
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
capistrano-shared_config
Advanced tools
This gem provides some capistrano tasks for config files management during deploy. With it you can:
Add this line to your application's Gemfile:
gem 'capistrano-shared_config'
And then execute:
$ bundle install
Configure variables in config/deploy.rb, then require capistrano/shared_config:
set :shared_config_files, %w[settings.local nginx.conf]
set :shared_config_symlinks, %w[database, settings.local newrelic.yml] # default is same as shared_config_files
require 'capistrano/shared_config'
Notice, you may skip .yml extension when configuring configs lists
(Known extensions are: .rb, .conf, .pem, .ppk and .yml).
Make sure, you require capistrano/shared_config after desired shared_config_files set
You can also configure, when to run provided tasks:
# set :run_shared_config_symlinks, [:after, 'deploy:update_code']
# set :run_shared_config_sync, [:after, 'deploy:update_code']
# set :run_early_shared_config_check, [:before, 'deploy:update_code']
require 'capistrano/shared_config'
You can call particular cap task with FILE env variable specified to upload or check only one file:
$ cap shared_config:sync FILE=newrelic
Or you can inspect content generated in config file with show task like this:
$ cap shared_config:show FILE=settings.local
It will output content of specified file surrounded by ===== lines
For uploading to server, provided task sync use files from config directory.
For every file_name in shared_config_files (after adding default .yml if needed)
it try to find the following files in order:
config/rails_env.file_name.erbconfig/rails_env.file_nameconfig/file_name.erbconfig/file_namegit checkout -b my-new-feature)git commit -am 'Add some feature')git push origin my-new-feature)FAQs
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.