Open source yave hwaro hwekuvandudzwa kwesoftware yemazuva ano. Anenge ese maapplication nhasi anovimba newebhu yakaoma yemaraibhurari echitatu, maframework, mamodheru, uye maturusi ekuvaka. Izvi chete ndizvo zvatounza zvakakosha. software supply chain security matambudziko. Panguva imwe chete, hungwaru hwekugadzira hwapinda mu software yekuvandudza lifecycle semuchina une simba wekukurumidzisa, kugadzira kodhi, kupa mazano ekushandisa, kugadzirisa otomatiki, uye kunyange kukanganisa maitiro ekugadziracisions. Pamwe chete, open source neAI zvakachinja mavakirwo esoftware, uye, zvisingadzivisike, marwisirwo ainoitwa. Kusangana kwekuchengetedzwa kweAI, AI nekuchengetedzwa kwesoftware, uye software supply chain security Hazvisisiri zvekufungidzira. Iye zvino ndiyo imwe yenzvimbo huru dzinokonzera njodzi dzekutengesa software dzinotarisana nemasangano einjiniya.
Chokwadi ichocho chakakonzera SafeDev Talk yedu yazvino uno: Open Source, AI & Nzvimbo Itsva Yekurwisa: Kodhi Yezvombo, Dziviriro Dzakangwara, ichisanganisira vatungamiriri vekuchengetedza vanobva kuRed Hat, TikTok, neXygeni. Hurukuro iyi yakatarisana nezviri kuitika kumapoka ekuchengetedza neinjiniya munzvimbo dzekugadzira, kunyanya pamusoro pekurwiswa kwehurongwa hwemagetsi, mapakeji emagetsi, uye kusawirirana kuri kukura pakati pekumhanya nekudzora mukugadzirwa kwesoftware kunotungamirirwa neAI. Zvakabuda pachena kuti nzvimbo yekurwiswa iri kukura nekukurumidza kupfuura zvingaitwa nemaitiro ekuchengetedza echinyakare, uye AI iri kushanda sekuwedzera simba uye sekuyedza kushushikana kwefungidziro dzenguva refu mukuchengetedza AI uye software supply chain security.
Kana tsananguro iyi ichiita seyakafanana nemaitiro ekugadzira software pari zvino, haisi tsaona. Matimu mazhinji anongoona kuti kuvimbana kwachinja sei kuenda ku automation mushure mekunge chimwe chinhu chaparara.
Kuchengetedzeka kweAI uye Software Supply Chain Security Dambudziko Rakafanana Here Iye Zvino?
Dingindira rinogara richitaurwa muhurukuro yese raive rekuti kuchengetedzeka kweAI hakuchagoni kutorwa senzira yakasiyana kubva kune software supply chain securityMasisitimu eAI haashande ari ega; akavakwa, akadzidziswa, akaiswa, uye anobatanidzwa kuburikidza neizvozvo pipelines, dependencies, uye ma registry anototambura nekurwiswa kwe open source supply chain.
Mukugadzira software inotungamirirwa neAI, mamodheru anokurudzira kodhi, kugadzira zvigadziriso, uye kusarudza zvinoenderana otomatiki.cismaion anokanganisa zvakananga manejimendi ekutarisira kuvimba kwenzvimbo yakavhurika, kazhinji pasina chinangwa chakajeka chemunhu. Nekuda kweizvozvo, njodzi yekutsamira pakushandisa software haisisiri kungotungamirirwa nesarudzo yevagadziri chete; iri kuwedzera kuumbwa nemaitiro eAI.
Kubatana uku kunoreva kuti kukundikana muAI uye kuchengetedzeka kwesoftware kunowanzoonekwa sezviitiko zvechinyakare zvekutengesa: kutsauswa kwemitengo, zvinhu zvakasvibiswa zvekuvaka, kana kuti vanhu vasina simba CI/CD Maitiro acho. Mashandisirwo acho anogona kunge ari matsva, asi njodzi yekutengeswa kwesoftware ndeyechokwadi uye iri kuramba ichioma kufunga nezvayo.
Kana mamodheru ako ekutyisidzira achiri kusiyanisa "njodzi yeAI" ne "njodzi yekupa," zvingave zvakakosha kudzokorora kuti muganho iwoyo uripi chaizvo mumabasa ako ekuvaka nekuisa.
