
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
customizable-comments
Advanced tools
A Probot app to auto-reply with customizable comments based on template vars
A GitHub App built with Probot that auto-replies with customizable comments based on template vars
.github/customizable-comments.yml
configuration file to each repo. You can alsoCustomizable Comments also supports Probot Config, if you want to store your configuration files in a central repository. This allows you to share configurations between projects, and create an organization-wide configuration file by creating a repository named .github
and file named customizable-comments.yml
.
📒 Currently, this Probot App only supports pull_request.opened
events.
I would be happy to add more, just submit a PR or Issue with what you'd find useful.
name | value | used when |
---|---|---|
$BRANCH | The branch name of the PR | pull_request |
You can configure your own variable replacements using the vars:
block in the yml file. See the example below:
vars:
- name: $MY_CUSTOM
value: my-value
pull_request:
opened:
template: |
Here's a helpful URL based on the branch name: https://$BRANCH.something.example.com
And here's my custom value: $MY_CUSTOM
The above will auto-reply with a comment like so:
Here's a helpful URL based on the branch name: https://the-branch.something.example.com
And here's my custom value: my-custom
# Install dependencies
npm install
# Run the bot
npm run dev
This Probot app supports deploying as a Google Cloud Function out of the box:
gcloud beta functions deploy gcf-name --env-vars-file .env.yaml --entry-point probot --runtime nodejs8 --trigger-http
Where:
gcf-name
: desired name of the GCF.env.yaml
: see .env.yaml.exampleSee Probot Deployment docs for other deployment options.
If you have suggestions for how customizable-comments could be improved, or want to report a bug, open an issue! We'd love all and any contributions.
For more, check out the Contributing Guide.
ISC © 2018 Jeremy Gayed https://twitter.com/tizmagik
FAQs
A Probot app to auto-reply with customizable comments based on template vars
The npm package customizable-comments receives a total of 1 weekly downloads. As such, customizable-comments popularity was classified as not popular.
We found that customizable-comments demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.