
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
Lassie is a simple watchdog service written in CoffeeScript. It sports a basic modular architecture that can host multiple types of service checks and alerts.
Lassie doesn't do any graphing or statistical collection. You probably want statsd+Graphite or Munin if you're looking for something like that. Lassie will notify you if a service goes down (and comes back up), nothing more.
A few standard checks and alerts are included with Lassie. If you know Javascript or CoffeeScript, then it is easy to create your own checks and alerts.
options:
# Check every X seconds
check_frequency: 60
# Run as a daemon
daemon: true
log: lassie.log
pid: lassie.pid
# Twilio API credentials
twilio:
sid: TWILIO_SID
token: TWILIO_TOKEN
phnum: TWILIO_PHNUM # outgoing phone number
# Slack API token and target channels/users
slack:
token: SLACK_TOKEN
channels:
- 'monitoring'
users:
- 'judd'
#
# ALERTS LEVELS + CONTACTS
#
alerts:
notify:
admin-email:
type: email
to: admin@example.com
team-chat:
type: slack
channels: ['monitoring']
emerg:
admin-sms:
type: sms
phone: "+18001234567"
admin-slack:
type: slack
users: ['judd']
#
# CHECKS
#
checks:
server1:
type: ping
host: server1.example.com
alerts: [emerg, notify]
server2:
type: ping
host: server2.example.com
alerts: [emerg]
site-web:
type: web
url: http://www.example.com
fragment: "This is an example site"
# This check must fail twice in a row before we consider it down.
failures: 2
alerts: [emerg, notify]
site-api:
type: rest
alerts: [emerg]
url: 'https://api.example.com/test_endpoint'
headers:
accept: application/json
x-api-key: abc123456
FAQs
A watchdog service
We found that lassie demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.