{"id":115675,"date":"2024-05-10T19:52:06","date_gmt":"2024-05-10T17:52:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git"},"modified":"2024-05-10T19:52:06","modified_gmt":"2024-05-10T17:52:06","slug":"proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","title":{"rendered":"A gittuf projekt egy titkos\u00edtott Git-t\u00e1rhelyv\u00e9delmi rendszert fejleszt.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Megjelent a gittuf 0.4 verzi\u00f3ja, amely egy hierarchikus tartalom-ellen\u0151rz\u0151 rendszert fejleszt a Git t\u00e1rol\u00f3k sz\u00e1m\u00e1ra, lehet\u0151v\u00e9 t\u00e9ve annak minimaliz\u00e1l\u00e1s\u00e1t, hogy egyes fejleszt\u0151k hozz\u00e1f\u00e9r\u00e9se a t\u00e1rol\u00f3hoz s\u00e9r\u00fcl\u00e9kenny\u00e9 v\u00e1ljon. A gittuf tov\u00e1bbi biztons\u00e1gi r\u00e9teget k\u00edn\u00e1l a Git-hez, \u00e9s eszk\u00f6zcsomagot ny\u00fajt az \u00f6sszes fejleszt\u0151 kulcsainak kezel\u00e9s\u00e9re, akik hozz\u00e1f\u00e9rnek a t\u00e1rol\u00f3hoz, valamint a hozz\u00e1f\u00e9r\u00e9s szab\u00e1lyainak meg\u00e1llap\u00edt\u00e1s\u00e1ra a branchekhez, c\u00edmk\u00e9khez \u00e9s egyes f\u00e1jlokhoz. A projekt k\u00f3dja Go nyelven \u00edr\u00f3dott, \u00e9s az Apache 2.0 licenc alatt \u00e9rhet\u0151 el. A projekt akt\u00edv fejleszt\u00e9s alatt \u00e1ll, \u00e9s alfa-kiad\u00e1s min\u0151s\u00e9g\u0171, k\u00eds\u00e9rletez\u00e9sre alkalmas, de m\u00e9g nem k\u00e9sz\u00fclt el munkahelyi bevezet\u00e9sekn\u00e9l. <\/p>\n

Az inform\u00e1ci\u00f3k \u00e9s artefaktumok, amelyek tov\u00e1bbi ellen\u0151rz\u00e9st biztos\u00edtanak a v\u00e9grehajtott v\u00e1ltoztat\u00e1sokhoz, a Git objektumt\u00e1rol\u00f3j\u00e1ban egy spesifikus gittuf n\u00e9vt\u00e9rben t\u00e1rol\u00f3dnak, lehet\u0151v\u00e9 t\u00e9ve az el\u00e9rhet\u0151s\u00e9g meg\u0151rz\u00e9s\u00e9t a megl\u00e9v\u0151 eszk\u00f6z\u00f6kkel \u00e9s szolg\u00e1ltat\u00e1sokkal, bele\u00e9rtve a GitHub-ot \u00e9s a GitLab-ot. Gittuf t\u00e1mogat\u00e1s n\u00e9lk\u00fcli eszk\u00f6z\u00f6k haszn\u00e1lata eset\u00e9n a t\u00e1rol\u00f3 teljes m\u00e9rt\u00e9kben el\u00e9rhet\u0151, azonban a megn\u00f6velt integrit\u00e1s-ellen\u0151rz\u00e9s lehet\u0151s\u00e9ge korl\u00e1tozott. A gittuf architekt\u00far\u00e1ja a TUF (The Update Framework) bev\u00e1lt elemein alapul, amelyet p\u00e9ld\u00e1ul a Docker, a Fuchsia, az AGL (Automotive Grade Linux) \u00e9s a PyPI friss\u00edt\u00e9seinek v\u00e9delm\u00e9re alkalmaznak. <\/p>\n

A gittuf ellen\u0151rz\u00e9si modellje a bizalom hierarchikus terjeszt\u00e9s\u00e9n alapul. A bizalom gy\u00f6kere (root of trust) a t\u00e1rol\u00f3 tulajdonos\u00e1\u00e9, aki kulcsokat gener\u00e1l a fejleszt\u00e9si r\u00e9sztvev\u0151k sz\u00e1m\u00e1ra, \u00e9s meghat\u00e1rozza azokat a szab\u00e1lyokat, amelyek szerint a l\u00e9trehozott kulcsok felhaszn\u00e1lhat\u00f3k. A gittuf lehet\u0151v\u00e9 teszi rugalmas, finoman granulariz\u00e1lt szab\u00e1lyok l\u00e9trehoz\u00e1s\u00e1t, amelyek meghat\u00e1rozz\u00e1k minden fejleszt\u0151 hat\u00e1sk\u00f6r\u00e9t \u00e9s azt a t\u00e1rol\u00f3ter\u00fcletet, ahol m\u00f3dos\u00edthat. P\u00e9ld\u00e1ul egy fejleszt\u0151 jogosult lehet c\u00edmk\u00e9k l\u00e9trehoz\u00e1s\u00e1ra, meghat\u00e1rozott branch-ek m\u00f3dos\u00edt\u00e1s\u00e1ra, vagy csak egyes f\u00e1jlok m\u00f3dos\u00edt\u00e1s\u00e1ra a t\u00e1rol\u00f3ban. <\/p>\n

