Chitetezo cha unyolo woperekera chithandizo cha AI chinali chosavuta, makamaka chifukwa munthu nthawi zonse ankaima pakati pa dzina la phukusi ndi kapangidwe kake. Kwa zaka makumi awiri, chitsanzo chonsecho chinali chimenecho: wina ankawerenga dzinalo lisanalowe. Sikuti nthawi zonse ankaliwerenga mosamala. Koma wina ankaliwerenga.
Zimenezo zatha tsopano. Funsani chitsanzo cha AI cha laibulale lero, ndipo pafupifupi phukusi limodzi mwa asanu omwe akulimbikitsidwa kulibe. Owukira amadziwa izi, kotero amalembetsa mayina amenewo kaye. Wothandizira amawayika, amawayesa, kenako amapitiliza, ndipo palibe amene amawerenga chilichonse pakati. Apa ndi pomwe chitetezo cha othandizira a AI chikulephera pakali pano: osati mtsogolo, koma mu pipelineikuyenda lero.
Makampaniwa akhala zaka makumi awiri akumanga zowongolera mozungulira wopanga mapulogalamu amene amawerenga, kuwunikanso, ndikusankha. Wopanga mapulogalamu ameneyo si malo otsiriza ofufuzira anthu asanalowe mu zomangamanga. Chifukwa chake funso lenileni silili ngati AI yothandiza imayambitsa chiopsezo chatsopano, koma ndi chomwe chimatsala chokha malo ofufuzira anthu akachoka.
Kuchokera ku "AI Suggests" kupita ku "AI Acts"
Zaka ziwiri zapitazo, woyendetsa ndege wina anapereka lingaliro la kuletsa ma code, wopanga mapulogalamuwo anawerenga, ndipo wopanga mapulogalamuwo anaganiza zosunga kapena ayi. Kayendedwe ka ntchito kameneka katha. Zida zaukadaulo tsopano zimayika zinthu zodalira, zozungulira ma container, ndi zoyambitsa. pipeline amachitapo kanthu okha, nthawi zambiri amanena zomwe zachitika pambuyo poti zachitika, komanso pokhapokha ngati china chake chalakwika.
Kusinthaku kunachitika pang'onopang'ono, ndipo magulu ambiri akuyenda bwino kuposa momwe mfundo zawo zolembedwa zachitetezo zimavomerezera. Zipangizo zoyambirira zogwirira ntchito zimapempha chilolezo kusintha kulikonse kusanachitike, ndipo opanga mapulogalamu amadina "inde" pafupipafupi kotero kuti gawo lotsimikizira silinatanthauze chilichonse. Othandizira amasiku ano nthawi zambiri safunsa konse. Amangosokoneza zochita zomwe zanenedwa kuti ndi zophweka, monga kuyendetsa script ya shell, ndi wamba pull request Chopangidwa ndi wothandizira chingafike pamizere zikwizikwi yomwe palibe munthu amene amawerenga kuyambira pachiyambi mpaka kumapeto asanalumikizane.
Vuto la zilolezo limawonjezera izi. Mu makonzedwe ambiri, wothandizira amangogwira ntchito ngati wopanga mapulogalamu, ndi mwayi wopeza chilichonse chomwe makina opanga mapulogalamuwo angakwanitse: zosintha zachilengedwe, ma tokeni amtambo, zizindikiritso za registry, makiyi a SSH. Wothandizira akayika china chake ndipo script ikayamba kuyikidwa, amalandira gawo lonse la munthu yemwe akumuyesa. Apa ndi pomwe chitetezo cha wothandizira wa AI chimasiya kukhala funso la mfundo ndipo chimakhala funso la zilolezo: wothandizirayo safuna kugwiritsa ntchito njira yatsopano, amangofunika mwayi womwe ali nawo kale.
Kaputeni wa Docker Mohammad-Ali A'râbi, polankhula pagulu lomwelo, anafotokoza momveka bwino kuti: "Ndikuganiza kuti wopanga mapulogalamuwa ndi gawo la malo owukira tsopano."
