Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Rake tasks to deploy any Rails application to Deis using Jumpup.
Add to your gem file.
gem 'jumpup-deis'
Without groups on Gemfile as this gem makes use of an initializer.
config/initializers/jumpup-deis.rb
# config/initializers/jumpup-deis.rb
Jumpup::Deis.configure do |config|
config.host = 'deis.mycompany.com'
config.app = 'myapp'
end if Rails.env.development?
# lib/tasks/jumpup.rake
INTEGRATION_TASKS = %w(
jumpup:deis:start
jumpup:start
jumpup:bundle_install
db:migrate
spec
jumpup:finish
jumpup:deis:finish
)
Have production and staging app? Do like this:
Jumpup::Deis.configure do |config|
config.host = 'deis.mycompany.com'
config.staging_app = 'myapp-staging'
config.production_app = 'myapp'
end if Rails.env.development?
The branch send to staging app is master
and the branch send to production is the production
.
Run rake jumpup:deis:deploy:production
or as an alias rake integrate:production
We have the following config
Branch | App Environment |
---|---|
master | staging |
production | production |
So to send to production we need to
$ git checkout production
$ git merge master
$ git push -u origin production
And send to Deis with rake jumpup:deis:deploy:production
or as an alias rake integrate:production
Jumpup-deis follow the Semantic Versioning.
If you have problems, please create a Github Issue.
Please see CONTRIBUTING.md for details.
Follow this steps to release a new version of the gem.
VERSION
constant;CHANGELOG
;$ rake release
, this will send the gem to the rubygems;Jumpup-deis is maintained and funded by HE:labs. Thank you to all the contributors.
Jumpup-deis is Copyright © 2014 HE:labs. It is free software, and may be redistributed under the terms specified in the LICENSE file.
This gem was created and is maintained by HE:labs.
FAQs
Unknown package
We found that jumpup-deis demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.