
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
greenkeeper-shrinkwrap
Advanced tools
Enabling shrinkwrap support for Greenkeeper via Travis CI
After enabling Greenkeeper for your repository you can use this package to make it work with shrinkwrapped projects.
Create a GitHub access token with push access to your repository and make it available to Travis CI's environment as GH_TOKEN
.
Configure Travis CI to use the npm version you want your shrinkwrap files to be generated with before it npm install
s your dependencies.
before_install:
# It is advisable to use latest npm, as there are a lot of shrinkwrap fixes in there
- npm install -g npm
greenkeeper-shrinkwrap
as well.before_install:
- npm install -g npm
- npm install -g greenkeeper-shrinkwrap@1
greenkeeper-shrinkwrap-update
right before it executes your tests.before_script: greenkeeper-shrinkwrap-update
greenkeeper-shrinkwrap-upload
right after it executed your tests.after_script: greenkeeper-shrinkwrap-upload
It is common to test multiple node versions and therefor have multiple test jobs for one build. In this case the shrinkwrap will automatically be updated for every job, but only uploaded for the first one.
node_js:
- 6
- 4
before_install:
- npm install -g npm
- npm install -g greenkeeper-shrinkwrap@1
before_script: greenkeeper-shrinkwrap-update
# Only the node version 6 job will upload the shrinkwrap
after_script: greenkeeper-shrinkwrap-upload
FAQs
Your shrinkwrap, up to date, all the time
We found that greenkeeper-shrinkwrap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.