Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
duploctl
is a cli and package to work with a Duplocloud portal. It is a CLI for interacting with Duplocloud resources, such as Tenants, and is designed to work seamlessly within CLI-based CI/CD pipelines. It is a fully extensible package and can be used as both a Python module and a CLI.
From PyPi:
pip install duplocloud-client
From Homebrew:
brew install duplocloud/tap/duploctl
Use duploctl
as a CLI or as a standalone Python module called by your custom script.
Use the following syntax for these global arguments:
Arg | Env Var | Description | Default | Required |
---|---|---|---|---|
--host, -H | DUPLO_HOST | The host to connect to | Yes | |
--token, -T | DUPLO_TOKEN | The token to use for auth | Yes | |
--tenant, -t | DUPLO_TENANT | The tenant to use for auth | default | No |
CLI command syntax for invoking duploctl
duploctl <resource> <command> <args...>
Full documentation is in the Wiki section.
Configure duploctl
access with environment variables:
export DUPLO_HOST=https://example.duplocloud.net
export DUPLO_TOKEN=AQAAA...
export DUPLO_TENANT=dev01
List the services in a tenant:
duploctl service list
Register Profile for AWS:
duploctl jit update_aws_config myportal
Open AWS Web Console:
duploctl jit web
Get Kubernetes config:
duploctl jit update_kubeconfig myinfra
Spawn your client from a Python script using the DuploClient.from_env()
method and arguments. The second return value are the unparsed arguments from the command line. This example uses the client as a callable using command like syntax.
duplo, args = DuploClient.from_env()
t = duplo("tenant", "find", "mytenant")
print(t)
Spawn a client with a custom host and token from a Python script. This example loads a resource and runs a method manually.
duplo = DuploClient.from_creds(host="https://example.duplocloud.net", token="mytoken")
tenants = duplo.load("tenant")
t = tenants.find("mytenant")
print(t)
FAQs
Command line Client for interacting with Duplocloud portals.
We found that duplocloud-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.