Hei Āpiha Matua mō te Haumarutanga Mōhiohio, hei CIO, hei miihini DevOps rānei, he mea nui kia whakarite kia tika te whirihoranga o tō tūāpapa hei tuku ratonga pumau, pono hoki ki ō kaiwhakamahi. Heoi anō, ka puta pea ngā hapa whirihoranga mō ngā take maha, mai i te hapa tangata ki ngā huringa i roto i tō hanganga. I roto i tēnei pou rangitaki, ka tūhuratia e mātou me pēhea te kimi me te whakaoti rapanga hapa whirihoranga i roto i tō tūāpapa DevOps pūmanawa.
Hei tīmatanga, he mea nui kia mārama koe he aha te whirihoranga hē, me tōna pānga ki tō pūhara.
He aha te whirihoranga hē?
He whirihoranga hē te te rerekētanga mai i te whirihoranga e whakaarohia ana mō tō pūnaha, ka arahi pea ki ngā raruraru maha pēnei i te te wā kore mahi, ngā ngoikoretanga haumarutanga, me te mahi ngoikore.
Ko ngā tauira o ngā whirihoranga hē ko ngā peka waehere tuku kāore i tiakina, te kore arotake waehere, ngā mahi whakahaere urunga ngoikore pērā i te kore o te manatoko maha-wāhanga, ngā peere rokiroki e wātea ana ki te marea i roto i te hanganga kapua, ngā hapa i roto i CI/CD pipelines, ngā raraunga nui kāore i whakamunatia i te wā e okioki ana, ngā kaupapa here kupuhipa ngoikore me ngā kī whakamuna kāore i hurihia.
Me pēhea e kitea ai ngā whirihoranga hē?
He maha ngā huarahi hei kite i ngā whirihoranga hē i roto i tō pūhara. Ko tētahi huarahi ko te whakamahi i ngā taputapu aroturuki hei whakatūpato i a koe ki ngā rerekētanga mai i tō whirihoranga taketake. Ka taea te whirihora i ēnei taputapu aroturuki hei tuku whakatūpato ina rerekē te whirihoranga i roto i te pūnaha DevOps engari kāore e tutuki ana i te āhua e tumanakohia ana. Ko ētahi atu tauira ko:
- Commit hainatangaHei karo i te whakarerekētanga waehere me te pupuri i te pūtake o ngā huringa i roto i te waehere, ka hiahiatia pea e te whakahaere kia commitme hainatia te s e te kaituhi. Tērā pea ka whirihorahia ngā putunga waehere kia hiahiatia he hainatanga commits (hei tauira i roto i pull requests), ā, ka taea te ripoata i tētahi whirihoranga hē ina kore tēnei e whakaūtia.
- hanga pipeline he mahi e pā ana ki te haumarutangaHe maha ngā tirotiro ka taea te whakauru ki roto i te hanganga pipeline hei whakapai ake i te haumarutanga o ngā taonga tuku iho. Te matawai i ngā mea ngaro, te tautuhi i ngā ngoikoretanga e mōhiotia ana i roto i te waehere pūtake, i roto rānei i ngā whakawhirinakitanga, te whakahaere i ngā fuzzers, te whakaputa i te Pire Rauemi Pūmanawa (SBOM), me ērā atu. Ko tētahi whirihoranga hē i konei ko te korenga o ngā tirotiro i roto i te pipeline e ai ki ngā whakaritenga o te kaupapa here pūmanawa ūnga.
- Te kore o ngā Arotakenga Waehere: Ko ngā Arotakenga Waehere te mana whakahaere tino mōhiotia hei karo i ngā take haumarutanga. Kia whai hua ai, me mōhio ngā kaiarotake waehere ki ngā mea hei tirotiro mā te arotake i ngā whanonga hē e pā ana ki te haumarutanga, pērā i ngā ngoikoretanga e aro ana ki te pakihi, tae atu ki ngā tatau muri ā-ture. Engari i tētahi atu taha, me whakamana ngā arotakenga, ā, ki te kore e mahia, me ara ake ngā whakatūpato. Ka taea e ngā kaiarotake whirihoranga hē te tirotiro kei te hiahiatia ngā arotakenga waehere i ngā wā kua whakaritea, hei tauira, i mua i te whakakotahitanga o tētahi pull request ki roto i tētahi peka waehere ka whakamahia mō te tuku.
- Te mana iti rawaMā ngā mana nui rawa ka āwhina i ngā whakaeke kia ahu whakamua, kia neke taha hoki. Me tuku e ngā taputapu me ngā pūnaha he huinga whakaaetanga iti rawa hei mahi i te mahi e hiahiatia ana. Ka taea e ngā taputapu kimi whirihoranga hē te āwhina ki te whakatakoto i tētahi whirihoranga kua raka, hei tauira mā te rapu i ngā mana kaiwhakahaere ina kore e hiahiatia, mā ngā whirihoranga kua raka taunoa rānei.
- Kia mau te mana whakahaere i te tukuHe mana whakahaere pakari ake mō te whakaputa me te whakamahinga o ngā wāhanga me ngā whakaahua me te wāhi. Tērā pea ka puta he pūrongo mai i tētahi taputapu tirotiro whirihoranga hē ina whakamahia he putunga tūmatanui e te kaiwhakahaere mōkihi, kaua ki te rēhita ā-roto o te whakahaere, e mahi ana hei pareārai ahi 'rārangi-mā', ina tukuna rānei he pūmanawa kāore e hiahiatia he tiakitanga whakamuna pēnei i ngā waitohu mamati, te tiwhikete takenga mai rānei.
