
Security News
Insecure Agents Podcast: Certified Patches, Supply Chain Security, and AI Agents
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.
@elastic/asset-collection
Advanced tools
This package faciliates collecting asset data for K8s across several cloud providers. Currently, it can do the following:
This package faciliates collecting asset data for K8s across several cloud providers. Currently, it can do the following:
$ npm install -g @elastic/asset-collection@latest
$ elastic-assets
Checkout the latest of this repo, then:
$ cd _collector-npm
$ npm install
$ npm run build
$ node ./dist/bin/load.js
Set the following:
# ES credentials for where you want to write ES data
ELASTICSEARCH_HOSTS=http://localhost:9200
ELASTICSEARCH_USERNAME=elastic
ELASTICSEARCH_PASSWORD=changeme
# set this to 0 if you are using Elasticsearch with SSL, but with self-signed certs in dev
ELASTICSEARCH_REJECT_UNAUTHORIZED_TLS=0
# defaults to "assets", you probably don't need to set this
ASSETS_DATASTREAM
For AWS K8S collection:
AWS_REGIONS=us-east-1,us-east-2
For Azure K8S collection:
AZURE_SUBSCRIPTION_ID=123abcdefg
Run help to see available options:
$ elastic-assets help
Elastic asset collection load script. Please specify the type of load you would like to perform.
help Print this menu
k8s Cycle through all K8s clusters you have access to via your kube config file
and loads k8s assets from those clusters
aws-k8s Connect to AWS EKS and pulls cluster info from the specified region, e.g.
AWS_REGIONS=us-east-1,us-east-2 elastic-assets aws-k8s
azure-k8s Connect to Azure AKS and pulls cluster info from the specified subscription,
e.g. AZURE_SUBSCRIPTION=xyz123 elastic-assets azure-k8s
all Collect all of the above assets (remember to set all necessary env vars)
FAQs
This package faciliates collecting asset data for K8s across several cloud providers. Currently, it can do the following:
We found that @elastic/asset-collection demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 68 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.

Security News
The planned feature introduces a review step before releases go live, following the Shai-Hulud attacks and a rocky migration off classic tokens that disrupted maintainer workflows.