パスã‚ーã¨ã¯ä½•ã‹ã€ãã—ã¦ãã®èª²é¡Œ
パスã‚ーã¯ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ã«å¼·ãã€ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ã«è©³ã—ããªã„ユーザーã§ã‚‚使ã„ã‚„ã™ã„æ–°ã—ã„èªè¨¼æ–¹å¼ã§ã€ã„ãšã‚Œãƒ‘スワードを置ãæ›ãˆã‚‹ã¨è¨€ã‚ã‚Œã¦ã„ã¾ã™ã€‚ã“ã®è¨˜äº‹ã§ã¯ã€ãƒ‘スã‚ーã®åŸºæœ¬ã¨ã€ã“ã‚Œã‹ã‚‰ã®ã‚¦ã‚§ãƒ–ã«ã¨ã£ã¦ãƒ‘スã‚ーãŒã©ã†ã„ã†æ„味をæŒã¤ã®ã‹ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ã¾ã™ã€‚ パスã‚ーã¨ã¯ä½•ã‹ # 2022 å¹´ 12 月 9 日㫠Google ㌠Android 版 Chrome ã§ãƒ‘スã‚ーãŒã‚µãƒãƒ¼ãƒˆã•ã‚ŒãŸã¨ã®ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ãŒå‡ºã¾ã—ãŸã€‚Apple ã‚‚ã™ã§ã«æœ€æ–°ç‰ˆã® macOS Venturaã€iOS / iPadOS 16 㧠Safari ãŒãƒ‘スã‚ーã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚ パスã‚ー㯠Appleã€Googleã€Microsoft ãŒå”調ã—ã¦ä½¿ã† FIDO クレデンシャルã®åå‰ã§ã™ã€‚エンドユーザーã®ã¿ãªã•ã‚“ãŒãƒ‘スワードã®ä»£ã‚ã‚Šã¨ã—ã¦èªè˜ã—ã€ç›´æ„Ÿçš„ã«ãƒã‚°ã‚¤ãƒ³ã§ãるよã†ã€Œãƒ‘スã‚ーã€ã¨ã„ã†ãƒ–ランドã¨ã‚¢ã‚¤ã‚³ãƒ³ãŒæ±ºã¾ã‚Šã¾ã—ãŸã€‚ウ
Git security vulnerabilities announced
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
RSAç½²åã‚’æ£ã—ãç†è§£ã™ã‚‹
åˆã‚㫠「署åã¨ã¯ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ãƒãƒƒã‚·ãƒ¥å€¤ã‚’秘密éµã§æš—å·åŒ–ã—ãŸã‚‚ã®ã§ã‚ã‚Šã€æ¤œè¨¼ã¯ç½²åを公開éµã§å¾©å·ã—ã¦ãƒãƒƒã‚·ãƒ¥å€¤ã¨ç‰ã—ã„ã‹ã‚’確èªã™ã‚‹ã“ã¨ã§ã‚ã‚‹ã€ã¨ã„ã†èª¬æ˜Ž(×)をよã見ã‹ã‘ã¾ã™ã€‚ æ£ã—ã„ç½²åã®å®šç¾©ã¨å®Ÿéš›ã®RSAç½²åãŒã©ã®ã‚ˆã†ãªã‚‚ã®ã§ã‚ã‚Šã€ä¸Šè¨˜èª¬æ˜Ž(×)ãŒãªãœã‚ˆããªã„ã®ã‹ã‚’ç†è§£ã—ã¾ã—ょã†ã€‚ ç½²åã®å®šç¾© ç½²åã®è§£èª¬ã¯ç½²åã®æ¦‚è¦ã§ã‚‚解説ã—ã¾ã—ãŸãŒã€å†æŽ²ã—ã¾ã™ã€‚ ç½²å（方å¼ï¼‰ã¯éµç”Ÿæˆï¼ˆKeyGen）ã€ç½²å（Sign）ã€æ¤œè¨¼ï¼ˆVerify）ã®3個ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‹ã‚‰ãªã‚Šã¾ã™ã€‚ KeyGenã§ã¯ã‚¢ãƒªã‚¹ãŒç½²åéµsã¨æ¤œè¨¼éµSを生æˆã—ã¾ã™ã€‚ç½²åéµsã¯è‡ªåˆ†ã ã‘ã®ç§˜å¯†ã®å€¤ãªã®ã§ç§˜å¯†éµã€æ¤œè¨¼éµSã¯ä»–人ã«æ¸¡ã—ã¦ä½¿ã£ã¦ã‚‚らã†éµãªã®ã§å…¬é–‹éµã¨ã‚‚ã„ã„ã¾ã™ã€‚ Signã¯ç½²åã—ãŸã„データmã«å¯¾ã—ã¦ç½²åéµsを使ã£ã¦ç½²åã¨å‘¼ã°ã‚Œã‚‹ãƒ‡ãƒ¼ã‚¿Ïƒã‚’作りã¾ã™ã€‚ データmã¨ç½²åσã®ãƒšã‚¢ã‚’他人（ボブ）ã«æ¸¡ã—ã¾ã™ã€‚ Verifyã¯ãƒœãƒ–ãŒæ¤œè¨¼éµSを使
