
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
ember-cli-deploy-ink-pack
Advanced tools
An opinionated collection of ember-cli-deploy plugins for continuous deployment.
The Ink ember-cli-deploy pack is an opinionated collection of ember-cli-deploy plugins used to manage the deployment of Ember applications used at Movable Ink.
It relies on Github, TravisCI, Slack, S3 for assets and Redis for revisions.
ember install ember-cli-deploy-ink-pack
To update your config/deploy.js
from the blueprints provided, invoke:
ember generate ink-deploy-config
To deploy to staging and production, you'll need to create a .env.deploy.staging
and .env.deploy.production
respectively.
These files require the following:
AWS_KEY=xxx
AWS_SECRET=xxx
AWS_BUCKET=xxx
REDIS_HOST=xxx
CLOUDFRONT_URL=xxx
SLACK_WEBHOOK=xxx
If you have any trouble, get in touch with a developer who has had their environment configured. They'll provide the bucket name and host, and setup an IAM account if needed.
Before you can deploy, make sure you have your SSH key added to ssh-agent. You may do this by executing the following:
ssh-add ~/.ssh/id_rsa
See https://developer.github.com/guides/using-ssh-agent-forwarding/ for more information about SSH agent forwarding.
We use ember-cli-deploy
to deploy our assets. Provided is a short list that covers deployment of 99% of our use cases. For more information see ember-cli/ember-cli-deploy.
ember deploy <environment> --activate
A successful activation will send a message to Slack. This is configurable by setting the slack.message
property in config/deploy.js
. Available variables are:
git.user.name
git.user.email
git.branch
git.diff
deploy.target
deploy.duration
package.name
package.repository
package.version
To preview a change before activating, remove the --activate
flag from ember deploy
. A key will be returned that can be appended to the URL via ?revision=SHA before activating.
Revisions look like <app-name>:c2f5951
, where <app-name>
is the redis namespace and c2f5951
is the git SHA of the last commit on that deploy.
To get a list of deployments, call ember deploy:list <environment>
.
This pack is heavily inspired by ember-cli-deploy-zesty-pack and ember-cli-deploy-lightning-pack.
FAQs
An opinionated collection of ember-cli-deploy plugins for continuous deployment.
We found that ember-cli-deploy-ink-pack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.