[B! security][git] uchiuchiyamaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

uchiuchiyama id:uchiuchiyama

securityã¨gitã«é–¢ã™ã‚‹uchiuchiyamaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

GitHub Actions Workflow ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆ | CyberAgent Developers Blog
GitHub Actions Workflow Best Practices ã“ã‚“ã«ã¡ã¯ã€‚2022å¹´æ–°å’å…¥ç¤¾ã®ä¸Šç”°ã§ã™ã€‚ç¾åœ¨ã¯æœ¬é…å±žå‰ã®ã‚¸ãƒ§ãƒ–ãƒã§ ABEMA ã«æ‰€å±žã—ã¦ãŠã‚Šã¾ã™ã€‚ ã“ã®è¨˜äº‹ã§ã¯ GitHub Actions workflow/job ä½œæˆã«é–¢ã™ã‚‹ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã‚’ã¾ã¨ã‚ã¾ã—ãŸã€‚ workflow/job è¿½åŠ æ™‚ã«å‚ç…§ã§ãã‚‹ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆã¨ã—ã¦ã”åˆ©ç”¨ã„ãŸã ã‘ã‚‹ã‚ˆã†ãªä¸€è¨˜äº‹ã¨ã—ã¦å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚å …ç‰¢ã§å®‰å…¨ãª CI/CD pipeline ã‚’ä½œã‚‹å‚è€ƒã«ãªã‚Œã°å¹¸ã„ã§ã™ã€‚ ï¼ˆã‚¸ãƒ§ãƒ–ãƒï¼šãƒ¡ãƒ‡ã‚£ã‚¢äº‹æ¥éƒ¨ã«ãŠã‘ã‚‹æ–°å’ç ”ä¿®ã®ä¸€ç’°ã¨ã—ã¦äºŒãƒ¶æœˆé–“å®Ÿæ–½ã•ã‚Œã‚‹æœ¬é…å±žå‰ã®ã‚¸ãƒ§ãƒ–ãƒãƒ¼ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³ç ”ä¿®ï¼‰ è‡ªå·±ç´¹ä»‹ GitHub Actions ã¯ Beta v1 ã®é ƒã‹ã‚‰åˆ©ç”¨ã—ã¦ãŠã‚Šã€å€‹äººã¨ã—ã¦ã‚‚ peaceiris/actions-gh-pages ãªã©ã‚’ã¯ã˜ã‚ã¨ã—ã¦ã€ã„ãã¤ã‹ã®ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼ Ac
uchiuchiyama 2022/07/01
github

ci

git

security
ãƒªãƒ³ã‚¯
git-secretsã¨huskyã‚’åŒæ™‚ã«ä½¿ç”¨ã™ã‚‹
ã¯ã˜ã‚ã« æ©Ÿå¯†æƒ…å ±ã‚’ã‚³ãƒŸãƒƒãƒˆã—ãªã„ã‚ˆã†ã«git-secretsã®è¨å®šã‚’ã—ã‚ˆã†ã¨ã—ãŸã¨ã“ã‚ã€æ—¢ã«precommitç”¨ã®Node.jsãƒ©ã‚¤ãƒ–ãƒ©ãƒªhuskyãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ãŸãŸã‚ã€ã‚³ãƒ³ãƒ•ãƒªã‚¯ãƒˆã—ã¦git-secretsã®è¨å®šãŒã§ãã¾ã›ã‚“ã§ã—ãŸã€‚ ã©ã£ã¡ã¨ã‚‚ä½¿ã„ãŸã‹ã£ãŸã®ã§ã€ãã‚Œãžã‚Œå‹•ãã‚ˆã†ã«å·¥å¤«ã—ã¦ã¿ã¾ã—ãŸã€‚ 2019/07/10 è¿½è¨˜ ä¼šç¤¾ã® @aki77 ã•ã‚“ãŒã€ã‚‚ã£ã¨è‰¯ã„æ–¹æ³•ã‚’è¦‹ã¤ã‘ã¦ãã‚ŒãŸã®ã§ã€ ãã£ã¡ã‚’ã€Œæ–¹æ³•1ã€ã¨ã—ã¦è¿½è¨˜ã—ã¾ã—ãŸï¼ æ–¹æ³•1: huskyå†…ã§git-secretsã‚’å‘¼ã³å‡ºã™ gitã®hookså†…ã§ã¯ã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ã¾ã¾huskyã ã‘ãŒå‘¼ã°ã‚Œã‚‹ã‚ˆã†ã«ã—ã¦ãŠãã€ huskyã§ã®ãƒã‚§ãƒƒã‚¯é …ç›®ã®1ã¤ã¨ã—ã¦ã€git-secretsã‚’å‘¼ã³å‡ºã—ã¾ã™ã€‚ lint-stagedã‚‚ä½µç”¨ã—ã¾ã™ã€‚ git-secretsã‚’ã‚°ãƒãƒ¼ãƒãƒ«ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«
uchiuchiyama 2020/02/03
git

