[B! github][security] uchiuchiyamaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

uchiuchiyama id:uchiuchiyama

githubã¨securityã«é–¢ã™ã‚‹uchiuchiyamaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

GitHub Actions Workflow ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆ | CyberAgent Developers Blog
GitHub Actions Workflow Best Practices ã“ã‚“ã«ã¡ã¯ã€‚2022å¹´æ–°å’å…¥ç¤¾ã®ä¸Šç”°ã§ã™ã€‚ç¾åœ¨ã¯æœ¬é…å±žå‰ã®ã‚¸ãƒ§ãƒ–ãƒã§ ABEMA ã«æ‰€å±žã—ã¦ãŠã‚Šã¾ã™ã€‚ ã“ã®è¨˜äº‹ã§ã¯ GitHub Actions workflow/job ä½œæˆã«é–¢ã™ã‚‹ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã‚’ã¾ã¨ã‚ã¾ã—ãŸã€‚ workflow/job è¿½åŠ æ™‚ã«å‚ç…§ã§ãã‚‹ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆã¨ã—ã¦ã”åˆ©ç”¨ã„ãŸã ã‘ã‚‹ã‚ˆã†ãªä¸€è¨˜äº‹ã¨ã—ã¦å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚å …ç‰¢ã§å®‰å…¨ãª CI/CD pipeline ã‚’ä½œã‚‹å‚è€ƒã«ãªã‚Œã°å¹¸ã„ã§ã™ã€‚ ï¼ˆã‚¸ãƒ§ãƒ–ãƒï¼šãƒ¡ãƒ‡ã‚£ã‚¢äº‹æ¥éƒ¨ã«ãŠã‘ã‚‹æ–°å’ç ”ä¿®ã®ä¸€ç’°ã¨ã—ã¦äºŒãƒ¶æœˆé–“å®Ÿæ–½ã•ã‚Œã‚‹æœ¬é…å±žå‰ã®ã‚¸ãƒ§ãƒ–ãƒãƒ¼ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³ç ”ä¿®ï¼‰ è‡ªå·±ç´¹ä»‹ GitHub Actions ã¯ Beta v1 ã®é ƒã‹ã‚‰åˆ©ç”¨ã—ã¦ãŠã‚Šã€å€‹äººã¨ã—ã¦ã‚‚ peaceiris/actions-gh-pages ãªã©ã‚’ã¯ã˜ã‚ã¨ã—ã¦ã€ã„ãã¤ã‹ã®ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼ Ac
uchiuchiyama 2022/07/01
github

ci

git

security
ãƒªãƒ³ã‚¯
GitHub Actionsã®`permissions`ã‚’è‡ªå‹•ã§è¨å®šã™ã‚‹ãƒ„ãƒ¼ãƒ«ã‚’æ›¸ã„ãŸ
GitHub Actionsã«ã¯permissionsã¨ã„ã†ãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ãŒã‚ã‚Šã€ãã‚Œãžã‚Œã®Workflow/Jobã§ã®secrets.GITHUB_TOKENã®æ¨©é™ã‚’è¨å®šã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ secrets.GITHUB_TOKENã¯GitHub Actionsã®å®Ÿè¡Œã”ã¨ã«ç™ºè¡Œã•ã‚Œã‚‹GitHubã®Tokenã§ã€å¤šãã®GitHub Actionsã¯ã“ã®ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ä½¿ã£ã¦ãƒªãƒã‚¸ãƒˆãƒªã‚’git cloneã—ãŸã‚Šã€Issueã«ã‚³ãƒ¡ãƒ³ãƒˆã‚’æ›¸ã„ãŸã‚Šã—ã¦ã„ã¾ã™ã€‚ GitHub Actions: Control permissions for GITHUB_TOKEN | GitHub Changelog Workflow syntax for GitHub Actions - GitHub Docs ã“ã®permissionsã‚’ã¡ã‚ƒã‚“ã¨è¨å®šã™ã‚‹ã“ã¨ã§ã‚µãƒ—ãƒ©ã‚¤ãƒã‚§ãƒ¼ãƒ³æ”»æ’ƒãªã©ã®å½±éŸ¿ã‚’è»½æ¸›ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™
uchiuchiyama 2021/07/21
github

