Note:This repository is source visibile, but not open-source. Please check theLICENSEbefore using this software.
Insomnia Mockbin is maintained byKong,who also maintains the open-source API GatewayKongandInsomnia.
- uses HAR format
- supports JSON, YAML, XML, HTML output
- plays nice with proxies (uses the X-Forwarded-* headers for IP resolution)
- allows for HTTP Method Override using the header
X-HTTP-Method-Override
or through query string parameter:_method
- create custom bins for experimenting log collection
brew install redis
brew services start redis
Redis should be now running on localhost:6379 Mockbin will start without redis but you wont be able to set or get response bins.
git clone https://github /Kong/mockbin.git./mockbin
cdmockbin
cp.env.sample.env
brew install fnm
fnm use
npm install
Note: nvm, n or volta can be used instead of fnm.
npm start
#OR watch for changes
npm run dev
#OR with debug logs
DEBUG=mockbin npm run dev
docker compose up
Read the full API documentation, please review theAPI Docs.
Run the following command and push the newly created commit into your PR. This will bump commit and tag, you will need to push this to the remote, which trigger the release action upon merging the PR.
npm version patch
git push origin tag<tag_name>
Kong Insomnia Mockbin produces SBOMs for the below categories:
- For docker container images
- For source code repository
The SBOMs are available to download at:
- Github Release / Tag Assets
- Github workflow assets for other workflow runs
Docker container images are now signed using cosign with signatures published to aGithub Container registrywithinsomnia-mockbin
repository.
Steps to verify signatures for signed Kong Insomnia Mockbin Docker container images in two different ways:
A minimal example, used to verify an image without leveraging any annotations. For the minimal example, you only need Docker details, a GitHub repo name, and a GitHub workflow filename.
cosign verify \
ghcr.io/kong/insomnia-mockbin:<tag>@sha256:<digest> \
--certificate-oidc-issuer='https://token.actions.githubusercontent ' \
--certificate-identity-regexp='https://github /Kong/insomnia-mockbin/.github/workflows/release.yaml'
A complete example, leveraging optional annotations for increased trust. For the complete example, you need the same details as the minimal example, as well as any of the optional annotations you wish to verify:
cosign verify \
ghcr.io/kong/insomnia-mockbin:<tag>@sha256:<digest> \
--certificate-oidc-issuer='https://token.actions.githubusercontent ' \
--certificate-identity-regexp='https://github /Kong/insomnia-mockbin/.github/workflows/release.yaml' \
-a repo='Kong/insomnia-mockbin' \
-a workflow='Package & Release'
Kong Insomnia Mockbin produces build provenance for docker container images forGithub tags
,which can be verified using cosign / slsa-verifier with attestations published to aGithub Container registrywithinsomnia-mockbin
repository.
Steps to verify provenance for signed Kong Insomnia Mockbin Docker container images:
-
Fetch the image
<manifest_digest>
using regctl:regctl image digest ghcr.io/kong/insomnia-mockbin:<tag>
-
A minimal example, used to verify an image without leveraging any annotations. For the minimal example, you only need Docker Image manifest, a GitHub repo name.
cosign verify-attestation \ ghcr.io/kong/insomnia-mockbin:<tag>@sha256:<manifest_digest> \ --type='slsaprovenance' \ --certificate-oidc-issuer='https://token.actions.githubusercontent ' \ --certificate-identity-regexp='^https://github /slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@refs/tags/v[0-9]+.[0-9]+.[0-9]+$'
slsa-verifier verify-image \ ghcr.io/kong/insomnia-mockbin:<tag>@sha256:<manifest_digest> \ --print-provenance \ --source-uri 'github /Kong/insomnia-mockbin'
-
A complete example, leveraging optional annotations for increased trust. For the complete example, you need the same details as the minimal example, as well as any of the optional annotations you wish to verify:
cosign verify-attestation \ ghcr.io/kong/insomnia-mockbin:<tag>@sha256:<manifest_digest> \ --type='slsaprovenance' \ --certificate-oidc-issuer='https://token.actions.githubusercontent ' \ --certificate-identity-regexp='^https://github /slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@refs/tags/v[0-9]+.[0-9]+.[0-9]+$' \ --certificate-github-workflow-repository='Kong/insomnia-mockbin' \ --certificate-github-workflow-name='Package & Release'
slsa-verifier verify-image \ ghcr.io/kong/insomnia-mockbin:<tag>@sha256:<manifest_digest> \ --print-provenance \ --source-uri 'github /Kong/insomnia-mockbin' \ --source-tag '<tag>'
Have a bug or a feature request? Please first read theissue guidelinesand search for existing and closed issues. If your problem or idea is not addressed yet,please open a new issue.
Please read through ourcontributing guidelines.Included are directions for opening issues, coding standards, and notes on development.
More over, if your pull request contains JavaScript patches or features, you must include relevant unit tests.
Editor preferences are available in theeditor configfor easy use in common text editors. Read more and download plugins athttp://editorconfig.org.