Ko te tere me te kore he haumarutanga ka puta he mōrearea tūturu. Ko ngā tīma whakawhanake e tuku ana i ngā tukunga maha i ia rā puta noa i ngā taiao kapua uaua me whai taputapu haumarutanga DevOps e whakauru ana ki ia wāhanga o te pipeline aunoa, ehara i te mea he pūwāhi tirotiro i te mutunga. Ka hipokina e tēnei aratohu ngā taputapu haumarutanga DevOps tekau matua mō te tau 2026, me te whakataurite i ngā mea e tiakina ana e ia taputapu, te mutunga o tana kapinga, me pēhea te whiriwhiri i te huinga tika mō ngā whakaritenga puranga, rahi, me te tutuki o tō tīma.
Ngā Utauta Haumarutanga DevOps 10 Pai rawa atu mō te tau 2026
Ripanga Whakataurite: Ngā Utauta Haumarutanga DevOps
| taputapu | Te kohinga | Te Whakaora AI | CI/CD Te whakauru | Best For |
|---|---|---|---|---|
| Xygeni | SAST, SCA, DAST, IaC, Ngā Mea Ngaro, CI/CD, ASPM, Pūmanawa Kino, Ipu | Āe, Whakatikatika Aunoa AI me te Mōrearea Whakatikatika | Tangata whenua me guardrails | Ngā tīma e hiahia ana ki ngā DevSecOps katoa i roto i te tūāpapa kotahi |
| Jit | SAST, SCA, Ngā mea ngaro mā roto i ngā whakaurunga | No | GitHub, GitLab, Jenkins | Ngā tīma e tīmata ana i tā rātou haerenga DevSecOps me te whakamahi i ngā modular |
| Waeherehere | SCM, pipelines, SCA, ipu, kapua | No | Te kapinga o te mekameka tuku taketake | Enterprise ngā tīma e hiahia ana kia tautokohia mai i te tīmatanga ki te mutunga pipeline a SCM aritanga |
| Āpiiro | ASPM, SAST, SCA, IaC, tūnga kapua | No | GitHub, GitLab, Bitbucket | Ngā tīma e whakatairanga ana i ngā mōrearea horopaki me ASPM kāwanatanga |
| aikido | SAST, SCA, IaC, ipu, tū kapua | Whakatika-ā-wāhanga aunoa | Ngā monomai IDE me CI/CD kuwaha | E hiahia ana ngā tīma kaiwhakawhanake-tuatahi ki te kapi whānui o AppSec kia tere ai |
| Punga | Ngā whakaahua ipu, SBOM, te whakatinanatanga o ngā kaupapa here | No | Jenkins, GitLab, Ngā Mahi GitHub | Ngā tīma e tiaki ana i ngā tono ipu me te whakatinanatanga o ngā kaupapa here |
| Snyk | SCA, SAST, IaC, ipu | Ngā PR whakatika ā-wāhanga | IDE, Git, CI/CD | Ngā kaiwhakawhanake kei roto kē i te pūnaha Snyk |
| Wiz | Te tūnga o te kapua, ngā ipu, IaC, ngā tuakiri | No | Ko te whakauru-a-API | Enterprise ngā tīma haumarutanga kapua e whakahaere ana i ngā taiao maha-kapua |
| GitHub Haumarutanga Arā Atu Anō | SAST, CodeQL, matawai whakawhirinakitanga, mea ngaro | No | Ngā Mahi taketake a GitHub | E hiahia ana ngā tīma taketake o GitHub ki te haumarutanga kua hangaia ki roto, engari kāore he taputapu tāpiri. |
| Kaitiaki mekameka | Ngā whakaahua ipu whakapakeke, te takenga mai o te mekameka tuku | No | Rēhita me te CI/CD pāwhaitua | Ngā tīma e whakakapi ana i ngā whakaahua turanga ngoikore ki ngā momo CVE kore |
1. Xygeni
Overview: Xygeni he tūāpapa haumarutanga DevOps kotahi, e whakamahia ana e te AI, e kapi ana i ngā paparanga katoa o te huringa ora whanaketanga pūmanawa i roto i te rerenga mahi kotahi. I te nuinga o ngā taputapu haumarutanga DevOps e tohunga ana ki te paparanga kotahi, e rua rānei, ka whakakotahi a Xygeni SAST, SCA, DAST, IaC te matawai, te kimi mea ngaro, CI/CD haumarutanga, parenga pūmanawa kino, matawai ipu, me te ASPM me te kore e hiahiatia ngā tīma ki te pupuri i ngā taputapu motuhake, ki te whakataurite rānei i ngā kitenga puta noa i ngā momotuhi kua wehea dashboards.
Ko tōna ASPM Ka kitea aunoatia e te paparanga, ka whakarārangihia hoki ngā rawa pūmanawa katoa, ka honoa ngā kitenga mai i ia matawai, ā, ka whakamahia he awa whakarite kaupapa matua hei whakaatu i ngā mōrearea nui e hiahia ana kia arohia, ka whakaitihia te nui o te whakatūpato tae atu ki te 90 ōrau. Mā te Agentic AI mā DevAI ka whakaratohia te kimi ngoikoretanga tonu i roto i te IDE i te wā e tuhi ana ngā kaiwhakawhanake i te waehere, ko CoreAI ia e whakamaori ana i te tūnga haumarutanga hei pānga pakihi mō ngā kaiārahi haumarutanga. Mō te horopaki i runga Ngā mahi pai a DevSecOps me te ngā taputapu DevSecOps pai rawa atu, ka whakaratohia e aua hononga he horopaki whenua whānui ake.
Āhuatanga matua:
- Te kapinga katoa o te puranga: SAST, SCA, DAST, IaC te matawai, te kimi mea ngaro, CI/CD haumarutanga, parenga pūmanawa kino, matawai ipu, build security, me te kimi i ngā āhuatanga rerekē i roto i te tūāpapa kotahi
- ASPM me te kimi rawa aunoa, te hononga mōrearea puta noa i ngā matawai katoa, me te whakatau i ngā mea matua mā te whakamahi, te taea te toro atu, te horopaki pakihi, me te whakaaturanga ipurangi
- Whakatikatika Aunoa AI me Te tātari mōrearea whakaora te whakaputa i ngā whakatikatika waehere haumaru, e mōhio ana ki te horopaki, kua whakamanahia mō te pānga o te pakaru-huringa i mua i te tono
- Agentic AI mā DevAI mō te matawai taumata-IDE wā-tūturu me ngā whakaaro whakatika, me CoreAI mō te pūrongo mōrearea me te whakahaere ā-ture.
