
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@chasemccoy/figma-action
Advanced tools
A GitHub action that will export Figma components from design files to your repository.
Example workflow
name: Export SVG from Figma
on: [push]
jobs:
all:
name: Figma Export
runs-on: ubuntu-latest
steps:
- uses: primer/figma-action@v1.0.0-alpha.2
with:
args: "format=svg outputDir=./build/"
env:
FIGMA_FILE_URL: "https://www.figma.com/file/ZFjrph2HUwFK8Q3uEtJIu1PT/yourfilename"
FIGMA_TOKEN: ${{ secrets.FIGMA_TOKEN }}
Secrets
FIGMA_TOKEN
(required)
This token is used to access the Figma API. It's required to generate one so this action will work. It's recommended to set the token in a secret token in your repository.
env variables
FIGMA_FILE_URL
(required)
This is the file url that you would like to export from. The action will search the file for components and export them with your configurations.
Workflow args (optional)
format
– The export format for exporting from Figma. Options are svg
, jpg
, png
. Default is jpg
outputDir
– Where you would like the exported files to live. Default is ./build/
scale
– When choosing an image format jpg
or png
this is the export scale between 0.01
and 4
that will allow you to scale the image. Default is 1
.The output of this action lives in ./build/
by default, but can be configured. In addition to the files exported you will see a data.json
file exported. This contains information about the exported components mapped by component id
.
The directory will look like this:
./outputDir/
├── format/
| └── componentName.format
└── data.json
The data.json file will look like this:
{
"0:639": {
"name": "plus", // component name
"id": "0:639", // component figma id
"key": "89696b0b52493acc8692546ac829bd4e334c63a2", // component global figma id
"file": "FP7lqd1V00LUaT5zvdklkkZr", // figma file key
"description": "keywords: add, new, more", // figma component description
"width": 12, // width of the component frame
"height": 16, // height of the component frame
"image": "https://s3-us-west-2.amazonaws.com/figma-alpha-api/img/1/6d/1234" // aws URL for the exported file
}
}
FAQs
GitHub action for exporting Figma slices.
We found that @chasemccoy/figma-action demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.