Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
.. image:: https://badge.fury.io/py/corc.svg :target: https://badge.fury.io/py/corc
Note, corc is a small project that is currently under development for providing a set of tools for managing infrastructure components.
corc is a tool for conducting a range of operations for managing infrastructure components via a set of supported providers. Each provider is defined as a seperate plugin that can be installed and utilized by corc. The list of components that corc exposes are:
Currently, the set of plugins/providers is very limited, and the initial development is focused on the area of
orchestration and the associated libvirt_provider
plugin.
However, plugin/provider contributions for each of these components are very welcome.
Installation from pypi::
pip install corc
Installation from local git repository::
cd corc
pip install .
If you have cloned the repo, an alternative way to install corc is to run::
make install
Which will create a virtual environment, install the required dependencies, and install corc itself.
Since corc
is a top level interface for managing infrastucture components, specialized providers that provide the specific implementation have
to be installed. To accomplish this, each of the different corc components define
the add_provider
and remove_provider
arguments that can be used to install and remove providers::
usage: corc orchestration [-h] {add_provider,remove_provider,pool,stack} ...
options:
-h, --help show this help message and exit
COMMAND:
{add_provider,remove_provider,pool,stack}
For instance, if we want to add the libvirt_provider <https://pypi.org/project/libvirt-provider/>
_ to the orchestration component, we can do so by running::
corc orchestration add_provider libvirt_provider
As part of the orchestration component, corc defines the concepts of stacks
and pools
.
A stack is a collection of resources that are managed and orchestrated by corc.
Stacks are expected to defined as a yaml file that are passed to corc, which is used to orchestrate a set of resources.
A pool is a construct that can be used to logically group resources. When a pool is constructed, it is saved to a local state file where the pool is constructed.
When defining a stack as a yaml file, it is supported that pools are defined as part of the stack.
An example of a stack yaml definition can be seen in the examples/stack.yml
The corc orchestration CLI can be used to manage both stacks
and pools
::
:~ corc orchestration -h
usage: corc orchestration [-h] {add_provider,remove_provider,pool,stack} ...
options:
-h, --help show this help message and exit
COMMAND:
{add_provider,remove_provider,pool,stack}
When a stack is deployed, corc will orchestrate the defined resources, create the specified pools if nonexistent, and associate resources to their specific pools.
FAQs
A tool for managing cloud resources and scheduling compute tasks
We found that corc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.