{"id":34375,"date":"2019-10-31T21:57:58","date_gmt":"2019-10-31T18:57:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah\/"},"modified":"2019-10-31T21:57:58","modified_gmt":"2019-10-31T18:57:58","slug":"github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","title":{"rendered":"GitHub a lanc\u00e9 des services de soutien financier et d'information sur les vuln\u00e9rabilit\u00e9s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>GitHub <noindex><a rel=\"nofollow\" href=\"https:\/\/github.blog\/2019-05-23-announcing-github-sponsors-a-new-way-to-contribute-to-open-source\/\">r\u00e9alis\u00e9<\/a><\/noindex> syst\u00e8me <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/sponsors\">de parrainage<\/a><\/noindex> pour fournir un soutien financier aux projets open source. Ce nouveau service offre une nouvelle forme de participation au d\u00e9veloppement des projets \u2014 si un utilisateur n'a pas la possibilit\u00e9 de contribuer au d\u00e9veloppement, il peut s'engager aupr\u00e8s des projets qui l'int\u00e9ressent en tant que sponsor et aider par le financement de d\u00e9veloppeurs sp\u00e9cifiques, de mainteneurs, de designers, d'auteurs de documentation, de testeurs et d'autres participants impliqu\u00e9s dans le projet. <\/p>\n<p>Gr\u00e2ce au syst\u00e8me de parrainage, tout utilisateur de GitHub peut verser mensuellement des montants fixes \u00e0 des d\u00e9veloppeurs de code ouvert, <noindex>enregistr\u00e9s<\/noindex> dans le service en tant que participants pr\u00eats \u00e0 recevoir un soutien financier (pendant la phase de test du service, le nombre de participants est limit\u00e9). Les participants sponsoris\u00e9s peuvent d\u00e9finir des niveaux de soutien et les privil\u00e8ges qui y sont associ\u00e9s pour les sponsors, tels que la correction prioritaire des bugs. Il est envisag\u00e9 d'organiser le financement non seulement de participants individuels, mais aussi de groupes de d\u00e9veloppeurs impliqu\u00e9s dans le travail sur le projet.<\/p>\n<p>Contrairement \u00e0 d'autres plateformes de financement collaboratif, GitHub ne prend pas de pourcentage pour son interm\u00e9diaire, et \u00e9galement la premi\u00e8re ann\u00e9e, il couvrira les frais de traitement des paiements. \u00c0 l'avenir, l'introduction d'une commission pour le traitement des paiements n'est pas exclue. Pour g\u00e9rer le service, un fonds sp\u00e9cial appel\u00e9 GitHub Sponsors Matching Fund a \u00e9t\u00e9 cr\u00e9\u00e9 pour s'occuper de la distribution des flux financiers.<\/p>\n<p>En plus du parrainage, GitHub a \u00e9galement <noindex><a rel=\"nofollow\" href=\"https:\/\/github.blog\/2019-05-23-introducing-new-ways-to-keep-your-code-secure\/\">pr\u00e9sent\u00e9<\/a><\/noindex> un nouveau service pour s\u00e9curiser les projets, construit sur des technologies r\u00e9sultant de <noindex><a rel=\"nofollow\" href=\"https:\/\/dependabot.com\/blog\/hello-github\/\">l'acquisition<\/a><\/noindex> de la soci\u00e9t\u00e9 Dependabot. Dependabot est d\u00e9sormais int\u00e9gr\u00e9 \u00e0 GitHub et disponible gratuitement.<br \/>\nLe service permet de suivre les vuln\u00e9rabilit\u00e9s dans les d\u00e9pendances, d'envoyer des alertes aux propri\u00e9taires de d\u00e9p\u00f4ts concernant les probl\u00e8mes dans les d\u00e9pendances, et d'ouvrir automatiquement des demandes de tirage pour corriger les vuln\u00e9rabilit\u00e9s identifi\u00e9es. <\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/help.github.com\/assets\/images\/help\/graphs\/click-alert-in-alerts-list.png\"><img decoding=\"async\" alt=\"GitHub a lanc\u00e9 des services de soutien financier et d&#039;information sur les vuln\u00e9rabilit\u00e9s\" src=\"\/wp-content\/uploads\/eb716ea42a5712280cd31f14e406d312.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Les avertissements sont affich\u00e9s dans l'onglet \u00ab S\u00e9curit\u00e9 \u00bb et comprennent des informations compl\u00e8tes sur les vuln\u00e9rabilit\u00e9s et les fichiers du projet concern\u00e9s par le probl\u00e8me. Les corrections sont g\u00e9n\u00e9r\u00e9es par une mise \u00e0 jour dans la liste des d\u00e9pendances de la version minimale \u00e0 la version o\u00f9 la vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e. Les informations sur les vuln\u00e9rabilit\u00e9s sont extraites de bases <noindex><a rel=\"nofollow\" href=\"https:\/\/cve.mitre.org\/\">MITRE CVE<\/a><\/noindex> et <noindex><a rel=\"nofollow\" href=\"https:\/\/www.whitesourcesoftware.com\/GitHubSecurityAlerts\">WhiteSource<\/a><\/noindex>, ainsi que sur la base des notifications des mainteneurs de projets et de l'analyse automatique des commits sur GitHub, suivie d'une confirmation dans le syst\u00e8me de r\u00e9vision manuelle.