Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
kitchen-transport-train
Advanced tools
Kitchen transport to use any Train backend, which makes Test Kitchen much more modular with regards to target machines.
As Train OS Transports were inspired from Kitchen, they provide an almost identical API. This transport is basically an adapter to use Test Kitchen with all OS-style Train transports.
In contrast to normal Kitchen transports, this does not support the kitchen login
command as Train is inherently non-interactive. An error will be displayed if you try to use this command.
Legacy configurations for easy SSH/WinRM connections are supported. This transport will automaticially detect Unix (ssh
backend) and Windows (winrm
backend) systems.
---
transport:
name: train
backend: ssh # optional
ssh_key: ~/.ssh/testkitchen
---
transport:
name: train
backend: winrm # optional
Train-oriented configuration can optionally specify the backend
transport and then add the transport-specific configuration values:
---
transport:
name: train
backend: ssh
# Use the selected Train transport options here 1:1
key_files: '...'
compression: true
...
Options user
, host
and password
(for kitchen-ec2 and Windows instances) are set automatically.
If you want to use kitchen-ec2
with the root
user however (as needed in Chef 19 Target Mode), you need to additionally specify train_user: root
. This is due to a long-standing bug in Kitchen-EC2 where the standard platform's autodetected user will override manually specified root
values.
Standard and community-supported options for transports:
FAQs
Unknown package
We found that kitchen-transport-train demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.