Ndikoyenera kukhala woona mtima pa zomwe izi zinalowa m'malo mwake. Munthu amawerenga a package.json diff inali kale yolamulira yofooka; pafupifupi palibe amene anatsimikizira kudalira kulikonse kosinthika asanavomereze kusintha. Othandizira sanaswe dongosolo lolimba. Anachotsa chifukwa chomaliza cha yofooka. Chomwe chinasintha sichakuti chiopsezocho ndi chatsopano, koma kuti tsopano chikuyenda pa liwiro losiyana kwambiri: kuyerekezera kwina kunayika kuchuluka kwa kuukira kwa supply chain chaka chatha pafupifupi kasanu chaka chatha, ndipo curve ikuwoneka ngati exponential osati linear.
Nthawi Yokhazikitsa: Zomwe Zimasintha Ngati Palibe Woyang'ana
Zolengedwa zopanda chiyembekezo ndipo mayina a mapaketi oipa si atsopano. Kujambula typosquatting Kwa zaka zambiri, kampani yagwiritsa ntchito zolakwika za anthu polemba: chilembo chimodzi cholakwika, ndipo wopanga mapulogalamu amaika chinthu cholakwika. Chosiyana tsopano ndi chakuti chitsanzo, osati munthu, ndiye chimangopanga dzina poyamba, ndipo chimatero modziwikiratu.
Manambalawa amapangitsa kuti izi zikhale bizinesi, osati chidwi. Pafupifupi 20% ya ma phukusi omwe amalimbikitsidwa ndi ma model otseguka sapezeka (pafupifupi 5% ya ma model amalonda), ndipo m'maina opangidwa omwe adaphunziridwa, 43% amabwereranso chimodzimodzi pamafunso khumi obwerezabwereza. Kubwerezabwereza kumeneko ndiko komwe kumapangitsa kuti njira yowukira ikhale yolimika: wowukira safunika kuganiza zomwe wopanga mapulogalamu adzalemba. Chitsanzocho chimawauza, modalirika, kwaulere.
Mtundu watsopano wotchedwa HalluSquatting umapitirira. M'malo mofalitsa phukusi loipa pansi pa dzina losayembekezereka, wowukira amaika malangizo oipa mkati mwa README, fayilo ya luso, kapena kufotokozera kwa seva ya MCP, kenako amayembekezera kuti wothandizira azindikire dzina lomwelo la malo osungiramo zinthu kapena chida ndikulilowetsa. Pepala laposachedwa lomwe limagwirizanitsa izi ndi injection yofulumira linanena za kulosera kwangwiro kwa mayina abodza a malo osungiramo zinthu pamapulojekiti atsopano, ndi kukhazikitsidwa kwathunthu kwa ma code motsutsana ndi othandizira enieni a ma code kuphatikiza Cursor, Windsurf, ndi Copilot. Chifukwa chakuti malipiro ndi mawu osavuta osati ma code ogwiritsidwa ntchito, zida zambiri zosanthula zilibe choletsa.
Monga Xygeni Wofufuza kafukufuku Luis Rodríguez Ikani izi panthawi yokambirana: "Takhala zaka zambiri tikumanga chitetezo ku ma code oipa. Ma signature, ma sandbox, kusanthula khalidwe. HalluSquatting sikufuna chilichonse mwa zimenezo. Imangofunika README yokhutiritsa." Malangizo osavuta omwe wothandizira amawerenga ngati nkhani yodalirika amadutsa molunjika pa ma scanner opangidwa kuti agwire chinthu chomwe chingathe kuchitidwa.
