Ko te Pūmanawa Pūtake Koreutu me te Tuwhera (FOSS) ngā mea e hanga ana 70-90% o te nuinga o ngā otinga pūmanawa hou, e noho ana hei poutokomanawa mō ngā mahi whakawhanake o ēnei rā. E whakanuia ana te Pūmanawa Pūtake Tuwhera (OSS) mō tōna whai huatanga utu, auaha, ngāwari, me te haumaru, nā te mārama o te waehere pūtake me te mahi tahi a te hapori. Heoi, ko tēnei tipu tere me te whakaurunga whānui ka kawea mai he mōrearea nui ki te whakawhanaketanga pūmanawa haumaru, inā koa nā te pikinga ake o te riri o ngā whakaeke kino i roto i ngā mōkihi pūtake tuwhera.
Hei ārai i ēnei mōrearea, me whakamahi ngā kaiwhakawhanake i ngā tikanga pai mō whanaketanga haumaru me te arotahi ki te waihanga i ngā taupānga pono. Mā te whakatinana i ngā tikanga OSS haumaru, ka taea e ngā tīma te whakaiti i ngā mōrearea, te whakarite i te pono, me te tiaki i te pono whānui o te pūmanawa. He arotahi kaha ki whanaketanga pūmanawa haumaru he mea nui mō te hanga taupānga pūmanawa pakari, pono hoki.
+ Whakarei ake i tō Huarahi Whakawhanake Haumaru
1. Whakauruhia te Whakawhanaketanga Haumaru ki roto i ngā Tukanga DevOps Pūtake Tuwhera
Te Huringa Mauī Haumarutanga (DevSecOps)
Me tīmata te haumarutanga i te tīmatanga o te huringa whanaketanga haumaru, inā koa mō ngā pūmanawa tuwhera-pūtake. DevSecOps ka nekehia te haumarutanga ki te tīmatanga o te tukanga, kia kore ai e whakaarohia he mea i muri mai. He rerekē, ka tāpirihia e ngā huarahi tuku iho te haumarutanga i te mutunga o te huringa. Ko ngā mahi matua ko:
Arotake Waehere me te Tātari Pūmau:
Ka kitea wawetia ngā ngoikoretanga i roto i ngā taputapu aunoa mō ngā arotake waehere me te tātari tūmau. Hei tauira, ka āwhina i a rātou ki te tautuhi me te whakatika i ngā take i mua i te ahu whakamua i roto i te Huringa Ora Whakawhanake Pūmanawa (SDLCHei tāpiritanga, ka whakauruhia ngā taputapu pēnei i a Xygeni ki roto i ngā rerengamahi DevOps, ka whakahaere i te tātaritanga pumau hei hura i ngā ngoikoretanga huna me te tiaki i te pono o te waehere.
Tātaritanga Hanganga Haumaru:
Whakahaere SCA taputapu mō ngā wāhanga tuwhera-pūtake me ō rātou whakawhirinakitanga hei aro atu ki ngā āwangawanga haumarutanga, raihana, me te tiaki. Hei tāpiri, kia whakarite kia tutuki ngā wāhanga tuwhera-pūtake i ā rātou raihana hei karo i ngā take ture. Ka whakaratohia e Xygeni te matawai raihana katoa, hei āwhina i ngā tīma ki te whakahaere i ngā mōrearea raihana me te pupuri i te tutuki i ngā whakaritenga.
2. Whakamātautau Aunoa me te Whakaurunga Tonu/Whakatakotoranga Tonu (CI/CD)
Whakamātautau aunoa i te haumarutanga i roto i te CI/CD pipeline hei whakarite kia mau tonu ngā arowhai haumarutanga i te wā o te tukanga whakawhanake. Mahia ēnei mahi:
Ngā Matawai Haumarutanga Aunoa:
Whakamahia ngā taputapu pēnei i a Xygeni hei whakahaere i ngā matawai haumarutanga auau i ngā turanga waehere me ō rātou whakawhirinakitanga. Ka kitea e te matawai aunoa ngā ngoikoretanga i te wā tūturu, ka taea ai te mahi tonu. Ko te whakaurunga o Xygeni ki roto CI/CD mā tēnei ka whakarite kia haere tonu te matawai, kia whakawhāitihia ai te āheinga o te whakauru i te waehere ngoikore ki roto i te mahi whakaputa.
Whakahaere Tiakitanga:
Whakamahia standard ngā taputapu mō te whakahaere i ngā whakawhirinakitanga me te aroturuki i ngā wāhanga tuwhera-pūtake, me te whakahou tonu i aua mea. Nga taputapu penei Xygeni aunoa i ngā whakahōunga whakawhirinakitanga kore haumaru, manatoko i ngā papaki hou, me te waihanga SBOMs mō te māramatanga me te tutuki i ngā whakaritenga.
