
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@fastly/heroku-plugin
Advanced tools
Heroku CLI plugin for interacting with fastly configuration.
Install the heroku-fastly plugin using the heroku plugins
command. More details are available in Heroku's Devcenter.
heroku plugins:install @fastly/heroku-plugin
The CLI Plugin includes the commands: tls
, verify
, and purge
.
To add TLS to a domain your pricing plan must include a TLS domain and the domain must be configured in the active version of your Fastly Service. The process involves creating the TLS Domain, verifying ownership of your domain, and checking the verification status of your domain. Usage:
heroku fastly:tls DOMAIN [VERIFICATION_TYPE]
To add TLS/SSL to a custom domain:
heroku fastly:tls www.example.org --app my-fast-app
Create a DNS TXT record with the verification string output from this command.
heroku fastly:verify start www.example.org --app my-fast-app
Verfies ownership of the domain via the DNS TXT record added from output of the previous command.
heroku fastly:verify status www.example.org --app my-fast-app
Checks the status of the verification process. If complete, a new CNAME will be output that you can update to after the new certificate propages to all caches.
To remove TLS/SSL from a custom domain, include the the -d
flag:
heroku fastly:tls -d www.example.org --app my-fast-app
Issue a surrogate key purge or purge all. For reference, see the Purge API docs. Usage:
heroku fastly:purge [KEY]
To purge the entire cache:
heroku fastly:purge --all --app my-fast-app
To purge a surrogate-key from the cache:
heroku fastly:purge my-surrogate-key --app my-fast-app
To softpurge a key from the cache:
heroku fastly:purge my-surrogate-key --soft --app my-fast-app
Clone the repo and run npm install
to install dependencies.
Further detail on building Heroku CLI plugins is available in the devcenter.
npm install
.cd
into heroku-fastly
repo and run heroku plugins:link
.heroku plugins
, will return something like:heroku-fastly 1.0.7 (link) /Users/your-path/heroku-fastly
tls
command. Run heroku fastly:tls www.example.org --app my-fast-app
. This command will return something like:=== Domain www.example.org has been queued for TLS certificate addition. This may take a few minutes.
▸ In the mean time, start the domain verification process by creating a DNS TXT record containing the following content:
▸
▸
▸ Once you have added this TXT record you can start the verification process by running:
▸
▸ $ heroku fastly:verify start DOMAIN —app APP
verify
command. Run heroku fastly:verify start www.example.org --app my-fast-app
, will return something like: ▸ Valid approval domains: example.org, www.example.org
Type the approval domain to use (or ENTER if only 1): : ^C
purge
command. Run heroku fastly:purge --all --app my-fast-app
, will return something like:{ status: 'ok' }
Tests can be run with npm test
.
Have an issue? Please send an email to support@fastly.com.
Want to see new functionality? Please open a pull request.
2.0.0
FAQs
Heroku CLI Plugin for interacting with Fastly CDN
The npm package @fastly/heroku-plugin receives a total of 4 weekly downloads. As such, @fastly/heroku-plugin popularity was classified as not popular.
We found that @fastly/heroku-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 56 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.