- CI/CD haumarutanga guardrails te whakatinana i ngā ture Kaupapahere-hei-Waehere puta noa i GitHub Actions, GitLab CI, Jenkins, Bitbucket Pipelines, me Azure DevOps
- Te kimi pūmanawa kino i te wā tūturu puta noa i ngā rēhita pūtake tuwhera, te aukati i ngā tūmomo riri mekameka tuku kore-rā i mua i te urunga mai ki te SDLC
- Te kimi i ngā mea ngaro puta noa i te hītori o Git, pipelines, ipu, me ngā putunga me te whakaurunga matau Git hei aukati commits
- IaC security te matawai mō Terraform, Kubernetes, Helm, Ansible, me CloudFormation
- Te mahere hanganga ture ki te NIST 800-53, ISO 27001, CIS Ngā Paearu, SOC 2, OWASP, me OpenSSF
- Ngā putunga me ngā kaihautū mutunga kore, kāore he utu mō ia tūru
Pai hoki: Ngā tīma hangarau, DevSecOps, me ngā rōpū kaiārahi haumarutanga e hiahia ana ki tētahi tūāpapa kotahi e whakamahia ana e te AI e kapi ana i ngā paparanga katoa o te SDLC me te kore e whakahaere i tētahi huinga taputapu haumarutanga DevOps pakarukaru.
Tau utu: Ka tīmata i te $33/marama mō te tūāpapa katoa-i-te-kotahi. Kei roto SAST, SCA, DAST, CI/CD Haumarutanga, Kimi Mea Ngaro, IaC Security, me te Matawai Ipu. Ngā putunga me ngā kaituku kōrero mutunga kore, kāore he utu mō ia nohoanga.
2. Jit
Overview: Jit e whakatū ana i a ia anō hei tūāpapa haumarutanga-hei-waehere e whakauru tika ana i te haumarutanga DevOps ki roto i ngā rerengamahi kaiwhakawhanake me te kore e mahi hei kaitiaki tatau pokapū. Ka taea e ngā tīma te tautuhi i ngā kaupapa here haumarutanga hei waehere i roto i ā rātou putunga me te whakamana aunoa i aua kaupapa here i roto i CI/CD pipelineTuhinga o mua pull requestsMā tōna hoahoanga ā-pūrere ka taea e ngā tīma te tīmata me ngā tirotiro taketake mō ngā mea ngaro, ngā whakawhirinakitanga, me ngā whirihoranga hē, kātahi ka whakawhānui ake i te kapinga i te tipu haere o tō rātou pakeketanga haumarutanga.
Ko te kaha o Jit ko tōna iti o te whakawhāititanga mō ngā tīma e tīmata ana i tā rātou haerenga DevSecOps. Ko tōna herenga ko tana whakawhirinaki ki ngā whakaurunga me ngā matawai tuatoru hei whakatutuki i te kapinga, ko te tikanga ko te whānui me te hohonu o te tiakitanga e whakawhirinaki ana ki te pai o te whirihoranga me te tiaki i aua whakaurunga. Mō ngā tīma e hiahia ana ki te matawai whānui i hangaia ki roto, kaua ki te paparanga whakarite, ka taea e te tauira kapinga papaki te hanga āputa. Mō te horopaki i runga Ngā kaupapa matua o DevSecOps, e hipokina ana e taua hononga te huarahi neke-maui kua hangaia a Jit hei tautoko.
Āhuatanga matua:
- Te whakatinanatanga o te Kaupapahere-hei-Waehere e tautuhi ana me te whakamahi i ngā ture haumarutanga tika i roto i ngā putunga mō te whakatinanatanga PR aunoa
- CI/CD te whakaurunga ki a GitHub Actions, GitLab CI, Bitbucket, me Jenkins
- Te tirotiro i ngā mea ngaro me te tirotiro i ngā ngoikoretanga mō ngā tohu kua kitea, ngā whakawhirinakitanga tawhito, me ngā CVE e mōhiotia ana
- Te whakatakotoranga ā-pūrua e āhei ai ngā tīma ki te tīmata me ngā arowhai matua, me te whakawhānui haere i te kapinga
- He māmā te whakamahi me te iti o ngā utu mō ngā tīma e tīmata ana i tā rātou kaupapa haumarutanga DevOps
raruraru:
- Ka whakawhirinaki te kapinga ki ngā whakaurunga tuatoru, ka kore e ōrite te āhua mena kāore he whakatūnga me te tiaki tupato
- Kāore he tātaritanga hohonu mō te whakamahinga, te taea rānei te toro atu; e arotahi ana ki te noho mai o ngā mōrearea, kaua ki te pānga tuturu.
- He iti noa te whakatikatika ā-roto me te iti ake o ngā whakaaro whakatika tika, te whakaputa PR aunoa rānei i ngā tūāpapa motuhake
- Kāore i te kotahitanga ASPM tūāpapa; kāore ngā kitenga e hono ana puta noa i ngā paparanga matawai ki roto i te tirohanga mōrearea kotahi
Pai hoki: Kei te tīmata ngā tīma whakawhanake i tā rātou haerenga DevSecOps e hiahia ana kia whakatinanahia te haumarutanga-hei waehere i roto i ā rātou CI/CD pipelines me te iti rawa o te utu tīmatanga.
Tau utu: Kei te wātea he taumata kore utu mō te matawai taketake. Ka rerekē ngā mahere utu i runga i ngā whakaurunga me te whakamahinga. Ka whakaratohia ngā taipitopito utu mēnā ka tonoa.
3. Waehere Hiko
Overview: Waeherehere ko te application security posture management he tūāpapa e arotahi ana ki te tiaki i te mekameka tuku pūmanawa mai i te pito ki te pito. Ka aroturukihia e ia ngā pūnaha whakahaere waehere pūtake, CI/CD pipelinengā rēhita taonga tuku iho, me ngā whakatinanatanga kapua hei whakaatu i te tirohanga a ngā tīma ki te pūtake mai o ngā mōrearea me te horapa o aua mōrearea puta noa i te pipelineKo tāna huarahi haumarutanga mekameka tuku e kapi ana i pipeline ngā whirihoranga hē, te whakaaturanga o ngā kī urunga, me SCA i te taha o te matawai waehere tuku iho.
