I-GitHub iphanda uluhlu lohlaselo apho abahlaseli bakwazile ukumba i-cryptocurrency kwisiseko selifu se-GitHub besebenzisa i-GitHub Actions mechanism ukuqhuba ikhowudi yabo. Iinzame zokuqala zokusebenzisa i-GitHub Actions kwimigodi yaqala ngoNovemba kulo nyaka uphelileyo.
Izenzo zeGitHub zivumela abaphuhlisi bekhowudi ukuba baqhoboshele abaphathi ukuba benze imisebenzi eyahlukeneyo kwiGitHub. Umzekelo, usebenzisa i-GitHub Actions unokwenza iitshekhi ezithile kunye neemvavanyo xa usenza, okanye wenze ngokuzenzekelayo ukusetyenzwa kweMiba emitsha. Ukuqala ukumbiwa kwemigodi, abahlaseli benza ifolokhwe yendawo yokugcina esebenzisa i-GitHub Actions, yongeza i-GitHub Actions entsha kwikopi yabo, kwaye uthumele isicelo sokutsalwa kwindawo yogcino yoqobo ecebisa ukubuyisela abaphangi beZenzo zeGitHub ngentsha ".github/workflows /ci.yml” isiphathi.
Isicelo sokutsalwa okukhohlakeleyo senza iinzame ezininzi zokusebenzisa isibambi seZenzo ze-GitHub ezichaziweyo, ezithi emva kweeyure ezingama-72 ziphazamiseke ngenxa yokuphuma kwexesha, zisilele, kwaye ziphinde zibaleke. Ukuhlasela, umhlaseli ufuna kuphela ukwenza isicelo sokutsalwa - umphathi uqhuba ngokuzenzekelayo ngaphandle kokuqinisekiswa okanye ukuthatha inxaxheba kubagcini bokugcina indawo yokuqala, abanokutshintsha kuphela umsebenzi okrokrelwayo kwaye bayeke esele eqhuba i-GitHub Actions.
Kwisibambi se-ci.yml esongezwe ngabahlaseli, iparamitha “yokubaleka” iqulathe ikhowudi engacacanga (eval “$(echo 'YXB0IHVwZGF0ZSAt…' | base64 -d”), ethi, xa iphunyeziwe, izame ukukhuphela nokusebenzisa inkqubo yemigodi. Kumahluko okuqala ohlaselo olusuka kwiindawo zokugcina ezahlukeneyo inkqubo ebizwa ngokuba yi-npm.exe yalayishwa kwi-GitHub kunye ne-GitLab kwaye yahlanganiswa kwifayile ye-ELF ephunyezwayo ye-Alpine Linux (esetyenziswa kwiifom ze-Docker eziNtsha zohlaselo khuphela ikhowudi yegeneric). Umvukuzi we-XMRig ovela kwindawo yokugcina iprojekthi esemthethweni, ethi ke ihlanganiswe nedilesi ye-wallet kunye neeseva zokuthumela idatha.
umthombo: opennet.ru