ci

development

security
ãƒªãƒ³ã‚¯
é–“é•ãˆã¦GitHubãªã©ã«SECRET_KEYã‚’pushã—ã¦ã—ã¾ã£ãŸæ™‚ã®å¯¾å‡¦æ³•ï¼ˆå€‹äººã®ã¿ï¼‰ - Qiita
å‚™å¿˜éŒ²ã§ã™ 2019/03/09 15:00 - @tetsukay ã•ã‚“ @shibukk ã•ã‚“ã®ã‚³ãƒ¡ãƒ³ãƒˆã‚’åæ˜ ã—ã¾ã—ãŸ ã‚„ã‚‰ã‹ã—ãŸï¼ï¼ GitHubãªã©ã§ã€Twitterã®passwordã‚„AWSãªã©ã®SECRET_KEYãŒå«ã¾ã‚ŒãŸãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã‚’ç®¡ç†ã™ã‚‹éš›ã€.gitignoreã‚’ã¡ã‚ƒã‚“ã¨æŒ‡å®šã—ã¦ã‚„ã‚‰ãªã„ã¨gitã®commitå±¥æ´ãªã©ã«ãã®SECRET_KEYãªã©ã®å€¤ãŒæ®‹ã£ã¦ã—ã¾ã„ã¾ã™ã€‚ ã“ã†ã„ã£ãŸãƒŸã‚¹ã§SECRET_KEYãªã©ãŒæµå‡ºã™ã‚‹ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã«ç¹‹ãŒã‚Šã¾ã™ãã€‚ ã“ã®è¨˜äº‹ã§ã¯ä¸€ç•ªæœ€æ‚ªãªã€ŒSECRET_KEYãªã©ãŒcommitã•ã‚ŒãŸå±¥æ´ãŒpushã•ã‚Œã¦ã—ã¾ã£ãŸã€ã¨ã„ã†äº‹æ…‹ã®å¯¾ç–ã¨ã—ã¦ã€ã€Œgitä¸Šã§ã®å±¥æ´ã®å‰Šé™¤æ–¹æ³•ã€ã¨ã€Œãƒªãƒ¢ãƒ¼ãƒˆãƒªãƒã‚¸ãƒˆãƒªä¸Šã®å±¥æ´ã®å‰Šé™¤æ–¹æ³•ã€ã‚’è§£èª¬ã—ã¾ã™ã€‚ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å¤‰æ›´ ã¾ãšã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰/SECRET_KEYã‚’ä»Šã™ãå¤‰æ›´ã—ã¾ã—ã‚‡ã†ã€‚ å¯¾å¿œãŒé…ã‚Œã¦ã—ã¾ã†ã¨
uchiuchiyama 2019/03/08
github

security
ãƒªãƒ³ã‚¯
ã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ã®ã‚³ãƒŸãƒƒãƒˆã‚’æŠ‘æ¢ã§ãã¦å®‰å…¨ä¾¿åˆ©ãª awslabs/git-secrets - kakakakakku blog
GitHub ã§ awslabs ã®ãƒªãƒã‚¸ãƒˆãƒªã‚’çœºã‚ã¦ãŸã‚‰ git-secrets ã¨ã„ã†ä¾¿åˆ©ãªãƒ„ãƒ¼ãƒ«ï¼ˆã‚·ã‚§ãƒ«ã§å®Ÿè£…ã•ã‚Œã¦ã‚‹ï¼‰ã‚’ç™ºè¦‹ã—ãŸï¼Ž ã©ã‚“ãªã‚‚ã®ã‹ã‚’ç°¡å˜ã«èª¬æ˜Žã™ã‚‹ã¨ï¼Œã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ãªã©ã‚’èª¤ã£ã¦ã‚³ãƒŸãƒƒãƒˆã™ã‚‹ã“ã¨ã‚’ Git ã® hooks ã‚’ä½¿ã£ã¦æœªç„¶ã«é˜²ããƒ„ãƒ¼ãƒ«ã§ï¼Œèª¤ã£ã¦ GitHub ã« push ã—ã¦ã—ã¾ã£ãŸãŸã‚ã«ï¼ŒAWS ã‚’ä¸æ£åˆ©ç”¨ã•ã‚Œã¦ã—ã¾ã£ãŸï¼Œã¿ãŸã„ãªäº‹æ•…ã‚‚ãŸã¾ã«èžãã—ï¼Œãã†ã„ã†ã®ã‚’é˜²ãã“ã¨ãŒã§ãã‚‹ï¼Žéžå¸¸ã«è‰¯ã‹ã£ãŸã®ã§ï¼Œä¸€éƒ¨ã®ãƒªãƒã‚¸ãƒˆãƒªã« git-secrets ã‚’è¨å®šã—ãŸï¼Ž github.com ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« make install ã§ã‚‚è‰¯ã„ã‘ã©ï¼ŒMac ãªã‚‰ brew ãŒä½¿ãˆã‚‹ï¼Ž $ brew install git-secrets ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã¨ git secrets ã‚³ãƒžãƒ³ãƒ‰ãŒä½¿ãˆã‚‹ã‚ˆã†ã«ãªã£ãŸï¼Ž $ git secrets usage: git secrets
uchiuchiyama 2018/02/27
security

