GitHub imayambitsa chithandizo chandalama komanso ntchito zofotokozera za kusatetezeka

GitHub zakhazikitsidwa kachitidwe thandizo kupereka chithandizo chandalama potsegulira mapulojekiti. Utumiki watsopanowu umapereka njira yatsopano yochitira nawo mbali pakupanga ntchito - ngati wogwiritsa ntchito sangathe kuthandizira pa chitukuko, ndiye kuti akhoza kugwirizana ndi ntchito zomwe zimapindulitsa monga wothandizira ndi kuthandizira pogwiritsa ntchito ndalama zothandizira, osamalira, okonza, olemba zolemba. , oyesa ndi ena omwe akugwira nawo ntchitoyi.

Pogwiritsa ntchito njira yothandizira, wogwiritsa ntchito aliyense wa GitHub atha kupereka ndalama zokhazikika pamwezi kuti atsegule opanga magwero, olembetsedwa muutumiki monga okonzeka kulandira thandizo la ndalama (panthawi yoyesedwa kwa utumiki chiwerengero cha otenga nawo mbali ndi chochepa). Mamembala omwe athandizidwa amatha kufotokozera magawo othandizira ndi maubwino ogwirizana nawo, monga kukonza zolakwika zofunika kwambiri. Kuthekera kokonzekera ndalama osati kwa otenga nawo mbali pawokha, komanso magulu a otukula omwe akugwira nawo ntchitoyo akuganiziridwa.

Mosiyana ndi nsanja zina zopezera anthu ambiri, GitHub salipira chindapusa chapakati, komanso ilipiranso ndalama zolipirira chaka choyamba. M'tsogolomu, ndizotheka kuyambitsa chindapusa cha kukonza malipiro. Pofuna kuthandizira ntchitoyi, thumba lapadera, GitHub Sponsors Matching Fund, lapangidwa, lomwe lidzagawira kayendetsedwe ka ndalama.

Kuphatikiza pa chithandizo cha GitHub komanso anayambitsa ntchito yatsopano yowonetsetsa chitetezo cha mapulojekiti, omangidwa pamaziko a matekinoloje omwe adapeza chifukwa chake zolanda by Dependabot. Dependabot tsopano idapangidwa mu GitHub ndipo ikupezeka kwaulere.
Ntchitoyi imakupatsani mwayi wowunika zomwe zingachitike pakudalira, kutumiza machenjezo kwa eni ake okhudzana ndi zovuta zodalira, ndikutsegula zokha zopempha kuti mukonze zovuta zomwe zadziwika.

GitHub imayambitsa chithandizo chandalama komanso ntchito zofotokozera za kusatetezeka

Zidziwitso zikuwonetsedwa mu tabu ya Chitetezo ndipo zimaphatikizapo zambiri zokhudzana ndi chiwopsezo komanso mafayilo a polojekiti omwe akhudzidwa ndi nkhaniyi. Kukonzekera kumapangidwa ndikusintha mndandanda wocheperako wodalira mtundu womwe umakonza chiwopsezo. Zambiri zokhudzana ndi zovuta zimatengedwa kuchokera ku database MITER CVE ΠΈ WhiteSource, komanso kutengera zidziwitso zochokera kwa oyang'anira polojekiti komanso chowunikira chodziwikiratu pa GitHub ndi chitsimikiziro chotsatira mu dongosolo lowunikira pamanja.

Kwa oyang'anira polojekiti kuyikidwa mu ntchito mawonekedwe osindikizira ndi kutumiza malipoti okhudzana ndi zofooka (malangizo a chitetezo), komanso zokambirana zachinsinsi mumagulu otsekedwa a nkhani zokhudzana ndi kukonza zofooka.

Komanso, kuteteza motsutsana kugunda zinsinsi zosungidwa m'malo opezeka ndi anthu zakhazikitsidwa sikana zizindikiro ndi makiyi olowera. Pakudzipereka, sikaniyo imayang'ana mawonekedwe achinsinsi wamba ndi ma tokeni a API a Alibaba Cloud, Amazon Web Services (AWS), Azure, GitHub, Google Cloud, Mailgun, Slack, Stripe, ndi Twilio. Ngati chizindikiro chadziwika, pempho limatumizidwa kwa wothandizira kuti atsimikizire kutayikira ndikuchotsa zizindikiro zowonongeka.

GitHub imayambitsa chithandizo chandalama komanso ntchito zofotokozera za kusatetezeka

Source: opennet.ru

Kuwonjezera ndemanga