You can now assign multiple MFA devices in IAM | Amazon Web Services
AWS Security Blog You can now assign multiple MFA devices in IAM At Amazon Web Services (AWS), security is our top priority, and configuring multi-factor authentication (MFA) on accounts is an important step in securing your organization. Now, you can add multiple MFA devices to AWS account root users and AWS Identity and Access Management (IAM) users in your AWS accounts. This helps you to raise
Trivyã§AWSアカウントã®ã‚»ã‚ュリティスã‚ャンãŒã§ãるよã†ã«ãªã‚Šã¾ã—㟠| DevelopersIO
ä¸å±±ã§ã™ trivyã®v0.31.0ã§AWSアカウントã®ã‚»ã‚ュリティスã‚ャンãŒã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚ feat: Add AWS Cloud scanning (#2493) Releases / v0.31.0 ãªãŠã€v0.31.0ã§ã‚¹ã‚ャンを実行ã™ã‚‹ã¨ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã™ã‚‹ãƒã‚°ãŒã‚ã‚Šã€ã™ãã«v0.31.2ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸã€‚ Releases / v0.31.2 ã©ã‚“ãªæ„Ÿã˜ã‹æ°—ã«ãªã£ãŸã®ã§ã€è»½ã触ã£ã¦ãŠã“ã†ã¨æ€ã„ã¾ã™ã€‚ ドã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ç¢ºèª ã¾ãšã¯ãƒ‰ã‚ュメントを確èªã—ã¾ã™ã€‚ Amazon Web Services ãƒã‚¤ãƒ³ãƒˆã«ãªã‚‹ã¨æ€ã£ãŸç‚¹ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ CIS AWS Foundations Benchmark standardã«æº–æ‹ ã—ãŸãƒã‚§ãƒƒã‚¯ãŒå¯èƒ½ èªè¨¼æ–¹æ³•ã¯AWS CLIã¨åŒã˜ ã™ã¹ã¦ã®AWSリソースã«å¯¾ã™ã‚‹å‚照権é™ãŒå¿…è¦ (ReadOnlyAccess) サービス・リージョン・リソー
How to secure your end-to-end supply chain on GitHub
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
Secretlintã§APIトークンや秘密éµãªã©ã®ã‚³ãƒŸãƒƒãƒˆã‚’防æ¢ã™ã‚‹