He kaha te whakarato a Cycode enterprise-taumata te kapinga engari me nui ake te tatūnga me te whirihoranga i ngā taputapu haumarutanga DevOps tuatahi a ngā kaiwhakawhanake. Tērā pea ka kitea e ngā rōpū iti ake, e te hunga kāore he kaimahi haumarutanga motuhake, he nui ake te utu whakahaere o te tūāpapa i te uara. Ka taea hoki e tana tauira raihana modular te tāpiri utu i te whānui haere o te kapinga. Mō te horopaki CI/CD pipeline security, e kapi ana taua hononga i ngā ariā e tika ana.
Āhuatanga matua:
- Full pipeline aroturukitanga kapinga SCMs, CI/CD pipelines, ngā rēhita taonga tuku iho, me ngā taiao kapua
- Ngā mea ngaro me te kimi kī urunga e kitea ana ngā taipitopito tuakiri kua kitea i roto i te waehere, ngā rangitaki, me ngā kōnae whirihoranga
- SCA me te matawai ipu me te aroturuki CVE, ngā raraunga whakamahi, me te whakatau kaupapa matua
- Kaupapahere-hei-Waehere mō te whakaritenga SCM a pipeline security te whakatinanatanga o ngā ture
- Te whakataurite i ngā whakaritenga ki te NIST, SOC 2, me te ISO 27001 standards
raruraru:
- Te whakatūnga me te tiaki uaua e hiahia ana ki ngā kaimahi haumarutanga motuhake i te nuinga o te wā enterprise Tuhinga o mua
- Ko te tikanga o te raihana ā-pūrere ko ētahi atu āheinga ka hiahiatia pea he utu raihana tāpiri
- He ara ako pakari mō ngā tīma kāore i te mōhio ki ngā tūāpapa haumarutanga mekameka tuku
- ritenga enterprise utu kāore he kōwhiringa ratonga-whaiaro tūmatanui
Pai hoki: Enterprise ngā tīma e hiahia ana kia kitea te mekameka tuku pūmanawa mai i ngā putunga waehere mā te whakatinanatanga kapua, me ngā rauemi haumarutanga motuhake hei whakahaere me te pupuri i te tūāpapa.
Tau utu: ritenga enterprise tauira utu e hangai ana ki ngā whakaurunga, te maha o ngā putunga, me ngā āhuatanga kua whakahohea.
4. Āpiiro
Overview: Āpiiro he tino rongonui mo ona Application Security Posture Management ngā āheinga me te hōhonutanga o tana tātaritanga mōrearea horopaki. Ka whakaratohia he tirohanga mōrearea kotahi puta noa i te waehere, te hanganga, me ngā taiao kapua, e hono ana i ngā kitenga ngoikore ki tā rātou horopaki pakihi me te whakaatu i te hononga o ngā mōrearea ki ētahi atu wāhanga. Ko tana huarahi e aro nui ana ki te mārama ki te whānuitanga katoa o tētahi kitenga, kaua ki te tohu noa i tōna aroaro.
Ko te hohonutanga o ngā horopaki o Apiiro te mea matua e wehewehe ana i waenga i ngā taputapu haumarutanga DevOps, engari enterpriseNā te hoahoa -grade ka uaua ake te whakahaere i ngā momo māmā ake. Tērā pea ka kitea e ngā tīma kāore he rauemi AppSec i whakatapua he nui ake te uaua o ngā āhuatanga whirihoranga me te whakahaere i tā te taumata pakeke e hiahiatia ana. Mō ngā tīma e arotake ana ASPM ngā papaaho motuhake, ki runga ASPM tirohanga whānui mō ngā taputapu e whakarato ana i te horopaki whakatairite whai hua.
Āhuatanga matua:
- Te tirohanga mōrearea kotahi e whakauru ana i ngā raraunga mai i SAST, SCA, IaC, ā, ka matawai te kapua ki roto i tētahi mōrearea kotahi dashboard
- Te whakatau kaupapa matua e mōhio ana ki te horopaki, te tautuhi i ngā ngoikoretanga me te pānga nui ki ngā tono motuhake.
- Te whakatinanatanga o ngā Kaupapahere-hei-Waehere puta noa i ngā putunga me CI/CD pipelines
- Te whakaurunga o te reremahi a te kaiwhakawhanake ki a GitHub, GitLab, Bitbucket, me ngā mea noa CI/CD mahere
- Te mahere ture me te whakahaere ki ngā anga NIST, ISO 27001, me SOC 2
raruraru:
- Enterprisetērā pea ka nui ake ngā āhuatanga e arohia ana i ngā hiahia o ngā tīma iti ake, o ngā tīma tīmatanga rānei
- He mea whakarite te utu, kāore i te rārangi tūmatanui, me whai wāhi atu ki te aromatawai i te utu a ngā kaihoko
- Ko te whirihoranga mō ngā whakatinanatanga matatini, maha-taiao e hiahia ana ki te tohungatanga motuhake
- Kāore he Whakatikatika Aunoa AI taketake, he whakatikatika aunoa rānei kua hangaia ki roto i te tūāpapa
Pai hoki: Enterprise ngā tīma haumarutanga e whakatairanga ana i te māramatanga hohonu ki ngā horopaki mōrearea me ASPM te whakahaere i ngā putea pūmanawa matatini, maha-taiao.
Tau utu: ritenga enterprise te utu i runga i ngā whakaurunga, ngā kaiwhakamahi, me ngā rohe kapinga.
5. Aikido
Overview: Haumarutanga Aikido he tūāpapa haumarutanga DevOps e arotahi ana ki ngā kaiwhakawhanake e whakakotahi ana i SAST, SCA, IaC te matawai, te haumarutanga ipu, me te whakahaere tūnga kapua i roto i te atanga kotahi. E aro nui ana tōna hoahoa ki te tere o te whakauru me te iti o te waku, e āhei ai ngā tīma ki te hono i ngā putunga GitHub, GitLab rānei, ka tīmata te matawai i roto i ngā meneti. E whakaatu ana tōna huarahi whakaiti haruru i ngā mōrearea tino nui anake i roto i pull requests, me te pupuri i te arotahi o te kaiwhakawhanake ki ngā mea nui.
