version of the CLI.
versions This is the main command for viewing and managing versions. See below for a complete list of sub-commands.
Flags:
-h, --help help for gactions
-v, --verbose Display additional error information
Use "gactions [command] --help" for more information about a command.
# Start an authentication flow.
# This requires a web browser.
# When the flow is complete, the CLI automatically authenticates.
gactions login
# Initialize a sample project
gactions init hello-world --dest hello-world-sample
cd hello-world-sample
# Open the `sdk/settings/settings.yaml` file and change the value of
# `projectId` to your project's ID.
$EDITOR sdk/settings/settings.
# From the hello-world-sample/sdk/ directory, run the following
# command to push the local version of your Actions project to the
# console as a draft version.
cd sdk
gactions push
# From the hello-world-sample/sdk/ directory, run the following
# command to test your Actions project in the simulator.
gactions deploy preview
Read the quick start documentation to learn more.
data/client_not_so_secret.json
in this directory.Note: If you are running this alongside the official gactions binary , you will need to regenerate authentication credentials. To reset these credentials:
bazel run gactions logout
.bazel run gactions login
.To build this project, you will require Bazel.
Build the CLI using :gactions
Bazel rule.:
Linux: bazel build --platforms=@io_bazel_rules_go//go/toolchain:linux_amd64 gactions
.
Windows: bazel build --platforms=@io_bazel_rules_go//go/toolchain:windows_amd64 gactions
Mac bazel build --platforms=@io_bazel_rules_go//go/toolchain:darwin_amd64 gactions
You will find the binary in bazel-bin/gactions_/gactions
.
Note: bazel build gactions
will build for your local platform.
To simultaneously build and run the project:
bazel run gactions
Pass parameters:
bazel run gactions -- <args>
Example:
bazel run gactions -- version
This should print out the current version from versions/version_names.bzl
.
Please read and follow the steps in the CONTRIBUTING.md.
See LICENSE.
FAQs
Gactions CLI
The npm package @assistant/gactions receives a total of 5 weekly downloads. As such, @assistant/gactions popularity was classified as not popular.
We found that @assistant/gactions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.