Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Ultra-simplified code deployment tool
几行配置代码,搞定Git分支自动更新,自动执行脚本,自动部署启动。支持Github,Gitee。Automate updating of Git branches, execution of scripts and deployment with just a few lines of configuration code. Supports Github and Gitee.
# 在部署服务器上安装 Installation on the server
npm i -g my-ci
1、在你的本地项目中创建.my-ci.yml配置文件,并提交git
1. Create a .my-ci.yml configuration file in your local project and commit it to Git.
示例:.my-ci.yml, 可简单兼容gitlab-ci配置
project: project-z
dev-1:
script:
- echo "Hello"
- npm install
only:
- /^test_.*/
2、在服务器上安装并启动my-ci
2. Install and start My-CI on the server.
npm i -g my-ci
myci start
# running on port 7002
3、在服务器上clone你的项目并初始化my-ci的工作空间
3.Clone your project on the server and initialize My-CI's workspace.
git clone github.com/your/project-z
cd project-z
myci watch
4、配置WebHook
4. Add WebHook
在github或gitee等支持WebHook的Git工具上配置推送链接,URL格式如下:
Configure the push URL link on Git tools that support WebHook, such as GitHub or Gitee. The URL format is as follows:
${your_server_host}:${my_ci_port}/work/${project_name}/build
www.yourserver.com:7002/work/project-z/build
gitee: github:
5、成功应用
5.Successfully applied
根据上面配置,本地项目的test_开头分支修改并push后,WebHook触发,服务器上的my-ci服务监听到并自动将project-z切换到test_*分支并执行my-ci.yml中配置好的部署脚本。
According to the configuration above, when the test_* branch of the local project is modified and pushed, the WebHook will be triggered. The my-ci service on the server will automatically switch project-z to the test_* branch and execute the deployment script configured in my-ci.yml.
FAQs
**Ultra-simplified code deployment tool**
The npm package my-ci receives a total of 1 weekly downloads. As such, my-ci popularity was classified as not popular.
We found that my-ci demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.