nrw.social ist einer von vielen unabhängigen Mastodon-Servern, mit dem du dich im Fediverse beteiligen kannst.
Wir sind eine freundliche Mastodon Instanz aus Nordrhein-Westfalen. Ob NRW'ler oder NRW-Sympathifanten, jeder ist hier willkommen.

Serverstatistik:

2,8 Tsd.
aktive Profile

#shithappens

2 Beiträge2 Beteiligte1 Beitrag heute
Fortgeführter Thread

Простые правила безопасности

#GitLab #security #CI_CD #infosecurity #bingo #ShitHappens

Чтобы существенно повысить безопасность проекта, нужно соблюдать простые правила «гигиены»:

1. Используйте сетевую изоляцию для ваших окружений DEV TEST PROD.
2. Применяйте методы изоляции GitLab — protected branch/runner/tag/variable.
3. Выстраивайте процесс code review.
4. Настройте CodeOwners и отключите self-approve.
6. Настройте правила аппрувов для подразделений, чей код был затронут коммитом.
7. Используйте RBAC и мониторьте изменения прав.
8. Используйте базовые проверки безопасности: secret management, sast, dast, sca, container security, IAC sast.
9. Обеспечьте неизменный флоу проверок безопасности.
10. Храните все зависимости в локальном registry и запретите на раннерах доступ в интернет.

#GitLab #security #CI_CD #infosecurity #bingo #ShitHappens

**SHITTY CI_CD SECURITY BINGO**

Дефолтные креды
Push в main
Отладка на проде
Одна учётка на всех
Self approve MR
Ручная сборка
Права admin увсех
Privileged Runners
Креды в исходниках
Деплой в прод из feature-ветки
Bypass проверок
Мёртвые души
Force Merge
Доступ во внешнюю сеть
Ручной деплой

Ya know what i have learned from working in IT industry as software developer?

That if you are making ANY side project you dont have to even think about code optimizations, smart tricks for working faster or smoother,

Please, spend your time focusing on code readability, creating tests, cleaning mess and just having fun making code.

Your side project is not spotify, netflix or google.
And if it will be a new spotify... you will have thousands of engineers working for you to optimize code.
Now you just should focus on ending project and pushing it onto "production" aka your home server or some VPS for you and your friends to play with it.

Deliver first
Optimize... later ... maybe even using people working for cash from this project ;-)

also it is much easier to optimize code that is easy to read and is already tested.

Oh and for most projects at work it works also... unless you are working for one of these few hundreds projects that are running whole internet.
It is still more important to write readable code then making it super fast at first.
Readable code is just easier to read by your peers so you all will deliver faster.

Antwortete im Thread

@likelyjanlukas I must add sand, and small flying Tiki necklaces to my list. Imagine having that thing slingshot into your eye socket. I don't have to, cuz I felt it and have the marks to prove it. #ShitHappens Fortunately, no splinter in there. The irony being, it was a "Good Luck" charm given to me for free by a beach vendor.

"I am still alive and well and have not been killed in an accident due to alcohol, fire, water, electricity, and / or RF - Phhhzzzt!"

Tommorow I go snorkelling on the Ocean. What could go wrong swimming with Sharks?