Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@roadiehq/backstage-entity-validator-test-ci
Advanced tools
This package can be used as a GitHub action or a standalone node.js module
path
Optional Path to the catalog-info.yaml file to validate. Defaults to catalog-info.yaml
at the root of the repository. It also can be a glob like services/*/catalog-info.yaml
or a list of files seperated by comma users.yaml,orgs/company.yaml
.
verbose
Optional Specify whether the output should be verbose. Default true
.
None. Prints out the validated YAML on success. Prints out errors on invalid YAML
- uses: RoadieHQ/backstage-entity-validator@v0.3.2
with:
path: 'catalog-info-1.yaml'
- uses: RoadieHQ/backstage-entity-validator@v0.3.2
with:
path: 'catalog-info-1.yaml,catalog-info-2.yaml,catalog-info-3.yaml'
- uses: RoadieHQ/backstage-entity-validator@v0.3.2
with:
path: 'catalog-info-*.yaml,services/**/*/catalog-info.yaml'
path
Optional Path to the catalog-info.yaml file to validate. Defaults to catalog-info.yaml
at the root of the repository.
None. Prints out the validated YAML on success. Prints out errors on invalid YAML
description: >
Sample catalog-info.yaml validation
usage:
version: 2.1
orbs:
entity-validator: "roadiehq/backstage-entity-validator@0.3.0"
workflows:
use-entity-validator:
jobs:
- entity-validator/validate:
path: catalog-info.yaml
Usage: validate-entity [OPTION] [FILE]
Validates Backstage entity definition files. Files may be specified as
arguments or via STDIN, one per line.
OPTION:
-h display help
-q minimal output while validating entities
-i validate files provided over standard input
Examples:
# in a shell
# validate all entities contained in the "catalog" and subfolders
validate-entity catalog/**/*.yaml
# list of files produced by a script to validate
find-relevant-yaml-files.sh | validate-entity -i
# install
npm install --global @roadiehq/backstage-entity-validator
# run
validate-entity file1.yaml file2.yaml
# install
npm install --save-dev @roadiehq/backstage-entity-validator
# run
npx validate-entity file1.yaml file2.yaml
# install
npm install
# run
npm run validate file1.yaml file2.yaml
# or
bin/bev file1.yaml file2.yaml
FAQs
Backstage entity validator
We found that @roadiehq/backstage-entity-validator-test-ci demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.