Umphuhlisi uvula i-IDE, achaze into abayifunayo ngesiNgesi esicacileyo, aze abukele iarhente ye-AI ibhala olu phawu ngexesha elithathayo ukufumana ikofu. Iyadibanisa. Iyadlula ngokucofa ngesandla. Iyathunyelwa. Akukho mntu ubuzileyo ukuba ikhuselekile na, kuba akukho mntu ubuzileyo nantoni na. Isaziso sithathe indawo ye pull request, kwaye “iyasebenza” ithathe indawo “Ndiyijongile.” Loo nto yi-vibe coding, kwaye ayisekho mkhwa uqhelekileyo. Yindlela ekhula ngayo ikhowudi yemveliso ebhalwa ngayo, ngamaqela eengcali, kungekuphela nje ngabantu abathanda ukuzonwabisa abazama i-app yempelaveki. Yiyo kanye loo nto ukhuseleko lwe-vibe coding lube yingxoxo yonke inkokheli yobunjineli kunye nokhuseleko enayo, nokuba bayibizile okanye abakayibizi.
Kuthetha ukuthini "i-vibe coding" ngokwenene?
I-Vibe coding kukuphuhliswa kwesoftware apho umntu echaza isiphumo esifunekayo ngolwimi lwendalo kwaye imodeli ye-AI, okanye iarhente eyakhelwe phezu kwayo, ivelisa ikhowudi yokusebenza. Umntu ulawulwa yisiphumo (“yakha login ukuhamba,” “yongeza ukuthunyelwa kwe-CSV”) endaweni yokubhala okanye ukujonga ukuphunyezwa komgca ngomgca. Eli gama liqondakala kuba libamba into yokwenyani: umphuhlisi uthatha ingcamango yokuba imveliso ichanekile, kungekhona xa efunda ikhowudi ngokwayo.
Olo tshintsho lilonke ibali. Uhlolo lwekhowudi lwaluyindawo yokujonga eyakhelwe kwindlela isoftware ebhalwe ngayo. I-Vibe coding ijikeleza kuyo ngoyilo. Isantya siyanda. Umkhwa wokubuza ukuba "yintoni le nto kanye kanye eyenzayo" uyehla.
Kutheni "isebenza" ingelona ibha ichanekileyo
“Iyasebenza” ithetha ukuba ikhowudi yenze oko bekuceliwe, kwimeko evavanyiweyo. Ayithethi nto malunga nokuba ikhowudi yenza ntoni kwiimeko apho kungekho mntu ubuzileyo ngayo: igalelo elingalunganga, umsebenzisi oqinisekisiweyo ophanda indawo ebathemba kakhulu, ukuxhomekeka okungazange kujongwe, imfihlo eyimfihlo ehleli ngokucacileyo. Kulapho ukhuseleko lwekhowudi ye-vibe luphela khona ngaphambi kokuba nabani na aqaphele ukuba kukho ingxaki.
Iimodeli zokubhala iikhowudi ze-AI ziqeqeshwe ukuvelisa imveliso esebenzayo ehambelana nenjongo yesicelo. Ukhuseleko alungomsebenzi ojolise kuwo. Imodeli elungiselela "oku kuyanelisa isicelo" iya kuvelisa ngovuyo umbuzo owakhiwe ngokudibanisa umtya endaweni yeeparameter, indawo yokugqibela engenalawulo lokufikelela kuba isicelo asizange sikhankanye ukuba ngubani ongafanelekanga ukuba abe nokufikelela, okanye umnxeba we-API othemba impendulo ekufuneka iqinisekiswe. Iyadibanisa. Iyasebenza. Ikwazisa neeklasi ezifanayo zobuthathaka amaqela e-AppSec achithe iminyaka elishumi eqeqesha abaphuhlisi, eveliswe ngesantya akukho nkqubo yokuhlaziya ngesandla eyakhelwe ukufana.
