
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
docker-meta
Advanced tools
Generates docker meta information such as tags, labels and build-args.
$ npm install -g docker-meta
$ docker-meta COMMAND
running command...
$ docker-meta (-v|--version|version)
docker-meta/4.0.0 linux-x64 node-v14.16.0
$ docker-meta --help [COMMAND]
USAGE
$ docker-meta COMMAND
...
To use with docker buildx bake:
docker buildx bake -f <(docker-meta)
$ docker-meta --help
Generates docker meta information such as tags, labels and build-args.
USAGE
$ docker-meta
OPTIONS
-V show CLI version
-c, --config=config Path to the config file
-h, --help show CLI help
-o, --output=output Path to the output file
--branch=branch The branch
--build-date=build-date The build date in ISO 8601
--change-number=change-number The change number
--[no-]change-request Change request mode
--git-sha=git-sha The git sha
--[no-]latest Push as latest
--version=version The version to publish
DESCRIPTION
The config will be read from any valid config file in the current directory. The configuration file can be defined using all the extensions and names accepted by cosmiconfig, such as docker-meta.config.js
You can find an example of config file here.
4.0.0 (2021-03-17)
version
(you can disable this behavior with the
new option --no-tag-semver
).v1.0.0
becomes 1.0.0
.FAQs
Generates docker meta information such as tags, labels and build-args.
The npm package docker-meta receives a total of 8 weekly downloads. As such, docker-meta popularity was classified as not popular.
We found that docker-meta demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.