GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident: Threat Assessment (Updated 4/2)
GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident: Threat Assessment (Updated 4/2) Executive Summary Update April 2: Recent investigations have revealed preliminary steps in the tj-actions and reviewdog compromise that were not known until now. We have pieced together the stages that led to the original compromise, provid
メルコインã«ãŠã‘ã‚‹GitHub Actions活用術 | メルカリエンジニアリング
ã“ã‚“ã«ã¡ã¯ã€‚メルコインã®ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®iwataã§ã™ã€‚ ã“ã®è¨˜äº‹ã¯ã€Merpay Advent Calendar 2023 ã®23日目ã®è¨˜äº‹ã§ã™ã€‚ ç§ã¯ã„ã¾ãƒ¡ãƒ«ã‚³ã‚¤ãƒ³ã®Coreãƒãƒ¼ãƒ ã«å±žã—ã¦ã„ã¾ã™ã€‚Coreãƒãƒ¼ãƒ ã§ã¯ä¸»ã«ãŠå®¢ã•ã¾ã‹ã‚‰ã®æš—å·è³‡ç”£ã®å£²è²·æ³¨æ–‡ã‚’å—ã‘付ã‘る部分ã®ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“スを開発é‹ç”¨ã—ã¦ã„ã¾ã™ã€‚ メルコインã§ã¯CI環境ã¨ã—ã¦GitHub Actions self-hosted runnerを使用ã—ã¦ã„ã¾ã™ã€‚ã¾ãŸCIã ã‘ã§ãªãã€ã•ã¾ã–ã¾ãªè‡ªå‹•åŒ–ã®ãŸã‚ã®ãƒ¯ãƒ¼ã‚¯ãƒ•ãƒãƒ¼ã®æ§‹ç¯‰ã‚‚ã“ã®ç’°å¢ƒã‚’用ã„ã¦å®Ÿè¡Œã—ã¦ã„ã¾ã™ã€‚ã“ã®è¨˜äº‹ã§ã¯ç§ã®æ‰€å±žã—ã¦ã„ã‚‹Coreãƒãƒ¼ãƒ ã«ãŠã„ã¦GitHub Actions上ã«æ§‹ç¯‰ã—ã¦ã„るオートメーションã«ã¤ã„ã¦ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ PR-Agent PR-Agentã¯OpenAI APIを使ã£ã¦ã€PRã®ã‚³ãƒ¼ãƒ‰ãƒ¬ãƒ“ューãªã©ã‚’自動化ã—ã¦ãれるActionã§ã™ã€‚La
GitHub Actions 最近ã®ã‚„らã‹ã—一覧 - Kengo's blog
FOSS開発ã§ç´°ã‹ã„やらã‹ã—ã‚’ç©ã¿ä¸Šã’ã¦ããŸã®ã§ã¾ã¨ã‚る。 テストã®å¤±æ•—åŽŸå› ãƒ¬ãƒãƒ¼ãƒˆã‚’artifactã¨ã—ã¦ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã—ãã“ãã‚‹ actions/upload-artifactを使ã£ã¦ãƒ†ã‚¹ãƒˆãƒ¬ãƒãƒ¼ãƒˆã‚’artifactã¨ã—ã¦ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã™ã‚‹éš›ã€ä»¥ä¸‹ã®æ›¸ãæ–¹ã ã¨å¤±æ•—ã™ã‚‹ã€‚ # bad - run: | ./gradlew test --no-daemon --stacktrace - uses: actions/upload-artifact@v2 with: name: reports path: build/reports ã“ã‚Œã¯ãƒ†ã‚¹ãƒˆãŒå¤±æ•—ã—ãŸæ™‚点ã§å¾Œç¶šã®stepsãŒå®Ÿè¡Œã•ã‚Œãªããªã‚‹ãŸã‚。明示的ã«å¤±æ•—時ã§ã‚‚アップãƒãƒ¼ãƒ‰ã•ã‚Œã‚‹ã‚ˆã†ã«æŒ‡ç¤ºã™ã‚‹å¿…è¦ãŒã‚る。 # bad - run: | ./gradlew test --no-daemon --stacktrace - uses: actio
1
メンテナンス
ランã‚ング
ãŠçŸ¥ã‚‰ã›
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
処ç†ã‚’実行ä¸ã§ã™
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
{{#tags}}- {{label}}
{{/tags}}