This query returns a list of pull request in the commit history of a sub tree in a repository.
Let us think about a monorepo, for example,
import boto3 | |
import json | |
import os | |
from botocore.credentials import Credentials | |
from google.oauth2 import id_token | |
from google.oauth2 import service_account | |
import google.auth | |
import google.auth.transport.requests |
I have created a local Kubernetes cluster with kind. Following are changes you need to get metric-server running on Kind.
Deploy latest metric-server release.
kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/download/v0.5.0/components.yaml
Within existing arguments to metric-server container, you need to add argument --kubelet-insecure-tls
.
This page has been moved to https://github.com/int128/hello-envoy
This is an example of Envoy TCP Proxy from localhost:10000
to www.google.com:80
.
See also https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/listeners/tcp_proxy.
To run a proxy:
Git 2.26.0以下*1には、細工したリポジトリをgit clone
したときに、
そのユーザーのCredential(たとえばGitHub.comをcloneするときに使う認証情報)を奪い取れる脆弱性があります。
📝 取得できる認証情報は credential.helper
の設定に依存する
既にPoC(検証するためのコード)もあり、結構簡単なので是非Gitを2.26.1以上にアップデートしましょう。 git submoduleを使うと見た目ではわかりにくい攻撃もできるので、「気をつける」では回避は難しいです。
GOROOT_1_11_X64=/usr/local/go1.11 | |
ANDROID_HOME=/usr/local/lib/android/sdk | |
JAVA_HOME_11_X64=/usr/lib/jvm/zulu-11-azure-amd64 | |
ImageVersion=20190930.2 | |
LANG=C.UTF-8 | |
INVOCATION_ID=029524e610de4329ac57a8f3e8b21281 | |
JAVA_HOME_12_X64=/usr/lib/jvm/zulu-12-azure-amd64 | |
ANDROID_SDK_ROOT=/usr/local/lib/android/sdk | |
RUNNER_TOOL_CACHE=/opt/hostedtoolcache | |
JAVA_HOME=/usr/lib/jvm/zulu-11-azure-amd64 |
apiVersion: extensions/v1beta1 | |
kind: Deployment | |
metadata: | |
name: kubernetes-dashboard-proxy | |
namespace: kube-system | |
spec: | |
replicas: 1 | |
template: | |
metadata: | |
labels: |