Kurwiswa kweOpen Source Supply Chain paMuchina Speed
Kurwiswa kwe "open source supply chain" hakusi kutsva, asi AI inochinja hupfumi hwavo. Varwisi havadi matekiniki matsva; vanoda kukura. AI inobvumira kuongororwa kwezvakatipoteredza nekukurumidza, kuwanikwa otomatiki kwezvisingashande, uye kukurumidza kudzokorora pamidziyo yekurwisa.
Kubva pakuona kwekurwiswa, kufambira mberi uku kwekutsvaga ruzivo kunowedzera zvakanyanya mwero wekubudirira kwekurwiswa kunosanganisira mapakeji emahara ane hukasha. Zvinhu zvingadai zvisina kuonekwa kare zvinogona kuwanikwa, kuongororwa, uye kushandiswa nekukurumidza, kazhinji vatsigiri vasati vaziva kuti vari kushandiswa.
Ndokusaka software supply chain security Hazvigone kuvimba nemasaini anononoka chete. Marejista, mazano, uye kuziviswa kwezviitiko mushure mezviitiko zvinoshanda zvichienderana nenguva yevanhu, nepo varwisi vachiwedzera kushanda nekukurumidza kwemuchina. Nguva yekuratidzwa inokonzeresa kuwedzera kwenjodzi yekugovera software.
Kana chiratidzo chako chikuru chekuona chiri chekuti "registry yabvisa package," unenge watove kushanda pasi penguva yemurwisi.
Unoda Kunyatsoongorora Kurwiswa kweSoftware Supply Chain?
Njodzi yekuvimba nevatengi mukuvandudzwa kwesoftware inotungamirwa neAI
Imwe yenjodzi dzakajeka dzakakurukurwa panguva yeSafeDev Talk yaive njodzi yekutsamira pakushandisa software, kunyanya munzvimbo dzinonyanya kuvimba nekugadzirwa kwesoftware inotungamirirwa neAI. Vabatsiri veAI coding vakagadzirirwa kuti zvive nyore uye nekukurumidza, kwete kuderedza nzvimbo yekurwiswa.
Mukuita, izvi zvinotungamira mukuiswa kwekuvimbana zvine hukasha. Maraibhurari matsva anowedzerwa pachinzvimbo chekushandisazve mashandiro aripo, transitive dependencies wedzera chinyararire, uye vhura bhuku dependency management inova mhinduro pane kuva nemaune. Nekufamba kwenguva, zvikwata zvinorasikirwa nekukwanisa kufunga nezvezvavari kutoita.
Iyi haisi nyaya yehutsanana chete. Kuvimba nevatengi vatsva kunounza njodzi yekuwedzera yekupa software, fungidziro itsva dzekuvimba, uye mikana mitsva yekurwiswa kwekutengesa kwevatengi kubva kune vanotenga.cismaion anongoerekana aongororwa uye asinganyatsoonekwi, njodzi yekutsamira pakushandisa inova yehurongwa kwete yetsaona.
Kana girafu yako yekuvimbana iri kukura nekukurumidza kupfuura kugona kwechikwata chako kuitsanangura, iri harisi dambudziko rekushandisa maturusi; idambudziko rekuvimbana.
Vabatsiri veAI Coding, Kuchengetedza, uye Kuparara kweOngororo
Imwe nzira yekukundikana yakakurukurwa ndeyekuderera kwekuongorora kwevezera kana paine kodhi yakagadzirwa neAI. Vabatsiri veAI coding, kuchengetedzwa hakusi kungoisa nekukurumidza kana kushandisa modhi zvisina kunaka chete; asi kuti logic isina kuongororwa yakawanda sei inopinda mumasisitimu ekugadzira.
Shanduko dzinoitwa neAI dzinowanzova huru, dzakabatana, uye dzakaoma kuongorora kana nguva yaoma. Nekuda kweizvozvo, ongororo yevezera inova isina kudzika kana kuti yekufananidzira. Kudonha kwakanyarara uku kunobvisa imwe yenzira dzinoshanda zvakanyanya mu software supply chain security.
Dambudziko harisi kuregeredza kwevagadziri vemapurogiramu. Kusarongeka kwebasa. Kana kumhanya kukapihwa mubayiro uye kukanganiswa kukapihwa chirango, kudzora kwekuchengetedza kweAI nesoftware kunoenderana nekutariswa kwevanhu kunodzikira. Varwi havafanirwe kunzvenga ongororo kana ongororo isisashande sechipingamupinyi.