Secretlintã¯APIトークンや秘密éµã®ã‚ˆã†ãªãƒªãƒã‚¸ãƒˆãƒªã«ã‚³ãƒŸãƒƒãƒˆã—ã¦ã¯ã„ã‘ãªã„データをå«ã‚“ã ファイルãŒãªã„ã‹ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹ãƒ„ールã§ã™ã€‚ SecretlintãŒè¦‹ã¤ã‘られるCredentials(ç§˜åŒ¿æƒ…å ±)ã¯ãƒ—ラグインã§æ‹¡å¼µã§ãるよã†ã«ãªã£ã¦ã„ã¦ã€npmã€AWSã€GCPã€Slackã€SSH秘密éµã€ãƒ™ãƒ¼ã‚·ãƒƒã‚¯èªè¨¼ãªã©ã®æ¤œçŸ¥ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚ Gitã®pre-commit hookã‚„CIサービス上ã§Secretlintを使ã£ã¦ãƒ•ã‚¡ã‚¤ãƒ«ã®ä¸èº«ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹ã“ã¨ã§ã€ リãƒã‚¸ãƒˆãƒªã«ã†ã£ã‹ã‚ŠCredentialsをコミットã—ã¦ã—ã¾ã†ã“ã¨ã‚’防æ¢ã™ã‚‹ç›®çš„ã®Lintツールã§ã™ã€‚ Credentials(ç§˜åŒ¿æƒ…å ±)ã®ãƒã‚§ãƒƒã‚¯ã«ç‰¹åŒ–ã—ãŸESLintã‚„textlintã®ã‚ˆã†ãªLintツールã§ã™ã€‚ ã¾ãšãƒã‚§ãƒƒã‚¯ã—ã¦ã¿ã‚ˆã† Secretlintã¯Dockerã‹Node.jsãŒå…¥ã£ã¦ã„る環境ãªã‚‰æ¬¡ã®ã‚³ãƒžãƒ³ãƒ‰ã§ã€ç¾
Secure your GitHub account with GitHub Mobile 2FA
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
Reducing security risk in open source software with GitHub Actions and OpenSSF Scorecards V4
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
Safeguard your containers with new container signing capability in GitHub Actions
ProductSecuritySafeguard your containers with new container signing capability in GitHub ActionsGitHub has partnered with the OpenSSF and Project Sigstore to add container image signing to our default “Publish Docker Container†workflow. As developers have leaned into cloud native projects for scale and maintainability, the popularity of containers has exploded. With 92% of organizations leveragin
Enrolling all npm publishers in enhanced login verification and next steps for two-factor authentication enforcement
Open SourceSecurityEnrolling all npm publishers in enhanced login verification and next steps for two-factor authentication enforcementToday we're introducing enhanced login verification to the npm registry, and we will begin a staged rollout to maintainers beginning Dec 7. Three weeks ago, we provided an update on our commitment to npm ecosystem security. We promised to provide more details on th