Uphando lwangaphakathi kwikhowudi eveliswe yi-AI lubeka amanani okwenyani ngasemva kwengqiqo: isabelo esibalulekileyo sezinto eziveliswa zizixhobo zokubhala iikhowudi ze-agent sinesiphako sokhuseleko esisebenzisekayo xa kudlula okokuqala, ngaphambi kokuba kwenzeke naluphi na uphononongo kwaphela. Oko akusiso isiphene kwimodeli enye. Sisiphumo esilindelekileyo sokwenza ngcono "iyasebenza," hayi "iyahlala," kwaye yi-gap vibe echanekileyo yokhuseleko lokubhala iikhowudi ekufuneka ivalwe.
Umngcipheko ubanzi kunekhowudi ngokwayo
Ikhowudi yeVibe ukhuseleko ludla ngokuchazwa njenge ingxaki yomgangatho wekhowudi, kodwa ukuvezwa isebenza kuyo yonke indlela yokusebenza iarhente ichukumisa, kungekuphela nje umsebenzi wayo ubhala:
Kutheni izixhobo zemveli ze-AppSec zingasasebenzi kakuhle apha
Uninzi lwezixhobo zokhuseleko lwezicelo zakhiwe ngokujikeleze isingqisho: ikhowudi iyabhalwa, emva koko iyaskenwa, kwi-CI okanye kwi-PR. Eso singqisho sicinga ukuba kukho into ezinzileyo, ebhalwe ngumntu yokukhomba iskena, kwaye ubungakanani botshintsho yinto ethile. pipeline ingaphonononga ngabom.
Ikhowudi ye-Vibe iyawaphula amaxesha, kwaye loo msantsa wexesha yeyona nto iphambili kwingxaki yokhuseleko lwekhowudi ye-vibe. Ikhowudi iyatshintsha ngaphakathi kwi-IDE ngemizuzwana, rhoqo ngaphambi kokuba ifikelele kwi pull request. Iskena esisebenza kwi-CI kuphela sibamba ingxaki emva koko, xa ipateni engakhuselekanga sele idityanisiwe, sele iyinxalenye yesici esilandelayo omnye umntu awakha kuso. Kwaye iskena esiphatha ikhowudi eyenziwe yi-AI ngokufanayo nayo nayiphi na enye ikhowudi siyaphoswa ziindawo zomngcipheko ezithile zendlela ebhalwe ngayo: iphakheji ekhethwe yiarhente ngaphandle kokucelwa ukuba iyichaze, ifayile yemiyalelo exelela iarhente ukuba yenze ntoni ngaphambi kokuba umntu abone umahluko.
Yintoni kanye kanye evala umsantsa
Imibutho ehamba phambili koku ayilibazisi isantya sokubhala ikhowudi ye-vibe. Yakha ukhuseleko lokubhala ikhowudi ye-vibe yokwenyani kwindlela yokusebenza: ibuyisela indawo yokujonga apho ikhowudi ibhalwe khona, kwaye iphatha ikhowudi eyenziwe yi-AI njengengeniso engathembekanga de ingqinwe ngenye indlela:
- Skena ngaphakathi kwi-IDE, kungekuphela nje kwi-CI. Ukubamba ipateni engakhuselekanga ngelixa iarhente isavelisa umsebenzi yingxaki eyahlukileyo kunokuwubamba emva kokuba ezinye iimpawu ezintathu zixhomekeke kuyo.
- Qinisekisa yonke into exhomekeke kwiarhente, ngendlela efanayo naleyo ubuya kuyiqinisekisa ngayo into ebhalwe ngesandla ngumphuhlisi, ngaphambi kokuba ifakelwe.
- Phatha iifayile zoqwalaselo ezifundwa yiarhente njengekhowudi, hayi uxwebhu. Iifayile zemithetho, iifayile zezakhono, kunye noqwalaselo lweseva ye-MCP zinokuthwala imiyalelo etshintsha oko kwenziwa yiarhente, kwaye zifanelwe kukujongwa ngendlela efanayo nekhowudi eveliswa yiarhente.
- Gcina umntu esazi ukuba uza kulungisa ingxaki, hayi nje iflegi. Umphuhlisi onokubona ukuba kutheni into ingasetyenziswa, kungekuphela nje ngokuba ibangele umthetho, ufunda ukwazisa nokuhlaziya ngendlela eyahlukileyo kwixesha elizayo.