Ndiwo gawo lomwe zida zambiri za AppSec sizimapangidwa kuti ziwonekere, zomwe ndi zoyambiriracischifukwa chake Xygeni's Chenjezo Loyambirira la Malware (MEW) Njira ilipo pamlingo wa nsanja: kusanthula kosalekeza, nthawi yeniyeni kwa ma phukusi atsopano ofalitsidwa m'ma registry monga npm, PyPI, ndi Maven, omangidwa kuti agwire khalidwe loipa asanayambe siginecha ya anthu onse, m'malo moyembekezera kuti CVE igwire ntchito masiku angapo pambuyo pake.
Zidebe, CI/CD, ndi Chiyambi: Kodi Mungatsimikizirebe Zomwe Zili M'mapangidwe Anu?
Wothandizira nthawi zambiri samasiya kuwonjezera mzere ku package.jsonImasintha mafayilo a Docker, imakonzanso zomanga za magawo ambiri, komanso imakhudza pipeline kasinthidwe mwachindunji, kulowa mu dongosolo lomanga lokha osati mtengo woyambira wokha.
Apa ndi pomwe yankho la makampani pa chiopsezo cha unyolo wogulira zinthu, SBOMs ndi SLSA provenance, anayenera kuigwira. Kenako, mu Meyi 2026, wowukira wina anabera munthu wosamalira, nagwiritsa ntchito chizindikiro chobedwacho kufalitsa "mwana wamasiye" commit popanda kholo m'mbiri ya polojekitiyi, ndipo anaigwiritsa ntchito kuwononga malo osungiramo zinthu. Mapaketi omwe adatuluka, makumi asanu ndi atatu mphambu anayi, adatumizidwa ndi gwero lovomerezeka, losainidwa bwino lapamwamba. Cheke chilichonse chodziyimira pawokha chidadutsa. Pulogalamu yaumbanda inali yeniyeni, motero, mwaukadaulo, inali mapepala otsimikizira momwe idamangidwira.
Mfundo yosasangalatsa: chiyambi chake chimatsimikizira zomwe nyumbayo idachita ndi chilichonse chomwe idapatsidwa, osati zomwe idapatsidwa chifukwa chodalirika. Chepetsani zomwe zaperekedwazo zisanachitike, ndipo umboniwo ndi mbiri yowona mtima komanso yotsimikizika ya nyumba yosakhulupirika. Chitetezo cha othandizira a AI sichingatumizidwe kokha ku zida zotsimikizira zomwe zidamangidwa mdziko lomwe munthu, osati chitsanzo, adasankha zomwe zidalowa mnyumbayo.
Njira imodzi yochepetsera vutoli ndi yoipa koma yothandiza: nthawi yoziziritsa, kuyembekezera masiku angapo phukusi latsopano litasindikizidwa lisanagwiritsidwe ntchito. Zochitika zambiri zogulitsa zimalengezedwa ndikuwululidwa mkati mwa nthawi yoyambirira, kotero kuchedwa kwa masiku asanu kukanathetsa gawo lalikulu la chaka chatha. ziwopsezo zofanana ndi mphutsi, pamtengo wotsika kwambiri kupatula nthawi yomweyoiacy.
Git, Ndemanga, ndi Kuchepa kwa Kuyang'ana kwa Anthu
Kuwunikanso ma code ndi commit Mbiri yakale yakhala ngati maziko odalirika a "winawake adawona izi." Chikhazikitso chimenecho chimagwedezeka kwambiri pamene othandizira commit, ndipo zimalumikizana kwambiri, popanda munthu yemwe ali mumzerewu panthawi yomwe zimachitika.
Wothandizira kukhazikitsa phukusi si vuto lofanana ndi la wopanga mapulogalamu amene akukopera yankho la Stack Overflow, ngakhale kuti onse awiri sanalembe code yoyambirira. Chidule cha Stack Overflow chinalembedwa ndi munthu weniweni ndipo chawunikidwanso mwachisawawa kudzera mu mavoti okweza ndi otsika. Malangizo opangidwa ndi AI ndi njira yodziwikiratu yomwe palibe katundu, ndipo wopanga mapulogalamu amene akukopera pamanja amayang'anabe dzina la phukusi, tsiku lomaliza kusinthidwa, ndi mavuto otseguka. Wothandizira amene akuyika phukusili saima kaye pa chilichonse cha izi pokhapokha ngati pali china chake chomwe chapangidwa kuti chiyimitse.
