I te whanaketanga o te huringa ora o te mekameka tuku pūmanawa mai i te waehere pūtake ki ngā taonga ka taea te whakahaere, ko te wāhanga hanga he wāhi nui. Heoi anō, ka taea hoki e tēnei wāhanga whakarerekētanga te pāngia e te whānuitanga o ngā tūmomo mōrearea ka tūpono ki te whakararu i te pono o te pūmanawa me te build securityKa taea e ēnei tūmomo riri te uru ki roto i te tukanga hanga mā roto i ngā momo tikanga, tae atu ki te karo i te mea kua whakatūria CI/CD pipeline, te whakarerekē i te mana whakahaere waehere i muri i te pūtake, te whakararu i te tukanga hanga ake, te whakahaere rānei i ngā putunga taonga. I roto i tēnei pou rangitaki, ka ruku hohonu mātou ki ēnei tūmomo riri, ā, ka tirotirohia ngā whakaeke hanga mekameka tuku pūmanawa tino kitea. Kei te haere tonu tēnei ihirangi i tā mātou raupapa rangitaki e tūhura ana software supply chain security puta noa i te SDLC.
Te Wāhanga Hanga i roto i te Huringa Oranga o te Whakawhanaketanga Pūmanawa
Ko te wāhanga hanga o te huringa ora o te mekameka tuku pūmanawa e kapi ana i te tukanga o te whakawhiti i te waehere pūtake ki ngā taonga pūmanawa ka taea te whakahaere. Kei roto i tēnei wāhanga ko te whakahiato, te hono, me te tākai i te waehere pūtake, tae atu ki te whakaputa i ngā mōkihi tāutanga me ngā kōnae whirihoranga.
Build security Ko ngā tūmomo mōrearea he ngoikoretanga e āhei ai te hoa whawhai ki te whakauru i ngā huringa kore whakamanatanga ki te pūmanawa i te wā o te tukanga hanga me te kore e whakarerekē i te waehere pūtake. Ka taea te whakauru i ēnei tūmomo mōrearea mā roto i ngā tikanga maha, pērā i te whakararu i te taiao hanga, te whakamahi rānei i ngā ngoikoretanga i roto i ngā taputapu hanga.
Ngā Whakaeke Hanga Pūmanawa Tino Noa - Ngā Tūkinotanga Hanga
Tuhinga CI/CD
E pā ana tēnei ki te mahi o te karo i ngā mea kua whakatūria CI/CD (te whakaurunga tonu me te tuku tonu) pipeline ki te hanga tika me te whakaputa pūmanawa me te kore e whai i ngā tukanga whakamātautau, manatoko, me te arotake pakari e whakatinanahia ana e te mana whakahaere pipelineKa taea tēnei mā te hanga ā-ringa i te pūmanawa i waho o te CI/CD taiao, mā te whakamahi rānei i ngā taputapu, i ngā tuhinga rānei e āhei ai ngā whakarerekētanga kāore i whakamanahia ki te tukanga hanga. Ko tētahi tauira o tēnei momo whakaekenga whārite ko te Te Whakaeke a JenkinsI te tau 2022, i uru puku mai ngā kaipahua ki te hanganga pipeline o tētahi kaupapa pūmanawa tuwhera rongonui ko Jenkins te ingoa. I werohia e ngā kaipahua te waehere kino ki roto i tētahi kōnae Jenkins, he tuhinga e tautuhi ana i te tukanga hanga. Nā te waehere kino i āhei ai ngā kaipahua ki te karo i te CI/CD pipelineka werohia te waehere ki roto i te tukanga hanga. Kātahi ka whakahaerehia tēnei waehere ki ngā pūnaha o ngā whakahaere i tāuta i te pūmanawa.
Whakarerekētia te waehere i muri i te mana whakahaere pūtake
Ko tēnei mahi he hanga i ngā huringa kore whakamanatanga ki te waehere pūtake i muri i te commiti honoa ki tētahi pūnaha whakahaere pūtake pono (SCS) kātahi ka hanga i te pūmanawa mā te whakamahi i tēnei waehere kua whakarerekētia. Ka taea tēnei mā te whakarerekē tika i te waehere i runga i te teihana mahi a te kaiwhakawhanake, mā te whakamahi rānei i ngā taputapu o waho, i ngā tuhinga rānei hei wero i te waehere kino ki roto i te tukanga hanga. Ko tētahi tauira o tēnei whakaekenga vector ko te GitLab Attack i te tau 2022. I uru puku ngā kaipahua ki te hanga pipeline of GitLabI werohia e ngā kaipahua te waehere kino ki roto i te GitLab CI/CD pipeline, he taputapu e whakahaere aunoa ana i te build security tukanga. Nā te waehere kino i āhei ai ngā kaipahua ki te whakarerekē i te waehere i muri i te tirotiro i roto i te mana whakahaere pūtake. Nā tēnei i āhei ai rātou ki te wero i tā rātou waehere ki roto i te pūmanawa, kātahi ka whakahaerehia ki ngā pūnaha o ngā whakahaere i tāuta i te pūmanawa.
