I-GitHub iphenya uchungechunge lokuhlasela lapho abahlaseli bekwazile ukumba i-cryptocurrency engqalasizinda yefu ye-GitHub besebenzisa indlela ye-GitHub Actions ukuze baqhube amakhodi abo. Imizamo yokuqala yokusebenzisa i-GitHub Actions yezimayini yahlehla ngoNovemba ngonyaka odlule.
I-GitHub Actions ivumela abathuthukisi bekhodi ukuthi banamathisele izibambi ukuze zenze imisebenzi ehlukahlukene ku-GitHub. Isibonelo, usebenzisa Izenzo ze-GitHub ungenza ukuhlola nokuhlola okuthile lapho wenza, noma wenze ngokuzenzakalelayo ukucutshungulwa Kwezinkinga ezintsha. Ukuze baqale ukumba izimayini, abahlaseli bakha imfoloko yekhosombe esebenzisa Izenzo ze-GitHub, bengeze Izenzo ze-GitHub entsha ekhophini yabo, futhi bathumele isicelo sokudonsa endaweni yekhosombe yangempela behlongoza ukumiselela izibambi ze-GitHub Actions ezintsha “.github/workflows /ci.yml” isibambi.
Isicelo sokudonsa esinonya sidala imizamo eminingi yokusebenzisa isibambi se-GitHub Actions esishiwo umhlaseli, okuthi ngemva kwamahora angu-72 siphazamiseke ngenxa yokuvala isikhathi, sehluleke, bese siqalisa futhi. Ukuze ahlasele, umhlaseli udinga kuphela ukudala isicelo sokudonsa - isibambi sisebenza ngokuzenzakalelayo ngaphandle kwanoma isiphi isiqinisekiso noma ukuhlanganyela okuvela kubanakekeli bangempela benqolobane, abangangena esikhundleni somsebenzi osolisayo futhi bamise kakade ukusebenzisa Izenzo ze-GitHub.
Kusibambi se-ci.yml esingezwe abahlaseli, ipharamitha ethi “run” iqukethe ikhodi efiphaziwe (eval “$(echo 'YXB0IHVwZGF0ZSAt…' | base64 -d”), okuthi, uma isenziwa, izame ukulanda nokusebenzisa uhlelo lwezimayini. Ezinhlobonhlobo zokuqala zokuhlasela okuvela kumakhosombe ahlukene Uhlelo olubizwa nge-npm.exe lwalayishwa ku-GitHub ne-GitLab futhi lwahlanganiswa lwaba ifayela le-ELF elisebenzisekayo le-Alpine Linux (elisetshenziswa ezithombeni ze-Docker.) Izindlela ezintsha zokuhlasela landa ikhodi ye-XMRig ejwayelekile umvukuzi ovela endaweni esemthethweni yephrojekthi, eyakhiwa ngesikhwama semali esishintsha ikheli kanye namaseva okuthumela idatha.
Source: opennet.ru