パッケージマãƒãƒ¼ã‚¸ãƒ£ã§é…布ã•ã‚Œã‚‹ãƒžãƒ«ã‚¦ã‚§ã‚¢ã€å¯¾ç–ã¨èª²é¡Œã«ã¤ã„㦠- ã¶ã‚‹ãƒ¼ãŸã‚‹ã”ã¶ã‚Šã‚“
ã¯ã˜ã‚ã« ç”»åƒã¯è¨˜äº‹ã«å…¨ã関係ãªã„カニã®ãƒ•ã‚£ã‚®ãƒ¥ã‚¢ã§ã™ðŸ‘‹ è¿‘å¹´ã€å–„良ãªãƒ‘ッケージを騙ã£ãŸãƒžãƒ«ã‚¦ã‚§ã‚¢ãŒé…布ã•ã‚Œã¦ã„るケースãŒå¢—ãˆã¦ãã¦ã„ã¾ã™ã€‚ ã“れらã®ãƒžãƒ«ã‚¦ã‚§ã‚¢ã¯ãƒ‘ッケージマãƒãƒ¼ã‚¸ãƒ£ä¸Šã§é…布ã•ã‚Œã€é–‹ç™ºè€…端末やãれをビルトインã—ãŸã‚·ã‚¹ãƒ†ãƒ を利用ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ç«¯æœ«ã§æ‚ªäº‹ã‚’åƒãã¾ã™ã€‚ ã“ã‚Œã¯ä¿—ã«ã„ã†ã‚µãƒ—ライãƒã‚§ãƒ¼ãƒ³åž‹æ”»æ’ƒã§ã€ ã“れらã®é–¢é€£ãƒ‹ãƒ¥ãƒ¼ã‚¹ã‚’ç›®ã«ã™ã‚‹æ©Ÿä¼šãŒå¢—ãˆã¦ãã¦ã„ã‚‹ã“ã¨ã‚’ã€å¤šãã®é–‹ç™ºè€…ãŒä½“æ„Ÿã•ã‚Œã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ã€‚ ãŸã ã€ã“れらã®ã‚µãƒ—ライãƒã‚§ãƒ¼ãƒ³åž‹æ”»æ’ƒã®è¨˜äº‹ã¯ã€ ã©ã†ã—ã¦ã‚‚エンドユーザー（パッケージを利用ã™ã‚‹é–‹ç™ºè€…å´ãƒ»ãれらを組ã¿è¾¼ã‚“ã アプリを実行ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼å´ï¼‰ã®å¯¾ç–ã«ç„¦ç‚¹ãŒå½“ã¦ã‚‰ã‚ŒãŸã‚‚ã®ãŒæ®†ã©ã®ã‚ˆã†ã«æ„Ÿã˜ã¦ã„ã¾ã™ã€‚ ãã“ã§æœ¬è¨˜äº‹ã§ã¯ã€ã“ã®ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼å´ã®å¯¾ç–ã ã‘ã§ã¯ãªã〠パッケージマãƒãƒ¼ã‚¸ãƒ£ãƒ¡ãƒ³ãƒ†ãƒŠãƒ¼ãŸã¡ãŒã©ã†å¯¾ç–ã—ã¦ã„ã‚‹ã®ã‹ã‚‚å«ã‚ã¦ã€ 「パッケージマãƒãƒ¼ã‚¸ãƒ£ä¸Šã§è¡Œã‚れるマルウェ
オープンソース プãƒã‚¸ã‚§ã‚¯ãƒˆã‚’サプライ ãƒã‚§ãƒ¼ãƒ³æ”»æ’ƒã‹ã‚‰å®ˆã‚‹
.app 1 .dev 1 #11WeeksOfAndroid 13 #11WeeksOfAndroid Android TV 1 #Android11 3 #DevFest16 1 #DevFest17 1 #DevFest18 1 #DevFest19 1 #DevFest20 1 #DevFest21 1 #DevFest22 1 #DevFest23 1 #hack4jp 3 11 weeks of Android 2 A MESSAGE FROM OUR CEO 1 A/B Testing 1 A4A 4 Accelerator 6 Accessibility 1 accuracy 1 Actions on Google 16 Activation Atlas 1 address validation API 1 Addy Osmani 1 ADK 2 AdMob 32 Ads
GitHub's commitment to npm ecosystem security
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
Improving Git protocol security on GitHub
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
Redirecting…
Redirecting… Click here if you are not redirected.