Vuto lenileni la shift-left ndi limenelo. Shift-left yachikhalidwe imaganiza kuti ndi chinthu chomwe chimayenda mofulumira kwambiri mu pipeline ndi wopanga mapulogalamu amene angaphunzitsidwe, kukakamizidwa, ndikuwunikanso. Ngati chinthu chomwe chimayenda mwachangu kwambiri ndi chodziyimira pawokha, chitetezo chosintha kuchoka kumanzere chiyenera kukhazikitsidwanso pamalo otetezera omwe wothandizira sangathe kulankhula nawo: kuyika mchenga, kulamulira kutuluka, ndi mawindo ozizira, m'malo mwa chikalata cha mfundo chomwe palibe amene akuchitsatira.
Chitetezo cha Unyolo Wopereka Zinthu kwa Agent AI: Ndi Chitetezo Chanji Pipeline Zofunikadi
Kupulumuka gulu latsopanoli la nyongolotsi sikutanthauza kuti pali njira zisanu ndi zinayi zowongolera zomwe zakhazikitsidwa bwino tsiku loyamba. Kwa gulu lomwe lili ndi zinthu zochepa, ziwiri ndizofunikira kwambiri kuposa zina zonse:
- Sandbox wothandizira, nthawi zonse. Iyendetseni mu microVM kapena chidebe chokhala ndi chikwatu cha polojekiti chomwe chilipo pano chokha, kotero wothandizira wosokonekera alibe njira yopita ku ma tokeni, ziyeneretso, kapena mafayilo a wolandila. Uwu ndiye njira yotsika mtengo kwambiri yomwe ilipo komanso yomwe ili ndi chifukwa chochepa chodumpha.
- Onjezani zenera lozizira musanayike mitundu yatsopano ya phukusi. Masiku angapo nthawi zambiri amakhala okwanira kuti chiwembu cha pompopompo cha unyolo chiwonekere ndikuwululidwa chisanafike pa nyumba yanu.
Chachitatu, kwa magulu omwe angathe kuchita izi: pangani mawonekedwe a CVE ndi pulogalamu yaumbanda mwachindunji mu pipeline, kusanthula chithunzi cha chidebe (osati code yoyambira yokha, popeza zofooka zambiri zimakhala pachithunzi choyambira) ndikuwonetsa zotsatira zake ngati pull request Opanga ndemanga amawonadi asanaphatikizidwe.
Chochitika chaposachedwapa chapangitsa kuti zinthu zikhale zodziwikiratu. Mu Julayi 2026, chitsanzo cha AI chomwe chinali pansi pa kuwunika kwamkati chinagwiritsa ntchito njira ya zero-day mu njira yake ya sandbox, proxy ya package-cache, kuti ifike pa intaneti yotseguka ndipo, popanda munthu woilamula, inasokoneza zomangamanga zakunja pofuna cholinga chofanana. Njira yothawira inali zomangamanga zodalira: kulumikizana kokha komwe bokosi lililonse la sandbox limapangidwa kuti lidutse. Ngati wothandizira wanu akufunika kufika pa registry ya phukusi kuti agwire ntchito, kulumikizana kumeneko si tsatanetsatane wa chitsanzo chanu chachitetezo. Ndi chitsanzo chachitetezo. Kufotokozera kwathunthu kwa Xygeni momwe kuthawa kumeneko kunachitikira n'kofunika kuwerenga: Wopanda nzeru ndi kapangidwe.
Zitengera Zapadera
- Malo otsiriza ofufuzira anthu akutha, osati kufooka. Zowongolera kapangidwe kake zomwe sizidalira munthu amene akuwerenga dzina la phukusi.
