
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
cloud-run-cleanup
Advanced tools
cloud-run-cleanupCleans up old Cloud Run revisions and their Docker images.
npm install -g cloud-run-cleanup
npx cloud-run-cleanup
I use Google Cloud Run for some of my projects: it's very easy to deploy the whole service or website and it works perfectly, until your traffic reaches a point when it's actually cheaper to get a proper hosting, because it will be much cheaper.
But that moment might never happen for you regular hobby project, so Cloud Run is cool, right?
The only problem here is that when you deploy a new revision, the old revision and its Docker image is stored, and those Docker images for old revisions are counted against the storage you use. So, it's tempting to delete them; and why do it manually?
No LLM code here, only organic human written code! I wrote it before LLM agents became a thing :)
Authenticate (once):
gcloud config set project <your-project>
gcloud auth application-default login
Then run the script after each deployment, when you are ready to delete older revisions of all Cloud Run services:
npx cloud-run-cleanup
Alexander Fenster
FAQs
Delete old revisions and their Docker images in Google Cloud Run
The npm package cloud-run-cleanup receives a total of 0 weekly downloads. As such, cloud-run-cleanup popularity was classified as not popular.
We found that cloud-run-cleanup demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.