![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
gitlab-webhook-publish
Advanced tools
A minimal server which allows to publish a package after a commit.
This project consist of a lite server using gitlab hooker mechanism to easily synchronise a npm package hosted on gitlab with a repository server.
It is very simple. Using gitlab system hooker project_create
, we can detect when a new repository is created and
then add a gitlab webhooker which send a post request to the webhook server which then execute the npm publish
command.
You can install it using npm install gitlab-webhook-publish
or downloading this repository.
You have then to edit the config file config/local.json
.
{
"webhooker": {
"host": "localhost",
"port": 3000, /* Port of the server */
"filter": {
"namespace" : "^local-app$", /* Regex to filter using project namespace */
"branch" : "^refs\/heads\/master$" /* Regex to filter using project branch */
}
},
"gitlab": {
"url": "http://localhost:80", /* The url of the gitlab server */
"token": "dBqAHFnJsgMPTzzP6qGu", /* The admin token (used to add webhooks) */
"admin_login": "root", /* The admin login (used to repo ddl) */
"admin_password": "password" /* The admin password */
},
"npm_registry": {
"url": "https://registry.npmjs.org", /* Url of the npm registry */
"login": "iprotectmyaccount", /* The account login (used to to publish) */
"password": "12345678", /* The account password */
"email": "name@provider.com" /* The account email */
}
}
To finish the installation, you have to add (only ONE time), a system hooker on gitlab (if you have a programmatically way to add a system hooker on gitlab, please contact me).
To do that, go to Admin Area > Hooks
. In URL
input, add http://<WEBHOOKER_HOST>:<WEBHOOKER_PORT>/project_create
. You can left Secret Token
input empty. Check Push events
checkbox. You can enable or not the SSL Verification
if you want.
Then ENJOY !
FAQs
A minimal server which allows to publish a package after a commit.
The npm package gitlab-webhook-publish receives a total of 0 weekly downloads. As such, gitlab-webhook-publish popularity was classified as not popular.
We found that gitlab-webhook-publish demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.