Matimu mazhinji anofunga kuti ongororo ichiri kushanda nekuti maitiro acho aripo. Vashoma vanobvunza kana ichiri kushanda senzira yekudzora ine musoro.
Mapakeji Anopa Rubatsiro Rwakasiyana-siyana uye Ngano Yekufarirwa
Pfungwa yakajairika mukutarisira kushandiswa kwemabasa akasununguka ndeyekuti mapurojekiti anozivikanwa akachengeteka. Muchokwadi, kufarirwa kunowanzoita kuti vanhu vaonekwe zvakanyanya. Maraibhurari anoshandiswa zvakanyanya ndiwo anonyanya kukosha. kurwiswa kwecheni yekupa zvinhu pachena, pambericisnekuti kubvumirana kune zvakunoreva kunopa mhedzisiro yakakura.
Mapurojekiti mazhinji anozivikanwa anochengetwa nemapoka madiki kana vanhu vari vega. Kunyangwe kana matambudziko akaonekwa, mapakeji e-open source ane hutsinye anowanzo wanikwa kwemaawa kana mazuva asati abviswa. Munguva iyoyo, masangano anoramba achizvidya kuburikidza nekuvaka otomatiki.
Kunonoka uku kunosimbisa kukosha kwekuita zvinhu nekukurumidza software supply chain security Kuvimba nemukurumbira, mukurumbira, kana chiito chekunyoresa chete hazvina kukwana kana ukatarisana nenjodzi yemazuva ano yekugovera software.
"Kushandiswa zvakanyanya" hakuna kufanana ne "kudzivirirwa zvakasimba," uye kuitora seyakadaro ndeimwe yepfungwa dzisina kururama dzinogara dziripo dzekutengesa zvinhu.
Kuwanikwa muSoftware Supply Chains uye AI Security
Mukati mekukurukurirana uku, kudiwa kwenzvimbo dzinowanikwa musoftware supply chains kwakaramba kuchiitika. Munzvimbo dzinobatsirwa neAI, hunyanzvi hweAI hunova husina kujeka. Kodhi inogona kugadzirwa nemodhi, kuchinjwa nemunhu, kubatanidzwa ne otomatiki, uye kushandiswa pasina kujeka kwekuzvidavirira.
Pasina humbowo hunogona kusimbiswa, masangano anomanikidzwa kuvimba nezvinhu zvakashandiswa zvisina kujeka. Kuchengetedzwa kweAI kunoda kuti zvinhu zvakashandiswa zvibve pakuvimbana zviende pakusimbisa: zvinhu zvakasainwa, build attestations, uye mavambo anoteverwa. Kunyange zvazvo kwakabva zvinhu zvisingadziviriri maitiro akaipa zvachose, zvinoderedza kusanzwisisika uye zvinoderedza kugona kwemurwisi kufamba.
Izvi zvinoshanda zvakaenzana kumamodheru, data, uye kodhi. Mukugadzira software inotungamirwa neAI, provenance chinhu chakakosha pakuchengetedza AI uye software.
SBOM uye Kuchengetedzwa kweAI muMazuva Ano Pipelines
Basa re SBOM uye kuchengetedzeka kweAI kwaive chimwe chinhu chisina kujeka. SBOMs inopa kuoneka kwemagrafu ekuvimba, asi kuonekwa chete hakuna kukwana. Munzvimbo dzine AI yakawanda, SBOMs dzinofanira kushanduka kuti dzitore kwete maraibhurari chete, asiwo mamodheru, matanho ekuvaka, uye otomatiki decisions.
Kana zvabatanidzwa ne kuongorora maitiro uye kwakabva, SBOM uye kuchengetedzeka kweAI zvinova maturusi ane simba ekuderedza njodzi yekupihwa kwesoftware. Zvinobvumira masangano kuona shanduko dzisingatarisirwi, kufunga nezvemhedzisiro, uye kupindura zvinobudirira kurwiswa kwepeji rekugovera kwemahara.
CI/CD Pipeline Security Pasi Pekumanikidzwa Kwekushandisa
Pakupedzisira, CI/CD pipeline security yakabuda senzvimbo yekudzora yakakosha. Pipelinezviri kuwedzera kuita zviito zvinokurudzirwa kana kukonzerwa nemasisitimu eAI. Kana izvo pipelineZvichireva kuti hapana mitemo yakasimba yekuzivikanwa, kusimbiswa kwezvinhu zvakagadzirwa, uye kusimbiswa kwemitemo, zvinova nzvimbo dzakakodzera dzekupinda muvapambi.
