
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@harnessio/backstage-plugin-harness-iacm
Advanced tools
Website: https://harness.io/
Welcome to the Harness IACM plugin for Backstage!
yarn add --cwd packages/app @harnessio/backstage-plugin-iacm
yarn install
If you are looking to get started with Backstage, check out backstage.io/docs.
For testing purposes, you can also clone this repository to try out the plugin. It contains an example Backstage app setup which is pre-installed with Harness plugins. However, you must create a new Backstage app if you are looking to get started with Backstage.
app-config.yaml
under the proxy
config. Add your Harness Personal Access Token or Service Account Token for x-api-key
. See the Harness docs for generating an API Key.# In app-config.yaml
proxy:
# ... existing proxy settings
'/harness/prod':
target: 'https://app.harness.io/'
headers:
'x-api-key': '<YOUR PAT/SAT>'
# ...
Notes:
Plugin uses token configured here to make Harness API calls. Make sure the user creating this API token has necessary permissions, which include project view
permission along with pipeline view
and execute
permissions and same applies for service accounts as well it must have a role assigned that has the roles with adequate permissions as described before.
Set the value of target to your on-prem URL if you are using the Harness on-prem offering
EntityPage.tsx
, import the EntityIacmContent
and isHarnessIacmAvailable
from @harnessio/backstage-plugin-iacm
and add <EntityHarnessIacmContent />
. Something like this -// In packages/app/src/components/catalog/EntityPage.tsx
import {
isHarnessIacmAvailable,
EntityIacmContent,
} from '@harnessio/backstage-plugin-iacm';
const iacmContent = (
// ...
<EntitySwitch.Case if={isHarnessIacmAvailable}>
<EntityHarnessIacmContent />
</EntitySwitch.Case>
// ...
);
// In packages/app/src/components/catalog/EntityPage.tsx
import {
isHarnessIacmAvailable,
EntityIacmContent,
} from '@harnessio/backstage-plugin-iacm';
const serviceEntityPage = (
// ...
<EntityLayout.Route
path="/harness-iacm"
title="Harness IACM"
if={isHarnessIacmAvailable}
>
<EntityIacmContent />
</EntityLayout.Route>
// ...
);
catalog-info.yaml
file.Here is an example: catalog-info-new.yaml
apiVersion: backstage.io/v1alpha1
kind: Component
metadata:
# ...
annotations:
# annotation
harness.io/workspace-url: |
labelA: <harness_iacm_workspace_url>
labelB: <harness_iacm_workspace_url>
# here labelA / labelB denotes the value you will see in dropdown in workspace list.
FAQs
# Harness IACM plugin
We found that @harnessio/backstage-plugin-harness-iacm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.