Te tukanga hanga whakaaetanga
Kei roto i tēnei ko te whakahaere, te whakarerekē rānei i te tukanga hanga tonu, mā te urunga tika ki te taiao hanga, mā te whakamahi rānei i ngā ngoikoretanga i roto i ngā taputapu hanga, i ngā whakawhirinakitanga tuatoru rānei. Ka taea tēnei te mahi hei whakauru i te waehere kino ki roto i te putanga hanga, hei whakararuraru i te pūtake hanga, hei whakararuraru rānei i te tukanga hanga katoa. Ko te tauira rongonui o tēnei whakaekenga whārite ko te SolarWinds AttackI uru kore mana tetahi kaiwhakaeke ki te tūāpapa hanga a SolarWinds, he pūnaha e whakamahia ana hei whakahiato me te tākai i te pūmanawa SolarWinds Orion. I werohia e tēnei tuhinga he waehere kino ki roto i te pūmanawa SolarWinds Orion kua whakahiatohia. I te wā i tāutahia ai e ngā kaiwhakamahi te pūmanawa kua takahia, ka whakahaerehia te waehere kino ki ā rātou pūnaha, ka hoatu he urunga kore mana ki te kaiwhakaeke ki ā rātou pūnaha. I taea hoki e te kaiwhakaeke te tahae i ngā raraunga tairongo mai i ā rātou pūnaha, pērā i ngā tohu tuakiri, ngā taonga hinengaro, me ngā mōhiohio kiritaki.
Putunga taonga tuku iho
E pā ana tēnei ki te urunga kore whakamana, te whakarerekē rānei i tētahi putunga taonga tuku iho, te wāhi e rongoa ai ngā mōkihi pūmanawa me ngā pūnaha rua hei tohatoha ki ngā kaiwhakamahi o roto, o waho rānei. Ka taea e ngā kaiwhakaeke te whakamahi i tēnei ngoikoretanga hei whakauru i te waehere kino, hei whakarerekē i te pono o te pūmanawa, hei whakararuraru rānei i te tukanga whakatinanatanga. Ko tētahi tauira o tēnei whakaekenga pūāhua ko Ngā RubyGems i te tau 2022I uru puku ngā kaipahua ki te putunga taonga tuku iho a RubyGems. I whakakapia e ngā kaipahua tētahi taonga tuku iho tika ki tētahi taonga kino, ā, i tangohia ake e ngā mano tini o ngā whakahaere e hanga pūmanawa ana me Ruby on Rails. Nā te taonga tuku iho kino i āhei ai ngā kaipahua ki te whakahaere i ngā waehere tūpono ki ngā pūnaha o ngā whakahaere i tāuta i te pūmanawa. Tērā pea ka taea e rātou te tahae raraunga, te tāuta pūmanawa kino, te whakararuraru rānei i ngā mahi.
Korero Whakamutunga
I te mea kei te awhi tonu ngā whakahaere i ngā mahi whakawhanake pūmanawa e aro nui ana ki te aunoatanga me te tuku tonu, kua nui ake te hiranga o te tiaki i te tukanga hanga pūmanawa. Mā te whakatinana i ngā mahi haumarutanga pakari puta noa i te wāhanga hanga, ka taea e ngā whakahaere te whakaiti i te tūponotanga o te taka ki ngā whakaeke kino ka taea te whakararu i te pono me te haumarutanga o ā rātou pūmanawa.
Ko ngā rautaki kua whakarārangihia i roto i tēnei pou rangitaki me ngā tauira kua whakaratohia hei whakamahara he wāhi ngoikore te wāhanga hanga i roto i te mekameka tuku pūmanawa. Me tūpato ngā whakahaere ki ēnei tūmomo riri, ā, me whakatinana i ngā mahi haumarutanga e tika ana hei tiaki i ā rātou pūmanawa mai i te whakaekenga. Mā te mahi pera, ka taea e rātou te whakarite i te pono, te haumarutanga, me te pono o ā rātou pūmanawa mō ā rātou kaiwhakamahi me ngā kiritaki.
Hono mai ki tā mātou haerenga ki tētahi pūnaha pūmanawa haumaru
Kaua e mahue tēnei whai wāhitanga ki te noho ki mua i te arai i ngā tūmomo mōrearea o te mekameka tuku pūmanawa. Ohauru ki tā mātou blog i tēnei rā, kia noho ko koe te tuatahi ki te whiwhi i ā mātou tirohanga hou, kia mau tonu ai te pakari me te haumaru o tō whakahaere i waenganui i ngā tūmomo mōrearea e whanake haere ana. Mā te mahi tahi, ka taea e tātou te hanga i tētahi pūnaha pūmanawa pakari ake, haumaru ake hoki mō te katoa.
Mātakihia tā mātou Whakaaturanga Ataata
