Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@rimac-automobili/semantic-release-ecr
Advanced tools
semantic-release plugin to publish a docker image to the AWS Elastic Container Registry
semantic-release plugin to publish a docker image to the AWS Elastic Container Registry
Step | Description |
---|---|
verifyConditions | Verify the presence of the AWS_ACCESS_KEY_ID , AWS_SECRET_ACCESS_KEY and AWS_DEFAULT_REGION environment variables and docker imageName plugin option |
publish | Publish the docker image to the aws ecr. |
# For npm users
$ npm install --save-dev @rimac-automobili/semantic-release-ecr
# For yarn users
$ yarn add --dev @rimac-automobili/semantic-release-ecr
The plugin can be configured in the semantic-release configuration file:
{
"plugins": [
"@semantic-release/commit-analyzer",
"@semantic-release/release-notes-generator",
"@semantic-release/npm",
[
"@rimac-automobili/semantic-release-ecr",
{
"imageName": "my-ecr-image"
}
]
]
}
To use this plugin you need to set up an ECR container registry if you don't already have on. Here is a AWS ECR Getting started guide from AWS on how to set up a new registry.
IMPORTANT! This plugin expects the docker image to be built already, or you can build it with "dockerImage" configuration option
Variable | Description | Required |
---|---|---|
AWS_ACCESS_KEY_ID | AWS access key id | ✓ |
AWS_SECRET_ACCESS_KEY | AWS secret key | ✓ |
AWS_DEFAULT_REGION | AWS region | ✓ |
Options | Description | Default | Required |
---|---|---|---|
buildImage | Docker command which will build an image | ||
imageName | The name of the image to push to the ECR. The name should be the same as your ECR repository name (example: my-ecr-image ). Remember that you don't need to add your registry URL in front of the image name, the plugin will fetch this URL from AWS and add it for you. Don't add tag in the imageName | ✓ | |
tags | Array of string which can be static values like latest or environment variables like $NODE_ENV | nextRelease.version |
{
"plugins": [
"@semantic-release/commit-analyzer",
"@semantic-release/release-notes-generator",
"@semantic-release/npm",
[
"@rimac-automobili/semantic-release-ecr",
{
"buildImage": "docker build . -t my-ecr-image",
"imageName": "my-ecr-image",
"tags": ["latest", "$NODE_ENV"]
}
]
]
}
FAQs
semantic-release plugin to publish a docker image to the AWS Elastic Container Registry
The npm package @rimac-automobili/semantic-release-ecr receives a total of 0 weekly downloads. As such, @rimac-automobili/semantic-release-ecr popularity was classified as not popular.
We found that @rimac-automobili/semantic-release-ecr demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.