[B! github] isrcã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

isrc id:isrc

githubã«é–¢ã™ã‚‹isrcã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

https://medium.com/@kp9810113/why-your-github-profile-is-costing-you-job-offers-and-how-to-fix-it-in-a-weekend-d0788452f134
isrc 2026/01/07
è»¢è·

ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢é–‹ç™º

github
ãƒªãƒ³ã‚¯
è‡ªåˆ†ã®OSSã®ãƒžãƒ«ã‚¦ã‚§ã‚¢å…¥ã‚Šå½ç‰©ã‚’ä½œã‚‰ã‚ŒãŸã®ã§é€šå ±ã—ãŸ - é…’æ—¥è¨˜ ã¯ã¦ãªæ”¯åº—
ç‰©é¨’ãªä¸–ã®ä¸ã§ã™ã€‚çš†æ§˜ãŠæ°—ã‚’ã¤ã‘ãã ã•ã„ã€‚ 3è¡Œã§ã¾ã¨ã‚ è‡ªä½œã® OSSã€fujiwara/apprun-cli ã®ãƒžãƒ«ã‚¦ã‚§ã‚¢å…¥ã‚Šå½ç‰©ã‚’ä½œã‚‰ã‚Œã¦ GitHub ã§å…¬é–‹ã•ã‚Œã¾ã—ãŸ å½ç‰©ã«ã¯å¤§é‡ã®æ–°è¦ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒã‚¹ã‚¿ãƒ¼ã‚’ä»˜ã‘ã¦ã„ãŸãŸã‚ã€æ¤œç´¢ã§ã‚ªãƒªã‚¸ãƒŠãƒ«ã®ã‚‚ã®ã‚ˆã‚Šä¸Šä½ã«è¡¨ç¤ºã•ã‚Œã‚‹çŠ¶æ…‹ã§ã—ãŸ GitHub ã«é€šå ±ã—ãŸã¨ã“ã‚ã€å½ç‰©ã‚’ä½œã£ãŸã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¯banã•ã‚ŒãŸã‚ˆã†ã§ã™ çµŒç·¯ 2024å¹´æœ«ã«ã€ã•ãã‚‰ã®AppRunç”¨ãƒ‡ãƒ—ãƒã‚¤ãƒ„ãƒ¼ãƒ« apprun-cli ã¨ã„ã† OSS ã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚ github.com 2025å¹´2æœˆ10æ—¥ 12æ™‚éŽãŽã®ã“ã¨ã€è¬Žã®äººç‰©ãŒ X ã§ apprun-cli ã‚’å®£ä¼ã—ã¦ã„ã‚‹ã®ã‚’è¦‹ã¤ã‘ã¾ã—ãŸã€‚ ã©ã†è¦‹ã¦ã‚‚è‡ªåˆ†ã®ç‰©ã¨åŒã˜(ã‚³ãƒ”ãƒ¼)ãªã®ã§ã™ãŒã€å¦™ã«ã‚¹ã‚¿ãƒ¼ãŒå¤šã„ã€‚ãƒªãƒã‚¸ãƒˆãƒªã‚’ã®ãžã„ã¦ã¿ã‚‹ã¨ã€fork ã§ã¯ãªãã‚³ãƒ¼ãƒ‰ãŒã™ã¹ã¦ commit å±¥æ´ã‚’å¼•ãç¶™ãŒãªã„çŠ¶æ…‹ã§ã‚³ãƒ”ãƒ¼ã•ã‚Œã€ã‚¹ã‚¿ãƒ¼
isrc 2025/02/18
GitHub ã§ OSS ã‚’æŽ¢ã™ã¨ãã¯ã€Œåå‰ã§æ¤œç´¢ã—ã¦ã‚¹ã‚¿ãƒ¼ãŒã„ã£ã±ã„ã¤ã„ã¦ã„ã¦ä¸Šã«å‡ºã¦ãã‚‹ã‚‚ã®ã€ã‚’å®‰æ˜“ã«å…¥ã‚Œã¦ã—ã¾ã†ã¨ã€ã¾ã‚“ã¾ã¨ãƒžãƒ«ã‚¦ã‚§ã‚¢ã®é¤Œé£Ÿã«ãªã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚

github

security
ãƒªãƒ³ã‚¯
Stephen Lacy on Twitter: "I am uncovering what seems to be a massive widespread malware attack on @github. - Currently over 35k repositoriesâ€¦ https://t.co/rUKIIULV4V"
I am uncovering what seems to be a massive widespread malware attack on @github. - Currently over 35k repositoriesâ€¦ https://t.co/rUKIIULV4V
isrc 2022/08/04
This attack will send the ENTIRE ENV of the script, application, laptop (electron apps), to the attacker's server! The attacker creates FAKE orgs/repos and pushes clones of LEGIT projects to github. The attacker runs arbitrary code on your server once it uploads your env

github

security
ãƒªãƒ³ã‚¯
GitHubä¸Šã®sensitive dataã‚’å‰Šé™¤ã™ã‚‹ãŸã‚ã®æ‰‹é †ã¨é“ã®ã‚Š | ãƒ¡ãƒ«ã‚«ãƒªã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°
Advent Calendar day 7 æ‹…å½“ã® vvakame ã§ã™ã€‚ äºˆå‘Šã§ã¯ Apollo Federation Gateway Node.jså®Ÿè£…ã«ã¤ã„ã¦ãƒã‚¤ãƒ³ãƒˆè§£èª¬ ã¨ã—ã¦ã„ã¾ã—ãŸãŒã€ç¤¾å†…å„æ‰€ã®ã”å”åŠ›ã«ã‚ˆã‚ŠAdvent Calendarã®ç§ã®æ‹…å½“æ—¥ã«é–“ã«åˆã†å½¢ã§å…¬é–‹ã§ãã‚‹é‹ã³ã¨ãªã‚Šã¾ã—ãŸã€‚ãã®ãŸã‚å‘ŠçŸ¥ã¨ã¯ç•°ãªã‚Šã¾ã™ãŒ GitHubä¸Šã®sensitive dataå‰Šé™¤ã®æ‰‹é †ã¨é“ã®ã‚Š ã‚’ãŠå±Šã‘ã—ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ãƒ¡ãƒ«ãƒšã‚¤VPoE hidekã«ã‚ˆã‚‹day 1ã®è¨˜äº‹ã§æŒ¯ã‚Šè¿”ã‚ŠãŒã‚ã£ãŸã‚ˆã†ã«ã€ä»Šå¹´ã€å¼Šç¤¾ã§ã¯Codecovã®Bash Uploaderã«ä¿‚ã‚‹æƒ…å ±æµå‡ºã¨ã„ã†äº‹æ¡ˆãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚å½“è©²ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå¯¾å¿œã«ãŠã„ã¦ã€ãƒ—ãƒ¬ã‚¹ãƒªãƒªãƒ¼ã‚¹ã«ã‚‚è¨˜è¼‰ã®ã‚ã‚‹é€šã‚Šã€ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ä¸Šã«æ··å…¥ã—ã¦ã—ã¾ã£ãŸèªè¨¼æƒ…å ±ã‚„ä¸€éƒ¨å€‹äººæƒ…å ±ãªã©ã®æ©Ÿå¯†æ€§ã®é«˜ã„æƒ…å ±ï¼ˆsensitive dataï¼‰ã«ã¤ã„ã¦èª¿æŸ»ã‚’å®Ÿæ–½ã—ã€å¯¾å¿œ
isrc 2021/12/08
security

github
ãƒªãƒ³ã‚¯
1