Tsarin Lambobin Xygeni na Maleriya 73

Kusan kowane mako, tsarin gano ƙwayoyin cuta namu yana duba dubban sabbin fakiti da aka sabunta a cikin rajistar jama'a kamar npm da PyPI. Wannan makon ya kasance mai aiki sosai.

Mun tabbatar Fakiti 198 na cutarwa, galibi a fadin npm, tare da ƙarin shari'o'i a cikin PyPI, OpenVSX, Composer, da VS Code. Da yawa sun bayyana a cikin ƙungiyoyi masu haɗin gwiwa, tare da sake buga munanan sakewa da aka buga a ƙarƙashin sunaye iri ɗaya ko a cikin iyalai masu alaƙa da juna. Wani lamari mai ban mamaki shine shari'ar da ta fi fice ita ce sensivity kunshin, wanda ya cika npm da fitowar da aka yi wa sigar sama da 60 a cikin kewayon 2.5.x. Sauran manyan rukunoni sun haɗa da ai-sdk-helpers (Sigogi 8 da ke niyya ga masu haɓaka AI), @antoncallahan/aws-user-helper (nau'ikan 7 da ke kwaikwayon amfanin AWS), @apple-pay-trust da kuma @google-pay-trust iyalai (kwaikwayon tsarin biyan kuɗi), @frengki0707/google-cloud-clone (nau'ikan 5 da ke yin lalata da Google Cloud), da kuma cms-storehub, cms-helpgit, Da kuma cms-github (wanda aka yi niyya ga CMS pipelines). Fakiti da yawa sun kwaikwayi tsarin biyan kuɗi da biyan kuɗi, enterprise da kuma fakitin yanar gizo na ciki, abokan ciniki na nazari, tushen UI, kayan aikin haɓakawa, masu binciken sassa, fakitin girgije da jigogi na Google, da sauran kayayyaki waɗanda aka fi amincewa da su a cikin ayyukan ci gaba na zamani.

Waɗannan ba wasu abubuwa ne da ba a saba gani ba. Abin da ya fito fili a wannan makon shi ne yawan bugawa da aka yi a gidajen fakiti ɗaya, sake amfani da tsarin suna, da kuma yadda aka ɓoye fakitin da ba su dace ba don su yi kama da dogaro na gaskiya a cikin isar da software na gaske. pipelines.

Wannan hoton mako-mako wani ɓangare ne na ci gaba da ake yi da Mummunan Lambobin Yaƙi, inda muke tabbatar da sabbin barazanar da kuma samar da bayanan sirri masu amfani don taimakawa ƙungiyoyin DevSecOps don kare su. pipelinekafin lalacewa ta faru.

Bari mu bayyana abin da muka samu a wannan makon da kuma dalilin da ya sa yake da muhimmanci.