
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
strapi-plugin-netlify-deployments
Advanced tools
Strapi v4 plugin to trigger and monitor a deployment on Netlify
Strapi v4 plugin to trigger, monitor and cancel a deployment on Netlify.
Home Page:
Settings Page:
Run the following command in your Strapi project to install netlify-deployments:
yarn add strapi-plugin-netlify-deployments
# or
npm i -S strapi-plugin-netlify-deployments
Open config/plugins.js
file and add the netlify-deployments entry:
module.exports = ({ env }) => ({
"netlify-deployments": {
enabled: true,
},
});
You can now run Strapi:
yarn develop
You should see the Netlify menu in the left panel.
N.B. You may need to run yarn build
in order to see the new menu entries.
Then you can proceed with the plugin configuration.
Example:
module.exports = ({ env }) => ({
"netlify-deployments": {
enabled: true,
config: {
buildHook: "https://api.netlify.com/build_hooks/<hook_id>",
accessToken: "<netlify-access-token>",
siteId: "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
},
},
});
The plugin is reading the following configuration variables to work:
buildHook
: Url of the build hook in Netlify.
accessToken
: Access token of your Netlify account used to fetch the list of deployments
siteId
: Site ID of your Netlify site used to filter the list of deployments
You shouldn't disclose the api token and the deploy hook url for security reasons. Therefore, you shouldn't add these values to versioning in a public git repository. A suggested solution is to use environment variables. Example:
module.exports = ({ env }) => ({
"netlify-deployments": {
enabled: true,
config: {
buildHook: process.env.NETLIFY_DEPLOYMENTS_PLUGIN_BUILD_HOOK,
accessToken: process.env.NETLIFY_DEPLOYMENTS_PLUGIN_ACCESS_TOKEN,
siteId: process.env.NETLIFY_DEPLOYMENTS_PLUGIN_SITE_ID
},
},
});
For local development, you can add the config properties in your .env
file:
NETLIFY_DEPLOYMENTS_PLUGIN_BUILD_HOOK="https://api.netlify.com/build_hooks/xxxxxxxxxxxxxxxxxxxxxxxx"
NETLIFY_DEPLOYMENTS_PLUGIN_ACCESS_TOKEN="<netlify-access-token>"
NETLIFY_DEPLOYMENTS_PLUGIN_SITE_ID="xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
You can save these values as process env variable on your server (e.g. this guide is for Heroku).
Thanks to gianlucaparadise for making strapi-plugin-vercel-deploy which this heavily built from.
FAQs
Strapi v4 plugin to trigger and monitor a deployment on Netlify
The npm package strapi-plugin-netlify-deployments receives a total of 60 weekly downloads. As such, strapi-plugin-netlify-deployments popularity was classified as not popular.
We found that strapi-plugin-netlify-deployments demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.