
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
cloudfriend-to-cdk
Advanced tools
This package is meant to use in cloudfriend projects and make these stacks compatible with cdk-aio workflow.
Follow this guide to configure the cdk-aio workflow.
File location and other parameters are passed to cdk-aio via context arguments.
The required context arguments are environment (passed by default),
cloudfriendFile, and parametersFile. Check out the example below for how you
might configure the cdk.deploy.yml
that orchestrates cdk-aio.
environments:
my-api-staging:
environment: staging
account-id: AWS_ACCOUNT_ID_SHARED_SVC_STG
aws-login-region: us-east-2
require-approval: true
diff-refs:
- refs/pull/.+/merge
additional-args:
- -c cloudfriendFile=test/cloudformation/my-api.template.js
- -c parametersFile=test/cloudformation/my-api.parameters.staging.json
my-api-production:
environment: staging
account-id: AWS_ACCOUNT_ID_SHARED_SVC_PROD
aws-login-region: us-east-2
require-approval: true
diff-refs:
- refs/heads/main
additional-args:
- -c cloudfriendFile=test/cloudformation/my-api.template.js
- -c parametersFile=test/cloudformation/my-api.parameters.production.json
You can mimic cdk-aio by using the cdk cli directly. Note that this wont include any extras like slack notifications or reports. For a full guide to cdk cli commands check out this doc
npx cdk deploy -a "npx ts-node src/index.ts" \
-c environment=staging \
-c cloudfriendFile=test/cloudformation/api-rasterarrays.template.js \
-c parametersFile=test/cloudformation/api-rasterarrays.staging.parameters.json
/
FAQs
## Description
We found that cloudfriend-to-cdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.