Michael Sprague mikesprague

Cloud Security Orienteering: Checklist
by Rami McCarthy
via TL;DR sec

How to orienteer in a cloud environment, dig in to identify the risks that matter, and put together actionable plans that address short, medium, and long term goals.

Based on the Cloud Security Orienteering methodology.

Checklist

Pure ESM package

The package that linked you here is now pure ESM. It cannot be require()'d from CommonJS.

This means you have the following choices:

Use ESM yourself. (preferred)
Use import foo from 'foo' instead of const foo = require('foo') to import the package. You also need to put "type": "module" in your package.json and more. Follow the below guide.
If the package is used in an async context, you could use await import(…) from CommonJS instead of require(…).
Stay on the existing version of the package until you can move to ESM.

Quick examples

feat: new feature
fix(scope): bug in scope
feat!: breaking change / feat(scope)!: rework API
chore(deps): update dependencies

Commit types

build: Changes that affect the build system or external dependencies (example scopes: gulp, broccoli, npm)
ci: Changes to CI configuration files and scripts (example scopes: Travis, Circle, BrowserStack, SauceLabs)
chore: Changes which doesn't change source code or tests e.g. changes to the build process, auxiliary tools, libraries

1. Model-loading function name changes

Rationale: Indicate type of model being loaded more explicitly in code.

For models converted from Keras and models saved from TensorFlow.js itself:

// Before: 
await tf.loadModel('http://server/model.json');

	import { Configuration, OpenAIApi } from 'openai';
	import dotenv from 'dotenv';

	import { gptGetEmoji } from './helpers.js';

	dotenv.config();

	const { OPEN_AI_API_KEY } = process.env;

	const configuration = new Configuration({

	// WeatherKit REST API documentation lists `conditionCode` as a property returned for
	// various DataSets and says it's an enumeration value
	// (e.g. https://developer.apple.com/documentation/weatherkitrestapi/currentweather/currentweatherdata)
	// but never says what the possible return values could be anywhere in the REST API docs
	//
	// The following was created from info in the Swift documentation: https://developer.apple.com/documentation/weatherkit/weathercondition

	export interface ConditionCode {
	code: string;
	description: string;

	import puppeteer from 'puppeteer'

	const wordleUrl = 'https://www.nytimes.com/games/wordle/index.html';
	const wordleLocalStorageKey = 'nyt-wordle-state';
	const defaultTimezone = 'America/New_York';

	(async () => {
	const browser = await puppeteer.launch({
	args: [
	'--no-sandbox',

	const { execSync } = require('child_process')
	const { createHash } = require('crypto')
	const invertColor = require('invert-color')

	const branchName = execSync('git rev-parse --abbrev-ref HEAD')
	const hash = createHash('sha256')
	hash.update(branchName)
	const color = '#' + hash.digest().toString('hex').substring(0, 6)
	const invertedColor = invertColor(color, true)

	// ==UserScript==
	// @name AWS console notification dismisserator 9000
	// @namespace https://github.com/jamesinc
	// @version 1.1
	// @description Dismiss AWS flash notifications after about 5 seconds
	// @author James Ducker
	// @match https://.console.aws.amazon.com/
	// @grant none
	// @run-at document-end
	// ==/UserScript==

	ARG FUNCTION_RUNTIME

	FROM mikesir87/aws-cli as code

	ARG FUNCTION_NAME
	ARG AWS_DEFAULT_REGION
	ARG AWS_ACCESS_KEY_ID
	ARG AWS_SECRET_ACCESS_KEY

	RUN wget -O function.zip `aws lambda get-function --function-name $FUNCTION_NAME --query 'Code.Location' --output text`