Kusakwana CI/CD pipeline security inobvumira mapakeji e-open source ane hutsinye kukanganisa kwete masisitimu ekugadzira chete asiwo nharaunda dzevagadziri uye kuvaka zvivakwa. Sezvo otomatiki ichiwedzera, pipelines inofanira kubatwa sezvinhu zvinokosha mukati software supply chain security mapurogiramu.
Tarisa Hurukuro yeSafeDev
Kuti unzwe zvakawanda nezvepfungwa idzi dzese zvakananga kubva kune vanoita basa iri, tarisa zvese zviri muchikamu chino Hurukuro yeSafeDev: Open Source, AI & Nzvimbo Itsva Yekurwisa: Kodhi Yezvombo, Dziviriro Dzakangwara, uine Roman Zhukov (Ngowani Tsvuku), Leon Johnson (TikTok), uye Luis Rodríguez Berzosa (Xygeni).
Migumisiro Inoshanda yeKuchengetedzwa kweAI uye Software Supply Chain Security
Zvinoreva kuchinja uku zvinopfuura kushandisa maturusi. Masangano anofanirwa kuziva kuti kuchengetedzeka kweAI, AI nekuchengetedzwa kwesoftware, uye software supply chain security zvakabatana zvakanyanya. Decismaion aimboonekwa seane njodzi shoma, kugadziridzwa kwekuvimbika, kugadzirwa kwemakodhi, uye otomatiki ikozvino ane njodzi huru yekugovera software, kunyanya kana izvocismaion anogadzirwa zvisina kujeka nezvishandiso kwete nevanhu.
Munguva yeSafeDev Talk, pfungwa iyi yakapfupikiswa muchidimbu. Sezvakataurwa nemumwe mutauri, Kana masisitimu eAI achitora chikamu mukugadzira software, mapoka ekuchengetedza haasi kungochengetedza kodhi chete; ari kuchengetedza decismaion. Kuzvigadzira otomatiki hakubvisi mutoro; kunougovera patsva.
Mukuita izvi, zvinoreva kudzorera chinangwa apo zvinhu zviri nyore kushandisa. Kutarisira kuvimba neruzivo rwevanhu kunofanirwa kutariswa nemaitiro anotungamirirwa neAI pane kufunga nezvevanhu. Njodzi yekutsamira haichagoni kutorwa seongororo yenguva nenguva.cise. CI/CD pipeline security inofanira kusimbisa kusimbiswa, kwete kufunga kuti zvinhu hazvina kuipa. Uye mavambo esoftware anofanirwa kubva pachinangwa kuenda pakuva epakutanga.
Imwe pfungwa kubva muhurukuro yacho ndeyekuti kumhanya pachako hakusisina kwakarerekera. Kukundikana kukuru kwekutengesa hakubvi panjodzi imwe chete.cision, asi kubva musarudzo diki dzakawanda dzinoitwa otomatiki dzisina kubvumidzwa pachena. Izvi zvakatoitwa karecischikonzero nei mamodheru ekuvimba echinyakare achikundikana pasi pekugadzirwa kwesoftware inotungamirwa neAI.
Hapana chimwe cheizvi chinoreva kusiya open source kana AI. Asi, inobvuma basa rayo guru muinjiniya yemazuva ano. Asi pasina kufambira mberi kwefungidziro dzekuchengetedza, masangano anoisa pangozi yekurega otomatiki ichitsanangura kuvimba nepfungwa.
Kupedza…
Nzira inobatsira yekufunga nezvekuchinja uku ndeyekuti software supply chain security Hazvisisiri zvekuchengetedza zvinhu zvemazuva ano chete. Zvava zvekuchengetedza decisnzira dzeionMunyika inobatsirwa neAI, mibvunzo yakakosha yekuchengetedza haisi yekuti "Chikamu ichi chiri munjodzi here?" asi kuti "Sei izvi zvakaunzwa, naani kana chii, uye pasi pezvirambidzo zvipi?" Masangano anochinjika kuhurongwa uhwu haazobvisi njodzi, asi haazoshamisiki nazvo zvakanyanya.
