{"id":52741,"date":"2019-11-15T00:00:00","date_gmt":"2019-11-14T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/github-initsiiroval-proekt-poiska-uyazvimostej-v-otkrytom-po"},"modified":"2020-02-18T14:00:32","modified_gmt":"2020-02-18T11:00:32","slug":"github-initsiiroval-proekt-poiska-uyazvimostej-v-otkrytom-po","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/github-initsiiroval-proekt-poiska-uyazvimostej-v-otkrytom-po","title":{"rendered":"GitHub a lanc\u00e9 un projet de recherche de vuln\u00e9rabilit\u00e9s dans le logiciel open source","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Il semble que la documentation de GitHub prenne s\u00e9rieusement en compte la s\u00e9curit\u00e9 des logiciels. Tout d'abord, il y a eu le stockage des donn\u00e9es sur l'archipel du Svalbard et le projet<\/a><\/noindex> un soutien financier aux d\u00e9veloppeurs. Et maintenant est d\u00e9sormais<\/a><\/noindex> l'initiative GitHub Security Lab, qui implique la participation de tous les professionnels concern\u00e9s pour am\u00e9liorer la s\u00e9curit\u00e9 des logiciels open source.<\/p>\n

\"GitHub<\/p>\n

Parmi les participants figurent d\u00e9j\u00e0 F5, Google, HackerOne, Intel, IOActive, J.P. Morgan, LinkedIn, Microsoft, Mozilla, NCC Group, Oracle, Trail of Bits, Uber et VMWare. Au cours des deux derni\u00e8res ann\u00e9es, ils ont aid\u00e9 \u00e0 identifier et \u00e0 corriger 105 vuln\u00e9rabilit\u00e9s dans plusieurs projets.<\/p>\n

D'autres participants peuvent recevoir des r\u00e9compenses allant jusqu'\u00e0 3000 $ pour les vuln\u00e9rabilit\u00e9s d\u00e9tect\u00e9es. L'interface de GitHub offre d\u00e9j\u00e0 la possibilit\u00e9 d'obtenir un identifiant CVE pour un probl\u00e8me et de r\u00e9diger un rapport \u00e0 ce sujet. Un catalogue de vuln\u00e9rabilit\u00e9s a \u00e9t\u00e9 mis en place, la GitHub Advisory Database<\/a><\/noindex>qui contient des informations sur les probl\u00e8mes li\u00e9s aux applications h\u00e9berg\u00e9es sur GitHub, aux packages vuln\u00e9rables, etc.<\/p>\n

<\/center><\/p>\n

De plus, le syst\u00e8me a d\u00e9j\u00e0 ajout\u00e9 une protection mise \u00e0 jour qui surveille que les donn\u00e9es personnelles et confidentielles, comme les jetons, les cl\u00e9s et similaires, ne se retrouvent pas dans des d\u00e9p\u00f4ts publics. Il est d\u00e9clar\u00e9 que le syst\u00e8me scanne automatiquement les formats de cl\u00e9s de 20 services et syst\u00e8mes cloud. Si un probl\u00e8me est d\u00e9tect\u00e9, un avis est envoy\u00e9 au fournisseur de services pour confirmer le probl\u00e8me et retirer les cl\u00e9s compromises.<\/p>\n

Il convient de noter qu'auparavant, GitHub avait \u00e9t\u00e9 acquis par Microsoft. Il semble qu'\u00e0 Redmond, ils aient d\u00e9cid\u00e9 de s'attaquer s\u00e9rieusement \u00e0 la s\u00e9curit\u00e9 des donn\u00e9es.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Source : 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e GitHub \u0432\u0441\u0435\u0440\u044c\u0451\u0437 \u0437\u0430\u0434\u0443\u043c\u0430\u043b\u043e\u0441\u044c \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041f\u041e. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0431\u044b\u043b\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0428\u043f\u0438\u0446\u0431\u0435\u0440\u0433\u0435\u043d\u0435 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 GitHub Security Lab, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0432\u0441\u0435\u0445 \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0432 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e. \u0412 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0435 \u0443\u0436\u0435 \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0442 F5, Google, HackerOne, Intel, IOActive, J.P. Morgan, LinkedIn, Microsoft, Mozilla, NCC Group, Oracle, Trail […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":52742,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52741","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub a lanc\u00e9 un projet de recherche de vuln\u00e9rabilit\u00e9s dans les logiciels open source | ProHoster","description":"Il semble que la direction de GitHub prenne s\u00e9rieusement en consid\u00e9ration la s\u00e9curit\u00e9 des logiciels.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/github-initsiiroval-proekt-poiska-uyazvimostej-v-otkrytom-po","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u041f\u041e | ProHoster","og:description":"\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e GitHub \u0432\u0441\u0435\u0440\u044c\u0451\u0437 \u0437\u0430\u0434\u0443\u043c\u0430\u043b\u043e\u0441\u044c \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041f\u041e.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/github-initsiiroval-proekt-poiska-uyazvimostej-v-otkrytom-po","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-14T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52741","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:42:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:38:23","updated":"2026-01-24 04:42:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/52741","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=52741"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/52741\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/52742"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=52741"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=52741"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=52741"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}