{"id":34375,"date":"2019-10-31T21:57:58","date_gmt":"2019-10-31T18:57:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah\/"},"modified":"2019-10-31T21:57:58","modified_gmt":"2019-10-31T18:57:58","slug":"github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","title":{"rendered":"GitHub a lansat servicii de suport financiar \u0219i informare despre vulnerabilit\u0103\u021bi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub implementat<\/a><\/noindex> sistem sponsorizare<\/a><\/noindex> pentru a oferi sprijin financiar proiectelor open-source. Noua platform\u0103 ofer\u0103 o modalitate inovatoare de a participa la dezvoltarea proiectelor \u2014 dac\u0103 utilizatorul nu poate contribui la dezvoltare, acesta se poate al\u0103tura proiectelor de interes ca sponsor \u0219i poate ajuta prin finan\u021barea dezvoltatorilor, men\u021bin\u0103torilor, designerilor, autorilor de documenta\u021bie, testerilor \u0219i altor participan\u021bi implica\u021bi \u00een proiect. <\/p>\n

Prin intermediul sistemului de sponsorizare, orice utilizator GitHub poate dona lunar sume fixe dezvoltatorilor de cod deschis, \u00eenregistra\u021bi<\/noindex> \u00een serviciu ca participan\u021bi, preg\u0103ti\u021bi s\u0103 primeasc\u0103 suport financiar (pe durata test\u0103rii serviciului, num\u0103rul de participan\u021bi este limitat). Participan\u021bii sponsorizati pot defini nivelurile de suport \u0219i privilegii aferente pentru sponsori, cum ar fi remedierea urgent\u0103 a erorilor. Se ia \u00een considerare organizarea finan\u021b\u0103rii nu doar a participan\u021bilor individuali, ci \u0219i a grupurilor de dezvoltatori implica\u021bi \u00een proiect.<\/p>\n

Spre deosebire de alte platforme de finan\u021bare colaborativ\u0103, GitHub nu percepe un anumit procent pentru intermediere \u0219i, de asemenea, va acoperi costurile de procesare a pl\u0103\u021bilor \u00een primul an. \u00cen continuare, nu este exclus\u0103 introducerea unei taxe pentru procesarea pl\u0103\u021bilor. Pentru sus\u021binerea serviciului a fost creat un fond special, Fondul de Corelare GitHub Sponsors, care se va ocupa de distribuirea fluxurilor financiare.<\/p>\n

Pe l\u00e2ng\u0103 sponsorizare, GitHub ofer\u0103 \u0219i a prezentat<\/a><\/noindex> un nou serviciu pentru asigurarea securit\u0103\u021bii proiectelor, construit pe baza tehnologiilor ob\u021binute \u00een urma achizi\u021biei<\/a><\/noindex> companiei Dependabot. Dependabot este acum integrat \u00een GitHub \u0219i disponibil gratuit.
\nServiciul permite monitorizarea vulnerabilit\u0103\u021bilor \u00een dependen\u021be, trimiterea de avertiz\u0103ri proprietarilor de repositoare cu privire la problemele din dependen\u021be \u0219i deschiderea automat\u0103 a pull request-urilor pentru remedierea vulnerabilit\u0103\u021bilor identificate. <\/p>\n

\"GitHub<\/a><\/noindex><\/center><\/p>\n

Avertiz\u0103rile sunt afi\u0219ate \u00een tab-ul \u00abSecurity\u00bb \u0219i includ informa\u021bii detaliate despre vulnerabilit\u0103\u021bi \u0219i fi\u0219ierele proiectului afectate de problem\u0103. Remedierea se face prin actualizarea versiunii minime \u00een lista de dependen\u021be la versiunea \u00een care vulnerabilitatea a fost rezolvat\u0103. Informa\u021biile despre vulnerabilit\u0103\u021bi sunt extrase din baza de date. MITRE CVE<\/a><\/noindex> \u0219i WhiteSource<\/a><\/noindex>, \u0219i pe baza notific\u0103rilor de la men\u021bin\u0103torii proiectelor \u0219i a analizorului automat al commit-urilor de pe GitHub, cu confirmarea ulterioar\u0103 \u00een sistemul de revizuire manual\u0103.<\/p>\n

Pentru men\u021bin\u0103torii proiectelor pus \u00een func\u021biune<\/a><\/noindex> o interfa\u021b\u0103 pentru publicarea \u0219i plasarea rapoartelor privind vulnerabilit\u0103\u021bile (advisory-uri de securitate), precum \u0219i pentru discu\u021bii private \u00eentr-un cerc restr\u00e2ns despre probleme legate de remedierea vulnerabilit\u0103\u021bilor.<\/p>\n

\u00cen plus, pentru protec\u021bia inclusului<\/a><\/noindex> datelor confiden\u021biale \u00een repositoare publice a fost pus \u00een func\u021biune un scaner<\/a><\/noindex> de tokenuri \u0219i chei de acces. \u00cen timpul commit-ului, scannerul verific\u0103 formatele standard pentru chei \u0219i tokenuri de acces API de la Alibaba Cloud, Amazon Web Services (AWS), Azure, GitHub, Google Cloud, Mailgun, Slack, Stripe \u0219i Twilio. \u00cen cazul \u00een care se identific\u0103 un token, se trimite un mesaj c\u0103tre furnizorul de servicii pentru confirmarea unei poten\u021biale scurgeri \u0219i retragerea tokenurilor compromise. <\/p>\n

\"GitHub<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441\u043f\u043e\u043d\u0441\u043e\u0440\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u043e\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c. \u041d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0444\u043e\u0440\u043c\u0443 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 — \u0435\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043c\u043e\u0447\u044c \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u0442\u043e \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c \u043a\u0430\u043a \u0441\u043f\u043e\u043d\u0441\u043e\u0440 \u0438 \u043f\u043e\u043c\u043e\u0433\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u0434\u0438\u0437\u0430\u0439\u043d\u0435\u0440\u043e\u0432, \u0430\u0432\u0442\u043e\u0440\u043e\u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u043e\u0432\u043b\u0435\u0447\u0451\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34375","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub a lansat servicii de suport financiar \u0219i informare despre vulnerabilit\u0103\u021bi | ProHoster","description":"GitHub a implementat un sistem","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 | ProHoster","og:description":"GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:57:58+00:00","article:modified_time":"2019-10-31T18:57:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34375","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 18:59:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:23:16","updated":"2026-01-21 18:59:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=34375"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34375\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=34375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=34375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=34375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}