Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Code | |
---|---|
License | |
GitHub | |
PyPi |
ANTA is Python framework that automates tests for Arista devices.
The library will NOT install the necessary dependencies for the CLI.
# Install ANTA as a library
pip install anta
If you plan to use ANTA only as a CLI tool you can use pipx
to install it.
pipx
is a tool to install and run python applications in isolated environments. Refer to pipx
instructions to install on your system.
pipx
installs ANTA in an isolated python environment and makes it available globally.
This is not recommended if you plan to contribute to ANTA
# Install ANTA CLI with pipx
$ pipx install anta[cli]
# Run ANTA CLI
$ anta --help
Usage: anta [OPTIONS] COMMAND [ARGS]...
Arista Network Test Automation (ANTA) CLI
Options:
--version Show the version and exit.
--log-file FILE Send the logs to a file. If logging level is
DEBUG, only INFO or higher will be sent to
stdout. [env var: ANTA_LOG_FILE]
-l, --log-level [CRITICAL|ERROR|WARNING|INFO|DEBUG]
ANTA logging level [env var:
ANTA_LOG_LEVEL; default: INFO]
--help Show this message and exit.
Commands:
check Commands to validate configuration files
debug Commands to execute EOS commands on remote devices
exec Commands to execute various scripts on EOS devices
get Commands to get information from or generate inventories
nrfu Run ANTA tests on devices
You can also still choose to install it with directly with pip
:
pip install anta[cli]
The documentation is published on ANTA package website.
Contributions are welcome. Please refer to the contribution guide
Thank you to Jeremy Schulman for aio-eapi.
Thank you to Angélique Phillipps, Colin MacGiollaEáin, Khelil Sator, Matthieu Tache, Onur Gashi, Paul Lavelle, Guillaume Mulocher and Thomas Grimonet for their contributions and guidances.
FAQs
Arista Network Test Automation (ANTA) Framework
We found that anta demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.