He whānuitia ngā momo haumarutanga DevOps e hipokina ana e Aikido mō tōna utu, ā, he mea whai hua mō ngā tīma iti ake. Ko tōna kaupapa matua e whakawhirinaki ana ki te whakatauranga kaha, me te kore e hiahiatia he horopaki whakamahi hohonu, he horopaki taea te toro atu rānei e whakaratohia ana e ngā tūāpapa pakeke ake, ā, he iti noa iho te whakaritenga kaupapa here ki te whakatauritea ki enterprisengā taputapu haumarutanga DevOps taumata--. Mō te horopaki ngā huarahi whakamātautau haumarutanga tono, e kapi ana taua hononga i te whenua whānui.
Āhuatanga matua:
- Matawai maha-mata e kapi ana i te waehere tono, ngā whakawhirinakitanga pūtake tuwhera, IaC ngā tauira, me ngā ipu
- Te whakatūnga tere e hono ana i ngā putunga GitHub, GitLab rānei mō te matawai i roto i ngā meneti
- Te whakaiti i te haruru e whakaatu ana i ngā take nui me te tātari i ngā kitenga iti te pānga
- Ngā matohi e pai ana ki ngā kaiwhakawhanake e whakauru ana i ngā hua ki roto pull requests mō ngā whakatikatika tere ake
- Te whakahaere i te tūnga kapua e tautuhi ana i ngā whirihoranga hē i roto i ngā taiao AWS, GCP, me Azure
raruraru:
- Te whakatau kaupapa matua i runga i ngā kaute kaha, me te kore he horopaki whakamahi, he horopaki taea rānei te toro atu
- He iti noa te whakaritenga Kaupapahere-hei-Waehere ki te whakataurite ki enterprise Ngā taputapu haumarutanga DevOps
- Kāore pea e ranea te hōhonutanga o te tauine mō ngā mea nunui, matatini hoki enterprise Ngā taiao DevOps
- He iti ake ngā whakaurunga ki enterprise ngā tūāpapa haumarutanga me te SIEM
Pai hoki: Ko ngā tīma whakawhanake iti ki te rahi waenga e hiahia ana ki te kapinga haumarutanga DevOps whānui i roto i tētahi tūāpapa e pai ana ki ngā kaiwhakawhanake, me te kore e hiahiatia he rauemi whakahaere haumarutanga motuhake.
Tau utu: Ka tīmata i te $300 pea ia marama mō te 10 kaiwhakamahi. Ka whakaritea te utu mō ia kaiwhakamahi i runga i te rahi o te tīma. Whakaritenga enterprise ngā mahere e wātea ana.
6. Anchore
Overview: Punga e aro nui ana ki te haumarutanga o te ahua ipu me SBOM te whakaputa mō ngā taiao DevOps. Ka tautuhia ngā ngoikoretanga, ngā whirihoranga hē, me ngā mōrearea raihana i roto i ngā whakaahua ipu i mua i te taenga ki te whakaputanga, ka whakamanahia ngā kaupapa here ritenga hei waehere, ā, ka whakaurua ki roto CI/CD pipelinehei hanga i te haumarutanga ipu hei standard wāhanga o ngā rerengamahi hanga. Ko tāna SBOM Nā te tautoko mō ngā hōputu SPDX me CycloneDX, he kōwhiringa whai hua tēnei mā ngā tīma e whai ana i ngā whakaritenga ture e pā ana ki te māramatanga o te pūmanawa.
Ko te whānuitanga o Anchore he mea hanga ki te ipu. Kāore e whakarato SAST, te kimi mea ngaro, rānei CI/CD pipeline te haumarutanga whanonga i te hohonutanga e tukuna ana e ngā taputapu haumarutanga DevOps katoa. Ngā tīma me ngā kawenga mahi kua whakakīia ki roto i ngā ipu e hiahia ana ki te whakatinanatanga kaupapa here me te SBOM ka kitea e te whakatupuranga he otinga arotahi, he otinga kaha, ahakoa e hiahiatia ana he taputapu tāpiri mō te kapinga haumarutanga DevOps katoa. Mō ngā horopaki e pā ana ki IaC security a haumarutanga ipu, e kapi ana aua hononga i ngā wāhanga e tika ana.
Āhuatanga matua:
- Te matawai i te ahua o te ipu mō ngā ngoikoretanga, ngā mōkihi tawhito, me ngā whirihoranga haumaru kore
- SBOM te whakaputa i roto i ngā whakatakotoranga SPDX me CycloneDX mō te kitea me te tutuki i ngā whakaritenga o te mekameka tuku
- Te whakatinanatanga o te Kaupapahere-hei-Waehere me ngā ture ritenga ka taea te aukati i ngā hanganga, i ngā whakatinanatanga rānei
- CI/CD te whakaurunga ki a GitHub Actions, GitLab CI, me Jenkins
- Kua maherehia te pūrongo hanganga ture ki te NIST, CIS Ngā Paearu, me te SOC 2
raruraru:
- Te whānuitanga e aro ana ki te ipu me te iti o te kapinga mō te waehere tono, ngā mea ngaro, ngā mea rānei pipeline whanonga
- Me whai tohungatanga haumarutanga me te whakapau kaha tonu ki te tuhi me te pupuri i ngā kaupapa here ritenga
- Kāore he whakatikatika aunoa; ka arotahi ki te kimi me te whakatinana i ngā mahi, kaua ki te whakaputa whakatikatika.
- Me whai taputapu haumarutanga DevOps tāpiri mō te katoa SDLC kapinga
Pai hoki: Ngā tīma e hanga ana i ngā tono ipu e hiahia ana kia hangai ki ngā kaupapa here SBOM te whakatinanatanga o te haumarutanga whakaputa me te ipu hei wāhanga o ā rātou DevOps pipeline.
Tau utu: Putanga pūtake tuwhera (Anchore Engine) e wātea ana mō te kore utu. Pānuitanga arumoni enterprise he tūāpapa me te whakahaere kaupapa here matatau, te pūrongo, me te tautoko e wātea ana mā te utu ritenga.
7. Snyk
Overview: Snyk Ko tētahi o ngā taputapu haumarutanga DevOps e whakamahia whānuitia ana, e mōhiotia ana mō tana huarahi kaiwhakawhanake-tuatahi me ngā whakaurunga rauropi kaha. Ka hipokina e ia te matawai whakawhirinakitanga pūtake tuwhera, te haumarutanga ipu, IaC matawai, me te kaupapa taketake SAST, te whakauru ki roto i ngā IDE, ngā rerengamahi Git, me CI/CD pipelineki ngā kitenga haumarutanga mata i ngā wāhi e mahi ana ngā kaiwhakawhanake. Ko tana whakatika aunoa pull requests whakaitihia te waku i waenga i te kimi me te whakatika i ngā ngoikoretanga o te whakawhirinakitanga.
