
Security News
Django Joins curl in Pushing Back on AI Slop Security Reports
Django has updated its security policies to reject AI-generated vulnerability reports that include fabricated or unverifiable content.
Module that loads data from Docker Secrets into process.env with zero-dependency
npm install sw-env
{
dir: '/run/secrets', // The location of the mount point within the container
encode: 'utf8', // ReadFileSync encoding
override: false // Override existing environment
}
Create Docker secrets using the command line.
echo "your-password" | docker secret create DB_PASSWORD -
echo "your-username" | docker secret create DB_USERNAME -
Or using a text file that contains the value of the secret.
docker secret create DB_USERNAME /path/to/username.txt
docker secret create DB_PASSWORD /path/to/password.txt
Or in your docker-compose.yml
version: "3.8"
services:
app:
image: node:latest
secrets:
- DB_USERNAME
- DB_PASSWORD
deploy:
mode: replicated
replicas: 1
secrets:
DB_USERNAME:
name: DB_USERNAME
file: /path/to/username.txt
DB_PASSWORD:
name: DB_PASSWORD
file: /path/to/pwd.txt
Reading and using Docker secrets in Node.js:
import swenv from 'sw-env';
// ... As early as possible in your App
const options = {}
swenv(options)
console.log(process.env.DB_USERNAME) // your-username
console.log(process.env.DB_PASSWORD) // your-password
// or ...
const secrets = swenv()
console.log(secrets.getSecrets()) // Object contain all container secrets
Use and abuse at your own risk.
FAQs
Module that loads data from Docker Secrets into process.env
The npm package sw-env receives a total of 0 weekly downloads. As such, sw-env popularity was classified as not popular.
We found that sw-env demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Django has updated its security policies to reject AI-generated vulnerability reports that include fabricated or unverifiable content.
Security News
ECMAScript 2025 introduces Iterator Helpers, Set methods, JSON modules, and more in its latest spec update approved by Ecma in June 2025.
Security News
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.