Chef Supermarket
Point Berkshelf and knife at the Package Firewall's Supermarket API.
| Supermarket URL | https://packages.vulnetix.com/chef |
| Ecosystem ID | chef |
| Plan | Add-on |
| Mode | filter: /api/v1/cookbooks/<name> is filtered by version; cookbook downloads are checked |
| Cooldown | yes |
| Default mirror | https://supermarket.chef.io |
| Automatic setup | none: vulnetix package-firewall chef exits 1 |
Configuration
The firewall needs Basic auth on every request. Both tools take it as URL userinfo.
Berkshelf, Berksfile:
source "https://YOUR_ORG_UUID:YOUR_API_KEY@packages.vulnetix.com/chef"knife, ~/.chef/config.rb:
knife[:supermarket_site] = "https://YOUR_ORG_UUID:YOUR_API_KEY@packages.vulnetix.com/chef"Read the key from the environment rather than committing it:
source "https://#{ENV.fetch('VULNETIX_ORG_ID')}:#{ENV.fetch('VULNETIX_API_KEY')}@packages.vulnetix.com/chef"Use
berks install
knife supermarket download aptNo CLI writer exists for Chef, so this configuration has not been exercised by vulnetix package-firewall. Confirm requests appear as chef in the decision log.