Ko te tikanga o te tauira utu ā-pūrua a Snyk, me hoko ngā pūrua mahere motuhake mō ia kāwai matawai mō te kapinga haumarutanga DevOps katoa, ka piki ake te utu i te whānui haere o te kapinga. He iti ake te horopaki o tōna whakamahinga me tōna taea te toro atu i te whakakotahi. ASPM tüäpapa, me CI/CD pipeline kei waho o tōna whānuitanga te haumarutanga whanonga. Mō te horopaki mō Snyk's SCA ngā āheinga ki te whakataurite, kei roto i taua hononga he whakamārama taipitopito.
Āhuatanga matua:
- SCA te kimi i ngā CVE i roto i ngā whakawhirinakitanga pūtake tuwhera me ngā taunakitanga whakapai ake me ngā PR whakatika aunoa
- Ipu me IaC te matawai, te tirotiro i ngā whakaahua Docker me ngā tauira Terraform mō ngā whirihoranga hē
- IDE me SCM te whakaurunga ki te VS Code, IntelliJ, GitHub, GitLab, me Bitbucket
- Ngā whakaaro whakatika e pai ana ki ngā kaiwhakawhanake me pull requests mō te whakaora i te whakawhirinakitanga
- Kua maherehia te whakaritenga tutukitanga ki te ISO 27001 me te SOC 2
raruraru:
- Ia kōwae (SAST, SCA, IaC, Ipu) ka utua motuhaketia, ka piki ake te utu me te whānuitanga o te kapinga
- He iti noa te horopaki o te whakamahinga me te taea te toro atu mō te whakatau tika i te whakaraeraetanga
- No CI/CD pipeline te kimi i ngā āhuatanga rerekē o te haumarutanga whanonga, te kimi rānei i ngā āhuatanga rerekē o te mekameka tuku
- Ko ētahi āhuatanga whakahaere matatau e herea ana ki ngā taumata teitei ake enterprise mahere
Pai hoki: Kei roto kē ngā tīma whakawhanake i te pūnaha Snyk e hiahia ana ki te whakawhānui open source security te kapinga puta noa i te waehere, ngā ipu, me IaC i roto i tētahi tukanga mahi a te kaiwhakawhanake kua mōhiotia.
Tau utu: Taumata kore utu me ngā matawai iti. Ka utua ngā mahere utu mō ia kaiwhakawhanake me ia kōwae. Ka tauinehia ngā utu me te whānuitanga o te kapinga me te rahi o te tīma. Enterprise me whakarite ngā utu mō ngā mahere.
8. Wiz
Overview: Haumarutanga Matatau GitHub (GHAS) ka whakauru tika i te matawai haumarutanga DevOps ki roto i te tūāpapa GitHub, e whakarato ana i te CodeQL-based SAST, te matawai whakawhirinakitanga mā Dependabot, me te kimi ngaro hei āhuatanga taketake o te rerengamahi GitHub. Mō ngā tīma katoa standardi runga i a GitHub, ka tāpirihia he whakatinanatanga haumarutanga me te kore e hiahiatia ngā kaiwhakawhanake kia wehe atu i tā rātou wāhi mahi matua. Nā tōna hononga piripono ki a GitHub Actions ka waiho ngā tirotiro haumarutanga hei wāhanga tūturu o ia pull request a CI/CD rere.
Kāore a GHAS e uru ki a GitHub anake, ā, kāore e toro atu ki a GitLab, Bitbucket, me ētahi atu tūāpapa rānei. Kāore i roto IaC te matawai, te haumarutanga ipu, te DAST, te kimi pūmanawa kino rānei i roto i te mekameka tuku. Mō ngā tīma e hiahia ana ki te hipoki i tua atu i ngā mea e whakaratohia ana e te tūāpapa GitHub, me whai taputapu haumarutanga DevOps tāpiri. Mō te horopaki mō ngā matawai haumarutanga aunoa i roto i CI/CD, e hipokina ana e taua hononga ngā tauira whakauru e pā ana.
Āhuatanga matua:
- CodeQL SAST te whakahaere i te tātaritanga waehere tikanga hohonu hei kimi i ngā tauira ngoikore uaua
- Kei te kitea e Dependabot ngā mōkihi tawhito, ngoikore rānei mā te whakahou aunoa pull requests
- Te matawai ngaro e tautuhi ana i ngā tohu tuakiri kua kitea puta noa i ngā putunga i mua i te hanumitanga o te waehere
- Te whakaurunga o GitHub Actions mō ngā arowhai haumarutanga aunoa i ia pull request ka pana
- Haumarutanga pokapū dashboardte kohikohi i ngā kitenga puta noa i ngā putunga raraunga hei aroturuki i ngā tutukitanga
raruraru:
- He tūāpapa motuhake mō GitHub, kāore he tautoko mō ngā putunga GitLab, Bitbucket, Azure DevOps rānei
- No IaC te matawai, te haumarutanga ipu, te DAST, te kimi pūmanawa kino rānei i roto i te mekameka tuku
- Enterprise me whiwhi GitHub taumata teitei ake i ngā āhuatanga me te whakahaere matatau Enterprise mahere
- Kāore he whakaputa whakatika aunoa i tua atu i ngā PR whakahōu whakawhirinakitanga a Dependabot
Pai hoki: Ngā tīma katoa standardi runga i a GitHub e hiahia ana kia whakauruhia te matawai haumarutanga DevOps taketake, iti-waku ki roto i tā rātou rerenga mahi o nāianei, me te kore e tāpiri i ngā taputapu o waho.
Tau utu: Raihana mō ia hohe committer i raro i te GitHub EnterpriseKa tauinehia ngā utu me te rahi o te tīma me te whakamahinga.
9. Haumarutanga Matatau GitHub
Overview:
Haumarutanga Matatau GitHub (GHAS) ka whakauru tika i te matawai haumarutanga ki roto i ngā putunga GitHub. Ka tukuna e ia SAST me CodeQL, te matawai whakawhirinakitanga mā Dependabot, me te kimi mea ngaro. Hei tāpiri, ka honoa ki a GitHub Actions, ka waiho ngā tirotiro haumarutanga hei wāhanga o te tukanga mahi a te kaiwhakawhanake.
