
Research
Malicious Go “crypto” Module Steals Passwords and Deploys Rekoobe Backdoor
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.
pulumi-gitlab
Advanced tools
The GitLab resource provider for Pulumi lets you use GitLab resources in your cloud programs. To use this package, please install the Pulumi CLI first.
This package is available in many languages in the standard packaging formats.
To use from JavaScript or TypeScript in Node.js, install using either npm:
$ npm install @pulumi/gitlab
or yarn:
$ yarn add @pulumi/gitlab
To use from Python, install using pip:
$ pip install pulumi_gitlab
To use from Go, use go get to grab the latest version of the library
$ go get github.com/pulumi/pulumi-gitlab/sdk/v7
To use from .NET, install using dotnet add package:
$ dotnet add package Pulumi.Gitlab
The @pulumi/gitlab package provides a strongly-typed means to create cloud applications that create and interact
closely with GitLab resources.
The following configuration points are available:
token (Optional) - This is the GitLab personal access token. It must be provided but can also be sourced via GITLAB_TOKEN.
baseUrl (Optional) - This is the target GitLab base API endpoint. Providing a value is a requirement when working with GitLab CE or GitLab Enterprise e.g. https://my.gitlab.server/api/v4/. It is optional to provide this value and it can also be sourced from the GITLAB_BASE_URL environment variable. The value must end with a slash.
cacertFile (Optional) - This is a file containing the ca cert to verify the gitlab instance. This is available for use when working with GitLab CE or Gitlab Enterprise with a locally-issued or self-signed certificate chain.
insecure (Optional) - When set to true this disables SSL verification of the connection to the GitLab instance. Defaults to false.
For further information, please visit the GitLab provider docs or for detailed reference documentation, please visit the API docs.
FAQs
A Pulumi package for creating and managing GitLab resources.
We found that pulumi-gitlab demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.

Security News
npm rolls out a package release cooldown and scalable trusted publishing updates as ecosystem adoption of install safeguards grows.

Security News
AI agents are writing more code than ever, and that's creating new supply chain risks. Feross joins the Risky Business Podcast to break down what that means for open source security.