
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
specmatic-insights-github-build-reporter
Advanced tools
This package runs as part of your CI pipeline to ship Specmatic reports to Specmatic Insights.
Please contact Specmatic team for more info.
- name: Run Specmatic Insights Github Build Reporter
run: |
docker run \
-v ${{ github.workspace }}:/workspace \
specmatic/specmatic-insights-github-build-reporter:latest \
--specmatic-insights-host https://insights.specmatic.io \
--specmatic-reports-dir /workspace/build/reports/specmatic \
--org-id ${{ secrets.SPECMATIC_ORG_ID }} \
--branch-name ${{ github.ref_name }} \
--repo-name ${{ github.event.repository.name }} \
--repo-id ${{ github.repository_id }} \
--repo-url ${{ github.event.repository.html_url }}
- name: Run Specmatic Insights Github Build Reporter
run: |
npx specmatic-insights-github-build-reporter \
--org-id ${{ secrets.SPECMATIC_ORG_ID }} \
--branch-name ${{ github.ref_name }} \
--repo-name ${{ github.event.repository.name }} \
--repo-id ${{ github.repository_id }} \
--repo-url ${{ github.event.repository.html_url }}
Before you're able to test locally, you'll have to link the specmatic-insights-github-build-reporter
package to your local npm
registry.
Run the following command in the root directory of the specmatic-insights-github-build-reporter
package:
npm link
Next, link the specmatic-insights-github-build-reporter
package to your local npm
registry in the root directory of your specmatic project, e.g. specmatic-order-api-java
:
npm link specmatic-insights-github-build-reporter
Now you can run the build reporter locally to send builds to your local insights server using the following command:
npx specmatic-insights-github-build-reporter \
--specmatic-insights-host=http://localhost:8080 \
--org-id <org-id> \
--branch-name <branch-name> \
--repo-name <repo-name> \
--repo-id <repo-id> \
--repo-url <repo-url>
To revert the changes, run the following commands:
npm unlink specmatic-insights-github-build-reporter
npm unlink
FAQs
Specmatic Insights Github build reporter
The npm package specmatic-insights-github-build-reporter receives a total of 9 weekly downloads. As such, specmatic-insights-github-build-reporter popularity was classified as not popular.
We found that specmatic-insights-github-build-reporter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.