node.js

development

security
ãƒªãƒ³ã‚¯
ã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ã®ã‚³ãƒŸãƒƒãƒˆã‚’æŠ‘æ¢ã§ãã¦å®‰å…¨ä¾¿åˆ©ãª awslabs/git-secrets - kakakakakku blog
GitHub ã§ awslabs ã®ãƒªãƒã‚¸ãƒˆãƒªã‚’çœºã‚ã¦ãŸã‚‰ git-secrets ã¨ã„ã†ä¾¿åˆ©ãªãƒ„ãƒ¼ãƒ«ï¼ˆã‚·ã‚§ãƒ«ã§å®Ÿè£…ã•ã‚Œã¦ã‚‹ï¼‰ã‚’ç™ºè¦‹ã—ãŸï¼Ž ã©ã‚“ãªã‚‚ã®ã‹ã‚’ç°¡å˜ã«èª¬æ˜Žã™ã‚‹ã¨ï¼Œã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ãªã©ã‚’èª¤ã£ã¦ã‚³ãƒŸãƒƒãƒˆã™ã‚‹ã“ã¨ã‚’ Git ã® hooks ã‚’ä½¿ã£ã¦æœªç„¶ã«é˜²ããƒ„ãƒ¼ãƒ«ã§ï¼Œèª¤ã£ã¦ GitHub ã« push ã—ã¦ã—ã¾ã£ãŸãŸã‚ã«ï¼ŒAWS ã‚’ä¸æ£åˆ©ç”¨ã•ã‚Œã¦ã—ã¾ã£ãŸï¼Œã¿ãŸã„ãªäº‹æ•…ã‚‚ãŸã¾ã«èžãã—ï¼Œãã†ã„ã†ã®ã‚’é˜²ãã“ã¨ãŒã§ãã‚‹ï¼Žéžå¸¸ã«è‰¯ã‹ã£ãŸã®ã§ï¼Œä¸€éƒ¨ã®ãƒªãƒã‚¸ãƒˆãƒªã« git-secrets ã‚’è¨å®šã—ãŸï¼Ž github.com ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« make install ã§ã‚‚è‰¯ã„ã‘ã©ï¼ŒMac ãªã‚‰ brew ãŒä½¿ãˆã‚‹ï¼Ž $ brew install git-secrets ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã¨ git secrets ã‚³ãƒžãƒ³ãƒ‰ãŒä½¿ãˆã‚‹ã‚ˆã†ã«ãªã£ãŸï¼Ž $ git secrets usage: git secrets
uchiuchiyama 2018/02/27
security

aws

git

github
ãƒªãƒ³ã‚¯
ã‚¯ãƒ©ã‚¦ãƒ‰ç ´ç”£ã—ãªã„ã‚ˆã†ã« git-secrets ã‚’ä½¿ã† - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
uchiuchiyama 2015/12/25
aws

git

security
ãƒªãƒ³ã‚¯
1