
Product
Rust Support Now in Beta
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
@rosmcmahon/permaweb-deploy
Advanced tools
Inspired by the cookbook github action deployment guide, permaweb-deploy
is a Node.js command-line tool designed to streamline the deployment of JavaScript bundles to the permaweb using Arweave. It simplifies the process by bundling JS code, deploying it as a transaction to Arweave, and updating ArNS (Arweave Name Service) with the transaction ID.
Install the package using npm:
npm install permaweb-deploy
Before using permaweb-deploy
, you must:
Encode your Arweave wallet key in base64 format and set it as a GitHub secret:
base64 -i wallet.json | pbcopy
Ensure that the secret name for the encoded wallet is DEPLOY_KEY
.
To deploy your application, ensure you have a build script and a deployment script in your package.json
:
"scripts": {
"build": "your-build-command",
"deploy-main": "npm run build && permaweb-deploy --ant-process <ANT_PROCESS>"
}
Replace <ANT_PROCESS>
with your actual ANT process.
To automate the deployment, set up a GitHub Actions workflow as follows:
name: publish
on:
push:
branches:
- 'main'
jobs:
publish:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/setup-node@v1
with:
node-version: 20.x
- run: npm install
- run: npm run deploy-main
env:
DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
DEPLOY_KEY=$(base64 -i wallet.json) npx permaweb-deploy --ant-process <ANT_PROCESS>
FAQs
Permaweb app deployment package
We found that @rosmcmahon/permaweb-deploy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
Product
Socket Fix 2.0 brings targeted CVE remediation, smarter upgrade planning, and broader ecosystem support to help developers get to zero alerts.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.