
Security News
Nx npm Packages Compromised in Supply Chain Attack Leveraging AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Tokite send GitHub event (pull-request, issue and comment) to Slack.
Notification setting are personalized and customizable by query.
Tokite works as rails mountable engine.
Add this line to your rails application's Gemfile:
gem "tokite"
And mount engine.
Rails.application.routes.draw do
mount Tokite::Engine => "/"
end
$ ./bin/rails db:create
$ ./bin/rails app:tokite:ridgepole:install
$ ./bin/rails app:tokite:ridgepole:apply
$ RAILS_ENV=test ./bin/rails app:tokite:ridgepole:apply
$ ./bin/rails tokite:yarn:install
GITHUB_CLIENT_ID | GitHub OAuth2 client ID |
---|---|
GITHUB_CLIENT_SECRET | GitHub OAuth2 client secret |
GITHUB_HOST (optional) | GitHub Enterprise host |
SECRET_KEY_BASE | rails secret key |
SLACK_WEBHOOK_URL | Slack incoming webhook url |
SLACK_NAME (optional) | Slack notification user name |
SLACK_ICON_EMOJI (optional) | Slack notification icon |
APP_HOST (optional) | Application host url |
Tokite support only below events now.
Name | Example |
---|---|
Plain word | hoge fuga moge |
Quoted word | "hoge fuga moge" |
Regular expression word | /hoge|fuga|moge/ |
Exclude word | -/(hoge|fuga|moge)/ -user:hogelog |
Name | Description | Example |
---|---|---|
repo: | Match repository name. | repo:cookpad/tokite |
title: | Match pull_request or issues title. | title:Bug |
event: | Match event type pull_request, issues, issue_comment, pull_request_review, pull_request_review_comment. | event:/pull_request|issues|pull_request_review|pull_request_review_comment/ |
body: | Match body text. | body:"review please" |
user: | Match user name. | user:hogelog |
label: | Match pull_request or issue label. | label:Feature |
review_state: | Match pull_request_review state. | review_state:/commented|approved|changes_requested/ |
requested_reviewer: | Match user name of review requested reviewer | requested_reviewer:hogelog |
requested_team: | Match team name of review requested team | requested_team:cookpad/chef |
unspecified | Match title or body field. | review please |
FAQs
Unknown package
We found that tokite demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.