{"id":115675,"date":"2024-05-10T19:52:06","date_gmt":"2024-05-10T17:52:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git"},"modified":"2024-05-10T19:52:06","modified_gmt":"2024-05-10T17:52:06","slug":"proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","title":{"rendered":"Projekt gittuf vyv\u00edj\u00ed syst\u00e9m kryptografick\u00e9 ochrany repozit\u00e1\u0159\u016f Git","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bylo vyd\u00e1no vyd\u00e1n\u00ed projektu gittuf 0.4, kter\u00e9 vyv\u00edj\u00ed hierarchick\u00fd syst\u00e9m ov\u011b\u0159ov\u00e1n\u00ed obsahu repozit\u00e1\u0159\u016f Git, umo\u017e\u0148uj\u00edc\u00ed minimalizovat rizika v p\u0159\u00edpad\u011b kompromitace jednotliv\u00fdch v\u00fdvoj\u00e1\u0159\u016f, kte\u0159\u00ed maj\u00ed p\u0159\u00edstup k repozit\u00e1\u0159i. Gittuf poskytuje dodate\u010dnou vrstvu bezpe\u010dnosti pro Git a soubor n\u00e1stroj\u016f pro spr\u00e1vu kl\u00ed\u010d\u016f v\u0161ech v\u00fdvoj\u00e1\u0159\u016f, kte\u0159\u00ed maj\u00ed p\u0159\u00edstup k repozit\u00e1\u0159i, a pro nastaven\u00ed pravidel p\u0159\u00edstupu k v\u011btv\u00edm, tag\u016fm a jednotliv\u00fdm soubor\u016fm. K\u00f3d projektu je naps\u00e1n v jazyce Go a je distribuov\u00e1n pod licenc\u00ed Apache 2.0. Projekt je ve f\u00e1zi aktivn\u00edho v\u00fdvoje a m\u00e1 kvalitu alfa-verze, vhodnou pro experimenty, ale zat\u00edm nen\u00ed p\u0159ipraven\u00fd pro pracovn\u00ed nasazen\u00ed. <\/p>\n

Informace a artefakty, kter\u00e9 poskytuj\u00ed dodate\u010dn\u00e9 ov\u011b\u0159en\u00ed proveden\u00fdch zm\u011bn, jsou uchov\u00e1v\u00e1ny ve skladu objekt\u016f Git v samostatn\u00e9m specifick\u00e9m pro gittuf prostoru n\u00e1zv\u016f, co\u017e umo\u017e\u0148uje zachovat zp\u011btnou kompatibilitu s existuj\u00edc\u00edmi n\u00e1stroji a slu\u017ebami, v\u010detn\u011b GitHub a GitLab. P\u0159i pou\u017eit\u00ed n\u00e1stroj\u016f, kter\u00e9 nepodporuj\u00ed gittuf, z\u016fst\u00e1v\u00e1 repozit\u00e1\u0159 zcela p\u0159\u00edstupn\u00fd, ale je omezen\u00e1 mo\u017enost roz\u0161\u00ed\u0159en\u00e9ho ov\u011b\u0159en\u00ed jeho integrity. Architektura gittuf je zalo\u017eena na ov\u011b\u0159en\u00fdch prvc\u00edch r\u00e1mce TUF (The Update Framework), kter\u00fd se pou\u017e\u00edv\u00e1 k ochran\u011b proces\u016f vytv\u00e1\u0159en\u00ed aktualizac\u00ed v takov\u00fdch projektech, jako jsou Docker, Fuchsia, AGL (Automotive Grade Linux) a PyPI. <\/p>\n

Model ov\u011b\u0159ov\u00e1n\u00ed v gittuf je zalo\u017een na aplikaci hierarchick\u00e9ho syst\u00e9mu distribuce d\u016fv\u011bry. Ko\u0159en d\u016fv\u011bry (root of trust) pat\u0159\u00ed majiteli repozit\u00e1\u0159e, kter\u00fd m\u016f\u017ee generovat kl\u00ed\u010de pro \u00fa\u010dastn\u00edky v\u00fdvoje a ur\u010dovat pravidla, podle kter\u00fdch mohou b\u00fdt vytvo\u0159en\u00e9 kl\u00ed\u010de pou\u017eity. Gittuf umo\u017e\u0148uje vytv\u00e1\u0159et flexibiln\u00ed granul\u00e1rn\u00ed pravidla, kter\u00e1 ur\u010duj\u00ed pravomoci ka\u017ed\u00e9ho v\u00fdvoj\u00e1\u0159e a oblast repozit\u00e1\u0159e, ve kter\u00e9 m\u00e1 mo\u017enost prov\u00e1d\u011bt zm\u011bny. Nap\u0159\u00edklad v\u00fdvoj\u00e1\u0159 m\u016f\u017ee b\u00fdt autorizov\u00e1n k vytv\u00e1\u0159en\u00ed tag\u016f, prov\u00e1d\u011bn\u00ed zm\u011bn v ur\u010dit\u00fdch v\u011btv\u00edch nebo zm\u011bn\u00e1m pouze jednotliv\u00fdch soubor\u016f v repozit\u00e1\u0159i. <\/p>\n

