Lɛsin dɛn we dɛn lan frɔm `oapi-codegen` in tɛm na di GitHub Sikyu Opin Sɔs Fɔnd

\u003ch2\u003eLɛsin dɛn we dɛn lan frɔm `oapi-codegen` in tɛm na di GitHub Sikyu Opin Sɔs Fɔnd\u003c/h2\u003e \u003cp\u003eDis opin-sɔs GitHub ripɔsitɔri de ripresent wan impɔtant kɔntribyushɔn to di divɛlɔpa ɛkosistim. Di projɛkt de sho di mɔdan divɛlɔpmɛnt prɔsis ɛn kɔlabɔraytiv kɔdin.\u003c/p\u003e \u003ch3\u003eTɛknikal Ficha dɛn\u003c/h3\u003e \u003cp\u003eDi ripɔsitɔri go mɔs inklud:\u003c/p\u003e \u003kul\u003e \u003cli\u003eKlin, wɛl-dɔkyumɛnt kɔd\u003c/li\u003e \u003cli\u003eKɔmprɛhɛnsif RIDME wit yuz ɛgzampul dɛn\u003c/li\u003e \u003cli\u003eIshu trak ɛn kɔntribyushɔn gaydlayn\u003c/li\u003e \u003cli\u003eRɛgyula ɔpdet ɛn mentenɛns\u003c/li\u003e \u003c/ul\u003e \u003ch3\u003eKɔmyuniti Impɛkt\u003c/h3\u003e \u003cp\u003eOpen-source projɛkt lɛk dis wan de fos fɔ sheb no ɛn aksɛleret tɛknikal inovashɔn tru aksesbul kɔd ɛn kollaborativ divɛlɔpmɛnt.\u003c/p\u003e

Kwɛshɔn dɛn we dɛn kin aks bɔku tɛm

Wetin na di GitHub Secure Open Source Fund ɛn aw oapi-codegen bin bɛnifit frɔm am?

Di GitHub Sikyu Open Source Fund na wan tin we de gi faynɛns sɔpɔt to impɔtant opin-sɔs prɔjek dɛm fɔ mek dɛn ebul fɔ mek dɛn sikyɔriti pozishɔn bɛtɛ. Fɔ oapi-codegen, patisipeshon min dediket tɛm fɔ ɔdit dipɛnsin, fɔ mek di kɔd jenɛreshɔn paip layn at, ɛn fɔ mek bɛtɛ rilis prɔsis. Di fund bin mek di mentenɛns dɛn ebul fɔ trit sikyɔriti as fɔs klas kɔnsyans pas fɔ bi afta-tɔk, we mek dɛn gɛt mɔ trɔst tul fɔ di Go ikɔsistɛn.

Wetin na di impɔtant sikyɔriti lɛsin dɛn we dɛn lan frɔm dis ɛkspiriɛns?

Di big tin dɛm we dɛn kin tek na di impɔtants fɔ dipɛnsin pin, riprodaktibɛl bild, ɛn mentɛn wan klia vulnerabiliti disklɔshɔn prɔses. Di wan dɛn we de mek mentenɛns bin kam fɔ no se ivin di tin dɛn we dɛn de yuz fɔ mek kɔd kin mek dɛn gɛt prɔblɛm wit di sapɔt chen if dɛn nɔ tek tɛm manej dɛn yon dipɛnsin dɛn. Fɔ mek wan SECURITY.md fayl, fɔ mek dɛn ebul fɔ skan ɔtomatik dipɛnsin, ɛn fɔ du ɔdit ɔltɛm na bin sɔm pan di kɔnkrit stɛp dɛn we dɛn bin tek fɔ ridyus di risk ɔlsay na di prɔjek in layf.

Aw divɛlɔpa dɛn go intagret oapi-kɔdjɛn sikrit wan insay dɛn yon prɔjek dɛn?

Divɛlɔpa dɛn fɔ pin oapi-codegen to wan patikyula, ɔdit rilis pas fɔ trak @latest. Rɔn di tul insay CI wit lɔk dipɛnsin ɛn verify jenarayz autput agens wan no-gud beslayn ad ɔda layt fɔ protɛkshɔn. Fɔ tim dɛn we de manej kɔmpleks API stak dɛn, pletfɔm dɛn lɛk Mewayz — we de gi 207 intagreted modul dɛn na $19/mo — kin strimlayn sikyɔriti API wokflɔ dɛn we nɔ nid ɛvri tim fɔ han-kɔnfigyut dɛn yon tulchɛn frɔm skrach.

Yu tink se oapi-codegen go kɔntinyu fɔ gɛt sikyɔriti-fɔs mentenɛns afta di fund tɛm dɔn?

Yɛs. Wan pan di men autkam dɛm fɔ di GitHub Sikyu Open Source Fund patisipeshon na fɔ ɛmbas di sikyɔriti prɔsis dɛm dairekt insay di projɛkt in kɔntribyushɔn gaydlayn ɛn rilis prɔses, so dɛn de kɔntinyu pas di tɛm we dɛn dɔn fɔnd. Di mentenɛns dɛn bin rayt ɔl di sikyɔriti wokflɔ fɔ mek shɔ se dɛn kɔntinyu fɔ wok. Fɔ divɛlɔpa dɛn we de abop pan jenarayz API klaynt dɛn na skel, fɔ pe oapi-codegen wit wan manejd pletfɔm lɛk Mewayz (207 modul, $19/mo) kin ridyus mɔ di ɔpreshɔnal lod fɔ kip intagreshɔn dɛn ɔp to det.

, we yu kin yuz