xz-backdoor-github

xz-backdoor-github Histórico de commits relacionados ao backdoor xz descoberto em 29 de março de 2024: CVE-2024-3094. Atualmente, o GitHub removeu os repositórios por violações dos Termos de Serviço. O propósito disto é facilitar a pesquisa de segurança sobre como esse backdoor foi inserido ao...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

On the Prevalence and Usage of Commit Signing on GitHub: a Longitudinal and Cross-Domain Study

GitHub is one of the most widely used public code development platform. However, the code hosted publicly on the platform is vulnerable to commit spoofing that allows an adversary to introduce malicious code or commits into the repository by spoofing the commit metadata to indicate that the code...