
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
Makes it dead simple to run elasticsearch from your rails project. No external dependencies except java. Just bundle and go!
Note this is not recommended for use in production environments. Use a real elasticsearch deployment there. Only use this for development purposes.
Add this line to your application's Gemfile:
gem 'springboard'
And then execute:
$ bundle
Or install it yourself as:
$ gem install springboard
Springboard uses elasticsearch version numbers so you can require specific elasticsearch versions in your Gemfile. Create an issue or pull request if you need a version of the gem with a particular elasticsearch version.
Subsequent Springboard releases for the same version will add a version specifier to the end of the version, eg 0.18.7.1.
This gem packages up the elasticsearch binary distribution with a ruby gem binary on top. It add a config path parameter to the elasticsearch binary. This makes it easier to put a relative config path on the command line:
springboard -c config/elasticsearch -f
All other parameters are passed through to the normal elasticsearch start script.
Note that you almost always want to specify -c. Without it the default elasticsearch configs are used and your data/logs will go into the gem path, almost certainly not what you want.
You can run elasticsearch from a Procfile:
es: bundle exec springboard -c config/elasticsearch -f
A rails generator for elasticsearch config files is included. Run:
rails g springboard:config
to install a sane development config in config/elasticsearch.
git checkout -b my-new-feature
)git commit -am 'Added some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that springboard demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.