- Cinga ukuba "iyasebenza" ayizange ibe yindawo yokhuseleko, kwaye wenze ibar yokwenyani ibonakale kwindlela yokusebenza endaweni yokuyishiya kwimemori.
Apho iXygeni ingena khona
Yiyo kanye le nto ithungwayo I-DevAI kaXygeni yakhelwe ukuvala. I-DevAI isebenza njengomaleko wokhuseleko oqhubekayo ngaphakathi kwi-IDE, ibukela ikhowudi ebhalwe ngumntu neyenziwe yi-AI njengoko iveliswa, kungekhona emva kokuba ifike kwi- pull requestAyilindeli mpendulo: ibonisa iipatheni ezinokusetyenziswa, ichaza indlela yokwenyani yokuhlasela ngolwimi olucacileyo, kwaye icebisa ukulungiswa umphuhlisi anokukujonga aze akusebenzise ngaphandle kokushiya ukuhamba kwawo. Kwicala le-supply chain, I-MEW (Isilumkiso saKwangoko seMalware) ibamba iipakethe ezinobungozi ngaphambi kokuba kubekho utyikityo, nto leyo ibalulekileyo apha ngqo, kuba iarhente ekhetha umntu oxhomekeke kuwe yilo xesha kanye apho ipakethe ethe tyaba okanye ebuthathaka ifumana indlela yokungena.
Ngaphantsi kwazo zombini, iCoreAI inxibelelanisa oko kufumaneka kwi-codebase, ukuxhomekeka, kunye pipeline kwimbono enye yomngcipheko ebekwe phambili, kwaye loo mbono ayipheleli nje IXygeni's iiskeni zakho. Isebenza ngendlela efanayo Uvavanyo lwe-AI, ingcaciso, kunye ulungiso ukuya kwiziphumo ezivela kwezinye iiskena esele zikhona, ngoko ke ukuqinisekisa ikhowudi ye-vibe akuthethi ukukrazula isitaki esele sisebenza. Kuthetha ukubeka umaleko phezu kwayo ohamba ngesantya esibhalwa ngaso ikhowudi.
FAQ
Ngaba i-vibe coding ayikhuselekanga ngokwemvelo?
Hayi. I-Vibe coding yindlela yophuhliso, ayingomngcipheko. Umngcipheko uvela ekutsibeni inyathelo lokuhlaziya elaliqhele ukubamba iipateni ezingakhuselekanga, kungekhona ekusebenziseni i-AI ukubhala ikhowudi kwasekuqaleni. Yiyo loo nto ukhuseleko lwe-vibe coding luyindlela yokusebenza, kungekhona isizathu sokuphepha lo mkhuba.
Isixhobo esikhoyo SAST or SCA izixhobo zibamba iingozi zokhuseleko lwe-vibe coding?
Bayazibamba ezinye zazo, kodwa zihlala emva kokuba ikhowudi sele idibene, kuba uninzi lusebenza kwi-CI endaweni yokuba ngaphakathi kwi-IDE apho ikhowudi iveliswa khona. Kananjalo abaqhele ukuvavanya indlela iarhente ye-AI eziphatha ngayo, njengeepakethe ezikhethayo okanye iifayile zoqwalaselo ezizifundayo.
Yeyiphi enye indlela yokulungisa i-vibe coding security ebaluleke kakhulu?
Hambisa iitshekhi zokhuseleko kwi-IDE, xa sele iqalile, endaweni yokuthembela kuphela kwi-IDE elandelayo. pipeline Ukuskena. Ukubamba ingxaki ngaphambi kokuba ibe yinxalenye yeempawu ezintathu ezilandelayo ezakhiwe phezu kwayo yingxaki eyahlukileyo kunokuyibamba emva koko.
Ngaba ukuqinisekisa i-vibe coding kuthetha ukucothisa abaphuhlisi?
Hayi ukuba itshekhi yenzeka emgceni, kwi-IDE, kunye nengcaciso kunye nokulungiswa okulungiselelweyo. Injongo kukugcina ikhowudi yesantya inika ngelixa ubuyisela isigwebo esasibonelelwa luphononongo olwenziwe ngesandla.