Ka whakapai ake a GHAS i te haumarutanga i roto i te pūnaha rauropi o GitHub. Heoi anō, e herea ana ki ngā putunga raraunga GitHub, ā, kāore i te CI/CD haumarutanga kei tua atu i ngā Mahi. Nō reira, ka kitea pea e ngā tīma e whakamahi ana i ngā pūnaha whakahaere pūtake maha, i ngā taputapu mekameka tuku whānui rānei he mea whakawhāiti.
Āhuatanga matua:
- Matawai Waehere → Ka whakamahia e GitHub CodeQL mō SAST tika i roto pull requests.
- Matawai Whakawhirinakitanga → Hei tauira, ka whakatūpato i a koe ki ngā ngoikoretanga e mōhiotia ana i roto i ngā mōkihi pūtake tuwhera mā Dependabot.
- Te Kimi i ngā Mea Ngaro → Ka tohu i ngā taipitopito tuakiri kua whakapūmautia i roto i ngā kōnae waehere me ngā kōnae whirihoranga.
- Whakauru Mahi GitHub → Ka aunoa i te matawai me te tirotiro kaupapa here i roto i tō pipelines.
- Tirohanga Haumarutanga Dashboard → Ka aroturuki i ngā mōrearea puta noa i ngā putunga GitHub katoa i roto i tō whakahaere.
raruraru:
- Ngā Āputa Āhuatanga → Kāore i te GHAS te kimi pūmanawa kino, te WhakatikatikaAunoa matatau, me pipeline security, nō reira he whaiti ake te kapinga i ngā taputapu haumarutanga DevOps katoa-i-te-kotahi.
- GitHub-Anake → Kāore e hipokina ngā putunga raraunga kei runga i a GitLab, Bitbucket, me Git e whakahaerea ana e ia anō.
- Kaupapahere-iti-hei-Waehere → Ki te whakaritea ki ngā tūāpapa motuhake, he iti ake te whakaritenga.
- Te Whakawhirinakitanga ki te Taumata Utu → Me whakamahi i te GitHub Enterprise mo te mahi katoa.
💲 Tau utu:
Kua raihanahia te Haumarutanga Matatau o GitHub mō ia hohenga committer, ā, e wātea ana anake mā GitHub Enterprise Kapua, Tūmau rānei.
10. Kaitiaki mekameka
Overview: Kaitiaki mekameka He rerekē te huarahi e whakamahia ana e DevOps mō te haumarutanga i ērā atu taputapu kei roto i tēnei rārangi. Engari i te matawai i ngā whakaahua ipu o nāianei mō ngā ngoikoretanga, ka whakaratohia he rārangi o ngā whakaahua ipu iti rawa, pakeke neke atu i te 1,700 i hangaia mai i te pūtake i ia rā, me te kore he CVE e mōhiotia ana i te wā i whakaputaina ai. Ka whakakapia e ngā tīma ā rātou whakaahua turanga o nāianei (Ubuntu, Alpine, Python, Node, me ētahi atu) ki ngā Chainguard rite, ka whakakorea ngā rarangi ngoikoretanga i muri i te whakatikatika tonu.
Ka tukuna ia whakaahua Chainguard me te tohu kua hainatia SBOM me te whakamanatanga takenga mai o te SLSA Taumata 2, ā, kei roto ko te SLA whakaora CVE ārahi-a-umanga o te 7 rā mō te kaha nui, me te 14 rā mō te teitei, te waenga, me te iti. Ka whakawhānuihia e tana hua Whare Pukapuka Chainguard te huarahi haumaru-mā-taunoa ki ngā whakawhirinakitanga taumata-reo i roto i te Python, Java, me te JavaScript. Ehara te tūāpapa i te taputapu matawai tuku iho: he hua haumarutanga mekameka tuku e whakaiti ana i te mata whakaeke mā te hanganga kaua mā te kimi. Mō te horopaki i runga build security me te pono o ngā taonga tuku iho a SBOM whakatupuranga, e kapi ana aua hononga i ngā ariā e pā ana.
Āhuatanga matua:
- He rārangi o ngā whakaahua ipu iti rawa, whakapakeketia e 1,700+ kua hangaia anō i ia rā mai i te pūtake me te kore CVE e mōhiotia ana.
- Te roanga whakaora CVE matua o te ahumahi: 7 ngā rā mō te kaha kino, 14 ngā rā mō te kaha nui, te kaha waenga, me te kaha iti
- Kua haina SBOMkei roto i ia whakaahua te taunakitanga takenga mai o s me te SLSA Taumata 2
- Ngā Whare Pukapuka Chainguard e whakarato ana i ngā papaki CVE kua tautokona mō ngā whakawhirinakitanga Python, Java, me JavaScript me ngā tohutohu VEX
- Ngā Whakaahua Chainguard AI mō ngā mahi ako mīhini me te tautoko PyTorch, Conda, me te NVIDIA GPU
- Tautoko ture mō FedRAMP, PCI-DSS, HIPAA, NIS2, CMMC, me te DoD Cloud Computing SRG
- CI/CD me te whakaurunga rēhita mā te rēhita Chainguard i cgr.dev me standard taputapu ipu
raruraru:
- Ehara i te taputapu matawai; kāore e kitea ngā ngoikoretanga i roto i tō waehere o nāianei, ngā whakawhirinakitanga, IaC, ranei pipeline whanonga
- Me heke mai i ngā whakaahua turanga o nāianei, ka uru pea te mahi whakatū mō ngā whakaahua uaua pipelines
- Ka nui pea te utu mō ngā tīma iti ake, ā, ka tauinehia kia rite ki te momo ahua me te rahi o te whakahaere hangarau.
- Ka uaua pea te hekenga katoa mō ngā tīma he whakaritenga motuhake tā rātou e hiahia ana ki ētahi whakaahua ngaro i roto i te putumōhio.
Pai hoki: Ngā whakahaere hangarau e hiahia ana ki te whakakore i ngā rarangi ngoikore o ngā ipu mā te huri ki ngā whakaahua turanga kua whakapakeketia, kāore he CVE, kaua ki te whakatika tonu i ngā mea o mua, inā koa i roto i ngā ahumahi kua whakahaeretia me ngā whakaritenga ture a te FedRAMP, CMMC rānei.
