Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
hubot-gitsy
Advanced tools
Gitsy is Rocket.Chat's Hubot for GitLab Integration
Gitsy can perform the following (and you can extend Gitsy readily by modifying its scripts):
For this script to take effect, you must first have your hubot environment up and running, then install Gitsy with:
npm install --save hubot-gitsy
Next, you must edit the external-scripts.json
file to load Gitsy:
[
...
"hubot-gitsy"
]
You will also need to configure Gitsy for your GitLab projects.
#Configuration
You can configure Gitsy via environment variables.
##ENV
#####GITLAB_URL
The GitLab host that Gitsy will connect to. It can be your own Community Edition server, or your projects on gitlab.com:
For example:
GITLAB_URL="https://mygitlabserver:3000/"
#####GITLAB_API_KEY
The API key to allow Gitsy to access a GitLab account. Obtain an API key from your GitLab account. If you are an administrator, you can get an API key for the entire server, with visibility to all projects; as a user, your API key can only access your own proejects.
For example:
GITLAB_API_KEY="aaaefadafasfasfasfafafasfa"
##OTHER Required ENV variables
Gitsy handles incoming webhook events using the excellent hubot-gitlab-hooks npm module. You must configure the additional ENV variables required by this module for the webhook handling to operate correctly.
#Operation
You can learn about the commands available by asking Gitsy for an introduction.
Note that you must use the name you gave to your bot (assumed to be hubot here):
hubot intro gitsy
FAQs
Rocket.Chat's Hubot for GitLab Integration
The npm package hubot-gitsy receives a total of 2 weekly downloads. As such, hubot-gitsy popularity was classified as not popular.
We found that hubot-gitsy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.