
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Notify a chat room with data from your test run.
gem "chat_notifier", git: "https://github.com/SOFware/chat_notifier.git"
Your minitest suite should pick up the formatter automatically.
Add to your spec_helper.rb
or rails_helper.rb
:
require "chat_notifier/rspec_formatter"
config.add_formatter "ChatNotifier::RspecFormatter" if ENV["CI"]
Add to your config/application.rb within your namespaced module
def self.sha
`git rev-parse --short HEAD`.chomp
end
def self.branch
`git branch --show-current`.chomp
end
Add these variables to your env files
NOTIFY_SLACK_WEBHOOK_URL
NOTIFY_SLACK_NOTIFY_CHANNEL
NOTIFY_CURRENT_REPOSITORY_URL
NOTIFY_TEST_RUN_ID
If you are not using Rails, you will need to add this ENV variable:
NOTIFY_APP_NAME
Create rake task to test the connection to your Slack channel
namespace :chat_notifier do
desc "Tests chat notifier"
task debug: :environment do
unless ENV["NOTIFY_SLACK_WEBHOOK_URL"]
puts "You MUST set the environment variables for:\nNOTIFY_SLACK_WEBHOOK_URL"
return
end
ENV["DEBUG"] = "1"
ENV["NOTIFY_CURRENT_REPOSITORY_URL"] = "https://example.com"
ENV["NOTIFY_TEST_RUN_ID"] = "9999"
ENV["NOTIFY_APP_NAME"] = "Example App" # Defaults to your Rails app name
require "chat_notifier"
failure = ChatNotifier::DebugExceptionLocation.new(location: "fake/path.rb")
summary = ChatNotifier::DebugSummary.new(failed_examples: [failure])
ChatNotifier.debug!(ENV, summary:)
end
end
This gem is managed with Reissue.
Releasing a new version:
rake build:checksum
rake release
git push
FAQs
Unknown package
We found that chat_notifier demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.