
Security News
Feross on the 10 Minutes or Less Podcast: Nobody Reads the Code
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.
samson-cli
Advanced tools
Command line utility to manage deploys in Zendesk's Samson
git and Node.js >=4 with npm.
Just install the samson-cli globally.
npm install -g samson-cli
You should create a samsonrc.json file in each of your project directories. samson will look for it when you run the tool. The file should have this shape:
{
"url": "http://my-samson-url.com",
"project": "myProjectName",
"auth": "<authentication cookie>",
"samson": {
"production": true
}
}
The auth key expects the value of your Samson session cookie. We still don't have a better authentication system (perhaps based in a Samson user token) due to Samson API limitations.
samson <command> [options...]
deployPerforms a deploy of a branch or tag to a stage.
Syntax:
samson deploy <stage> <reference>
Where stage is a valid stage (see samson stages) and reference is a branch, tag or commit SHA.
Example:
samson deploy staging master
deploysPrints the last 15 deploys.
Syntax:
samson deploys
buildsPrints the last builds.
Syntax:
samson builds
stagesPrints the configured stages.
Syntax:
samson stages
-c | --configYou can specify a custom config, in json format
Syntax:
samson <command> -c '{ "url": "http://my-samson-url.com", ...}'
Note: You may not need to have a samsonrc.json file in order to use the program if the config is specified this way, but some autocompletion features will be disabled
samsonrc.jsonsamsonrc.json is foundFAQs
Samson command line interface
The npm package samson-cli receives a total of 29 weekly downloads. As such, samson-cli popularity was classified as not popular.
We found that samson-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.

Research
/Security News
Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.