
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
Cirrus is a push to deploy tool written above the cirrus clouds. Inspired by Evan You's pod.
$ yarn global add cirrus2
or with npm
$ npm install -g cirrus2
createallows you to create a cloud app either from a local repository or a GitHub remote.
Options
--port, -p Port to use for your app
--environment, -e Path to an .env file to source when creating app
--remote, -r Port to use for your app
TODO: Write the rest
First, log in to your Virtual Private Server. DigitalOcean offers VPS' for only 4$/mo.
$ ssh root@<ip>
Install Cirrus
$ npm install -g cirrus
Setup Cirrus. This step sets up necessary firewalls etc.
$ cirrus setup
Create an app.
$ cirrus init my-app
Then, on your local machine:
$ git remote add deploy https://<your vps ip>/
$ git push deploy main # deploy!
TODO: Write docs
All contributions are welcome! Please read below for guidelines on how to get started.
If you want to propose a new feature, open an issue.
npm linkcirrus, just link it to the dependencies: npm link cirrus. Node.js will now use your local clone of cirrus!Cirrus is released under the MIT License.
Tests
Make sure "npm start" script exists in package.json
Check that correct version 2.30+ of git is installed.
"Stream" command output so it doesn't feel as if the action is unresponsive
Logging
Good error reporting
Abstract away cirrus.json
cirrus.json gets created in cirruspath/config/projectname.jsoncirrus.json file in your GitHub repository, in which case that is prioritized (merged)
with the project cirrus config on disk (for things like ports)Deploy in a way that doesn't take app offline
Plugins
POSTGRES_CONNECTION_URL env variable passed to all programs. What ENV variables are exposed needs to be documented by the plugin.Add possibility to init from github Instructions
$ cirrus init umami-software/umami
$ cirrus init railwayapp/blog
FAQs
Cirrus is a push to deploy tool written above the cirrus clouds. Inspired by Evan You's pod.
We found that cirrus2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.