Tau utu: Taumata kore utu mō te 5 whakaahua tīmatanga. Ngā whakaahua whakaputa kua raihanahia e te tau me te momo (Base, Application, AI/ML, FIPS). Ngā whare pukapuka kua raihanahia e te pūnaha rauropi me te maha o ngā kaiwhakawhanake. Ritenga enterprise utu e wātea ana.
Ngā mea hei tirotiro mā ngā taputapu haumarutanga DevOps
Mā te whakataurite i ngā taputapu, koinei ngā paearu tino nui mō te kōwhiringa whai whakaarociskatote:
Te matawai i te whānuitanga o te kapinga. Ko te āputa tino kitea i waenga i ngā taputapu haumarutanga DevOps ko tēhea SDLC ngā paparanga e hipokina ana e rātou. Ka ngaro te waehere me te taputapu e aro ana ki ngā ipu anake pipeline mōrearea. Ka ngaro i te taputapu e aro ana ki te tūnga kapua anake ngā ngoikoretanga o te paparanga tono. Mā te mārama ki ngā wāhanga e hipokina ana e ia taputapu i mua i te aromatawai i ētahi atu āhuatanga ka ārai i te whakapono teka ki te kapinga hapa.
CI/CD te whakaurunga ki te whakatinanatanga. He rerekētanga tūturu kei waenganui i tētahi taputapu haumarutanga DevOps e ripoata ana i ngā kitenga me tētahi e whakamana ana i ngā kaupapa here mā te aukati i ngā hanumitanga haumaru kore, i te kore rānei e angitu. pipeline hanga. Mā te whakatinanatanga o te Kaupapahere-hei-Waehere ka huri te haumarutanga mai i te tohutohu ki te ārai. Tirohia haumarutanga guardrails hoki CI/CD pipelines hei whakamārama i te āhua o te whakatinanatanga whai hua.
Te kounga o te kaupapa matua. Kāore e taea te whakamahi i ngā tatau CVE mata. Ngā taputapu haumarutanga DevOps e tātari ana mā te whakamahi, tātaritanga āheinga, ngā kaute EPSS, me te horopaki pakihi ka āwhina i ngā tīma ki te arotahi ki te ōrau iti o ngā kitenga e tohu ana i te mōrearea tūturu, kaua ki te whakaaturanga ariā.
Te kounga o te whakatikatika. Mā ngā taputapu haumarutanga DevOps e kitea ana ngā take anake ka tukuna ngā mahi whakatika katoa ki ngā kaiwhakawhanake. Mā ngā taputapu e whakarato ana i ngā whakaaro whakatika haumaru, e mōhio ana ki te horopaki, ngā PR aunoa, te whakatikatika pāwhiri-kotahi rānei, ka whakaitihia te roa o te whakatikatika. Ko te MTTR i roto i te AppSec ko te inenga e wehewehe ana i ngā taputapu e whakapai ake ana i te tūnga haumarutanga mai i ngā taputapu e whakapai noa ana i te pūrongo.
Te kapinga o te mekameka tuku. Ka matawaihia e ngā taputapu haumarutanga DevOps tuku iho ngā CVE e mōhiotia ana i roto i ngā mōkihi kua whakarārangihia. Ka whakamahia e ngā whakaeke mekameka tuku ngā mōkihi kino kua whakaputaina i mua i te putanga mai o tētahi CVE. Ka aro atu ngā taputapu kei roto ko te kimi i ngā pūmanawa kino whanonga, ngā rārangi whakaahua kua whakapakeketia rānei ki tēnei akomanga whakaeke kāore i kitea e ngā taputapu matawai-anake.
Te utu katoa o te kapinga. He iti ake te utu o ngā taputapu modular i te tīmatanga, engari ko te kapinga haumarutanga DevOps katoa me maha ngā ohaurunga. He maha ngā wā ka kitea he pai ake te ohanga o tētahi tūāpapa kotahi me te utu e taea te matapae. Whakatauritehia ngā kōwhiringa mā te whakamahi i te ngā taputapu haumarutanga tono pai rawa atu tirohanga whānui mō te horopaki whānui.
Ngā Tikanga Pai mō te Haumarutanga DevOps mō te tau 2026
E whakaatu ana ēnei tauira i ngā huarahi whai hua ki ngā kaiwhakawhanake ki te whakamahi tika i te haumarutanga DevOps i roto i CI/CD ngā rerengamahi, te whakakotahi i te DevOps me te haumarutanga me te kore e whakaroa i te tukunga.
Whakamahia te Mana Iti rawa atu i roto i a Jenkins mō te Haumarutanga DevOps
I roto i a Jenkins pipelines, whirihorahia ngā pūkete ratonga me te huinga iti rawa o ngā whakaaetanga e hiahiatia ana mō ia mahi. Ko te hoatu i ngā mana whakahaere ki ia kaihoko hanga ko te tikanga ka hoatu e te tohu kua tahaetia ki te kaiwhakaeke pipeline urunga. Mā te tuku i ngā tūranga kua herea ki ngā mahi motuhake ka whakawhāiti i te radius pahūtanga, ā, ka whakapakari i tō CI/CD tūnga haumaru.
Te Matawai Aunoa i ngā Mea Ngaro i roto i ngā Mahi a GitHub
Ka taea e te rerengamahi GitHub Actions te whakahaere i te matawai ngaro i ia pana, me te aukati commitkei roto ngā kī API i mua i te hanumitanga. Ka puta tika ngā hua i roto i pull requests kia whakatikahia ai ngā turuturu e ngā kaiwhakawhanake i roto i te horopaki, kia waiho ai te tiakitanga ngaro hei wāhanga o te tukanga whanaketanga o ia rā, kaua hei taahiraa arotake motuhake. Tirohia te turuturu o ngā tohu tuakiri i ngā rangitaki kua kitea mō te horopaki o te ao tūroa e whakaatu ana i te hiranga o te kitenga wawe.