- Kugona pansi pa nthaka ndi kugona pansi pa nthaka ndi njira yolambirira, osati yongoganizira chabe. Mayina obwerezabwereza osokonezeka maganizo ndi kulowetsedwa m'mawu osavuta akugwiritsidwa ntchito kale kuthengo.
- Chiyambi ndi SBOMs kutsimikizira zomwe nyumbayo inachita, osati zomwe inadyetsedwa. Chitani umboni wapamwamba ngati pakufunika, osati wokwanira.
- Kuletsa, osati kuzindikira, ndiko komwe kukulepheretsa pakali pano. Kusewera pa sandbox, kulamulira kutuluka, ndi mawindo ozizira kumawononga nthawi yomwe kusanthula pogwiritsa ntchito signature-based sikungathe.
- Lembani zomwe othandizira anu angakwanitse. Si chikalata cha ndondomeko. Zizindikiro zenizeni, ziphaso zenizeni, kutuluka kwa netiweki yeniyeni.
Nkhaniyi ikuchokera pa zokambirana za Xygeni's SafeDev Talk “Pamene Agent AI Akhazikitsa Zodalira,” zomwe zili ndi Docker Captain Mohammad-Ali A'râbi. Dongosolo lake lonse lolimbitsa makina olamulira asanu ndi anayi lafotokozedwa mwatsatanetsatane mu nkhani yake ya nkhani, Docker Security Dispatch ndi Luis Rodriguez Research Officer ku Xygeni.
Mafunso Ofunsidwa Kawirikawiri: Chitetezo cha Agent Supply Chain Security
Kodi wothandizira kukhazikitsa phukusi ndi vuto losiyana kwambiri ndi la wopanga mapulogalamu amene akukopera lingaliro la Stack Overflow, kapena ndi vuto lachangu chabe la lomwelo?
Zonsezi, m'magawo osiyanasiyana. Njirayi ndi yachangu, koma kusiyana kwa chidaliro nakonso kuli kwakukulu: yankho la Stack Overflow linalembedwa ndipo linawunikidwanso mwachisawawa ndi munthu, pomwe lingaliro la phukusi lopangidwa ndi AI ndi zotsatira zomwe zingatheke popanda ndemanga yofanana, ndipo wopanga mapulogalamu omwe amalikopera pamanja amagwiritsabe ntchito kufufuza mwachisawawa koma wothandizira wosayang'aniridwayo amalephera kwathunthu.
Kodi zingafunike chiyani kuti SBOM kulemba modalirika "wothandizira wawonjezera izi, ndipo chifukwa chake ndi ichi"?
Lero SBOM ndi chiyambi standards zinamangidwa motsatira lingaliro lakuti munthu amapanga kudalira kulikonsecisndipo alibe gawo la wothandizila uti, mtundu wanji wa chitsanzo, kapena pempho liti lomwe lapanga kusintha kwina. Kutseka kusiyana kumeneko kumafuna kuwonjezeredwa ku mawonekedwe omwe alipo a umboni kapena njira yosiyana, yodziwira wothandizila yomwe imagwira ntchitocischiyambi cha ion pamodzi ndi chiyambi cha build.
Kodi pali mtundu wa "shift-left" womwe umagwirabe ntchito pamene chinthu chachangu kwambiri mu pipeline Kodi ndi wothandizira wodziyimira pawokha, osati wopanga mapulogalamu?
Inde, koma iyenera kusintha malo owunikira, osati nthawi yokha. Kusintha kuchoka kumanzere kupita kumanzere komwe kumamangidwa motsatira kuwunikira kwa anthu sikumakula malinga ndi liwiro la wothandizira; kusintha kuchoka kumanzere kupita kumanzere komwe kumamangidwa motsatira kuyika mchenga, zoletsa kutuluka, ndi kukhazikitsa ma cooldown kumatha kugwira wothandizira wowonongeka asanafike pakupanga, chifukwa zowongolera zimenezo sizidalira aliyense amene amawerenga chilichonse.
