Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
CumulusCI helps build great applications on the Salesforce platform by automating org setup, testing, and deployment for everyone --- from developers and admins to testers and product managers.
Best practices, proven at scale. CumulusCI provides a complete development and release process created by Salesforce.org to build and release applications to thousands of users on the Salesforce platform. It's easy to start new projects with a standard set of tasks (single actions) and flows (sequences of tasks), or customize by adding your own.
Batteries included. Out-of-the-box features help you quickly:
Build anywhere. Automation defined using CumulusCI is portable. It is stored in a source repository and can be run from your local command line, from a continuous integration system, or from a customer-facing MetaDeploy installer. CumulusCI can run automation on scratch orgs created using the Salesforce CLI, or on persistent orgs like sandboxes, production orgs, and Developer Edition orgs.
For a tutorial introduction to CumulusCI, complete the Build Applications with CumulusCI trail on Trailhead.
To go in depth, read the full documentation.
If you just want a quick intro, watch these screencast demos of using CumulusCI to configure a Salesforce project from a GitHub repository.
For a live demo with voiceover, please see Jason Lantz's PyCon 2020 presentation from minute 36 through minute 54.
Ask in the CumulusCI (CCI) group in the Trailblazer Community.
Please note: CumulusCI is distributed under an open source license and is not covered by the Salesforce Master Subscription Agreement.
Full Changelog: https://github.com/SFDO-Tooling/CumulusCI/compare/v4.0.0...v4.0.1
FAQs
Build and release tools for Salesforce developers
We found that cumulusci demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.