Kia kitea e koe tētahi whirihoranga hē, ko te mahi e whai ake nei ko te whakaotihia te raruraruAnei ētahi mahi ka taea e koe te whai hei rapurongoā me te whakatika i ngā whirihoranga hē:
Me pēhea te whakatau i ngā whirihoranga hē?
Pūmanawa hou pipelinewhakauru i ngā taputapu maha mai i SCM nga kaitiaki me te hanga taputapu hei CI/CD ngā pūnaha me ngā taputapu whakahaere whirihoranga. Mā ngā whirihoranga hē o ēnei taputapu ka huaki te kuaha ki ngā whakaekenga mekameka tuku.
Kua whakaratohia ngā tikanga whakatikatika horopaki, kia taea ai e ngā kaihangarau DevOps te whakatika wawe i te whirihoranga hē, me te ako me pēhea te karo i ngā take rite ā muri ake nei. Anei ētahi mahi hei whakaaroaro:
- Tāutuhia te pūtake o te whirihoranga hēKo te taahiraa tuatahi ki te whakaoti rapanga ko te tautuhi i tōna pūtake. Mēnā ka hē te whirihoranga, me whakatau koe he aha te take i rerekē ai te whirihoranga i whakaarohia. He hapa tangata, he huringa i roto i tō hanganga, he hapa rānei i roto i tō waehere? Kia kitea e koe te pūtake, ka taea e koe te mahi i te mahi tika hei whakatika i te raruraru.
- Hoki whakamuri ki tētahi whirihoranga pai e mōhiotia anaMena i puta te hapa whirihoranga nā tētahi huringa hou ki tō pūnaha, ka taea pea e koe te whakatika i te raruraru mā te hoki ki tētahi whirihoranga pai e mōhiotia ana. Ko te tikanga tēnei ko te hoki ki tētahi putanga o mua o te whirihoranga o tō pūnaha, me pumau, ā, me kore he hapa whirihoranga.
- Whakahōu i ō tuhingaMena nā te kore o ngā tuhinga i puta ai te hapa whirihoranga, he mea nui kia whakahoutia ō tuhinga kia kore ai e puta anō ngā raruraru ōrite ā muri ake nei. Kei roto i tēnei ko te whakahou i ngā kōnae whirihoranga o tō pūnaha, me ngā tuhinga ā-roto, ngā tikanga rānei e pā ana ki tō pūhara.
- Whakatinana aunoatangaKa taea e te aunoatanga te āwhina i te aukati i ngā whirihoranga hē mā te kimi me te whakatika aunoa i ngā peka ke mai i te whirihoranga e whakaarohia ana. Ka taea tēnei te mahi mā te whakamahi i ngā taputapu pēnei i ngā pūnaha whakahaere whirihoranga, e āhei ai koe ki te tohu i te whirihoranga e hiahiatia ana e koe, me te whakamahi aunoa ki tō pūnaha.
Me pēhea te āwhina a te Pūhara Haumarutanga Mekameka Tuku i tō whakahaere?
A software supply chain security Mā te tūāpapa e āwhina ki te whakarite i te haumarutanga me te pono o tō kamupene mā te aroturuki i te tukanga whakawhanake me te tohatoha pūmanawa katoa. Kei roto i tēnei ko:
- Te whai i te pūtake o ngā wāhanga pūmanawa.
- Te manatoko i te pono o ngā tukunga pūmanawa.
- Te tautuhi me te whakaiti i ngā ngoikoretanga haumarutanga.
Ko tetahi o nga painga tuatahi o a software supply chain security te tūāpapa, ka taea e ia kitea ngā whirihoranga hē i te tīmatanga o te tukanga whakawhanake i mua i te noho hei raruraru. Nā te mea ko te tūāpapa te aroturuki tonu i te tukanga whakawhanake pūmanawa a whakamōhio atu ki ngā tīma e tika ana mēnā ka kitea he rerekētanga mai i te whirihoranga i whakaarohia.
Kia kitea he whirihoranga hē, ka software supply chain security ka taea e te papaaho te āwhina i te whakaoti rapanga mā te te whakarato i ngā taputapu me ngā mōhiohio e tika ana hei whakatika i te raruraruHei tauira, ka whakaratohia pea e te tūāpapa he rangitaki taipitopito, he karere hapa rānei hei āwhina i ngā kaiwhakawhanake ki te tautuhi i te pūtake o te raruraru.
Haunga te kimi me te whakaoti rapanga hapa, he software supply chain security ka taea hoki e te papaaho āwhina ki te ārai i ngā whirihoranga hē i te tuatahi. Ka taea tēnei mā te whakamahi i ngā taputapu whakahaere aunoa me te whirihoranga, e whakarite ana kua tika te whirihoranga o te pūmanawa, ā, kāore he ngoikoretanga.
Hei whakamutunga, ka raru pea ō raruraru mēnā he whirihoranga hē pūhara DevOps pūmanawa, mai i wā kore mahi mō ngā ngoikoretanga haumarutanga. Ma te whakamahi taputapu tirotiro, mahi arotake auau, a te whakatinana aunoatanga, ka taea e koe te kite me te whakaoti tere i ngā whirihoranga hē, me te whakarite kia mau tonu tō tūāpapa pumau, pono hoki mō ō kaiwhakamahi.
Hei whakamutunga, a software supply chain security pūhara rite Xygeni he taputapu nui mō ngā whakahaere e rapu ana ki te whakarite i te te haumarutanga me te pono o ā rātou pūmanawa. Na aroturuki tonu te tukanga whakawhanake me te tohatoha pūmanawa, ka taea e te tūāpapa kitea me te whakaoti i ngā whirihoranga hē.
