← Home

@storm-software/pulumi-tools

npm Repository Homepage

Tools for managing Pulumi infrastructure within a Nx workspace.

100
Versions
Apache-2.0
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Keywords

iacinfrastructuremonorepopulumistormstorm-opsstorm-stacksullivanpj

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:env-spread AI (semgrep): Pulumi executor intentionally passes full env to child process; standard pattern for infrastructure tooling. ai
provenance publisher-changed AI (provenance): Transition to GitHub Actions publisher is consistent with CI/CD automation; backed by SLSA provenance attestation. ai
phantom-deps phantom-dep:@pulumi/awsx AI (phantom-deps): Package is declared as a runtime dep and referenced in config; not directly imported is expected for optional Pulumi provider usage. ai

Versions (showing 100 of 491)

Version Deps Published
0.22.291 9 / 4
0.22.290 9 / 4
0.22.289 9 / 4
0.22.288 9 / 4
0.22.287 9 / 4
0.22.284 9 / 4
0.22.282 9 / 4
0.22.281 9 / 4
0.22.275 9 / 4
0.22.274 9 / 4
0.22.273 9 / 4
0.22.272 9 / 4
0.22.269 9 / 4
0.22.268 9 / 4
0.22.267 9 / 4
0.22.266 9 / 4
0.22.265 9 / 4
0.22.264 9 / 4
0.22.263 9 / 4
0.22.262 9 / 4
0.22.261 9 / 4
0.22.260 9 / 4
0.22.259 9 / 4
0.22.258 9 / 4
0.22.257 9 / 4
0.22.256 9 / 4
0.22.255 9 / 4
0.22.254 9 / 4
0.22.253 9 / 4
0.22.252 9 / 4
0.22.251 9 / 4
0.22.250 9 / 4
0.22.249 9 / 4
0.22.248 9 / 4
0.22.246 9 / 4
0.22.244 9 / 4
0.22.243 9 / 4
0.22.242 9 / 4
0.22.241 9 / 4
0.22.240 9 / 4
0.22.239 9 / 4
0.22.238 9 / 4
0.22.237 9 / 4
0.22.236 9 / 4
0.22.235 9 / 4
0.22.234 9 / 4
0.22.233 9 / 4
0.22.232 9 / 4
0.22.231 9 / 4
0.22.230 9 / 4
0.22.227 9 / 4
0.22.226 9 / 4
0.22.225 9 / 4
0.22.224 9 / 4
0.22.223 9 / 4
0.22.222 9 / 4
0.22.221 9 / 4
0.22.220 9 / 4
0.22.219 9 / 4
0.22.218 9 / 4
0.22.217 9 / 4
0.22.216 9 / 4
0.22.215 9 / 4
0.22.214 9 / 4
0.22.213 9 / 4
0.22.212 9 / 4
0.22.211 9 / 4
0.22.210 9 / 4
0.22.209 9 / 4
0.22.208 9 / 4
0.22.207 9 / 4
0.22.206 9 / 4
0.22.204 9 / 4
0.22.202 9 / 4
0.22.201 9 / 4
0.22.200 9 / 4
0.22.199 9 / 4
0.22.198 9 / 4
0.22.197 9 / 4
0.22.196 9 / 4
0.22.195 9 / 4
0.22.194 9 / 4
0.22.193 9 / 4
0.22.192 9 / 4
0.22.191 9 / 4
0.22.190 9 / 4
0.22.189 9 / 5
0.22.188 9 / 5
0.22.186 9 / 5
0.22.185 9 / 5
0.22.184 9 / 5
0.22.183 8 / 5
0.22.182 8 / 5
0.22.181 8 / 5
0.22.180 8 / 5
0.22.177 8 / 5
0.22.176 8 / 5
0.22.175 8 / 5
0.22.174 8 / 5
0.22.173 8 / 5
Showing 100 of 491 Next page →

v0.22.291

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.290

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.289

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.288

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.287

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.284

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.282

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.281

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.275

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.274

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.273

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.272

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.269

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.268

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.267

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.266

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.265

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.264

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.263

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.262

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.22.261

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.