Kodhi yakaipa inokanganisa kiyi yaHashiCorp yePGP

HashiCorp, kambani ine mukurumbira yekuvandudza maturusi akavhurika akadai seVagrant, Packer, Nomad uye Terraform, yakaburitswa mazuva akati wandei apfuura nhau nezve kudonha kweiyo yakavharwa GPG kiyi inoshandiswa kugadzira siginicha yedhijitari iyo inotarisa shanduro dzesoftware yako.

Mune yako posvo taura kuti varwadzi vakawana mukana weGPG kiyi izvo zvinogona kuita shanduko dzakavanzika kuzvigadzirwa zveHashiCorp nekuzvisimbisa nesiginicha yedigital chaiyo. Panguva imwecheteyo, iyo kambani yakati panguva yekuongorora hapana zvisaririra zvekuyedza kugadzirisa izvi zvakawanikwa.

Ivo vanotaura kuti iyo nguva iyo yavakaona iyo yakakanganiswa kiyi yeGPG, yakabviswa uye mushure meizvozvo, kiyi nyowani yakaunzwa munzvimbo yayo.

Iyo nyaya yakangokanganisa kuongorora uchishandisa SHA256SUM uye SHA256SUM.sig mafaera uye haina kukanganisa kugadzirwa kwemasaini edhijitari eLinux DEB neRPM mapakeji akaunzwa kuburikidza ne "releases.hashicorp.com" webhusaiti, pamwe neyakaregedzwa simbiso nzira dzeMacOS neWindows. (KutendesekaCode).

Musi waApril 15, 2021, Codecov (kodhi inovhara mhinduro) akazivisa pachena chiitiko chekuchengetedza panguva iyo bato risingabvumirwe rakakwanisa kugadzirisa kuchikamu cheCodecov icho vatengi veCodecov vanotora nekumhanyisa vachishandisa mhinduro.

Idzo shanduko dzakabvumidza bato risingatenderwe kuti ribudirire kuburitsa ruzivo rwakachengetwa munzvimbo dzinoenderera dzekubatanidza (CI) yevashandisi veCodecov Codecov yakaratidza kuti iko kusatenderwa kuwana kwakatanga muna Ndira 31, 2021 uye kwakazivikanwa / kugadziriswa musi waApril 1, 2021.

Kubuda kwacho kwakaitika nekuda kwekushandiswa kweiyo Codecov Bash Uploader script (codecov-bash) mune zvivakwa, zvakagadzirirwa kurodha nhepfenyuro dzekufukidza kubva kuemaitiro ekubatanidza anoenderera. Panguva yekurwiswa kukambani Codecov yekunze yakadzika yakavanzwa mune yakatarwa script kuburikidza nako kutumirwa kwepassword uye kiyi yekunyorera kune yakaipa server yakarongeka.

Kubira muzvivakwa zveCodecov, lVarwisi vakashandisa bug muDocker yekugadzira mifananidzo maitiro, chii yakavabvumira kutora iyo data kuti vawane iyo GCS (Google Cloud Storage) inofanirwa kuita shanduko kuBhash Uploader script yakaparadzirwa kubva pawebhusaiti yekodecov.io.

Shanduko dzakaitwa muna Ndira 31, mwedzi miviri yakaenda isingazivikanwe uye yakabvumidza varwisi kutora ruzivo rwakachengetwa munzvimbo dzemutengi dzinoenderera dzekubatanidza masisitimu. Nekodhi yakawedzerwa yakaipa, varwisi vanogona kuwana ruzivo nezve yakaedzwa Git repository uye ese akasiyana nharaunda, kusanganisira ma tokeni, encryption makiyi, uye mapassword akapfuudzwa kuenderera kusanganisa masystem ekupa mukana wekushandisa kodhi kodhi., Zvinyorwa uye masevhisi senge Amazon Web. Services uye GitHub.

HashiCorp yakakanganiswa nechiitiko chekuchengeteka nemumwe wechitatu (Codecov) zvakatungamira mukuburitswa kweruzivo rwekuvanzika. Nekuda kweizvozvo, iyo GPG kiyi inoshandiswa kuchinjisa kusaina uye kuongorora kwadzoserwa. Vatengi vanoongorora HashiCorp vhezheni masiginecha vangangoda kugadzirisa maitiro avo kuti vashandise kiyi nyowani.

Nepo kuferefeta kwakaratidza kuti hakuna humbowo hwekushandiswa kusingatenderwe kwekiyi yeGPG yakafumurwa, yakatenderedzwa kuchengetedza siginicha yakavimbika.

Pamusoro pekukumbira kwakananga, iyo Codecov Bash Uploader script yakashandiswa sechikamu chevamwe vadzori vakadai seCodecov-action (Github), Codecov-circleci-orb, uye Codecov-bitrise-nhanho, ine vashandisi vanokanganiswawo nedambudziko.

Finalmente kurudziro inoitwa kune vese vashandisi kubva ku codecov-bash uye nezvimwe zvigadzirwa vane zvivakwa zvavo zvakaongororwa uye nekuchinja mapassword uye kiyi yekunyorera.

Mukuwedzera HashiCorp yakaburitsa zvigadziriso zveTerraform uye maturusi anoenderana anovandudza otomatiki kodhi yekuongorora kuti ushandise iyo nyowani GPG kiyi uye yakapihwa mutungamiriri vakaparadzana Terraform yakatarwa.

Kana iwe uchida kuziva zvakawanda nezvazvo, unogona kutarisa ruzivo nekuenda kune inotevera chinongedzo.


Izvo zviri muchinyorwa zvinoomerera pamisimboti yedu ye tsika dzekunyora. Kuti utaure chikanganiso tinya pano.

Iva wekutanga kutaura

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa. Raida minda anozivikanwa ne *

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako