Los abalawuli be ikhowudi yokubamba iqonga I-GitHub iphanda ngenkuthalo uthotho lohlaselo kwiziseko zabo zamafu, kuba ezi ntlobo zohlaselo zavumela abahlaseli ukuba basebenzise iiseva zenkampani ukwenza imisebenzi yemigodi engekho mthethweni. yeemali ezixabisekileyo.
Kwaye kwikota yesithathu ka-2020, ezi Uhlaselo lwalusekwe ekusebenziseni umsebenzi weGitHub obizwa ngokuba yiGitHub Actions evumela abasebenzisi ukuba baqale ngokuzenzekelayo imisebenzi emva kwesiganeko esithile kwiindawo zabo zokugcina zeGitHub.
Ukuphumeza oku kusetyenziswa, abahlaseli bathathe ulawulo logcino olusemthethweni ngokufaka ikhowudi ekhohlakeleyo kwikhowudi yokuqala kwiZenzo zeGitHub. kwaye emva koko wenze isicelo sokutsala ngokuchasene nendawo yokugcina yokugcina ukudibanisa ikhowudi elungisiweyo kunye nekhowudi esemthethweni.
Njengenxalenye yohlaselo lweGitHub, Abaphandi bokhuseleko baxela ukuba abaduni banokubaleka baye kuthi ga kwi-100 yabasebenzi basezimayini be-cryptocurrency kuhlaselo olunye, ukudala imithwalo emikhulu yokubala kwisiseko se-GitHub. Ukuza kuthi ga ngoku, aba bahlaseli babonakala besebenza ngokungakhethiyo nakwinqanaba elikhulu.
Uphando luveze ukuba ubuncinci iakhawunti enye yenza amakhulu ezicelo zohlaziyo ezinekhowudi engalunganga. Ngeli xesha, abahlaseli ababonakali bejolise kubasebenzisi be-GitHub, kodwa endaweni yoko bagxile ekusebenziseni isiseko selifu se-GitHub ukusingatha umsebenzi wemigodi ye-crypto.
Injineli yokhuseleko yaseDatshi uJustin Perdok uxelele iRekhodi ukuba ubuncinci i-hacker enye ijolise kwindawo yokugcina ii-GitHub apho ii-GitHub Actions zinokuvulwa.
Uhlaselo lubandakanya ukunyanzela indawo yokugcina esemthethweni, ukongeza izenzo ezikhohlakeleyo ze-GitHub kwikhowudi yokuqala, kwaye emva koko ungenise isicelo sokutsalwa kunye nendawo yokugcina yokugcina ukudibanisa ikhowudi kunye neyokuqala.
Imeko yokuqala yolu hlaselo yabikwa yinjineli yesoftware eFransi ngoNovemba 2020. Ngokufana nokusabela kwayo kwisiganeko sokuqala, i-GitHub yathi iphanda ngenkuthalo uhlaselo lwakutsha nje. Nangona kunjalo, i-GitHub ibonakala iyancipha kwaye ihamba kuhlaselo, njengoko abahlaseli besenza iiakhawunti ezintsha nje ukuba inkampani ibone kwaye ikhubaze iiakhawunti ezosulelekileyo.
NgoNovemba kulo nyaka uphelileyo, iqela leengcali zokhuseleko zekhompyuter zikaGoogle ezinikwe umsebenzi wokufumana ubuthathaka beentsuku ezi-0 ziveze isiphene sokhuseleko kwiqonga leGitHub. Ngokutsho kukaFelix Wilhelm, ilungu leqela leProjekthi yeZero eliye lafumanisa, isiphene siphinde sachaphazela ukusebenza kweGitHub Actions, isixhobo sokwenza umsebenzi wabaphuhlisi. Oku kungenxa yokuba imiyalelo ye-Actions workflows "isengozini kuhlaselo lwesitofu":
Izenzo zeGithub zixhasa into ebizwa ngokuba yimiyalelo yokuhamba komsebenzi njengejelo lonxibelelwano phakathi kwe-Action broker kunye nesenzo esenziwayo. Imiyalelo ye-Workflow iphunyezwa kwi-runner/src/Runner.Worker/ActionCommandManager.cs kwaye isebenze ngokucazulula i-STDOUT yazo zonke izenzo ezenziwe kwenye yeeflegi zomyalelo ezimbini.
I-GitHub Actions iyafumaneka kwi-GitHub Free, GitHub Pro, GitHub Free for Organisations, GitHub Team, GitHub Enterprise Cloud, GitHub Enterprise Server, GitHub One, kunye neGitHub AE akhawunti. Iintshukumo zeGitHub azifumaneki kwiindawo zokugcina zabucala ezizezeakhawunti ezisebenzisa izicwangciso zelifa.
Umsebenzi wemigodi ye-Cryptocurrency udla ngokufihlwa okanye usebenze ngasemva ngaphandle komlawuli okanye imvume yomsebenzisi. Kukho iintlobo ezimbini zemigodi ye-crypto eyingozi:
- Imo yokubini: Ezi zizicelo ezinobungozi ezikhutshelweyo kwaye zifakwe kwisixhobo esijoliswe kuyo ngenjongo ye-cryptocurrencies yemigodi. Ezinye izisombululo zokhuseleko zichonga uninzi lwezi zicelo njenge Trojans.
- Imowudi yoMkhangeli: Le yikhowudi yeJavaScript eyingozi emiliselwe kwiphepha lewebhu (okanye amanye amalungu ayo okanye izinto), eyilelwe ukukhupha i-cryptocurrency kwizikhangeli zeendwendwe zesayithi. Le ndlela ebizwa ngokuba yi-cryptojacking iye yanda kakhulu phakathi kwabaphuli-mthetho ukususela phakathi ku-2017. Ezinye izisombululo zokhuseleko zifumanisa uninzi lwezikripthi ze-cryptojacking njengezicelo ezingafunwayo.