
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Validata user interface
You can use the online instance of Validata:
Several software services compose the Validata stack. The recommended way to run it on your computer is to use Docker. Otherwise you can install each component of this stack manually, for example if you want to contribute by developing a new feature or fixing a bug.
Read instructions at https://gitlab.com/validata-table/validata-docker
We recommend using venv
standard package:
python -m venv .venv
source .venv/bin/activate
Install the project dependencies (using last release of validata-core project):
pip install -r requirements.txt
pip install -r requirements-dev.txt
pip install -e .
To use a specific distant git development branch of validata-core project:
pip install -r requirements.txt
pip install -r requirements-dev.txt
pip uninstall validata_core
pip install git+https://gitlab.com/validata-table/validata-core.git@<development-branch-name>
pip install -e .
PDF report generation uses:
apt install -y chromium
cp .env.example .env
Customize the configuration variables in .env
file.
Do not commit .env
.
Start the web server...
./serve.sh
... then open http://localhost:5601/
UI tests can be launched using Cypress tool
Release
as commit messagegit push && git push --tagss
FAQs
Validata Web UI
We found that validata-ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.