GitHub yakhazikitsa makina ophunzirira makina kuti afufuze zofooka mu code

GitHub yalengeza kuwonjezera kwa makina oyesera ophunzirira makina ku ntchito yake yosanthula ma Code kuti azindikire mitundu yodziwika bwino yachiwopsezo mu code. Pakuyesa, magwiridwe antchitowa akupezeka m'malo osungira okhala ndi ma code mu JavaScript ndi TypeScript. Zikudziwika kuti kugwiritsa ntchito makina ophunzirira makina kwapangitsa kuti zikhale zotheka kukulitsa kwambiri kuchuluka kwa mavuto omwe amadziwika, pofufuza zomwe dongosololi sililinso lokha poyang'ana ma templates okhazikika ndipo silimangirizidwa kuzinthu zodziwika bwino. Pakati pazovuta zomwe zazindikirika ndi dongosolo latsopanoli, zolakwika zimatchulidwa zomwe zimatsogolera ku scripting (XSS), kupotoza kwa njira zamafayilo (mwachitsanzo, kupyolera mu "/.."), m'malo mwa mafunso a SQL ndi NoSQL.

Ntchito yosanthula ma Code imakupatsani mwayi wozindikira zovuta mutangoyamba kumene mwa kusanthula ntchito iliyonse ya "git push" kuti mupeze zovuta zomwe zingachitike. Chotsatiracho chimamangirizidwa mwachindunji ku pempho lachikoka. M'mbuyomu, chekecho chinkachitika pogwiritsa ntchito injini ya CodeQL, yomwe imasanthula ma tempuleti okhala ndi zitsanzo zama code osatetezeka (CodeQL imakulolani kuti mupange template ya code yomwe ili pachiwopsezo kuti muzindikire kupezeka kwachiwopsezo chofananira mu code yama projekiti ena). Injini yatsopanoyo, yomwe imagwiritsa ntchito kuphunzira pamakina, imatha kuzindikira zovuta zomwe sizikudziwika m'mbuyomu chifukwa sichimangiriridwa ndi ma templates owerengera omwe amafotokoza zovuta zina. Mtengo wa gawoli ndikuwonjezeka kwa chiwerengero cha zabwino zabodza poyerekeza ndi macheke a CodeQL.

Source: opennet.ru

Kuwonjezera ndemanga