{"id":114077,"date":"2024-03-03T12:26:07","date_gmt":"2024-03-03T10:26:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api"},"modified":"2024-03-03T12:26:07","modified_gmt":"2024-03-03T10:26:07","slug":"github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","title":{"rendered":"GitHub a activ\u00e9 par d\u00e9faut un syst\u00e8me de protection contre les fuites de jetons API","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub a annonc\u00e9 l'activation par d\u00e9faut pour tous les d\u00e9p\u00f4ts publics d'un m\u00e9canisme de protection contre l'inclusion de donn\u00e9es confidentielles, laiss\u00e9es par inadvertance par les d\u00e9veloppeurs dans le code. Par exemple, il arrive que des fichiers de configuration contenant des mots de passe de bases de donn\u00e9es, des tokens ou des cl\u00e9s d'acc\u00e8s \u00e0 des API se retrouvent dans le d\u00e9p\u00f4t. Auparavant, le scan \u00e9tait effectu\u00e9 en mode passif, permettant d'identifier les fuites d\u00e9j\u00e0 survenues dans le d\u00e9p\u00f4t. D\u00e9sormais, la v\u00e9rification est effectu\u00e9e automatiquement au moment de la publication (git push) et entra\u00eene l'affichage d'un avertissement en cas d'ajout de commits contenant des donn\u00e9es confidentielles. <\/p>\n

Plus de 250 mod\u00e8les ont \u00e9t\u00e9 mis en place pour identifier divers types de cl\u00e9s, de tokens, de certificats et d'identifiants. Pour \u00e9viter les fausses d\u00e9tections, seuls des types de tokens clairement d\u00e9finis sont v\u00e9rifi\u00e9s, couvrant plus de 180 services diff\u00e9rents, y compris Amazon Web Services, Azure, Crates.io, DigitalOcean, Google Cloud, NPM, PyPI, RubyGems et Yandex.Cloud. Apr\u00e8s la d\u00e9tection d'une fuite potentielle, le d\u00e9veloppeur est invit\u00e9 \u00e0 examiner le code probl\u00e9matique, \u00e0 corriger la fuite et \u00e0 recommencer le commit ou \u00e0 signaler un blocage comme faux positif.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u043a \u0421\u0423\u0411\u0414, \u0442\u043e\u043a\u0435\u043d\u044b \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API. \u0420\u0430\u043d\u0435\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u043e\u0441\u044c \u0432 \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0443\u0436\u0435 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438, \u043f\u043e\u043f\u0430\u0432\u0448\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114077","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub a activ\u00e9 par d\u00e9faut un syst\u00e8me de protection contre les fuites de tokens d'API | ProHoster","description":"GitHub a annonc\u00e9 l'activation par d\u00e9faut pour tous les d\u00e9p\u00f4ts publics d'un m\u00e9canisme de protection contre l'inclusion de donn\u00e9es confidentielles, laiss\u00e9es par inadvertance par les d\u00e9veloppeurs dans le code.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0432\u043a\u043b\u044e\u0447\u0438\u043b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u043a API | ProHoster","og:description":"GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-03T10:26:07+00:00","article:modified_time":"2024-03-03T10:26:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/114077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=114077"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/114077\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=114077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=114077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=114077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}