{"id":34375,"date":"2019-10-31T21:57:58","date_gmt":"2019-10-31T18:57:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah\/"},"modified":"2019-10-31T21:57:58","modified_gmt":"2019-10-31T18:57:58","slug":"github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","title":{"rendered":"GitHub har lanceret finansierings- og informationsservices om s\u00e5rbarheder","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub har implementeret<\/a><\/noindex> systemet sponsorater<\/a><\/noindex> til at yde finansiel st\u00f8tte til \u00e5bne projekter. Den nye service tilbyder en ny form for deltagelse i udviklingen af projekterne \u2014 hvis brugeren ikke har mulighed for at hj\u00e6lpe med udviklingen, kan han deltage i interessante projekter som sponsor og st\u00f8tte gennem finansiering af specifikke udviklere, vedligeholdere, designere, dokumentationsforfattere, testere og andre involverede i projektet deltagere. <\/p>\n

Ved hj\u00e6lp af sponsorsystemet kan enhver GitHub-bruger hver m\u00e5ned overf\u00f8re faste bel\u00f8b til udviklere af \u00e5ben kildekode, der har registreret sig<\/noindex> i servicen som deltagere, der er parate til at modtage finansiel st\u00f8tte (i testsituationen er antallet af deltagere begr\u00e6nset). De sponsorerede deltagere kan definere niveauer af st\u00f8tte og tilknyttede privilegier for sponsorer, s\u00e5som fortrinsbehandling ved fejlretning. Der overvejes muligheden for at organisere finansiering ikke kun for individuelle deltagere, men ogs\u00e5 for grupper af udviklere, der arbejder p\u00e5 projektet.<\/p>\n

I mods\u00e6tning til andre platforme for crowdfunding opkr\u00e6ver GitHub ikke en bestemt procentdel for formidlingen, og det f\u00f8rste \u00e5r vil d\u00e6kke omkostningerne ved behandling af betalinger. P\u00e5 sigt kan der blive indf\u00f8rt et gebyr for behandling af betalinger. For at st\u00f8tte servicen er der oprettet en speciel fond, GitHub Sponsors Matching Fund, som vil h\u00e5ndtere fordelingen af finansielle midler.<\/p>\n

Udover sponsorskab tilbyder GitHub ogs\u00e5 den<\/a><\/noindex> en ny service til at sikre projekters sikkerhed, bygget p\u00e5 teknologier, der er erhvervet gennem opk\u00f8bet<\/a><\/noindex> af selskabet Dependabot. Dependabot er nu integreret i GitHub og er tilg\u00e6ngelig gratis.
\nServicen g\u00f8r det muligt at overv\u00e5ge s\u00e5rbarheder i afh\u00e6ngigheder, sende advarsler til repositoryejere om problemer med afh\u00e6ngigheder og automatisk \u00e5bne pull-anmodninger for at rette op p\u00e5 identificerede s\u00e5rbarheder. <\/p>\n

\"GitHub<\/a><\/noindex><\/center><\/p>\n

Advarsler vises i fanen «Security» og indeholder omfattende oplysninger om s\u00e5rbarhederne og de projektfiler, som problemet p\u00e5virker. Rettelser genereres via opdatering i afh\u00e6ngighedslisten fra minimumsversionen til den version, hvor s\u00e5rbarheden er l\u00f8st. Oplysninger om s\u00e5rbarheder udtr\u00e6kkes fra databaser. MITRE CVE<\/a><\/noindex> og WhiteSource<\/a><\/noindex>, samt baseret p\u00e5 meddelelser fra projektets vedligeholdere og automatisk analyset af commits p\u00e5 GitHub med efterf\u00f8lgende bekr\u00e6ftelse i systemet for manuel gennemgang.<\/p>\n

For projektvedligeholdere er implementeret<\/a><\/noindex> et interface til offentligg\u00f8relse og placering af sikkerhedsrapporter (security advisories), samt til privat diskussion af sp\u00f8rgsm\u00e5l relateret til udbedring af s\u00e5rbarheder.<\/p>\n

Derudover er der indf\u00f8rt foranstaltninger for at beskytte mod overf\u00f8rsel af<\/a><\/noindex> fortrolige data til offentligt tilg\u00e6ngelige registre. scanner<\/a><\/noindex> af tokens og adgangsn\u00f8gler. Under commit scanneren kontrollerer typiske formater af n\u00f8gler og tokens for API-adgang til Alibaba Cloud, Amazon Web Services (AWS), Azure, GitHub, Google Cloud, Mailgun, Slack, Stripe og Twilio. Hvis et token identificeres, sendes der en anmodning til tjenesteudbyderen for at bekr\u00e6fte l\u00e6kagen og tilbagekalde kompromitterede tokens. <\/p>\n

\"GitHub<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441\u043f\u043e\u043d\u0441\u043e\u0440\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u043e\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c. \u041d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0444\u043e\u0440\u043c\u0443 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 — \u0435\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043c\u043e\u0447\u044c \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u0442\u043e \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c \u043a\u0430\u043a \u0441\u043f\u043e\u043d\u0441\u043e\u0440 \u0438 \u043f\u043e\u043c\u043e\u0433\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u0434\u0438\u0437\u0430\u0439\u043d\u0435\u0440\u043e\u0432, \u0430\u0432\u0442\u043e\u0440\u043e\u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u043e\u0432\u043b\u0435\u0447\u0451\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34375","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub har lanceret finansielle st\u00f8tte- og s\u00e5rbarhedsinformationstjenester | ProHoster","description":"GitHub har implementeret et system","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 | ProHoster","og:description":"GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:57:58+00:00","article:modified_time":"2019-10-31T18:57:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34375","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 18:59:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:23:16","updated":"2026-01-21 18:59:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/34375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=34375"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/34375\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=34375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=34375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=34375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}