Amandla okulandelela ubungozi kumamojuli angeziwe kukhithi yamathuluzi ye-Go

Ikhithi yamathuluzi yolimi lokuhlela i-Go ihlanganisa ikhono lokulandelela ubungozi kulabhulali. Ukuze uhlole amaphrojekthi akho ukuba khona kwamamojula anobuthakathaka obungalungisiwe ekuncikeni kwabo, kuhlongozwa insiza ethi "govulncheck", ehlaziya isisekelo sekhodi yephrojekthi futhi ibonise umbiko wokufinyelela emisebenzini esengozini. Ukwengeza, iphakethe le-vulncheck selilungisiwe, elihlinzeka nge-API yokushumeka amasheke kumaphrojekthi nezinsiza ezahlukahlukene.

Ukuhlola kwenziwa kusetshenziswa imininingo egciniwe edalwe ngokukhethekile yokuba sengozini, egadwa Ithimba Lokuphepha Le-Go. Isizindalwazi siqukethe ulwazi olumayelana nokuba sengozini okwaziwayo kumamojula asatshalaliswa esidlangalaleni ngolimi lwe-Go. Idatha iqoqwa emithonjeni ehlukahlukene, okuhlanganisa nemibiko ye-CVE kanye ne-GHSA (Idathabheyisi Yokwelulekwa ye-GitHub), kanye nolwazi oluthunyelwa ngabanakekeli bamaphakheji. Ukuze ucele idatha kusizindalwazi, umtapo wolwazi, i-Web API kanye nesixhumi esibonakalayo sewebhu kunikezwa.

Source: opennet.ru

Engeza amazwana