{"id":23116,"date":"2022-10-20T13:30:00","date_gmt":"2022-10-20T13:30:00","guid":{"rendered":"https:\/\/training.linuxfoundation.org\/?p=23116"},"modified":"2022-11-29T01:55:16","modified_gmt":"2022-11-29T01:55:16","slug":"employ-a-github-security-posture-to-overcome-common-cyber-threats","status":"publish","type":"post","link":"https:\/\/training.linuxfoundation.org\/ja\/blog\/employ-a-github-security-posture-to-overcome-common-cyber-threats\/","title":{"rendered":"GitHub \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30dd\u30b9\u30c1\u30e3\u3092\u5229\u7528\u3057\u3066\u4e00\u822c\u7684\u306a\u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u3092\u514b\u670d\u3059\u308b"},"content":{"rendered":"<p><span style=\"font-weight: 400;\"><a href=\"https:\/\/github.com\/\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-23119 aligncenter\" src=\"https:\/\/training.linuxfoundation.org\/wp-content\/uploads\/2022\/10\/2-2-1024x576.png\" alt=\"\" width=\"630\" height=\"354\" srcset=\"https:\/\/training.linuxfoundation.org\/wp-content\/uploads\/2022\/10\/2-2-1024x576.png 1024w, https:\/\/training.linuxfoundation.org\/wp-content\/uploads\/2022\/10\/2-2-300x169.png 300w, https:\/\/training.linuxfoundation.org\/wp-content\/uploads\/2022\/10\/2-2-768x432.png 768w, https:\/\/training.linuxfoundation.org\/wp-content\/uploads\/2022\/10\/2-2-1536x864.png 1536w, https:\/\/training.linuxfoundation.org\/wp-content\/uploads\/2022\/10\/2-2-18x10.png 18w, https:\/\/training.linuxfoundation.org\/wp-content\/uploads\/2022\/10\/2-2.png 1600w\" sizes=\"auto, (max-width: 630px) 100vw, 630px\" \/><\/a><\/span><\/p>\n<p class=\"translation-block\"><span style=\"font-weight: 400\"><a href=\"https:\/\/github.com\/\" target=\"_self\">GitHub <\/a>\u306f\u30018,300 \u4e07\u4eba\u3092\u8d85\u3048\u308b\u958b\u767a\u8005\u3001400 \u4e07\u306e\u7d44\u7e54\u3001\u304a\u3088\u3073 2 \u5104\u3092\u8d85\u3048\u308b\u30b3\u30fc\u30c9 \u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u30db\u30b9\u30c8\u3059\u308b\u3001\u4e16\u754c\u3067\u6700\u3082\u4eba\u6c17\u306e\u3042\u308b\u30bd\u30fc\u30b9\u7ba1\u7406\u30b7\u30b9\u30c6\u30e0\u306e 1 \u3064\u3067\u3059\u3002\u3057\u304b\u3057\u3001\u305d\u306e\u6c4e\u7528\u6027\u3068\u5f37\u307f\u306b\u3082\u304b\u304b\u308f\u3089\u305a\u3001\u5f53\u521d\u306f\u30b3\u30fc\u30c9\u306e\u4fdd\u8b77\u3092\u5ff5\u982d\u306b\u7f6e\u3044\u3066\u69cb\u7bc9\u3055\u308c\u305f\u308f\u3051\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u305d\u306e\u4e3b\u306a\u76ee\u7684\u306f\u3001\u81ea\u7d44\u7e54\u5185\u3082\u3057\u304f\u306f\u4ed6\u306e\u7d44\u7e54\u3068\u306e\u9593\u306b\u304a\u3051\u308b\u958b\u767a\u8005\u9593\u306e\u30b3\u30e9\u30dc\u30ec\u30fc\u30b7\u30e7\u30f3\u3068\u5354\u529b\u3092\u4fc3\u9032\u3059\u308b\u3053\u3068\u3067\u3059\u3002 <\/span><span style=\"font-weight: 400\">\u3064\u307e\u308a\u3001\u81ea\u5206\u306e\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u78ba\u5b9f\u306b\u30bb\u30ad\u30e5\u30a2\u306b<\/span><span style=\"font-weight: 400\"><em>\u3067\u304d\u308b\u306e\u3067\u3059\u304c\u3001<\/em> \u305d\u306e\u305f\u3081\u306b\u306f\u3001\u81ea\u8eab\u304c\u81ea\u899a\u3059\u308b\u3053\u3068\u3068\u3001\u8272\u3005\u3068\u4f5c\u696d\u3092\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002 <\/span><\/p>\n<p><span style=\"font-weight: 400;\">GitHub \u3067\u30b3\u30fc\u30c9\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u8a55\u4fa1\u3059\u308b\u969b\u306b\u77e5\u3063\u3066\u304a\u304f\u3079\u304d\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u6a5f\u80fd\u304c\u3044\u304f\u3064\u304b\u3042\u308a\u307e\u3059\u3002<\/span><\/p>\n<p class=\"translation-block\"><b>\u516c\u958b\u30ea\u30dd\u30b8\u30c8\u30ea<\/b><span style=\"font-weight: 400\"> \u2013 \u610f\u56f3\u3057\u306a\u3044\u3067\u3001\u79d8\u5bc6\u60c5\u5831(\u30ad\u30fc\u3001\u6a5f\u5bc6\u3084\u5546\u7528\u30b3\u30fc\u30c9\u306a\u3069)\u3092 <\/span><span style=\"font-weight: 400\"><\/span><a href=\"https:\/\/www.theverge.com\/2019\/5\/6\/18531222\/hacker-data-theft-ransom-stolen-git-code-bitcoin\" target=\"_self\"><span style=\"font-weight: 400\">\u516c\u958b\u30ec\u30dd\u30b8\u30c8\u30ea<\/span><\/a><span style=\"font-weight: 400\">\u306b\u7f6e\u3044\u3066\u3057\u307e\u3046\u3053\u3068\u304c\u3042\u308a\u307e\u3059\u3002\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u4e0a\u306e\u8ab0\u3082\u304c\u305d\u306e\u3088\u3046\u306a\u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u8907\u88fd\u304a\u3088\u3073\u30d5\u30a9\u30fc\u30af\u3067\u304d\u308b\u305f\u3081\u3001AWS S3 \u3067\u4ed6\u306e\u4eba\u3092\u3046\u3063\u304b\u308a\u30db\u30b9\u30c8\u3057\u3066\u3057\u307e\u3046\u53ef\u80fd\u6027\u304c\u3042\u308b\u3053\u3068\u3092\u899a\u3048\u3066\u304a\u304f\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u305d\u3057\u3066\u3001\u305d\u306e\u8cbb\u7528\u3092\u8ca0\u62c5\u3057\u306a\u3051\u308c\u3070\u306a\u3089\u306a\u3044\u306e\u3067\u3059\u3002<\/span><\/p>\n<p><b>\u4fdd\u8b77\u3055\u308c\u3066\u3044\u306a\u3044\u30d6\u30e9\u30f3\u30c1<\/b><span style=\"font-weight: 400;\"> \u2013 GitHub \u306b\u306f\u3001\u9078\u629e\u3057\u305f (\u901a\u5e38\u306f\u30e1\u30a4\u30f3\u306e) \u30d6\u30e9\u30f3\u30c1\u306b\u3055\u307e\u3056\u307e\u306a\u4fdd\u8b77\u3092\u8ffd\u52a0\u3067\u304d\u308b\u6a5f\u80fd\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u4fdd\u8b77\u306f\u3001\u7f72\u540d\u4ed8\u304d\u30b3\u30df\u30c3\u30c8\u306e\u5f37\u5236\u304b\u3089\u3001\u76f4\u7dda\u7684\u306a\u30b3\u30df\u30c3\u30c8\u5c65\u6b74\u306e\u7dad\u6301\u306b\u307e\u3067\u53ca\u3073\u307e\u3059\u3002\u3053\u308c\u306f\u3001\u6f5c\u5728\u7684\u306a\u653b\u6483\u306b\u5bfe\u3059\u308b\u30e1\u30a4\u30f3 \u30d6\u30e9\u30f3\u30c1\u306e\u56de\u5fa9\u529b\u3092\u5927\u5e45\u306b\u9ad8\u3081\u308b\u4fbf\u5229\u306a\u30c4\u30fc\u30eb\u3067\u3059\u3002<\/span><\/p>\n<p class=\"translation-block\"><b>\u7f72\u540d\u6e08\u307f\u30b3\u30df\u30c3\u30c8<\/b><span style=\"font-weight: 400\"> \u2013 <\/span><a href=\"https:\/\/dev.to\/agrinman\/spoof-a-commit-on-github-from-anyone-4gf4\" target=\"_self\"><span style=\"font-weight: 400\">GitHub\u306b\u304a\u3044\u3066\u4ed6\u4eba\u306b\u306a\u308a\u3059\u307e\u3059<\/span><\/a><span style=\"font-weight: 400\">\u3053\u3068\u306f\u3001\u9a5a\u304f\u307b\u3069\u7c21\u5358\u3067\u3059\u3002\u5fc5\u8981\u306a\u3082\u306e\u306f\u3001\u96fb\u5b50\u30e1\u30fc\u30eb\u3068\u30e6\u30fc\u30b6\u30fc \u30cf\u30f3\u30c9\u30eb\u3060\u3051\u3067\u3059\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30b3\u30df\u30c3\u30c8\u3092\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u30d7\u30c3\u30b7\u30e5\u3059\u308b\u3068\u304d\u306b\u3001\u8ab0\u306b\u3067\u3082\u306a\u308a\u3059\u307e\u3059\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u7f72\u540d\u3055\u308c\u305f\u30b3\u30df\u30c3\u30c8\u306b\u306f\u3001\u3054\u5b58\u77e5\u306e\u3088\u3046\u306b\u3001\u30b3\u30df\u30c3\u30bf\u30fc\u304c\u691c\u8a3c\u3055\u308c\u3066\u3044\u308b\u304b\u3069\u3046\u304b\u3092\u5224\u65ad\u3059\u308b\u306e\u306b\u5f79\u7acb\u3064\u96fb\u5b50\u7f72\u540d\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002\u3064\u307e\u308a\u3001\u8868\u793a\u3055\u308c\u3066\u3044\u308b\u3082\u306e\u304c\u672c\u7269\u3067\u3042\u308a\u3001\u60aa\u610f\u3092\u6301\u3063\u305f\u30b3\u30df\u30c3\u30c8\u3067\u306f\u306a\u3044\u3068\u3044\u3046\u78ba\u4fe1\u3092\u6301\u3061\u3001\u30b3\u30df\u30c3\u30c8\u5c65\u6b74\u3092\u305f\u3069\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/span><\/p>\n<p class=\"translation-block\"><b>\u4e8c\u8981\u7d20\u8a8d\u8a3c<\/b><span style=\"font-weight: 400\"> \u2013 \u7d44\u7e54\u306e\u3059\u3079\u3066\u306e\u30e1\u30f3\u30d0\u30fc\u306b 2FA \u306e\u4f7f\u7528\u3092\u8981\u6c42\u3067\u304d\u307e\u3059\u3002\u3053\u308c\u306f<\/span><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hackers-stealing-github-accounts-using-fake-circleci-notifications\/\" target=\"_self\"><span style=\"font-weight: 400\">\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u7a83\u7528<\/span><\/a><span style=\"font-weight: 400\">\u3057\u3001\u305d\u308c\u3092\u4f7f\u3063\u3066\u7d44\u7e54\u5185\u3078\u4fb5\u5165\u3059\u308b\u3053\u3068\u3092\u9632\u3050\u305f\u3081\u306b\u8a2d\u8a08\u3055\u308c\u305f\u6709\u7528\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3067\u3059\u3002<\/span><\/p>\n<p><b>SSH \u304a\u3088\u3073\u30c7\u30d7\u30ed\u30a4 \u30ad\u30fc<\/b><span style=\"font-weight: 400;\"> \u2013 \u3053\u308c\u3089\u306e\u30bf\u30a4\u30d7\u306e\u30ad\u30fc\u306f\u4e21\u65b9\u3068\u3082\u3001GitHub \u30a2\u30ab\u30a6\u30f3\u30c8\u3078\u306e\u63a5\u7d9a\u3092\u5bb9\u6613\u306b\u3059\u308b\u305f\u3081\u306b\u3042\u308a\u307e\u3059\u3002\u6b8b\u5ff5\u306a\u304c\u3089\u3001\u3042\u306a\u305f\u306b\u3068\u3063\u3066\u7c21\u5358\u3067\u3042\u308b\u3068\u3044\u3046\u3053\u3068\u306f\u3001\u30b5\u30a4\u30d0\u30fc\u72af\u7f6a\u8005\u306b\u3068\u3063\u3066\u3082\u7c21\u5358\u3067\u3042\u308b\u3068\u3044\u3046\u3053\u3068\u3067\u3059\u3002\u305f\u3068\u3048\u3070\u3001\u30ad\u30fc\u306e\u30ed\u30fc\u30c6\u30fc\u30b7\u30e7\u30f3\u3092\u5fd8\u308c\u305f\u308a\u3001\u4ed6\u4eba\u3068\u5171\u6709\u3057\u305f\u308a\u3059\u308b\u3053\u3068\u3092\u3084\u308a\u304c\u3061\u3067\u3059\u3002\u3053\u308c\u3089\u306e\u30ad\u30fc\u3092\u4f7f\u3048\u3070\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u3078\u306e\u307b\u307c\u81ea\u7531\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u305f\u3081\u3001\u4ed6\u306e\u6a5f\u5bc6\u4e8b\u9805\u3068\u540c\u69d8\u306b\u7ba1\u7406\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3053\u3068\u306b\u6ce8\u610f\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/span><\/p>\n<p><b>\u591a\u3059\u304e\u308b\u7ba1\u7406\u8005<\/b><span style=\"font-weight: 400;\"> \u2013 GitHub \u306e\u7ba1\u7406\u8005\u6a29\u9650\u306f\u3001\u307b\u3068\u3093\u3069\u3059\u3079\u3066\u306e\u30a2\u30af\u30bb\u30b9\u306e\u554f\u984c\u3092\u51e6\u7406\u3059\u308b\u7279\u52b9\u85ac\u306e\u3088\u3046\u306a\u3082\u306e\u3067\u3042\u308b\u3068\u591a\u304f\u306e\u4eba\u304c\u8003\u3048\u3066\u3044\u307e\u3059\u3002\u554f\u984c\u306f\u3001\u30c1\u30fc\u30e0\u306e\u307b\u3068\u3093\u3069\u3059\u3079\u3066\u306e\u30e1\u30f3\u30d0\u30fc\u304c\u7ba1\u7406\u8005\u306b\u306a\u3063\u3066\u3057\u307e\u3046\u3053\u3068\u3067\u3059\u3002\u7ba1\u7406\u8005\u306f\u30a2\u30ab\u30a6\u30f3\u30c8\u3078\u306e\u307b\u307c\u5b8c\u5168\u306a\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u6301\u3063\u3066\u304a\u308a\u3001\u901a\u5e38\u306f\u5e83\u7bc4\u306a (\u5e38\u306b\u6b53\u8fce\u3055\u308c\u308b\u3068\u306f\u9650\u308a\u307e\u305b\u3093\u304c) \u5909\u66f4\u3092\u884c\u3046\u3053\u3068\u304c\u3067\u304d\u308b\u305f\u3081\u3001\u7ba1\u7406\u8005\u306e\u9078\u5b9a\u306f\u614e\u91cd\u306b\u884c\u308f\u306a\u3051\u308c\u3070\u306a\u308a\u307e\u305b\u3093\u3002\u307e\u305f\u3001\u5fc5\u8981\u304c\u306a\u304f\u306a\u3063\u305f\u5834\u5408\u306f\u3001\u5fc5\u305a\u7ba1\u7406\u8005\u6a29\u9650\u3092\u53d6\u308a\u6d88\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u5927\u4e8b\u306a\u3053\u3068\u306f\u3001GitHub \u4e0a\u306e\u30b3\u30fc\u30c9\u3092\u30bb\u30ad\u30e5\u30a2\u306b\u3059\u308b\u305f\u3081\u306b\u306f\u3001\u81ea\u5206\u3067\u5bfe\u5fdc\u3057\u306a\u3051\u308c\u3070\u306a\u3089\u306a\u3044\u3068\u3044\u3046\u3053\u3068\u3067\u3059\u3002\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u304c\u3042\u306a\u305f\u306b\u4ee3\u308f\u3063\u3066\u305d\u308c\u3092\u884c\u3046\u308f\u3051\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306b\u5fc5\u8981\u306a\u624b\u9806\u3092\u6c7a\u5b9a\u3059\u308b\u524d\u306b\u3001GitHub \u306e\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u8aad\u3080\u3053\u3068\u306b\u6642\u9593\u3068\u52b4\u529b\u3092\u8cbb\u3084\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/span><\/p>\n<p class=\"translation-block\"><em>Barak Brudo\u3001 <a href=\"https:\/\/scribesecurity.com\/\" target=\"_self\">Scribe<\/a>\u306eDeveloper Advocate\u306b\u3088\u308b\u5bc4\u7a3f\u3002\u00a0<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>GitHub \u306f\u30018,300 \u4e07\u4eba\u3092\u8d85\u3048\u308b\u958b\u767a\u8005\u3001400 \u4e07\u306e\u7d44\u7e54\u3001\u304a\u3088\u3073 2 \u5104\u3092\u8d85\u3048\u308b\u30b3\u30fc\u30c9 \u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u30db\u30b9\u30c8\u3059\u308b\u3001\u4e16\u754c\u3067\u6700\u3082\u4eba\u6c17\u306e\u3042\u308b\u30bd\u30fc\u30b9\u7ba1\u7406\u30b7\u30b9\u30c6\u30e0\u306e 1 \u3064\u3067\u3059\u3002\u305d\u308c\u3067\u3082\u3001\u3059\u3079\u3066\u306e\u2026<\/p>","protected":false},"author":92,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[363],"tags":[],"class_list":["post-23116","post","type-post","status-publish","format-standard","category-contributed"],"acf":[],"_links":{"self":[{"href":"https:\/\/training.linuxfoundation.org\/ja\/wp-json\/wp\/v2\/posts\/23116","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/training.linuxfoundation.org\/ja\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/training.linuxfoundation.org\/ja\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/training.linuxfoundation.org\/ja\/wp-json\/wp\/v2\/users\/92"}],"replies":[{"embeddable":true,"href":"https:\/\/training.linuxfoundation.org\/ja\/wp-json\/wp\/v2\/comments?post=23116"}],"version-history":[{"count":5,"href":"https:\/\/training.linuxfoundation.org\/ja\/wp-json\/wp\/v2\/posts\/23116\/revisions"}],"predecessor-version":[{"id":23123,"href":"https:\/\/training.linuxfoundation.org\/ja\/wp-json\/wp\/v2\/posts\/23116\/revisions\/23123"}],"wp:attachment":[{"href":"https:\/\/training.linuxfoundation.org\/ja\/wp-json\/wp\/v2\/media?parent=23116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/training.linuxfoundation.org\/ja\/wp-json\/wp\/v2\/categories?post=23116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/training.linuxfoundation.org\/ja\/wp-json\/wp\/v2\/tags?post=23116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}