检测GitHub提交的IP地址 [英] Detect IP address of GitHub commit

查看:402
本文介绍了检测GitHub提交的IP地址的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

我是一些企业github仓库的所有者。最近我们一直怀疑一个开发人员可能会通过他借用的github身份(许多上午4点的提交)批准帮助外包。 github.com上有确定提交者的源IP地址的方法吗?在流量页面上,我可以基于独特克隆的数量推断出这些信息,但这还不足以验证我们的担忧。



干杯,
Joe Anonymous

解决方案

如果这个个人,如果我引用你的公司权利,让他的分包商承诺官方回购以他的名义没有进一步的预防措施,那么他是一个白痴,应该被解雇。



在这种情况下,你可能甚至不需要提交者的IP地址。提交本身包含一些非常有用的数据:

  git cat-file -p< suspicious-commit-id> 

将显示整个提交对象。它将包含两行,如下所示:

 作者Foo Bar< foo@bar.com> 1398017575 +0200 
提交者Foo Bar< foo@bar.com> 1398017575 +0200

正如您所看到的,Unix时代时间戳后面有时区信息。如果你在美国东海岸,你应该看到类似于 -0500 的东西。如果分包商在印度,你会看到 +0630 或类似的东西。



个人可能比这更有意义。所以分包商推动他的回购,然后他重写历史并推向官方回购。在后一种情况下,祝你好运。


i'm the owner of a few corporate github repositories. Lately we have been suspicious of a developer who may be enlisting outsourced help through his borrowed github identity (many 4am commits in batches). Is there a way on github.com to determine the source IP address of the committer? On the traffic page i can infer this info based on teh number of unique clones, but this is not enough data for us to validate our concerns.

Cheers, Joe Anonymous

解决方案

If this "individual", if I'm quoting your corporatese right, lets his subcontractors commit themselves to the official repo in his name without further precautions, then he is an idiot and deserves to be fired.

In this case, you probably don't even need the committer's IP address. The commit itself contains some very useful data:

git cat-file -p <suspicious-commit-id>

Will show the entire commit object. It will contain two lines like this:

author Foo Bar <foo@bar.com> 1398017575 +0200
committer Foo Bar <foo@bar.com> 1398017575 +0200

As you can see there is timezone info following the Unix-epoch timestamps. If you're on the East Coast in the USA, you should see something like -0500. If the subcontractors are in India, you'll see +0630 or something like that.

The "individual" has probably more sense than that. So the subcontractors push to his repo, then he rewrites history and pushes to the official repo. In the latter case, good luck.

这篇关于检测GitHub提交的IP地址的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!

查看全文
登录 关闭
扫码关注1秒登录
发送“验证码”获取 | 15天全站免登陆