Whakamana IaC Security i roto i te GitLab CI/CD Pipelines
Te whakaurunga IaC te matawai ki GitLab pipelineKa hopukina e s ngā whirihoranga hē pērā i ngā rōpū haumarutanga tino whakaaetia, ngā ipu rānei e rere ana i te aratau rangatira i mua i te whakarato hanganga. Te mahere i ngā hua ki CIS Mā ngā Paerewa ka tutukihia ngā whakaritenga hanganga ture mai i te tīmatanga, kāore e kitea i te wā o te arotake. Tirohia IaC security mahi pai mo nga tohutohu taipitopito.
whakamahi Guardrails hei whakapakari CI/CD Haumarutanga
Guardrails whakatinanahia ngā kaupapa here e pakaru ana i ngā hanganga ina puta mai ngā take mōrearea nui: he ngoikoretanga nui e waiho tuwhera ana, he ahua ipu kāore i hainatia e tomo ana ki te pipeline, kua hipa rānei i te paepae kaupapa here. Nā te mea guardrails ka rere aunoa, ka arotahi ngā kaiwhakawhanake ki te waehere i te wā e pipelinewhakatinanahia te haumarutanga mā te hoahoa. Tirohia haumarutanga guardrails hoki CI/CD pipelines mō ngā tauira whakatinanatanga.
whakamahi Guardrails hei whakapakari CI/CD Haumarutanga i roto i ngā Rerenga Mahi DevOps
Guardrails whakatinanahia ngā kaupapa here e pakaru ana i ngā hanganga ina puta mai ngā take mōrearea nui. Hei tauira, āraia he whakatinanatanga mēnā kei te tuwhera tonu tētahi ngoikoretanga nui, mēnā rānei ka uru mai tētahi ahua ipu kāore anō kia hainatia ki te pipeline. I tua atu, nā te mea guardrails ka rere aunoa, ka arotahi ngā kaiwhakawhanake ki te waehere i te wā e pipelinewhakatinanahia te haumarutanga mā te hoahoa.
Mā te whakakotahi i ēnei mahi DevOps me te haumarutanga me ngā taputapu haumarutanga DevOps tika ka tere ake te whakatinanatanga o ngā tīma, ka noho tutuki i ngā ture, ka mau tonu hoki i te tūnga haumarutanga kaha me te kore e whakaroa i te auahatanga.
Thoughts Final
Kei roto i ngā taputapu haumarutanga DevOps ngā taputapu mama, tae atu ki ngā taputapu CI/CD ngā whakaurunga ki ngā tūāpapa AppSec puranga-katoa. Ko te huinga tika e whakawhirinaki ana ki tēhea SDLC ngā paparanga kei roto i tō tīma ngā āputa, te pakeketanga o te haumarutanga o tō tīma, me te mea e hiahia ana koe ki tētahi tūāpapa kotahi, ki tētahi puranga pai rawa atu rānei.
Mō ngā tīma e hiahia ana ki te kapinga haumarutanga DevOps whānui puta noa i ngā paparanga katoa o te huringa ora whanaketanga pūmanawa, me te whakaora e whakamahia ana e te AI, te whakatau kaupapa matua kore-haruru, me te kore utu mō ia tūru, ka whakaratohia e Xygeni te huarahi tino whānui i te tau 2026 hei wāhanga o tana tūāpapa AppSec e whakamahia ana e te AI.
FAQ
He aha ngā taputapu haumarutanga DevOps?
Ko ngā taputapu haumarutanga DevOps he tūāpapa e whakauru ana i te kimi ngoikoretanga, te whakatinanatanga kaupapa here, me te arowhai hanganga ture ki roto i te whanaketanga me te tuku pūmanawa. pipeline. Ka matawaihia e rātou te waehere, ngā whakawhirinakitanga, ngā hanganga, ngā ipu, me CI/CD pipeline ngā whirihoranga aunoa hei wāhanga o te tukanga whakawhanake, hei āwhina i ngā tīma ki te tautuhi me te whakatika i ngā take haumarutanga i mua i te taenga ki te mahi whakaputa.
He aha te rerekētanga i waenga i ngā taputapu haumarutanga DevOps me ngā taputapu DevSecOps?
Ka whakamahia ngātahitia ngā kupu i roto i te mahi. E whakaahua ana a DevSecOps i te mahi whakauru haumarutanga ki roto i ia wāhanga o te huringa ora o DevOps, kaua e whakaarohia he wāhanga motuhake. Ko ngā taputapu haumarutanga DevOps me ngā taputapu DevSecOps e pā ana ki ngā tūāpapa e whakahohe ana i tēnei whakaurunga, me te whakahaere aunoa i ngā arowhai haumarutanga i roto i CI/CD pipelines, pull requests, me ngā taiao whanaketanga.
Ko ēhea ngā taputapu haumarutanga DevOps e tino kapi ana SDLC ngā paparanga?
Ka hipokina e Xygeni te whānuitanga whānui i roto i te tūāpapa kotahi: SAST, SCA, DAST, IaC te matawai, te kimi mea ngaro, CI/CD haumarutanga, parenga pūmanawa kino, matawai ipu, build security, te kimi i ngā āhuatanga rerekē, me ASPM, me te kore e hiahiatia he ohaurunga motuhake, he whakaurunga taputapu rānei. Ko te nuinga o ngā taputapu haumarutanga DevOps i roto i tēnei rārangi he mea motuhake ki te paparanga kotahi, e rua rānei.
Me pēhea te hono atu o ngā taputapu haumarutanga DevOps ki CI/CD pipelines?
Ko te nuinga o ngā taputapu haumarutanga DevOps e whakarato ana i ngā whakaurunga taketake, i ngā whirihoranga YAML rānei mō GitHub Actions, GitLab CI, Jenkins, me ngā tūāpapa rite e whakaoho aunoa ana i ngā matawai haumarutanga i ia pull request te pana rānei i te takahanga. Ko ngā taputapu tino whai hua ehara i te tuku pūrongo engari ko te whakamana i ngā kaupapa here, te aukati i ngā hanumitanga, te korenga rānei o ngā hanganga ina kitea he take haumarutanga nui.
He aha te tūranga o te AI i roto i ngā taputapu haumarutanga DevOps o ēnei rā?
E whakamahia ana te AI i roto i ngā taputapu haumarutanga DevOps i roto i ngā wāhanga e toru: te tika o te kitenga (te whakaiti i ngā hua teka mā te mārama ki te waehere horopaki), te whakatikatika (te whakaputa i ngā whakaaro whakatika haumaru, e mōhio ana ki te horopaki hei aunoa). pull requests), me te whakatau kaupapa matua (te whakarōpū i ngā kitenga mā te whakamahi tūturu me te pānga pakihi kaua ki ngā kaute CVSS mata). Ka whakakotahihia e ngā tūāpapa pēnei i a Xygeni ēnei mea e toru mā DevAI hei ārahi i te taumata kaiwhakawhanake me CoreAI hei mōhiotanga ārahi haumarutanga.