
Product
Socket Now Supports pylock.toml Files
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Supply Chain Security
Vulnerability
Quality
Maintenance
License
Unpopular package
QualityThis package is not very popular.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
A set of commandline utilities for interacting with the GitHub or GitHub Enterprise API.
.. image:: https://travis-ci.org/alphagov/ghtools.png?branch=master :target: https://travis-ci.org/alphagov/ghtools
ghtools
is available on PyPI_ and can be installed using pip_::
$ pip install ghtools
.. _PyPI: http://pypi.python.org/pypi .. _pip: http://www.pip-installer.org/
Simple usage::
$ eval `gh-login`
$ gh-repo alphagov/ghtools get
$ gh-org alphagov members
ghtools
is not a monolithic program. Instead, it comes with a number of
scripts which each perform very specific tasks. The aim is for these scripts
to be composable, allowing you to pipe their data to and from other unix tools
(grep
, sort
, uniq
, python -m json.tool
, etc.) in order to
build up your own more complex scripts.
Currently available tools within ghtools
================== ====================================================== Command Description ================== ====================================================== gh-browse Manually browse the GitHub API by URL gh-list-members List members of a GitHub organisation (may be removed) gh-login Login to GitHub, generating an OAuth login token gh-migrate-project Migrate an entire project between GitHub instances gh-migrate-teams Migrate organisation teams between GitHub instances gh-org Interact with organisations gh-repo Interact with repositories gh-status Submit commit build status to GitHub ================== ======================================================
ghtools
is, in particular, designed for interacting with multiple GitHub
instances (i.e. github.com as well as your company's GitHub Enterprise
installation). You tell ghtools
how to connect you non-github.com GitHub
instances using "nicknames" and environment variables. For example, here's how
to login to a GitHub instance nicknamed "foo", using a custom SSL cert
bundle::
$ export GITHUB_FOO_API_ROOT=https://github.foo/api/v3
$ export GITHUB_FOO_CA_BUNDLE=/usr/share/ssl/github_foo.crt
$ eval `gh-login --scope repo foo`
$ gh-repo foo:alphagov/ghtools get
$ gh-org foo:alphagov members
ghtools
is released under the MIT license, a copy of which can be found
in LICENSE
.
FAQs
ghtools: tools for interacting with the GitHub API
We found that ghtools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.
Research
Security News
Malicious Ruby gems typosquat Fastlane plugins to steal Telegram bot tokens, messages, and files, exploiting demand after Vietnam’s Telegram ban.