A fejleszt\u0151k \u00e9s \u00e1ltaluk v\u00e9grehajtott m\u00f3dos\u00edt\u00e1sok azonos\u00edthat\u00f3k kulcsok \u00e9s digit\u00e1lis al\u00e1\u00edr\u00e1sok seg\u00edts\u00e9g\u00e9vel. A Gittuf lehet\u0151v\u00e9 teszi \u00faj kulcsok gener\u00e1l\u00e1s\u00e1t, a kulcsok biztons\u00e1gos terjeszt\u00e9s\u00e9t, a kulcsok rendszeres forgat\u00e1s\u00e1t, a kompromitt\u00e1lt kulcsok visszavon\u00e1s\u00e1t, a hozz\u00e1f\u00e9r\u00e9si list\u00e1k (ACL) \u00e9s a n\u00e9vterek kezel\u00e9s\u00e9t a Git-repozit\u00f3riumokban. A Gittuf emellett egy referencialogot (RSL - Reference State Log) is vezet, amelynek integrit\u00e1s\u00e1t \u00e9s a visszamen\u0151leges eltorzul\u00e1s elleni v\u00e9delm\u00e9t a Merkle-f\u00e1k hierarchikus szerkezete biztos\u00edtja - minden \u00e1gazat ellen\u0151rzi az \u00f6sszes alatta l\u00e9v\u0151 \u00e1gat \u00e9s csom\u00f3pontot a fa alap\u00fa hash-el\u00e9s r\u00e9v\u00e9n (a v\u00e9gs\u0151 hash seg\u00edts\u00e9g\u00e9vel a felhaszn\u00e1l\u00f3 meger\u0151s\u00edtheti az \u00f6sszes m\u0171velet t\u00f6rt\u00e9net\u00e9nek helyess\u00e9g\u00e9t, valamint a kor\u00e1bbi \u00e1llapotok \u00e9rv\u00e9nyess\u00e9g\u00e9t). <\/p>\n

A digit\u00e1lis al\u00e1\u00edr\u00e1sok, a commitok \u00e9s a c\u00edmk\u00e9k hiteles\u00edt\u00e9s\u00e9hez a t\u00e1rol\u00f3 tulajdonosa nyilv\u00e1nos kulcsokat alak\u00edt ki \u00e9s terjeszt, amelyek k\u00f6zvetlen\u00fcl t\u00e1rsulnak a t\u00e1rol\u00f3hoz. A t\u00e1mad\u00f3k \u00e1ltal a kulcsokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s ut\u00e1n v\u00e9grehajtott al\u00e1\u00edr\u00e1sok megv\u00e1ltoztat\u00e1s\u00e1nak megakad\u00e1lyoz\u00e1s\u00e1ra visszavon\u00e1si \u00e9s kulcscsere mechanizmusokat alkalmaznak. A kulcsok korl\u00e1tozott \u00e9lettartammal rendelkeznek, \u00e9s folyamatos friss\u00edt\u00e9st ig\u00e9nyelnek a r\u00e9gi kulcsokkal t\u00f6rt\u00e9n\u0151 al\u00e1\u00edr\u00e1s gener\u00e1l\u00e1s\u00e1nak v\u00e9delme \u00e9rdek\u00e9ben.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 gittuf 0.4, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0438\u0435\u0440\u0430\u0440\u0445\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u0432 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e. Gittuf \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u043b\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a Git \u0438 \u043d\u0430\u0431\u043e\u0440 \u0443\u0442\u0438\u043b\u0438\u0442 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0432\u0441\u0435\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e, \u0438 \u0440\u0430\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u0430\u0432\u0438\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0442\u043a\u0430\u043c, \u0442\u0435\u0433\u0430\u043c \u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115675","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A gittuf projekt a Git t\u00e1rol\u00f3k kriptogr\u00e1fiai v\u00e9delmi rendszer\u00e9t fejleszti | ProHoster","description":"Megjelent a gittuf 0.4 projekt, amely fejleszti a Git t\u00e1rol\u00f3k tartalm\u00e1nak hierarchikus ellen\u0151rz\u00e9si rendszer\u00e9t, amely minimaliz\u00e1lja a kock\u00e1zatokat olyan helyzetekben, amikor egyes fejleszt\u0151k kompromitt\u00e1l\u00f3dnak, akik hozz\u00e1f\u00e9r\u00e9ssel rendelkeznek.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 gittuf \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git | ProHoster","og:description":"\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 gittuf 0.4, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0438\u0435\u0440\u0430\u0440\u0445\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u0432 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-10T17:52:06+00:00","article:modified_time":"2024-05-10T17:52:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115675","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 00:04:29","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 00:04:29","updated":"2026-01-23 00:04:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/115675","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=115675"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/115675\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=115675"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=115675"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=115675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}