GitHub Actions, a popular CI/CD platform, introduces significant security challenges due to its integration with GitHub’s open ecosystem and its use of flexible workflow configurations. This paper presents Sher, a Py...GitHub Actions, a popular CI/CD platform, introduces significant security challenges due to its integration with GitHub’s open ecosystem and its use of flexible workflow configurations. This paper presents Sher, a Python-based tool that enhances the security of GitHub Actions by automating the detection and remediation of security issues in workflows. Self-Hosted Ephemeral Runner, or Sher, acts as a broker between GitHub’s APIs and a customizable, isolated environment, analyzing workflows through a static rules engine and automatically fixing identified issues. By providing a secure, ephemeral runner environment and a dynamic analysis tool, Sher addresses common misconfigurations and vulnerabilities, contributing to the resilience and integrity of DevSecOps practices within software development pipelines.展开更多
Using the first-principles plane-wave calculations within density functional theory, the perfect bi-layer and monolayer terminated WZ-CIS （100）/WZ-CdS （100） interfaces are investigated. After relaxation the atomic...Using the first-principles plane-wave calculations within density functional theory, the perfect bi-layer and monolayer terminated WZ-CIS （100）/WZ-CdS （100） interfaces are investigated. After relaxation the atomic positions and the bond lengths change slightly on the two interfaces. The WZ-CIS/WZ-CdS interfaces can exist stably, when the interface bonding energies are -0.481 J/m2 （bi-layer terminated interface） and -0.677 J/m2 （monolayer terminated interface）. Via analysis of the density of states, difference charge density and Bader charges, no interface state is found near the Fermi level. The stronger adhesion of the monolayer terminated interface is attributed to more electron transformations and orbital hybridizations, promoting stable interfacial bonds between atoms than those on a bi-layer terminated interface.展开更多
近年来,智能电视上的OTT(Over the Top)桌面非常流行,它提供了内容分类浏览、播放、搜索、运营和推荐等功能。由于业务需要,功能还在继续升级更新中,这使软件的复杂度越来越高,带来开发和维护的难题。高效的开发运维系统(DevOps),是软...近年来,智能电视上的OTT(Over the Top)桌面非常流行,它提供了内容分类浏览、播放、搜索、运营和推荐等功能。由于业务需要,功能还在继续升级更新中,这使软件的复杂度越来越高,带来开发和维护的难题。高效的开发运维系统(DevOps),是软件迭代升级的重要保障。该论文基于OTT桌面的应用场景和亚马逊云原生资源,研究和设计了高效的DevOps系统,包括OTT桌面系统框架,微服务,持续集成和交付,以及集中式日志系统,并应用到了商业项目中。展开更多
文摘GitHub Actions, a popular CI/CD platform, introduces significant security challenges due to its integration with GitHub’s open ecosystem and its use of flexible workflow configurations. This paper presents Sher, a Python-based tool that enhances the security of GitHub Actions by automating the detection and remediation of security issues in workflows. Self-Hosted Ephemeral Runner, or Sher, acts as a broker between GitHub’s APIs and a customizable, isolated environment, analyzing workflows through a static rules engine and automatically fixing identified issues. By providing a secure, ephemeral runner environment and a dynamic analysis tool, Sher addresses common misconfigurations and vulnerabilities, contributing to the resilience and integrity of DevSecOps practices within software development pipelines.
基金Project supported by the National Natural Science Foundation of China(Grant Nos.11164014 and 11364025)the Gansu Science and Technology Pillar Program,China(Grant No.1204GKCA057)
文摘Using the first-principles plane-wave calculations within density functional theory, the perfect bi-layer and monolayer terminated WZ-CIS （100）/WZ-CdS （100） interfaces are investigated. After relaxation the atomic positions and the bond lengths change slightly on the two interfaces. The WZ-CIS/WZ-CdS interfaces can exist stably, when the interface bonding energies are -0.481 J/m2 （bi-layer terminated interface） and -0.677 J/m2 （monolayer terminated interface）. Via analysis of the density of states, difference charge density and Bader charges, no interface state is found near the Fermi level. The stronger adhesion of the monolayer terminated interface is attributed to more electron transformations and orbital hybridizations, promoting stable interfacial bonds between atoms than those on a bi-layer terminated interface.
文摘近年来,智能电视上的OTT(Over the Top)桌面非常流行,它提供了内容分类浏览、播放、搜索、运营和推荐等功能。由于业务需要,功能还在继续升级更新中,这使软件的复杂度越来越高,带来开发和维护的难题。高效的开发运维系统(DevOps),是软件迭代升级的重要保障。该论文基于OTT桌面的应用场景和亚马逊云原生资源,研究和设计了高效的DevOps系统,包括OTT桌面系统框架,微服务,持续集成和交付,以及集中式日志系统,并应用到了商业项目中。
