
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
To install the latest version, run:
pip install pre qase-tavern
The Tavern reporter can auto-generate test cases and suites from your test data. Test results of subsequent test runs will match the same test cases as long as their names and file paths don't change.
You can also annotate the tests with the IDs of existing test cases from Qase.io before executing tests. It's a more reliable way to bind autotests to test cases, that persists when you rename, move, or parameterize your tests.
For detailed instructions on using annotations and methods, refer to Usage.
For example:
---
test_name: QaseID=1 Test with QaseID success
stages:
- name: Step 1
request:
response:
- name: Step 2
request:
response:
To execute Tavern tests and report them to Qase.io, run the command:
pytest
You can try it with the example project at examples/tavern
.
Qase Tavern Reporter is configured in multiple ways:
qase.config.json
Environment variables override the values given in the config file, and command line options override both other values.
Configuration options are described in the configuration reference.
{
"mode": "testops",
"fallback": "report",
"testops": {
"project": "YOUR_PROJECT_CODE",
"api": {
"token": "YOUR_API_TOKEN",
"host": "qase.io"
},
"run": {
"title": "Test run title"
},
"batch": {
"size": 100
}
},
"report": {
"driver": "local",
"connection": {
"local": {
"path": "./build/qase-report",
"format": "json"
}
}
},
"environment": "local"
}
We maintain the reporter on LTS versions of Python.
python >= 3.7
tavern >= 2.11.0
FAQs
Qase Tavern Plugin for Qase TestOps and Qase Report
We found that qase-tavern demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.