Signal Sciences Heroku Buildpack

Run the Signal Sciences (Fastly WAF) agent inside Heroku.

Why?

The official Signal Sciences buildpack is unmaintained, has no license, and does things we don't necessarily want (or need). This is thermondo's implementation based on our sigsci-container project.

Quick Start

Get the buildpack.tar.gz download URL from the latest release. It should look something like:

https://github.com/thermondo/heroku-buildpack-sigsci/releases/download/LATEST_VERSION_NUMBER/buildpack.tar.gz

Then run:

heroku buildpacks:add <the-buildpack-url>

Then in your app's Procfile add something like this:

web: sigsci-wrap <the command you want to execute>

The buildpack is configured the same way the container is (same environment variables, etc.). See the Configuration section of the container README for details.

Developing

Creating Releases

Go to the release workflow and manually trigger a release. Specify an appropriate tag name using semantic versioning rules.

Then go to the newly created draft release on the releases page, polish it up, and publish it.