{"id":115675,"date":"2024-05-10T19:52:06","date_gmt":"2024-05-10T17:52:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git"},"modified":"2024-05-10T19:52:06","modified_gmt":"2024-05-10T17:52:06","slug":"proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","title":{"rendered":"Proiectul gittuf dezvolt\u0103 un sistem de protec\u021bie criptografic\u0103 pentru repositoare Git","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A fost lansat\u0103 versiunea 0.4 a proiectului gittuf, care dezvolt\u0103 un sistem ierarhic de verificare a con\u021binutului repository-urilor Git, permi\u021b\u00e2nd minimizarea riscurilor \u00een situa\u021bia compromiterii unor dezvoltatori individuali care au acces la repository. Gittuf ofer\u0103 un strat suplimentar de securitate pentru Git \u0219i un set de utilitare pentru gestionarea cheilor tuturor dezvoltatorilor care au acces la repository, precum \u0219i stabilirea regulilor de acces la ramuri, etichete \u0219i fi\u0219iere individuale. Codul proiectului este scris \u00een Go \u0219i este distribuit sub licen\u021ba Apache 2.0. Proiectul se afl\u0103 \u00een stadiul de dezvoltare activ\u0103 \u0219i are calitatea unei versiuni alfa, adecvat\u0103 pentru experimente, dar \u00eenc\u0103 nefiind gata pentru implement\u0103ri de produc\u021bie. <\/p>\n

Informa\u021biile \u0219i artefactele care ofer\u0103 o verificare suplimentar\u0103 a modific\u0103rilor aduse sunt stocate \u00eentr-un depozit de obiecte Git \u00eentr-un spa\u021biu de nume specific pentru gittuf, ceea ce permite p\u0103strarea compatibilit\u0103\u021bii cu instrumentele \u0219i serviciile existente, inclusiv GitHub \u0219i GitLab. Atunci c\u00e2nd se folosesc instrumente f\u0103r\u0103 suport pentru gittuf, repository-ul r\u0103m\u00e2ne complet accesibil, dar posibilitatea de verificare extins\u0103 a integrit\u0103\u021bii sale este limitat\u0103. Arhitectura gittuf se bazeaz\u0103 pe elemente dovedite din cadrul TUF (The Update Framework), folosit pentru protejarea proceselor de generare a actualiz\u0103rilor \u00een proiecte precum Docker, Fuchsia, AGL (Automotive Grade Linux) \u0219i PyPI. <\/p>\n

Modelul de verificare \u00een gittuf se bazeaz\u0103 pe aplicarea unui sistem ierarhic de distribu\u021bie a \u00eencrederii. R\u0103d\u0103cina \u00eencrederii (root of trust) apar\u021bine proprietarului repository-ului, care poate genera chei pentru participan\u021bii la dezvoltare \u0219i poate stabili regulile conform c\u0103rora cheile generate pot fi utilizate. Gittuf permite crearea unor reguli flexibile \u0219i granulare care definesc atribu\u021biile fiec\u0103rui dezvoltator \u0219i domeniul repository-ului \u00een care acesta poate aduce modific\u0103ri. De exemplu, un dezvoltator poate fi autorizat s\u0103 creeze etichete, s\u0103 fac\u0103 modific\u0103ri \u00een anumite ramuri sau s\u0103 modifice doar anumite fi\u0219iere din repository. <\/p>\n

Dezvoltatorii \u0219i modific\u0103rile efectuate de ace\u0219tia sunt identificate prin chei \u0219i semn\u0103turi digitale. Gittuf permite generarea de noi chei, distribuirea sigur\u0103 a cheilor, realizarea rotativ\u0103 periodic\u0103 a cheilor, revocarea cheilor compromise, gestionarea listelor de acces (ACL) \u0219i a spa\u021biilor de nume \u00een repozitoarele Git. Gittuf efectueaz\u0103, de asemenea, p\u0103strarea unui jurnal de referin\u021b\u0103 a tuturor modific\u0103rilor (RSL \u2014 Reference State Log), integritatea \u0219i protec\u021bia \u00eempotriva alter\u0103rii retroactive a acestuia fiind asigurate printr-o structur\u0103 ierarhic\u0103 numit\u0103 \u201earborele Merkle\u201d (Merkle Tree) \u2014 fiecare ramur\u0103 verific\u0103 toate ramurile \u0219i nodurile subiacente, datorit\u0103 hash-ului ierarhic (av\u00e2nd un hash final, utilizatorul se poate asigura de corectitudinea \u00eentregii istorii a opera\u021biunilor, precum \u0219i de corectitudinea st\u0103rilor anterioare). <\/p>\n

Pentru validarea semn\u0103turilor digitale ale commit-urilor \u0219i tag-urilor, proprietarul repozitorului formeaz\u0103 \u0219i distribuie chei publice, care sunt direct asociate cu repozitorul. Pentru a contracara promovarea modific\u0103rilor de c\u0103tre atacatori, create dup\u0103 ob\u021binerea accesului la chei pentru generarea semn\u0103turilor digitale ale anumitor dezvoltatori, se aplic\u0103 mecanisme de revocare \u0219i \u00eenlocuire a cheilor. Cheile au o durat\u0103 de via\u021b\u0103 limitat\u0103 \u0219i necesit\u0103 actualiz\u0103ri constante pentru a preveni semnarea cu chei vechi.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 gittuf 0.4, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0438\u0435\u0440\u0430\u0440\u0445\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u0432 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e. Gittuf \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u043b\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a Git \u0438 \u043d\u0430\u0431\u043e\u0440 \u0443\u0442\u0438\u043b\u0438\u0442 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0432\u0441\u0435\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e, \u0438 \u0440\u0430\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u0430\u0432\u0438\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0442\u043a\u0430\u043c, \u0442\u0435\u0433\u0430\u043c \u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115675","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Proiectul gittuf dezvolt\u0103 un sistem de protec\u021bie criptografic\u0103 pentru repozitoarele Git | ProHoster","description":"Este disponibil\u0103 versiunea proiectului gittuf 0.4, care dezvolt\u0103 un sistem ierarhic de validare a con\u021binutului repozitoarelor Git, permi\u021b\u00e2nd minimizarea riscurilor \u00eentr-o situa\u021bie de compromitere a anumitor dezvoltatori care au acces la.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 gittuf \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git | ProHoster","og:description":"\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 gittuf 0.4, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0438\u0435\u0440\u0430\u0440\u0445\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u0432 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-gittuf-razvivaet-sistemu-kriptograficheskoj-zashhity-repozitoriev-git","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-10T17:52:06+00:00","article:modified_time":"2024-05-10T17:52:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115675","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 00:04:29","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 00:04:29","updated":"2026-01-23 00:04:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/115675","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=115675"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/115675\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=115675"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=115675"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=115675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}