3. Whakatinanahia ngā Kūaha Haumarutanga mō te Whakawhanaketanga Pūmanawa Haumaru me te Pūtake Tuwhera
Ko ngā kēti haumaru pipeline ngā tirotiro e aukati ana i te whakatairanga i te waehere mēnā ka rahua ngā whakamātautau haumarutanga. Ka tukuna noa e mātou ngā waehere haumaru i ngā wāhanga whakawhanake me te whakatinanatanga.
Whakaū i ngā Kaupapahere:
Whakatūria, ā, whakatinanahia ngā kaupapa here haumarutanga kia tutuki ai ngā kaupapa here i mua i te hanumitanga, i te whakatinanatanga rānei. Me whai kia paahitia ngā whakamātautau haumarutanga, me te piri tika ki ngā ture waehere mō ngā kaupapa here. standards, me ngā whakawhirinakitanga kua whakahoutia. Mā ōna āhuatanga i roto i te whakatinanatanga o ngā kaupapa here, ka whakamanahia te piripono ki te standardi roto i te umanga, pērā i te OWASP a NIST SP 800-204D.
Āraia ngā Wāhanga Morearea me ngā Wāhanga Kino:
4. Whakamahia ngā Otinga Whakawhanake Pūmanawa Haumaru Matatau
Te Whakahaere Whakaraerae Whānui
Whakauruhia ngā otinga haumarutanga matatau ki roto i te whanaketanga haumaru mō ngā pūmanawa tuwhera-pūtake hei whakarite i te whakahaerenga ngoikoretanga whānui, me te neke atu i ngā tikanga CVE i roto i te whakaritenga. Kei roto i tēnei ko:
Ngā Pūtake Raraunga Whakaraerae Whānui:
Hei whakarite kia whānui ake te kapinga o ngā tūmomo riri pea, whakamahia ngā otinga pēnei i a Xygeni e whakauru ana i ngā ngoikoretanga kore-CVE me ngā pātengi raraunga whānui hei hopu i ngā ngoikoretanga i ngaro i ngā pūmanawa tuku iho. CVE rārangi.
Aromatawai Mōrearea e Mōhio Ana ki te Horopaki:
Whakamahia ngā taputapu e whakarato ana i te aromatawai mōrearea e mōhio ana ki te horopaki hei whakatau i ngā ngoikoretanga i runga i tōna kaha, tōna āheinga ki te whakamahi, me te pānga pakihi pea. Nō reira, mā ngā āheinga aromatawai mōrearea matatau a Xygeni ka taea e ngā whakahaere te arotahi i ngā rauemi ki te whakaiti i ngā take tino nui i te tuatahi.
5. Whakatinanahia he Whakatūpato me te Urupare Moata
Whakatinanahia he otinga whanaketanga haumaru e taea ai te kimi me te whakautu i ngā tūmomo riri i te wā tūturu, me te tautuhi me te aukati i te iti rawa i te kotahi huinga o ngā mahi kino i tēnei wā tonu.
Nga Pūnaha Whakatupato Moata:
Whakahaerehia he pūnaha whakatūpato wawe pērā i a Xygeni Early Warning. Ka uru atu tēnei ki te matawai tonu i ngā putunga tuwhera me ngā putunga tūmataiti mō ngā tohu o ngā Mōkihi Whakahē, o te Pūmanawa Kino Zero-Day rānei. Ka āraihia e ngā ratonga whakatūpato wawe, pērā i ngā mea e tukuna ana e Xygeni, ngā tūmomo riri pea i mua i te taenga atu ki tētahi taiao whanaketanga hei whakarite i te parenga matatau ki ngā riri e puta ake ana.
Aunoatanga Urupare Aituā:
6. Ngā Mea Ngaro Haumaru me ngā Mōhiohio Tairongo
He mea nui kia mōhio kei te whakahaeretia pai ngā mōhiohio tairongo pēnei i ngā kī API me ngā taipitopito tuakiri, ā, kia kore ai e huna ki roto i ngā kōnae pūtake hei ārai i te urunga kore whakamanatanga.
Mā te otinga whakahaere mea ngaro a Xygeni e whakarato he rokiroki haumaru me te urunga atu ki ngā mōhiohio tairongo. Haunga tēnā, ka whakauruhia ā mātou taputapu ki roto i tō taiao whanaketanga hei whakahaere pai i ngā mea ngaro, me te whakaiti i ngā mōrearea e pā ana ki te whakaatu i aua mea i roto i ngā kaupapa tuwhera-pūtake. Kei roto i te otinga a Xygeni ngā rauropi matawai matatau e tautuhi ana i te neke atu i te 100 momo mea ngaro me te tika kore e taea te whakataurite. Nā tōna whakaurunga ki a Git, ka whakaratohia e Xygeni te haumarutanga i te wā tūturu mā te whakakore i te tukanga i mua i te... committe tuku ki roto i ngā whare putunga mēnā te kimi ngaro. Koinei te huarahi hei tiaki i ngā mea ngaro i mua i te taenga ki te hītori putanga, he mea kāore e taea te tango katoa atu i aua mea.
