
Security Fundamentals
Turtles, Clams, and Cyber Threat Actors: Shell Usage
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
[!IMPORTANT] PipeRider has been superseded by Recce. We recommend that users requiring pre-merge data validation checks migrate to Recce. PipeRider will not longer be updated on a regular basis. You are still welcome to open a PR with bug fixes or feature requests. For questions and help regarding this update, please contact product@piperider.io or leave a message in the Recce Discord.
PipeRider automatically compares your data to highlight the difference in impacted downstream dbt models so you can merge your Pull Requests with confidence.
Install PipeRider
pip install piperider[<connector>]
You can find all supported data source connectors here.
Add PipeRider tag on your model: Go to your dbt project, and add the PipeRider tag on the model you want to profile.
--models/staging/stg_customers.sql
{{ config(
tags=["piperider"]
) }}
select ...
and show the models would be run by piperider
dbt list -s tag:piperider --resource-type model
Run PipeRider
piperider run
To see the full quick start guide, please refer to PipeRider documentation
We use the example project git-repo-analytics to demonstrate how to use piperider+dbt+duckdb to analyze dbt-core repository. Here is the generated result (daily update)
PipeRider Cloud allows you to upload reports and share them with your team members. For information on pricing plans, please refer to the pricing page.
PipeRider provides the PipeRider Compare Action to quickly integrate into your Github Actions workflow. It has the following features:
You can refer to example workflow yaml and the example pull request.
See setup dev environment and the contributing guildlines to get started.
We love chatting with our users! Let us know if you have any questions, feedback, or need help trying out PipeRider! :heart:
FAQs
PiperRider CLI
We found that piperider-nightly demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security Fundamentals
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
Security News
At VulnCon 2025, NIST scrapped its NVD consortium plans, admitted it can't keep up with CVEs, and outlined automation efforts amid a mounting backlog.
Product
We redesigned our GitHub PR comments to deliver clear, actionable security insights without adding noise to your workflow.