Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
airbyte-source-firebolt
Advanced tools
This is the repository for the Firebolt source connector, written in Python. For information about how to use this connector within Airbyte, see the documentation.
To iterate on this connector, make sure to complete this prerequisites section.
= 3.8.0
From this connector directory, create a virtual environment:
python -m venv .venv
This will generate a virtualenv for this module in .venv/
. Make sure this venv is active in your
development environment of choice. To activate it from the terminal, run:
source .venv/bin/activate
pip install -r requirements.txt
If you are in an IDE, follow your IDE's instructions to activate the virtualenv.
Note that while we are installing dependencies from requirements.txt
, you should only edit setup.py
for your dependencies. requirements.txt
is
used for editable installs (pip install -e
) to pull in Python dependencies from the monorepo and will call setup.py
.
If this is mumbo jumbo to you, don't worry about it, just put your deps in setup.py
but install using pip install -r requirements.txt
and everything
should work as you expect.
If you are a community contributor, follow the instructions in the documentation
to generate the necessary credentials. Then create a file secrets/config.json
conforming to the source_firebolt/spec.json
file.
Note that the secrets
directory is gitignored by default, so there is no danger of accidentally checking in sensitive information.
See integration_tests/sample_config.json
for a sample config file.
If you are an Airbyte core member, copy the credentials in Lastpass under the secret name source firebolt test creds
and place them into secrets/config.json
.
python main.py spec
python main.py check --config secrets/config.json
python main.py discover --config secrets/config.json
python main.py read --config secrets/config.json --catalog integration_tests/configured_catalog.json
Via airbyte-ci
(recommended):
airbyte-ci connectors --name=source-firebolt build
An image will be built with the tag airbyte/source-firebolt:dev
.
Via docker build
:
docker build -t airbyte/source-firebolt:dev .
Then run any of the connector commands as follows:
docker run --rm airbyte/source-firebolt:dev spec
docker run --rm -v $(pwd)/secrets:/secrets airbyte/source-firebolt:dev check --config /secrets/config.json
docker run --rm -v $(pwd)/secrets:/secrets airbyte/source-firebolt:dev discover --config /secrets/config.json
docker run --rm -v $(pwd)/secrets:/secrets -v $(pwd)/integration_tests:/integration_tests airbyte/source-firebolt:dev read --config /secrets/config.json --catalog /integration_tests/configured_catalog.json
You can run our full test suite locally using airbyte-ci
:
airbyte-ci connectors --name=source-firebolt test
Customize acceptance-test-config.yml
file to configure tests. See Connector Acceptance Tests for more information.
If your connector requires to create or destroy resources for use during acceptance tests create fixtures for it and place them inside integration_tests/acceptance.py.
All of your dependencies should go in setup.py
, NOT requirements.txt
. The requirements file is only used to connect internal Airbyte dependencies in the monorepo for local development.
We split dependencies between two groups, dependencies that are:
MAIN_REQUIREMENTS
list.TEST_REQUIREMENTS
listYou've checked out the repo, implemented a million dollar feature, and you're ready to share your changes with the world. Now what?
airbyte-ci connectors --name=source-firebolt test
metadata.yaml
: increment the dockerImageTag
value. Please follow semantic versioning for connectors.metadata.yaml
content is up to date.docs/integrations/sources/firebolt.md
).FAQs
Source implementation for Firebolt.
We found that airbyte-source-firebolt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.