
Product
Introducing Pull Request Stories to Help Security Teams Track Supply Chain Risks
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.
@digitalocean/functions-deployer
Advanced tools
This repository contains an internal TypeScript library for deploying functions in DigitalOcean. It is used by the doctl serverless
deployer plugin and in remote builds.
The contents were jumpstarted by migrating the original Nimbella deployer from nimbella/nimbella-deployer
. The commit history (and version history) was preserved. Thus, the first version sourced from this repo is a new major version, 5.0.0.
There are three artifacts that are derived from this source:
nodejs
library for incorporation into other node-based tools. Currently, this is uploaded to a DigitalOcean space object store for later incorporation but it should eventually be published to npm
.doctl serverless
deployer-plugin. Currently, this is built from (1) in the separate repo digitalocean/doctl-sandbox-plugin
.dosls
. We do not install a complete doctl
into those images unless it is needed for another purpose.Artifacts (1) and (3) are built by the script internalRelease.sh
with no arguments. That script is driven by a GitHub action on every push to the main
branch. It only builds the artifacts if the current version (in package.json
) is not yet uploaded to the tools Space. After building the artifacts, it uploads them as well. So, new versions are "published" only on pushes to main
with a new version number.
The internalRelease.sh
script can also be run with a --test
flag, in which case is builds the artifacts unconditionally but does not upload them.
To test changes locally
npm install
npm run build
after which the deployer shell can be run as /path/to/repo/bin/run
. It is often convenient to make a symbolic link in your path pointing to that location (e.g. as dosls
). Then, you can test with
dosls deploy <projectDir>
dosls get-metadata <projectDir>
dosls watch <projectDir>
FAQs
The the functions deployer for DigitalOcean
We found that @digitalocean/functions-deployer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.
Research
/Security News
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.