
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Simplerubysteps makes it easy to manage AWS Step Functions with ruby.
gem install simplerubysteps
mkdir -p samples/hello-world-3
cd samples/hello-world-3
vi workflow.rb
require "simplerubysteps"
include Simplerubysteps
GERMAN_WORDS = ["Hallo"]
def is_german?(word)
GERMAN_WORDS.include? word
end
task :start do
transition_to :german do |data|
is_german? data["hi"]
end
default_transition_to :english
end
task :german do
action do |data|
{ hello_world: "#{data["hi"]} Welt" }
end
end
task :english do
action do |data|
{ hello_world: "#{data["hi"]} World" }
end
end
export AWS_PROFILE=<AWS CLI profile name with sufficient privileges>
cd samples/hello-world-3
srs deploy
export AWS_PROFILE=<AWS CLI profile name with sufficient privileges>
cd samples/hello-world-3
export OPEN_AWS_CONSOLE_EXECUTION_DETAILS_PAGE_URL_PREFIX="https://eu-central-1.console.aws.amazon.com/states/home?region=eu-central-1#/v2/executions/details/"
echo '{"hi":"Hello"}'|srs start --wait > result.json
cat result.json|jq -r ".output"|jq -r ".hello_world"
open "$OPEN_AWS_CONSOLE_EXECUTION_DETAILS_PAGE_URL_PREFIX$(cat result.json|jq -r ".execution_arn")"
echo '{"hi":"Hallo"}'|srs start --wait > result.json
cat result.json|jq -r ".output"|jq -r ".hello_world"
open "$OPEN_AWS_CONSOLE_EXECUTION_DETAILS_PAGE_URL_PREFIX$(cat result.json|jq -r ".execution_arn")"
export AWS_PROFILE=<AWS CLI profile name with sufficient privileges>
cd samples/hello-world-3
srs destroy
The gem is available as open source under the terms of the MIT License.
FAQs
Unknown package
We found that simplerubysteps demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.