{"id":107040,"date":"2023-03-02T12:48:19","date_gmt":"2023-03-02T10:48:19","guid":{"rendered":"https:\/\/prohoster.info\/?p=107040"},"modified":"2023-03-03T15:16:29","modified_gmt":"2023-03-03T13:16:29","slug":"github-realizoval-proverku-utechki-konfidenczialnyh-dannyh-v-repozitoriyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/github-realizoval-proverku-utechki-konfidenczialnyh-dannyh-v-repozitoriyah","title":{"rendered":"GitHub ka implementuar kontrolle p\u00ebr rrjedhjen e t\u00eb dh\u00ebnave konfidenciale n\u00eb depo","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub shpalli se ka nisur nj\u00eb sh\u00ebrbim falas p\u00ebr monitorimin e publikimeve t\u00eb rast\u00ebsishme n\u00eb depo t\u00eb t\u00eb dh\u00ebnave t\u00eb ndjeshme, si\u00e7 jan\u00eb \u00e7el\u00ebsat e enkriptimit, fjal\u00ebkalimet p\u00ebr DBMS dhe tokenet e aksesit n\u00eb API. M\u00eb par\u00eb, ky sh\u00ebrbim ishte i disponuesh\u00ebm vet\u00ebm p\u00ebr pjes\u00ebmarr\u00ebsit e programit t\u00eb beta-testing, nd\u00ebrsa tani \u00ebsht\u00eb ofruar pa kufizime p\u00ebr t\u00eb gjitha depo publike. P\u00ebr t\u00eb aktivizuar kontrollin e depozit\u00ebs tuaj, n\u00eb cil\u00ebsimet n\u00eb seksionin «Siguria e kodit dhe analiza» duhet t\u00eb aktivizoni opsionin «Skanime t\u00eb sekretit». <\/p>\n

N\u00eb total, jan\u00eb zbatuar m\u00eb shum\u00eb se 200 modele p\u00ebr identifikimin e llojeve t\u00eb ndryshme t\u00eb \u00e7el\u00ebsave, tokeneve, certifikatave dhe kredencialeve. K\u00ebrkimi i rrjedhjeve kryhet jo vet\u00ebm n\u00eb kod, por edhe n\u00eb issue, p\u00ebrshkrime dhe komente. P\u00ebr t\u00eb shmangur sinjalizime false, kontrollohen vet\u00ebm llojet e tokeneve q\u00eb p\u00ebrcaktohen me siguri, duke mbuluar m\u00eb shum\u00eb se 100 sh\u00ebrbime t\u00eb ndryshme, duke p\u00ebrfshir\u00eb Amazon Web Services, Azure, Crates.io, DigitalOcean, Google Cloud, NPM, PyPI, RubyGems dhe Yandex.Cloud. Shtes\u00eb, mb\u00ebshtetet d\u00ebrgimi i paralajm\u00ebrimeve kur identifikohen certifikata dhe \u00e7el\u00ebsa t\u00eb vet\u00eb-n\u00ebnshkruar. <\/p>\n

N\u00eb janar, gjat\u00eb nj\u00eb eksperience, u analizuan 14 mij\u00eb repository q\u00eb p\u00ebrdorin GitHub Actions. Si rezultat, n\u00eb 1110 repository (7.9%, pra pothuajse n\u00eb \u00e7do dymb\u00ebdhjet\u00eb) u identifikuan t\u00eb dh\u00ebna sekrete. P\u00ebr shembull, u identifikuan 692 token\u00eb t\u00eb GitHub App, 155 \u00e7el\u00ebsa t\u00eb Azure Storage, 155 token\u00eb t\u00eb GitHub Personal, 120 \u00e7el\u00ebsa t\u00eb Amazon AWS dhe 50 \u00e7el\u00ebsa t\u00eb Google API.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u043f\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u0430\u0440\u043e\u043b\u0438 \u043a \u0421\u0423\u0411\u0414 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API. \u0420\u0430\u043d\u0435\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0431\u0435\u0442\u0430-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u043d\u0430\u0447\u0430\u043b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0432\u0441\u0435\u043c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c. \u0414\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0432 \u0441\u0435\u043a\u0446\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107040","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub implementoi kontrollin p\u00ebr rrjedhjen e t\u00eb dh\u00ebnave konfidenciale n\u00eb repository | ProHoster","description":"GitHub shpalli fillimin e nj\u00eb sh\u00ebrbimi falas p\u00ebr monitorimin e publikimeve t\u00eb rast\u00ebsishme n\u00eb repository-t p\u00ebr t\u00eb dh\u00ebna konfidenciale, si \u00e7el\u00ebsa t\u00eb enkriptimit, fjal\u00ebkalime p\u00ebr DBMS dhe tokene p\u00ebr qasje n\u00eb API. M\u00eb her\u00ebt, ky sh\u00ebrbim ishte n\u00eb dispozicion vet\u00ebm p\u00ebr pjes\u00ebmarr\u00ebsit e programit t\u00eb beta-testimit, nd\u00ebrsa tani ofrohet pa kufizime p\u00ebr t\u00eb gjith\u00eb repository-t publike. P\u00ebr t\u00eb aktivizuar kontrollin e repository-t tuaj n\u00eb cil\u00ebsimet n\u00eb seksionin","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/github-realizoval-proverku-utechki-konfidenczialnyh-dannyh-v-repozitoriyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 | ProHoster","og:description":"GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u043f\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u0430\u0440\u043e\u043b\u0438 \u043a \u0421\u0423\u0411\u0414 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API. \u0420\u0430\u043d\u0435\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0431\u0435\u0442\u0430-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u043d\u0430\u0447\u0430\u043b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0432\u0441\u0435\u043c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c. \u0414\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0432 \u0441\u0435\u043a\u0446\u0438\u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/github-realizoval-proverku-utechki-konfidenczialnyh-dannyh-v-repozitoriyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-03-02T10:48:19+00:00","article:modified_time":"2023-03-03T13:16:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/107040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=107040"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/107040\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=107040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=107040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=107040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}