aws

git

github
ãƒªãƒ³ã‚¯
GitHub - brianhempel/mongo_session_store: Rails 3 and 4 session store class implemented for MongoMapper and Mongoid or any other MongoDB ODM
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
uchiuchiyama 2016/01/17
mongodb

rails

development

github

security
ãƒªãƒ³ã‚¯
å¶ç„¶ã«ã‚‚500ä¸‡å€‹ã®SSHå…¬é–‹éµã‚’æ‰‹ã«å…¥ã‚ŒãŸä¿ºãŸã¡ã¯ - slideshare
1. Attacking against 5 million SSH public keys å¶ç„¶ã«ã‚‚500ä¸‡å€‹ã® SSHå…¬é–‹éµã‚’ æ‰‹ã«å…¥ã‚ŒãŸä¿ºãŸã¡ã¯ hnw æ±Ÿæˆ¸å‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š (2015/1/24)ç™ºè¡¨è³‡æ–™
uchiuchiyama 2015/01/26
ssh

security

github

presentation

algorithm
ãƒªãƒ³ã‚¯
GitHub ã«ç™»éŒ²ã—ãŸ SSH å…¬é–‹éµã¯å…¨ä¸–ç•Œã«å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ | 774::Blog
æ„å¤–ã¨çŸ¥ã‚‰ãªã„äººãŒã„ã‚‹ã‚ˆã†ãªã®ã§ãƒ–ãƒã‚°ã«æ›¸ã„ã¦ãŠãã¾ã™ã€‚ GitHub ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã‚ã¨ã« .keys ã‚’ä»˜ã‘ã‚‹ã¨ãã®äººã® SSH å…¬é–‹éµãŒè¡¨ç¤ºã•ã‚Œã‚‹ã€‚ ãŸã¨ãˆã° id774 ã•ã‚“ã®å…¬é–‹éµã§ã‚ã‚Œã° https://github.com/id774.keys ã‚’å‚ç…§ã™ã‚Œã°è‰¯ã„ã€‚ ãœã²è‡ªåˆ†ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§è©¦ã—ã¦ã¿ã¦æ¬²ã—ã„ã€‚ æ–°è¦ã«ç”¨æ„ã™ã‚‹ã‚µãƒ¼ãƒãƒ¼ã® ~/.ssh/authorized_keys ã«ä¸Šè¨˜ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ wget ã—ãŸã‚‚ã®ã‚’ç½®ã„ã¦é©åˆ‡ãªãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³ã‚’è¨å®šã—ã¦ãŠã‘ã°ã™ãã«å…¬é–‹éµèªè¨¼ãŒã§ãã‚‹ã¨ã„ã†ã‚ã‘ã§ã‚ã‚‹ã€‚ ã‚‚ã†ãã‚ãã‚å…¬é–‹éµã‚’ãƒ¡ãƒ¼ãƒ«ã§é€ã£ã¦ãã‚Œã¨ã‹ã„ã†æ–‡åŒ–ãŒæ»…äº¡ã—ã¦ GitHub ã‹ã‚‰å‹æ‰‹ã«å…¬é–‹éµã‚’æŒã£ã¦ã„ãã®ãŒå¸¸è˜ãªä¸–ç•Œã«ãªã£ã¦ã»ã—ã„ã€‚
uchiuchiyama 2013/12/17
github

ssh

development

security

vps
ãƒªãƒ³ã‚¯
1