Docker Composeã®ç’°å¢ƒå¤‰æ•°ã§ã¯ãªãsecretsã§ç§˜å¯†æƒ…å ±ã‚’æ‰±ã† - Qiita
æ¦‚è¦ Dockerã®æœ¬ç•ªç’°å¢ƒã§ç§˜å¯†æƒ…å ±ã‚’ä½¿ã†éš›ã«ã€ç’°å¢ƒå¤‰æ•°ã‚’使ã†ã“ã¨ã¯æŽ¨å¥¨ã•ã‚Œã¦ã¾ã›ã‚“。 ç§˜å¯†æƒ…å ±ã‚’æ‰±ã†ã«ã¯ã€ã‚³ãƒ³ãƒ†ãƒŠã‚ªãƒ¼ã‚±ã‚¹ãƒˆãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ã®secret supportを使ã†ã“ã¨ãŒæŽ¨å¥¨ã•ã‚Œã¦ã¾ã™ã€‚ Docker Composeã«ã¯ç§˜å¯†æƒ…å ±ã‚’æ‰±ã†ãŸã‚ã«ã€secretsãŒã‚ã‚Šã¾ã™ã€‚(Docker Composeã®secretsã¯Docker Swarmã¨ä½µç”¨ã™ã‚‹ã“ã¨ãŒå‰æã®æ©Ÿèƒ½ã§ã™) 環境変数ã§ç§˜å¯†æƒ…å ±ã‚’æ‰±ã†æ™‚ã®å•é¡Œç‚¹ ç§˜å¯†æƒ…å ±ã‚’æ‰±ã†æ™‚ã«ã€ã‚ˆãã‚る方法ã¨ã—ã¦ã€ç’°å¢ƒå¤‰æ•°ã‚’使ã†æ–¹æ³•ãŒã‚ã‚Šã¾ã™ã€‚ (ã“ã®è¨˜äº‹ã«ãŠã„ã¦ã€ç§˜å¯†æƒ…å ±ã¨ã¯ãƒ‘スワードã€APIã‚ーを想定ã—ã¾ã™ã€‚) ã—ã‹ã—ã€Dockerã®ãƒ‰ã‚ュメントhttps://docs.docker.com/get-started/07_multi_container/ ã«ã¯ While using env vars to set connection set
GitHub brings supply chain security features to the Go community
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
Terraform, Dockerfile, Kubernetesãªã©IaCã®è„†å¼±ãªè¨å®šã‚’CI/CDã§æ¤œçŸ¥ã™ã‚‹ - knqyf263's blog
æ¦‚è¦ è‡ªåˆ†ã®æ‰€å±žä¼æ¥ã§ã‚ã‚‹Aqua SecurityãŒTFsecã¨ã„ã†OSSã‚’è²·åŽã—ã¾ã—ãŸã€‚ blog.aquasec.com TFsecã¯ã©ã†ã„ã†ãƒ„ールã‹ã¨ã„ã†ã¨Terraformã®é™çš„解æžã‚¹ã‚ャナーã§ã™ã€‚Terraformã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’渡ã™ã“ã¨ã§ã‚»ã‚ュリティã«é–¢ã™ã‚‹è¨å®šãƒŸã‚¹ã‚’主ã«æ¤œçŸ¥ã—ã¦ãã‚Œã¾ã™ã€‚ github.com ãã®ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã«ä¼´ã„ã€TFsecã¯è‡ªåˆ†ãŒé–‹ç™ºã—ã¦ã„る脆弱性スã‚ャナーã§ã‚ã‚‹Trivyã«çµ±åˆã•ã‚Œã¾ã—ãŸã€‚Trivyã§ã¯Terraformã«åŠ ãˆDockerfileã‚„Kubernetesãªã©ã€ã„ã‚ゆるInfrastructure as Code（IaC）ã®è¨å®šãƒŸã‚¹ã‚’検知ã™ã‚‹ãƒžãƒãƒ¼ã‚¸ãƒ‰ãƒãƒªã‚·ãƒ¼ã‚‚æä¾›ã—ã¦ã„ã¾ã™ã€‚ä»–ã«ã‚‚JSONã‚„YAMLãªã©ä¸€èˆ¬çš„ãªãƒ•ã‚¡ã‚¤ãƒ«ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã«å¯¾å¿œã—ã¦ã„ã‚‹ãŸã‚自分ã§ãƒãƒªã‚·ãƒ¼ã‚’書ãã“ã¨ã§ãれらã®æ¤œçŸ¥ã«ã‚‚使ãˆã¾ã™ã€‚CloudFormationã‚„Ansib
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
How to Hash and Verify Passwords With Argon2 in Go - Alex Edwards
{{#tags}}- {{label}}
{{/tags}}