Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Automated compilation and deployment to gh-pages
This project is meant to be self hosted on Heroku or similar, so that you maintain control over who has push access to your repositories.
In general it assumes convention over configuration to make the setup process as painless as possible.
There are two types of github pages repositories. For each of them it assumes that three branches exist:
This is dynamic content that is going to be displayed on your github pages. For example, if your project is a blog, it would include blog posts. If it is a software library, it would be the code and readme (you can choose to display -- perhaps just the readme -- in the tranformation branch).
This looks like a static client side website. It should follow this folder structure
$ tree
.
├── images
│ └── logo.png
├── js
│ └── app.js
├── stylesheets
│ └── app.scss
└── templates
└── index.jade
although can be significantly more complex than this. This is discussed later.
This is where the compiled static site go. Autopages will automatically commit and push this branch back to github every time there is a new commit on the input branch or the transformation branch.
For repos in the <username>.github.io
style, the following branch name conventions are enforced:
ap-content
autopages
master
Any other repos will follow the convention of
master
autopages
gh-pages
Install the module with: npm install autopages
. You can create a new repo for this and in the main file write
var Autopages = require('autopages');
// be sure to replace this with your own api key.
// it must have access to repos and webhooks
var autopages = new Autopages('GITHUB_API_KEY');
autopages.registerRepo('username/repo');
Thats it. Then, deploy it to heroku, and on heroku set the environmental variable URL
so that
it knows where to tell github to point a new webhook to.
More documentation coming soon. In the meantime feel free to contact the author.
Copyright (c) 2014 Matthew Conlen. Licensed under the MIT license.
FAQs
Automated compilation and deployment to gh-pages
The npm package autopages receives a total of 23 weekly downloads. As such, autopages popularity was classified as not popular.
We found that autopages demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.