Security News
CISA Brings KEV Data to GitHub
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.
Module that loads data from Docker Secrets into process.env with zero-dependency
npm install sw-env
{
dir: '/run/secrets', // The location of the mount point within the container
encode: 'utf8', // ReadFileSync encoding
override: false // Override existing environment
}
Create Docker secrets using the command line.
echo "your-password" | docker secret create DB_PASSWORD -
echo "your-username" | docker secret create DB_USERNAME -
Or using a text file that contains the value of the secret.
docker secret create DB_USERNAME /path/to/username.txt
docker secret create DB_PASSWORD /path/to/password.txt
Or in your docker-compose.yml
version: "3.8"
services:
app:
image: node:latest
secrets:
- DB_USERNAME
- DB_PASSWORD
deploy:
mode: replicated
replicas: 1
secrets:
DB_USERNAME:
name: DB_USERNAME
file: /path/to/username.txt
DB_PASSWORD:
name: DB_PASSWORD
file: /path/to/pwd.txt
Reading and using Docker secrets in Node.js:
import swenv from 'sw-env';
// ... As early as possible in your App
const options = {}
swenv(options)
console.log(process.env.DB_USERNAME) // your-username
console.log(process.env.DB_PASSWORD) // your-password
// or ...
const secrets = swenv()
console.log(secrets.getSecrets()) // Object contain all container secrets
Use and abuse at your own risk.
FAQs
Module that loads data from Docker Secrets into process.env
The npm package sw-env receives a total of 10 weekly downloads. As such, sw-env popularity was classified as not popular.
We found that sw-env demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.
Security News
Opengrep forks Semgrep to preserve open source SAST in response to controversial licensing changes.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.