
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@lastest/runner
Advanced tools
CI client for the Lastest visual regression testing platform — triggers builds and reports results
CI client for Lastest visual regression testing. Triggers a build on your Lastest server and polls for results — no local browser required, since execution happens server-side against your team's embedded browser pool.
npx @lastest/runner trigger -t YOUR_TOKEN -s https://your-lastest-server --repo owner/repo
Get YOUR_TOKEN from Settings → Runners in your Lastest UI (shown once at create time).
GITHUB_OUTPUT / GITHUB_STEP_SUMMARY automatically; exits non-zero on failed/blocked builds (or on detected changes with --fail-on-changes).npx.npx @lastest/runner --help
Requirements: Node.js 18+ and a reachable Lastest instance.
lastest-runner trigger -r owner/repo -t <token> -s <server-url>
| Option | Description | Default |
|---|---|---|
-r, --repo <id-or-name> | Repository ID or full name (e.g. owner/repo) | required |
-t, --token <token> | Runner authentication token | — |
-s, --server <url> | Lastest server URL | — |
--timeout <ms> | Timeout waiting for the build to complete | 300000 |
--branch <branch> | Git branch (defaults to $GITHUB_HEAD_REF/$GITHUB_REF_NAME) | — |
--commit <sha> | Git commit SHA (defaults to $GITHUB_SHA) | — |
--target-url <url> | Override base URL for test execution | — |
--fail-on-changes | Exit 1 when visual changes are detected (review_required) | off |
Exits 0 on passed/safe_to_merge (or review_required without --fail-on-changes), exits 1 on failed/blocked/timeout.
lastest-runner repos -t <token> -s <server-url>
-t/-s can be omitted if a previous run saved them to ~/.lastest/runner.config.json.
jobs:
visual-tests:
runs-on: ubuntu-latest
steps:
- name: Run visual regression tests
run: |
npx @lastest/runner trigger \
-r ${{ github.repository }} \
-t ${{ secrets.LASTEST_TOKEN }} \
-s ${{ vars.LASTEST_SERVER }}
visual-tests:
image: node:20-bookworm
script:
- npx @lastest/runner trigger -r my-group/my-repo -t $LASTEST_TOKEN -s $LASTEST_SERVER
For zero-config CI:
- name: Run visual regression tests
uses: las-team/lastest/action@main
with:
server-url: ${{ secrets.LASTEST_SERVER_URL }}
runner-token: ${{ secrets.LASTEST_RUNNER_TOKEN }}
Test execution itself happens on your Lastest server using its embedded browser pool — either system-managed or a BYO embedded browser you register from Settings → Runners. This CLI never launches a browser; it only creates the build and reports on it.
trigger on every PR--timeout for repos with many testsURL for diagnostics--repo matches either a repository ID or a owner/repo full name known to your teamFSL-1.1-ALv2 — see LICENSE.
FAQs
CI client for the Lastest visual regression testing platform — triggers builds and reports results
We found that @lastest/runner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.