V\u00fdvoj\u00e1\u0159i a jejich zm\u011bny jsou identifikov\u00e1ny pomoc\u00ed kl\u00ed\u010d\u016f a digit\u00e1ln\u00edch podpis\u016f. Gittuf umo\u017e\u0148uje generovat nov\u00e9 kl\u00ed\u010de, bezpe\u010dn\u011b distribuovat kl\u00ed\u010de, prov\u00e1d\u011bt periodickou rotaci kl\u00ed\u010d\u016f, odvol\u00e1vat kompromitovan\u00e9 kl\u00ed\u010de, spravovat seznamy p\u0159\u00edstup\u016f (ACL) a jmenn\u00e9 prostory v Git repozit\u00e1\u0159\u00edch. Gittuf tak\u00e9 prov\u00e1d\u00ed veden\u00ed referen\u010dn\u00edho logu v\u0161ech zm\u011bn (RSL \u2014 Reference State Log), jeho\u017e integrita a ochrana proti zp\u011btn\u00e9mu zkreslen\u00ed jsou zaji\u0161t\u011bny pomoc\u00ed stromov\u00e9 struktury \u201eMerkle Tree\u201c \u2014 ka\u017ed\u00fd uzel ov\u011b\u0159uje v\u0161echny pod\u0159\u00edzen\u00e9 uzly a v\u011btve d\u00edky stromov\u00e9mu hashov\u00e1n\u00ed (m\u00edt kone\u010dn\u00fd hash umo\u017e\u0148uje u\u017eivateli ov\u011b\u0159it spr\u00e1vnost cel\u00e9 historie operac\u00ed, stejn\u011b jako spr\u00e1vnost minul\u00fdch stav\u016f). <\/p>\n

Pro ov\u011b\u0159en\u00ed digit\u00e1ln\u00edch podpis\u016f commit\u016f a tag\u016f formuje a distribuuje vlastn\u00edk reposit\u00e1\u0159e ve\u0159ejn\u00e9 kl\u00ed\u010de, kter\u00e9 jsou p\u0159\u00edmo spojeny s reposit\u00e1\u0159em. Pro prevenci \u0161kodliv\u00e9ho postupu zm\u011bn, kter\u00e9 byly vytvo\u0159eny po z\u00edsk\u00e1n\u00ed p\u0159\u00edstupu k kl\u00ed\u010d\u016fm pro generov\u00e1n\u00ed digit\u00e1ln\u00edch podpis\u016f jednotliv\u00fdch v\u00fdvoj\u00e1\u0159\u016f, se pou\u017e\u00edvaj\u00ed mechanismy pro odvol\u00e1n\u00ed a n\u00e1hradu kl\u00ed\u010d\u016f. Kl\u00ed\u010de maj\u00ed omezenou \u017eivotnost a vy\u017eaduj\u00ed neust\u00e1lou aktualizaci pro ochranu p\u0159ed generov\u00e1n\u00edm podpisu star\u00fdmi kl\u00ed\u010di.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 gittuf 0.4, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0438\u0435\u0440\u0430\u0440\u0445\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u0432 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e. Gittuf \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u043b\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a Git \u0438 \u043d\u0430\u0431\u043e\u0440 \u0443\u0442\u0438\u043b\u0438\u0442 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0432\u0441\u0435\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e, \u0438 \u0440\u0430\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u0430\u0432\u0438\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0442\u043a\u0430\u043c, \u0442\u0435\u0433\u0430\u043c \u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115675","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekt gittuf rozv\u00edj\u00ed syst\u00e9m kryptografick\u00e9 ochrany Git reposit\u00e1\u0159\u016f | ProHoster","description":"Je k dispozici vyd\u00e1n\u00ed projektu gittuf 0.4, kter\u00e9 rozv\u00edj\u00ed hierarchick\u00fd syst\u00e9m ov\u011b\u0159ov\u00e1n\u00ed obsahu Git reposit\u00e1\u0159\u016f, umo\u017e\u0148uj\u00edc\u00ed minimalizovat rizika v p\u0159\u00edpad\u011b kompromitace jednotliv\u00fdch v\u00fdvoj\u00e1\u0159\u016f, kte\u0159\u00ed maj\u00ed p\u0159\u00edstup k.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 gittuf \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git | ProHoster","og:description":"\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 gittuf 0.4, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0438\u0435\u0440\u0430\u0440\u0445\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u0432 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-10T17:52:06+00:00","article:modified_time":"2024-05-10T17:52:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115675","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 00:04:29","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 00:04:29","updated":"2026-01-23 00:04:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/115675","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=115675"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/115675\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=115675"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=115675"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=115675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}