
Product
Introducing GitHub Actions Scanning Support
Detect malware, unsafe data flows, and license issues in GitHub Actions with Socket’s new workflow scanning support.
@dmsi/release-middleware
Advanced tools
At DMSi we have a growing number of Golang middleware services that each need to be tagged, released, and versioned at the end of every version.
Release Middleware attempts to take a monorepo approach to releasing each package/repo with a single command.
Use of release middleware assumes that you have all of the current middleware services pulled down. If you're not sure what you're missing run this in your terminal:
curl -X POST -H "Content-Type: application/json" "https://miami.dmsi.com/graphql" -d "{ \"query\": \"query M { meta { services } }\" }" | python -m json.tool
In addition it is important to ensure that you have recently run go get in each repository to ensure their dependencies are up-to-date. This step will likely be automated in a future version.
To run release-middleware simply run:
npx release-middleware --a <agility version>
This will checkout the latest changes on each develop branch (any local changes will be reset in this step) and branch off into the appropriate release branch. Then add any changes are committed (usually an empty commit for posterity) and a release tag added. The release branch is then merged into master which also has previously had its latest changes pulled down. The master branch and tag are pushed up to origin and the script cleans up the local environment, deleting the local release branch and merging master into develop.
FAQs
A tool to tag and release each middleware api service.
We found that @dmsi/release-middleware demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Detect malware, unsafe data flows, and license issues in GitHub Actions with Socket’s new workflow scanning support.

Product
Add real-time Socket webhook events to your workflows to automatically receive pull request scan results and security alerts in real time.

Research
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.