
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@frontside/backstage-plugin-humanitec
Advanced tools
`@frontside/backstage-plugin-humanitec` is a plugin for the Backstage frontend app. It shows information about environments, workloads and resources on an entity page.
@frontside/backstage-plugin-humanitec is a plugin for the Backstage frontend app. It shows information about environments, workloads and resources on an entity page.

This plugin requires @frontside/backstage-plugin-humanitec-backend because it connects to the backend to make requests to the Humanitec API.
First, install the plugin to your backstage app:
yarn workspace app add @frontside/backstage-plugin-humanitec
Then in your Entity Page (./packages/app/src/components/catalog/EntityPage.tsx) add the HumanitecCardComponent:
+ import { HumanitecCardComponent } from '@frontside/backstage-plugin-humanitec';
...
const overviewContent = (
<Grid container>
...
+ <Grid item md={6}>
+ <HumanitecCardComponent />
+ </Grid>
</Grid>
)
Add annotations to types that have Humanitec apps display:
# ./catalog-humanitec-workloads.yaml
apiVersion: backstage.io/v1alpha1
kind: Component
metadata:
name: name-of-application-workload # 🚨 CHANGE
description: Humanitec Workload Environments
annotations:
"humanitec.com/orgId": "my-humanitec-organization" # 🚨 CHANGE
"humanitec.com/appId": "my-humanitec-application" # 🚨 CHANGE
spec:
type: service
owner: john@example.com
lifecycle: experimental
Lastly in your ./app-config.yaml, add configuration to humanitec:
humanitec:
orgId: my-humanitec-organization
token: ${HUMANITEC_TOKEN} # without Bearer
When you start your backstage app be sure to pass in HUMANITEC_TOKEN that you must generate from your Humanitec dashboard.
FAQs
`@frontside/backstage-plugin-humanitec` is a plugin for the Backstage frontend app. It shows information about environments, workloads and resources on an entity page.
The npm package @frontside/backstage-plugin-humanitec receives a total of 7 weekly downloads. As such, @frontside/backstage-plugin-humanitec popularity was classified as not popular.
We found that @frontside/backstage-plugin-humanitec demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.