
Security News
GitHub Actions Supply Chain Attack Puts Thousands of Projects at Risk
A compromised GitHub Action exposed secrets in CI/CD logs, putting thousands of projects at risk and forcing developers to urgently secure their workflows.
Create a composed YAML file using $include tag.
STEP #1 - Install global yamlinc command-line utility
$ npm install -g yamlinc
STEP #2 - Create "my_swagger_doc.yml" and split it into multiple file
## file: my_swagger_doc.yml
version: '2.0'
$include: ./tags.yml
$include: ./paths.yml
## file: tags.yml
tags:
- FirstTag
- SecondTag
## file: paths.yml
paths:
/api/me:
get: ...
/api/you:
post: ...
$include: others-paths.yml
## file: others-paths.yml
/api/other/one:
get: ...
/api/other/two:
post: ...
STEP #3 - Simply compile the entry point 'my_swagger_doc.yml'
$ yamlinc my_swagger_doc.yml
STEP #4 - Get your compiled file 'my_swagger_doc.inc.yml'
NOTICE: Yamlinc appends '*.inc.yml' extension to compiled file.
During development you need constantily updated compiled file by watching changes of dependencies
$ yamlinc --watch spectacle -d my_swagger_doc.yml
This example generates documentation with spectacle
If your application needs a compiled file as parameter you can simply compound and feed
$ yamlinc --exec docker-compose -f docker-compose.yml
If your application needs send output to another command or chaining using pipe follow this example
$ yamlinc --output - input.yml | nc seashells.io 1337
If your application needs stop after a syntax error or missing file inclusion use strict mode
$ yamlinc --strict settings.yml
If you have your own or a third party schema you can pass it to yamlinc like this
$ yamlinc --schema ../node_modules/cloudformation-schema-js-yaml
If you have custom scenario with YAML file please place issues on the following page
FAQs
Create a composed YAML file using $include tag.
The npm package yamlinc receives a total of 2,030 weekly downloads. As such, yamlinc popularity was classified as popular.
We found that yamlinc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A compromised GitHub Action exposed secrets in CI/CD logs, putting thousands of projects at risk and forcing developers to urgently secure their workflows.
Research
Security News
A malicious Maven package typosquatting a popular library is secretly stealing OAuth credentials on the 15th of each month, putting Java developers at risk.
Security News
Socket and Seal Security collaborate to fix a critical npm overrides bug, resolving a three-year security issue in the JavaScript ecosystem's most popular package manager.