
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
A CLI tool to parse a standard format crontab file, create monitors in cronitor.io for each job, and automatically add the necessary curl commands to the original crontab.
It assumes that you are using cronitor's "template" feature to configure notifications for your monitors, and that you have created templates which will then be passed to autocronitor.
Please note, cronitor.io (and therefore autocronitor) do not support "informal" cron expressions such as @hourly
or @daily
.
autocronitor is available on rubygems.org - if you have that source in your gemrc, you can simply use:
gem install autocronitor
You can run autocronitor by running the autocronitor
command.
Usage: autocronitor [-aft]
Specific options:
-a, --api-key APIKEY Your cronitor.io API key
-f, --filename FILENAME The cron files to read
Email Options:
-t, --templace *TEMPLATES The Cronitor.io templates to send alerts for this monitor to
Text to exclude:
-c, --common-text *COMMONTEXT A space separated list of common text to exclude from cron names
-i, --common-include-text *COMMONINCLUDETEXT
A space separated list of common text to exclude from cron names (includes strings which contain each phrase)
Mandatory Parameters (you must specify one or the other)
Optional Parameters
$> autocronitor -a abcdef123456 -f test.conf -t mydefault-template
Processing file test.conf
Cron expression: 10 * * * *
Cron name: testcron
Creating monitor testcron...
Monitor 'testcron' created with ID abc123
Writing new test.conf with added Cronitor URLs...
FAQs
Unknown package
We found that autocronitor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.