![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Lightweight configuration management.
Performing simple administrative tasks with wright is easy.
#!/usr/bin/env wright
package 'sudo'
file '/etc/sudoers.d/env_keep-editor',
content: "Defaults env_keep += EDITOR\n",
owner: 'root:root',
mode: '440'
Scripts can also be run directly from the shell.
wright -e "package 'tmux'"
If you would rather see the effects of running a wright script first, use the dry-run option:
wright --dry-run -e "package 'tmux'"
For a list of command-line parameters, see the manpage. For a more in-depth list of tasks you can perform using wright, check the resource list.
Since wright does not have any runtime dependencies apart from Ruby ≥1.9, it can safely be installed system-wide via rubygems:
sudo gem install wright
If you use a Debian-based GNU/Linux distribution such as Ubuntu, you can also install wright via the PPA sometimesfood/wright:
sudo apt-get install software-properties-common
sudo add-apt-repository -y ppa:sometimesfood/wright
sudo apt-get update && sudo apt-get install wright
If you use a Debian-based distribution that is not Ubuntu, you have to update your apt sources manually before installing wright:
export DISTRO="$(lsb_release -sc)"
export PPA_LIST="sometimesfood-wright-${DISTRO}.list"
sudo sed -i "s/${DISTRO}/trusty/g" /etc/apt/sources.list.d/${PPA_LIST}
As a wright user, the following documents are probably going to be of interest to you:
As a wright developer, you might also be interested in the
wright developer docs which
can be generated via bundle exec yard
.
Contributions to wright are greatly appreciated. If you would like to contribute to wright, please have a look at the contribution guidelines.
Copyright (c) 2012-2015 Sebastian Boehm. See LICENSE for details.
FAQs
Unknown package
We found that wright demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.