Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@beforeyoubid/serverless-step-functions-offline
Advanced tools
Serverlesss plugin to support step function offline
Using NPM:
npm install @beforeyoubid/serverless-step-functions-offline --save-dev
or Yarn:
yarn add @beforeyoubid/serverless-step-functions-offline --dev
Add the plugin to your serverless.yml
:
# serverless.yml
plugins:
- '@beforeyoubid/serverless-step-functions-offline'
To verify that the plugin works, run this in your command line:
sls step-functions-offline
It should rise an error like that:
Serverless plugin "serverless-step-functions-offline" initialization errored: Please add ENV_VARIABLES to section "custom"
This plugin works only with serverless-step-functions.
You must have this plugin installed and correctly specified statemachine definition using Amazon States Language.
Example of statemachine definition you can see here.
After all steps are done, need to add to section custom in serverless.yml the key stepFunctionsOffline with properties stateName: name of lambda function.
For example:
service: ServerlessStepPlugin
frameworkVersion: ">=1.13.0 <2.0.0"
plugins:
- '@beforeyoubid/serverless-step-functions-offline'
# ...
custom:
stepFunctionsOffline:
FirstLambda: firstLambda #(v2.0)
# ...
# ...
SecondLambda: secondLambda #(v2.0)
functions:
firstLambda:
handler: firstLambda/index.handler
name: TheFirstLambda
secondLambda:
handler: secondLambda/index.handler
name: TheSecondLambda
stepFunctions:
stateMachines:
foo:
definition:
Comment: "An example of the Amazon States Language using wait states"
StartAt: FirstLambda
States:
FirstLambda:
Type: Task
Resource: arn:aws:lambda:eu-west-1:123456789:function:TheFirstLambda
Next: SecondLambda
SecondLambda:
Type: Task
Resource: arn:aws:lambda:eu-west-1:123456789:function:TheSecondLambda
End: true
Where:
StepOne
is the name of step in state machinefirstLambda
is the name of function in section functionssls step-functions-offline --stateMachine={{name}} --event={{path to event file}}
name
: name of state machine in section state functions. In example above it's foo
.event
: input values for execution in JSON format (optional)If you want to know where you are (in offline mode or not) you can use env variable STEP_IS_OFFLINE
.
By default process.env.STEP_IS_OFFLINE = true
.
States | Support |
---|---|
Task | Supports Retry but at this moment does not support fields Catch, TimeoutSeconds, HeartbeatSeconds |
Choice | All comparison operators except: And, Not, Or |
Wait | All following fields: Seconds, SecondsPath, Timestamp, TimestampPath |
Parallel | Only Branches |
Map | Supports Iterator and the following fields: ItemsPath, ResultsPath, Parameters |
Pass | Result, ResultPath |
Fail | Cause, Error |
Succeed |
The plugin integrates very well with serverless-webpack.
Add the plugins serverless-webpack
to your serverless.yml
file and make sure that serverless-webpack
precedes serverless-step-functions-offline
as the order is important:
plugins:
...
- serverless-webpack
...
- '@beforeyoubid/serverless-step-functions-offline'
...
FAQs
Serverlesss plugin to support step function offline
We found that @beforeyoubid/serverless-step-functions-offline demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.