{"id":34375,"date":"2019-10-31T21:57:58","date_gmt":"2019-10-31T18:57:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah\/"},"modified":"2019-10-31T21:57:58","modified_gmt":"2019-10-31T18:57:58","slug":"github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","title":{"rendered":"GitHub spustil slu\u017eby finan\u010dnej podpory a informovania o zranite\u013enostiach.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub realizoval<\/a><\/noindex> syst\u00e9mu sponzorstva<\/a><\/noindex> na poskytovanie finan\u010dnej podpory otvoren\u00fdm projektom. Nov\u00e1 slu\u017eba poskytuje nov\u00fa formu zapojenia sa do rozvoja projektov \u2014 ak pou\u017e\u00edvate\u013e nem\u00e1 mo\u017enos\u0165 pom\u00f4c\u0165 pri v\u00fdvoji, m\u00f4\u017ee sa pripoji\u0165 k zauj\u00edmav\u00fdm projektom ako sponzor a prispieva\u0165 financovan\u00edm konkr\u00e9tnych v\u00fdvoj\u00e1rov, spr\u00e1vcov, dizajn\u00e9rov, autorov dokument\u00e1cie, testerov a \u010fal\u0161\u00edch zapojen\u00fdch \u00fa\u010dastn\u00edkov projektu. <\/p>\n

S pomocou syst\u00e9mu sponzorstva m\u00f4\u017ee ktor\u00fdko\u013evek pou\u017e\u00edvate\u013e GitHubu mesa\u010dne prispieva\u0165 pevn\u00fdmi sumami v\u00fdvoj\u00e1rom otvoren\u00e9ho k\u00f3du, zaregistrovan\u00fdm<\/noindex> v slu\u017ebe ako \u00fa\u010dastn\u00edci, ktor\u00ed s\u00fa pripraven\u00ed prij\u00edma\u0165 finan\u010dn\u00fa podporu (po\u010das testovania slu\u017eby je po\u010det \u00fa\u010dastn\u00edkov obmedzen\u00fd). Sponzorovan\u00ed \u00fa\u010dastn\u00edci m\u00f4\u017eu ur\u010dova\u0165 \u00farovne podpory a s nimi spojen\u00e9 v\u00fdhody pre sponzorov, ako je prioritn\u00e1 oprava ch\u00fdb. Zva\u017euje sa aj mo\u017enos\u0165 organizova\u0165 financovanie nielen jednotliv\u00fdch \u00fa\u010dastn\u00edkov, ale aj skup\u00edn v\u00fdvoj\u00e1rov zapojen\u00fdch do pr\u00e1ce na projekte.<\/p>\n

Na rozdiel od in\u00fdch platforiem skupinov\u00e9ho financovania si GitHub neberie ur\u010dit\u00e9 percento za sprostredkovanie a prv\u00fd rok bude pokr\u00fdva\u0165 n\u00e1klady na spracovanie platieb. N\u00e1sledne nie je vyl\u00fa\u010den\u00e9 zavedenie odvodu za spracovanie platieb. Pre podporu slu\u017eby bol vytvoren\u00fd \u0161peci\u00e1lny fond GitHub Sponsors Matching Fund, ktor\u00fd sa bude zaobera\u0165 rozde\u013eovan\u00edm finan\u010dn\u00fdch tokov.<\/p>\n

Okrem sponzorstva GitHub tie\u017e predstavil<\/a><\/noindex> nov\u00fa slu\u017ebu na zabezpe\u010denie projektov, postaven\u00fa na technol\u00f3gi\u00e1ch z\u00edskan\u00fdch v\u00fdsledkom prevzat\u00ed<\/a><\/noindex> spolo\u010dnosti Dependabot. Dependabot je teraz integrovan\u00fd do GitHubu a je dostupn\u00fd zadarmo.
\nSlu\u017eba umo\u017e\u0148uje sledova\u0165 zranite\u013enosti v z\u00e1vislostiach, posiela\u0165 vlastn\u00edk\u016fm repozit\u00e1rov upozornenia na existenciu probl\u00e9mov v z\u00e1vislostiach a automaticky otv\u00e1ra\u0165 pull po\u017eiadavky na opravu identifikovan\u00fdch zranite\u013enost\u00ed. <\/p>\n

