{"id":34375,"date":"2019-10-31T21:57:58","date_gmt":"2019-10-31T18:57:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah\/"},"modified":"2019-10-31T21:57:58","modified_gmt":"2019-10-31T18:57:58","slug":"github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","title":{"rendered":"GitHub alustas rahalise toetuse ja haavatavuste teavitamise teenuseid","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub rakendanud<\/a><\/noindex> s\u00fcsteemi sponsorluse<\/a><\/noindex> finantsabi pakkumiseks avatud projektidele. Uus teenus pakub uut osalemisvormi projektide arendamisel \u2014 kui kasutajal ei ole v\u00f5imalik aidata arenduses, saab ta seotud projektide jaoks toetajana liituda ja aidata rahastades konkreetseid arendajaid, hooldajaid, disainereid, dokumentatsiooni autoreid, testijaid ja teisi projekti kaasatud osalejaid. <\/p>\n

Sponsorluse s\u00fcsteemi abil v\u00f5ib iga GitHubi kasutaja igakuiselt maksta kindlaid summasid avatud koodi arendajatele, kes on registreerunud<\/noindex> teenuses osalejatena, kes on valmis rahalist toetust saama (teenuse testimise ajal on osalejate arv piiratud). Toetatud osalejad saavad m\u00e4\u00e4rata toetuse tasemed ja sellega seotud eelised sponsoritele, n\u00e4iteks prioriteetsed veaparandused. Samuti kaalutakse rahastamise korraldamist mitte ainult eraldi osalejatele, vaid ka projektiga seotud arendajate r\u00fchmadele.<\/p>\n

Erinevalt teistest \u00fchisrahastamise platvormidest ei v\u00f5ta GitHub enda jaoks teatud protsenti vahendustasu, samuti katab esimesel aastal maksete t\u00f6\u00f6tlemise kulud. Tulevikus ei v\u00e4listata makset\u00f6\u00f6tlemise tasu kehtestamist. Teenuse toetamiseks on loodud eraldi fond GitHub Sponsors Matching Fund, mis tegeleb rahavoogude jaotamisega.<\/p>\n

Lisaks sponsorlusele pakub GitHub ka esitles<\/a><\/noindex> uus teenus projektide turvalisuse tagamiseks, mis p\u00f5hineb tehnoloogiatel, mis on saadud ettev\u00f5tte omandamist<\/a><\/noindex> Dependabot. Dependabot on n\u00fc\u00fcd integreeritud GitHubi ja saadaval tasuta.
\nTeenuse kaudu saab j\u00e4lgida s\u00f5ltuvustes esinevaid haavatavusi, edastada repote owneritele hoiatusi probleemide kohta s\u00f5ltuvustes ning automaatselt avada pull-requeste tuvastatud haavatavuste parandamiseks. <\/p>\n

\"GitHub<\/a><\/noindex><\/center><\/p>\n

Hoiatused kuvatakse vahekaardil \"Security\" ja sisaldavad p\u00f5hjalikku teavet haavatavuse ja projekti failide kohta, mida probleem m\u00f5jutab. Parandused luuakse s\u00f5ltuvuste loendis minimaalse versiooni versiooni v\u00e4rskendamise kaudu, kus haavatavus on k\u00f5rvaldatud. Teave haavatavuste kohta saadakse baasis MITRE CVE<\/a><\/noindex> ja WhiteSource<\/a><\/noindex>, samuti projektijuhilt saadud teadete ja automaatse GitHubi commit anal\u00fcsaatori p\u00f5hjal, millele j\u00e4rgneb kinnitamine k\u00e4sitsi \u00fclevaatuses\u00fcsteemis.<\/p>\n

Projektijuhide jaoks on sisse viidud<\/a><\/noindex> liides haavatuste teatiste (security advisories) avaldamiseks ja paigutamiseks, samuti privaatseks aruteluks haavatavuste parandamisega seotud k\u00fcsimustes.<\/p>\n

Lisaks kaitseks sissekande<\/a><\/noindex> salajaste andmete avalikult k\u00e4tte saadavatest hoidlatest on sisse viidud sk\u00e4nner<\/a><\/noindex> tokenite ja juurdep\u00e4\u00e4suv\u00f5tmete jaoks. Commidi ajal kontrollib sk\u00e4nner tavap\u00e4raseid v\u00f5tmeformaatide ja API juurdep\u00e4\u00e4suv\u00f5tmete, sealhulgas Alibaba Cloud, Amazon Web Services (AWS), Azure, GitHub, Google Cloud, Mailgun, Slack, Stripe ja Twilio, t\u00fcrppe. Tuvastamisel saadetakse teenusepakkujale taotlus leket kinnitamiseks ja kompromiteeritud tokenite tagasiv\u00f5tmiseks. <\/p>\n

\"GitHub<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441\u043f\u043e\u043d\u0441\u043e\u0440\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u043e\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c. \u041d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0444\u043e\u0440\u043c\u0443 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 — \u0435\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043c\u043e\u0447\u044c \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u0442\u043e \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c \u043a\u0430\u043a \u0441\u043f\u043e\u043d\u0441\u043e\u0440 \u0438 \u043f\u043e\u043c\u043e\u0433\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u0434\u0438\u0437\u0430\u0439\u043d\u0435\u0440\u043e\u0432, \u0430\u0432\u0442\u043e\u0440\u043e\u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u043e\u0432\u043b\u0435\u0447\u0451\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34375","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub k\u00e4ivitas finantsabi ja teavitusteenuseid haavatavuste kohta | ProHoster","description":"GitHub on rakendanud","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 | ProHoster","og:description":"GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:57:58+00:00","article:modified_time":"2019-10-31T18:57:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34375","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 18:59:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:23:16","updated":"2026-01-21 18:59:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=34375"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34375\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=34375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=34375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=34375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}