7. Whakamahia te Kimi me te Urupare i ngā Āhuatanga Kāore i te Tika
I roto i te whanaketanga pūmanawa me te pūmanawa tuwhera, ka tautuhia e te pūnaha kimi hapa ngā mahi whakapae a te tangata me ngā whanonga waehere rerekē e tohu ana i te tahae tohu tuakiri, i te pangia pea rānei e te pūmanawa kino. Mēnā ka tere te urupare a te riri, ka whakaitihia te pānga.
Ka whakamahia e ngā taputapu kimi hapa a Xygeni ngā āheinga matatau hei tautuhi i ngā hapa. Mā tēnei ka taea te kimi tere me te urupare ki ngā āhuatanga pea. whakakino, me te whakarite kia pehia te riri i mua i te tūponotanga ki te whakaputa kino. Ka whakaratohia e Xygeni ngā whakatūpato wā-tūturu mō ngā hapa kua kitea kia tere ai te mahi a tō rōpū. Ka taea te tuku i aua whakatūpato mā te īmēra, mā te WebHook rānei, ā, ka taea te whakauru atu ki ngā ratonga karere pēnei i a Slack hei whakarato i te horopaki whai tikanga mō ia aituā, ā, mā reira ka taea ai ngā urupare tere me te whai mōhiotanga.
8. ASPM whakatinanatanga ki te Whakawhanaketanga Pūmanawa Haumaru me te Pūtake Tuwhera
ASPM ko te aro turuki me te whakahaere tonu i te tūnga haumarutanga o tētahi tono kia mōhio ai kei te whakamahia tonutia, kei te whai hua hoki ngā mahi haumarutanga.
Mā te whakamahi i te ASPM ngā taputapu i whakaratohia e Xygeni, ka kitea tonutia e koe ngā tūnga haumarutanga o ō tono. Hei tāpiri, ka whakarite tā mātou tūāpapa i te parenga pakari ki ngā pūmanawa kino me ētahi atu momo riri mā te pupuri i ngā mahi haumaru katoa kia hou tonu. Hei tāpiri, tā mātou ASPM ka kitea aunoa ngā rawa, ka aroturuki tonu i ngā mea katoa me te aromatawai i ō rātou hononga me ō rātou tūnga haumaru. Nā tēnei, ka taea te tirohanga whānui me te whakahaere i ngā ngoikoretanga kia whai hua ai te aroturuki, te whakahaere, me te whakatika.
Te Whakawhanaketanga Pūmanawa Haumaru me ngā Tikanga Pai Pūtake Tuwhera
Ko te huarahi pai ki te whakarite i te pono me te pono o tō tono pūmanawa ko te whai i ngā tikanga pai mō te whakawhanaketanga pūmanawa haumaru me te pūtake tuwhera. Tuatahi, whakauruhia te haumarutanga ki roto i ō tukanga DevOps mā te whakamātautau aunoa me te whakaurunga me te tuku tonu (CI/CD). Hei tāpiri, whakamahia ngā taputapu matatau hei mahi i ngā mahi whānui SCA, e āhei ai koe ki te whakahaere i ngā mōrearea mai i ngā whakawhirinakitanga pūtake tuwhera, te whakarite kia tutukihia ngā whakaritenga, me te whakaiti i ngā tūmomo mōrearea ki ō tono. Heoi anō, mā te whakarite i ēnei mahi hei kaupapa matua, ka taea e koe te whakaiti i ngā ngoikoretanga me te tiaki i tō pūmanawa mai i ngā tūmomo mōrearea o ēnei rā.
Hei tāpiri atu ki tēnā, ka whakaratohia e Xygeni ngā taputapu katoa e hiahiatia ana e koe hei whakatinana i ēnei mahi pai rawa atu. Mai i te whakahaere whakawhirinakitanga me te tutuki i ngā whakaritenga raihana ki te kimi ngoikoretanga i te wā tūturu, ka whakamanahia e Xygeni tō rōpū ki te hanga pūmanawa haumaru, pono hoki, me te noho whakamua tonu i ngā wero haumarutanga.
Mahihia i tenei ra:
Whakapai ake i te tūnga haumarutanga o tō pūmanawa, ā, tiakina hoki ō tono mai i ngā tūmomo riri e whanake haere ana. Tūhurahia me pēhea e taea ai e Xygeni te āwhina i a koe ki te tiaki i tō huringa whanaketanga me ngā otinga hou.
