
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@gasbuddy/s3-deploy
Advanced tools
NodeJS bash utility for deploying files to Amazon S3
s3-deploy './dist/**' --cwd './dist/' --region AWS_REGION --bucket SOME_BUCKET_NAME
Deploys files found by the ./dist/**
glob patten to S3. Change AWS_REGION
with the AWS region of your bucket and SOME_BUCKET_NAME
with the name of your bucket where file files should end up.
--gzip
Specifying --gzip
will gzip all files before sending them.
--cache X
Use this parameter to specify the Cache-Control: max-age=X
header, where X is the number of seconds a given item will be kept in the cache for. By default this value is undefined.
--immutable
When a page is refreshed, which is an extremely common social media scenario, elements that were previously marked immutable with an HTTP response header do not have to be revalidated with the server. It sets the Cache-Control: immutable
header - using-immutable-caching-to-speed-up-the-web
--etag X
You can also specify the ETag: X
header, where X is either user-defined value for this header, or MD5 of the content. To automatically fill this header with MD5 hash of the file, just use --etag
parameter without any value. Internally the tool will generate MD5 hash of the content and will set it as the ETag header value. By default this parameter is undefined.
--signatureVersion v4
You can also specify the signatureVersion
that should be used by S3 client. Current allowed values are the same as in the constructor of the S3 JS SDK Client. In the time of writing those docs those values were v2
, v3
and v4
.
--filePrefix
Use this parameter to specify a file prefix for all your destination files. For example, if you wanted to deploy a versioned history of your project to S3 whenever publishing to npm, you could use --filePrefix $npm_package_version
in a script in your project's package.json file.
--profile
You can specify a specific AWS profile to use to connect to S3 (defaults to default
). More information on how to setup AWS profiles is available in the AWS docs.
--private
Use this parameter to specify that objects being uploaded will be stored with private ACL (Owner gets FULL_CONTROL. No one else has access rights). By default, 'public-read' ACL is set. More information on the canned-acl is available in the AWS docs
--ext
Enables to set the correct content type header when files has no extension. For example, when the s3 bucket is used for webhosting and there is need to access paths like /about
instead of /about.html
so its possible to upload file named about
and set --ext html
AWS credentials can be provided via environment variables, or in the ~/.aws/credentials
file. More details here:
http://docs.aws.amazon.com/cli/latest/topic/config-vars.html. Please make sure to define a default in your AWS credentials, this will help prevent a Missing Credentials
error during deployment.
npm run release
Runs eslint validation, runs all unit tests.
npm test
Invokes all unit tests in the project.
npm run coverage
Generates unit test coverage report.
npm run lint
Invokes eslint validation based on rules defined in the .eslintrc
file.
Bug Fix
API Additions
Bug Fix
API Additions
Bug fix
s3-deploy
is used from windows machine.*API Additions
filePrefix
Bug fix
aws-sdk
package version to 2.3.19
, because of: https://github.com/aws/aws-sdk-js/issues/1035API Additions
signatureVersion
in S3 client,--etag
argument is used.API Additions
Patch/Bug Fixes
API Additions
Bug/Patch fixes
babel
to be a dev-dependency.API additons
--gzip
. When this is added, all files will be gzipped before sending them to Amazon S3.Patch fixes
Patch fixes
Bug fixes
crypto
import in the utils.Patch fix
Bug fixes
Bug fixes
Bug fixes
API additions
FAQs
NodeJS bash utility for deploying files to Amazon S3
We found that @gasbuddy/s3-deploy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.