Eksekusi Kode Jarak Jauh pada Homebrew dengan GitHub Actions

arjunaskykok · April 28, 2021, 7:41am

Ada insiden keamanan di Homebrew.

Penjelasan dari orang yang menemukan masalah ini ada di artikel berikut:

Contoh serangannya bisa dilihat di sini:

github.com/Homebrew/homebrew-cask

WIP

Homebrew:master ← Ry0taK:master

opened 08:00AM - 18 Apr 21 UTC

Ry0taK

+3 -0

Note: Testing something with approval from Homebrew staff **Important:** *Do no…t tick a checkbox if you haven’t performed its action.* Honesty is indispensable for a smooth review process. After making all changes to a cask, verify: - [ ] The submission is for [a stable version](https://github.com/Homebrew/homebrew-cask/blob/master/doc/development/adding_a_cask.md#stable-versions) or [documented exception](https://github.com/Homebrew/homebrew-cask/blob/master/doc/development/adding_a_cask.md#but-there-is-no-stable-version). - [ ] `brew audit --cask {{cask_file}}` is error-free. - [ ] `brew style --fix {{cask_file}}` reports no offenses. Additionally, **if adding a new cask**: - [ ] Named the cask according to the [token reference](https://github.com/Homebrew/homebrew-cask/blob/master/doc/cask_language_reference/token_reference.md). - [ ] Checked the cask was not [already refused](https://github.com/Homebrew/homebrew-cask/search?q=is%3Aclosed&type=Issues). - [ ] Checked the cask is submitted to [the correct repo](https://github.com/Homebrew/homebrew-cask/blob/master/doc/development/adding_a_cask.md#finding-a-home-for-your-cask). - [ ] `brew audit --new-cask {{cask_file}}` worked successfully. - [ ] `brew install --cask {{cask_file}}` worked successfully. - [ ] `brew uninstall --cask {{cask_file}}` worked successfully.

Intinya mesti berhati-hati mengecek input dari luar dan berhati-hati dalam merge kode.