GitHub njoftoi p\u00ebr forcimin e mbrojtjes kund\u00ebr p\u00ebrhapjes s\u00eb t\u00eb dh\u00ebnave t\u00eb ndjeshme n\u00eb depo, t\u00eb l\u00ebna nga zhvilluesit n\u00eb m\u00ebnyr\u00eb t\u00eb pap\u00ebrgjegjshme n\u00eb kod. P\u00ebr shembull, ndodhin raste kur n\u00eb depo futen skedar\u00eb konfigurationsh me fjal\u00ebkalime p\u00ebr DBMS, tokene ose \u00e7el\u00ebsa p\u00ebr qasje n\u00eb API. M\u00eb par\u00eb, skanimi kryhej n\u00eb m\u00ebnyr\u00eb pasive dhe lejonte identifikimin e rrjedhjeve q\u00eb kishin ndodhur tashm\u00eb, t\u00eb cilat kishin r\u00ebn\u00eb n\u00eb depo. P\u00ebr t\u00eb parandaluar rrjedhjet, GitHub filloi gjithashtu t\u00eb ofroj\u00eb nj\u00eb mund\u00ebsi p\u00ebr bllokimin automatik t\u00eb komiteteve, n\u00eb t\u00eb cilat u identifikuan t\u00eb dh\u00ebna t\u00eb ndjeshme. <\/p>\n
Kontrolli b\u00ebhet gjat\u00eb ekzekutimit t\u00eb git push dhe \u00e7on n\u00eb gjenerimin e nj\u00eb paralajm\u00ebrimi p\u00ebr shkelje sigurie n\u00eb rast se identifikohen n\u00eb kod tokene p\u00ebr lidhje me API tipike. Jan\u00eb realizuar gjithsej 69 shabllone p\u00ebr identifikimin e llojeve t\u00eb ndryshme t\u00eb \u00e7el\u00ebsave, tokeneve, certifikatave dhe kredencialeve. P\u00ebr t\u00eb p\u00ebrjashtuar rreziqet e rreme kontrollohen vet\u00ebm llojet e tokeneve q\u00eb mund t\u00eb p\u00ebrcaktohen me siguri. Pas bllokimit, zhvilluesit u ofrohet mund\u00ebsia p\u00ebr t\u00eb rishikuar kodin problematik, p\u00ebr t\u00eb eliminuar rrjedhjen dhe p\u00ebr t\u00eb p\u00ebrs\u00ebritur komitin ose p\u00ebr t\u00eb etiketuar bllokimin si t\u00eb rrem\u00eb. <\/p>\n
Opsioni p\u00ebr bllokimin preventiv t\u00eb rrjedhjeve \u00ebsht\u00eb i disponuesh\u00ebm vet\u00ebm p\u00ebr organizatat q\u00eb kan\u00eb akses n\u00eb sh\u00ebrbimin «GitHub Advanced Security». Skanime n\u00eb m\u00ebnyr\u00eb pasive jan\u00eb falas p\u00ebr t\u00eb gjitha repo publike, por mbeten me pages\u00eb p\u00ebr repo private. Raportohet se skanimi pasiv ka identifikuar tashm\u00eb m\u00eb shum\u00eb se 700 mij\u00eb rrjedhje t\u00eb t\u00eb dh\u00ebnave t\u00eb ndjeshme n\u00eb repo private. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"