\"GitHub<\/a><\/noindex><\/center><\/p>\n

Upozornenia sa zobrazuj\u00fa na karte «Security» a obsahuj\u00fa vy\u010derp\u00e1vaj\u00face inform\u00e1cie o zranite\u013enosti a s\u00faboroch projektu, ktor\u00e9 s\u00fa postihnut\u00e9 probl\u00e9mom. Opravy sa generuj\u00fa prostredn\u00edctvom aktualiz\u00e1cie v zozname z\u00e1vislost\u00ed minim\u00e1lnej verzie na verziu, v ktorej bola zranite\u013enos\u0165 odstr\u00e1nen\u00e1. Inform\u00e1cie o zranite\u013enostiach s\u00fa extrahovan\u00e9 z datab\u00e1z. MITRE CVE<\/a><\/noindex> a WhiteSource<\/a><\/noindex>, a na z\u00e1klade\u00a0ozn\u00e1men\u00ed\u00a0od\u00a0spr\u00e1vcov\u00a0projektov a automatick\u00e9ho\u00a0analytika\u00a0komitov na\u00a0GitHube\u00a0s n\u00e1sledn\u00fdm potvrden\u00edm v\u00a0syst\u00e9me\u00a0manu\u00e1lneho\u00a0presk\u00famania.<\/p>\n

Pre\u00a0spr\u00e1vcov\u00a0projektov bol uveden\u00fd do\u00a0prev\u00e1dzky<\/a><\/noindex> rozhranie na publikovanie a umiest\u0148ovanie spr\u00e1v o\u00a0zranite\u013enostiach (security advisories), ako aj na s\u00fakromn\u00e9\u00a0diskusie\u00a0o ot\u00e1zkach s\u00favisiacich s opravou zranite\u013enost\u00ed.<\/p>\n

Okrem toho na ochranu pred dostan\u00edm<\/a><\/noindex> d\u00f4vern\u00fdmi\u00a0\u00fadajmi v\u00a0verejne\u00a0pr\u00edstupn\u00fdch\u00a0repozit\u00e1roch bol uveden\u00fd do prev\u00e1dzky skener<\/a><\/noindex> tokenov a\u00a0pr\u00edstupov\u00fdch k\u013e\u00fa\u010dov. Po\u010das\u00a0komitu skener kontroluje\u00a0typick\u00e9\u00a0form\u00e1ty k\u013e\u00fa\u010dov a\u00a0tokeny\u00a0pr\u00edstupu k\u00a0API\u00a0Alibaba Cloud, Amazon Web Services (AWS), Azure, GitHub, Google Cloud, Mailgun, Slack, Stripe a Twilio. V pr\u00edpade zistenia tokenu poskytovate\u013eovi slu\u017eieb\u00a0posiela\u00a0\u017eiadosti o potvrdenie \u00faniku a\u00a0odvolanie\u00a0kompromitovan\u00fdch tokenov. <\/p>\n

\"GitHub<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441\u043f\u043e\u043d\u0441\u043e\u0440\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u043e\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c. \u041d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0444\u043e\u0440\u043c\u0443 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 — \u0435\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043c\u043e\u0447\u044c \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u0442\u043e \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c \u043a\u0430\u043a \u0441\u043f\u043e\u043d\u0441\u043e\u0440 \u0438 \u043f\u043e\u043c\u043e\u0433\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u0434\u0438\u0437\u0430\u0439\u043d\u0435\u0440\u043e\u0432, \u0430\u0432\u0442\u043e\u0440\u043e\u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u043e\u0432\u043b\u0435\u0447\u0451\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34375","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub spustil\u00a0slu\u017eby\u00a0finan\u010dnej podpory a informovania o zranite\u013enostiach | ProHoster","description":"GitHub zrealizoval syst\u00e9m","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 | ProHoster","og:description":"GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/github-zapustil-servisy-finansovoj-podderzhki-i-informirovaniya-ob-uyazvimostyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:57:58+00:00","article:modified_time":"2019-10-31T18:57:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34375","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 18:59:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:23:16","updated":"2026-01-21 18:59:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/34375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=34375"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/34375\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=34375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=34375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=34375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}