<\/p>\n<p>Pour les mainteneurs de projets <noindex><a rel=\"nofollow\" href=\"https:\/\/help.github.com\/en\/articles\/about-maintainer-security-advisories\">mis en \u0153uvre<\/a><\/noindex> une interface pour publier et partager des rapports de vuln\u00e9rabilit\u00e9s (advisories de s\u00e9curit\u00e9), ainsi que pour discuter en priv\u00e9 des questions relatives \u00e0 la correction des vuln\u00e9rabilit\u00e9s.<\/p>\n<p>De plus, pour se prot\u00e9ger contre <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50374\">la fuite<\/a><\/noindex>  de donn\u00e9es confidentielles dans des d\u00e9p\u00f4ts accessibles au public, a \u00e9t\u00e9 mis en \u0153uvre <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.github.com\/partnerships\/token-scanning\/\">un scanner<\/a><\/noindex> des jetons et des cl\u00e9s d'acc\u00e8s. Lors d'un commit, le scanner v\u00e9rifie les formats typiques des cl\u00e9s et des jetons d'acc\u00e8s aux API Alibaba Cloud, Amazon Web Services (AWS), Azure, GitHub, Google Cloud, Mailgun, Slack, Stripe et Twilio. En cas de d\u00e9tection d'un jeton, une demande est envoy\u00e9e au fournisseur de services pour confirmer la fuite et r\u00e9voquer les jetons compromis. <\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/developer.github.com\/assets\/images\/token-scanning-flow.png\"><img decoding=\"async\" alt=\"GitHub a lanc\u00e9 des services de soutien financier et d&#039;information sur les vuln\u00e9rabilit\u00e9s\" src=\"\/wp-content\/uploads\/783e4452e9343a0bac726a3ad8aa4aa2.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50728\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441\u043f\u043e\u043d\u0441\u043e\u0440\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u043e\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c. \u041d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0444\u043e\u0440\u043c\u0443 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 &#8212; \u0435\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043c\u043e\u0447\u044c \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u0442\u043e \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c \u043a\u0430\u043a \u0441\u043f\u043e\u043d\u0441\u043e\u0440 \u0438 \u043f\u043e\u043c\u043e\u0433\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u0434\u0438\u0437\u0430\u0439\u043d\u0435\u0440\u043e\u0432, \u0430\u0432\u0442\u043e\u0440\u043e\u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u043e\u0432\u043b\u0435\u0447\u0451\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34375","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47GitHub \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:57:58+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:57:58+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub a lanc\u00e9 des services de soutien financier et d'information sur les vuln\u00e9rabilit\u00e9s | ProHoster","description":"GitHub a mis en \u0153uvre un syst\u00e8me","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 | ProHoster","og:description":"GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:57:58+00:00","article:modified_time":"2019-10-31T18:57:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34375","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 18:59:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:23:16","updated":"2026-01-21 18:59:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/34375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=34375"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/34375\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=34375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=34375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=34375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}