Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
helm-chart-publisher
Advanced tools
node package helm chart and publish to git repository plugin
Helm chart is an integral part of a project, more often its definition is placed as closest to code as possible.
In order to be able to develop both at the same time helm allows to do chart versioning.
This plugin packages the chart and leverages the possibility of using git repository as a helm repository.
helm
foldder in your project directory ├── src
├── dist
├── helm
│ └── your-app-name
│ ├── templates
│ ├── values.yaml
│ └── Chart.yaml
└── ...
package.json
{
"scripts": {
"helm-chart-publish": "helm-chart-publisher --projectName=<NAME-OF-YOUR-PROJECT>"
}
}
$ npm run helm-chart-publish -- --chart.version=1.0.3 --gitChartRepo.url=<HELM-CHART-GIT-URL> --gitChartRepo.username=<HELM-CHART-GIT-USERNAME> --gitChartRepo.password=<HELM-CHART-GIT-PASSWORD>
Plugin requires helm client in version 2.x or 3.x to be installed.
Parameter | Description | Default value | Flag | Environment variable | package.json config property |
---|---|---|---|---|---|
Git chart repository URL | URL to a git repository in which helm charts are stored. Accepts both ssh and https protocols. | - | gitChartRepo.url | - | helm-chart-publish.gitChartRepoUrl |
Git username | Git repository username | - | gitChartRepo.username | HELM_CHART_PUBLISH_GIT_REPO_USERNAME | helm-chart-publish.gitUsername |
Git password | Git repository password | - | gitChartRepo.password | HELM_CHART_PUBLISH_GIT_REPO_PASSWORD | - |
Git repository working directory | Directory in git repository where helm chart repository is stored | / (root folder of the repository) | gitChartRepo.workDir | - | helm-chart-publish.gitChartRepoWorkDir |
Chart version | Version under which the chart will be published | project.version | chart.version | - | - |
Chart name | Name of the chart (must be the same as name in chart valyes.yaml ) | project.name | chart.name | - | helm-chart-publish.chartName |
Chart definition path | Where in the project chart definition is stored | ${projectDir}/helm/$chartName | chart.definitionPath | - | helm-chart-publish.chartDefinitionPath |
FAQs
Scripts for pushing Helm chart to repository in Git
We found that helm-chart-publisher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.