Isingeniso
The Imodeli Yokuvuthwa Kwesiqinisekiso Sesofthiwe ye-OWASP (i-SAMM) inikeza uhlaka oluhlelekile lokuhlola nokuthuthukisa ukuvuthwa kokuphepha kwesofthiwe. Kusiza izinhlangano ukuthi zisebenzise imikhuba emihle kakhulu kuyo yonke impilo yokuthuthukiswa kwesofthiwe (SDLC) ngenkathi ukulinganisela imizamo yokuphepha nezinhloso zebhizinisi.
I-Xygeni isheshisa ukwamukelwa kwe-SAMM ngokuhlanganisa:
- ASPM (Application Security Posture Management)
- SCA (Ukuhlaziywa Kokwakheka Kwesofthiwe)
- CI/CD Security
- IaC Security (Ingqalasizinda njengeKhodi)
- SAST (Ukuhlolwa Kokuphepha Kwesicelo Esimile)
- Build Security
- Ukuphathwa Kwezimfihlo
- Ukutholwa kwe-Anomaly
Lawa makhono ahlinzeka ngokutholwa kwezinsongo ngesikhathi sangempela, ukuphoqelelwa kwenqubomgomo okuzenzakalelayo, kanye nokubekwa phambili okusekelwe engcupheni, okuqinisekisa ukuphepha okuqhubekayo kuyo yonke intuthuko yesofthiwe, ukuthunyelwa kwayo, kanye nemisebenzi yayo.
Lo mbhalo uchaza indlela i-Xygeni esekela ngayo izinhlangano ekufinyeleleni ukuvuthwa kwe-SAMM, ukwenza ngokuzenzakalelayo izilawuli zokuphepha, ukuhlola ukuthobela imithetho, kanye nokunciphisa ubungozi kulo lonke izwe. SDLC.
Ukubuka konke kwe-OWASP SAMM
Imisebenzi Emihlanu Yebhizinisi ye-SAMM
I-OWASP SAMM ihlelwe ngendlela imisebenzi emihlanu yebhizinisi, ngayinye imelela isici esibalulekile sokuphepha kwesofthiwe. Le misebenzi isebenza njenge izinsika ukuze izinhlangano zihlole, zithuthukise, futhi zivuse imikhuba yazo yokuphepha kulo lonke umjikelezo wokuphila kokuthuthukiswa kwesofthiwe (SDLC).
Ukubusa
Ukubusa kusungula amasu okuphepha, izinqubomgomo, izinhlaka zokuthobela imithetho, kanye nezinhlelo zemfundo ukuqinisekisa indlela ehlelekile nelinganisekayo yokuphepha kwesofthiwe. Kuhlanganisa:
- Isu kanye nezilinganiso – Ukuchaza izinhloso zokuphepha, ukulinganisa ukusebenza kahle, kanye nokuvumelanisa imizamo nezinhloso zebhizinisi.
- Inqubomgomo Nokuthobela – Ukuqinisekisa ukunamathela ezinqubweni zokuphepha kwangaphakathi kanye nezimfuneko zomthetho zangaphandle.
- Imfundo Nesiqondiso - Ukuphakamisa ulwazi ngokuphepha kanye nokunikeza ukuqeqeshwa okuhlelekile kuwo wonke amaqembu.
Design
Umsebenzi wokuklama ugxile ku ukuhlonza izinsongo, ukwakheka okuphephile, kanye nokuchaza izidingo zokuphepha ekuqaleni kwe- SDLC ukuvimbela ubuthakathaka ngaphambi kokuba buvele. Kuhlanganisa:
- Ukuhlola Usongo – Ukuhlola izingozi zokuphepha ezihlobene nezinhlelo zokusebenza kanye nezindawo zazo.
- Izidingo Zokuphepha - Ukuchaza okulindelwe kwezokuphepha kwesofthiwe kanye nabaphakeli bezinkampani zangaphandle.
- Secure Architecture - Ukusungula izakhiwo zesofthiwe eziqinile kanye nemikhuba yokuphatha ubuchwepheshe evikelekile.
Implementation
Ukuqaliswa kuqinisekisa ukuthi izilawuli zokuphepha zifakwe ngaphakathi izinqubo zokwakha, zokusebenzisa, kanye nokuphathwa kwamaphuthaLo msebenzi ugcizelela ukuzenzekela kanye nokwakheka kwesofthiwe okuphephile ukunciphisa izingozi zokuphepha. Kuhlanganisa:
- Ukwakhiwa Okuphephile - Ukuphoqelela izilawuli zokuphepha ku CI/CD pipelines, ukuphatha ukuncika, kanye nokuvimbela ukukhishwa kwekhodi okungavikelekile.
- Ukuthunyelwa Okuvikelekile - Ukuvikela ubuqotho besicelo ngesikhathi sokusetshenziswa kanye nokuqinisekisa imikhuba emihle yokuphatha eyimfihlo.
- Ukuphathwa Kwesici - Ukuhlonza, ukulandelela, nokulungisa amaphutha okuphepha ngendlela ehlelekile.
Ukuqinisekiswa kwe-
Ukuqinisekiswa kuqinisekisa ukuthi izilawuli zokuphepha zisetshenziswa kahle futhi iyasebenza. Lo msebenzi uhlanganisa izindlela zokuhlola ukuphepha, okuhlanganisa:
- Ukuhlolwa Okuqhutshwa Yizidingo - Ukuqinisekisa ukuthi izilawuli zokuphepha ziyahlangabezana nezidingo zokuphepha ezibekiwe.
- Ukuhlolwa Kwezokuphepha - Ukwenza ukuhlolwa kokuphepha okuzenzakalelayo nokwesandla ukuze kutholakale ubuthakathaka.
Operations
Umsebenzi wokusebenza uqinisekisa ukuqapha okuqhubekayo, impendulo yezehlakalo, kanye nokuphathwa kokuphepha kokusebenza ukugcina ukuphepha kwesofthiwe kuyo yonke impilo yayo. Kuhlanganisa:
- Ukuphathwa Kwezehlakalo – Ukuthola, ukuphendula, kanye nokunciphisa izehlakalo zokuphepha.
- Ukuphathwa Kwemvelo - Ukuvikela ukucushwa kwamafu kanye nengqalasizinda ukuze kuncishiswe ukuvezwa kokuhlaselwa.
- Ukulawulwa Kwengozi Yokusebenza – Ukusungula ukuqapha okuqhubekayo kanye nokubeka phambili ubungozi ukuze kuqinisekiswe ukuphepha okusebenzayo.
Ukuqonda Amazinga Okuvuthwa kwe-SAMM
I-OWASP SAMM ichaza amazinga okuvuthwa (0-3) kuyo yonke inqubo yezokuphepha, okuvumela izinhlangano ukuthi zithuthukise isimo sazo sezokuphepha kancane kancane. Amazinga asukela ku- i-ad-hoc noma imikhuba engekho (Izinga 0) kuya ku- izindlela zokuphepha ezilungiselelwe ngokugcwele futhi ezithuthukisa njalo (Izinga 3).
Ngokuhambisana nemisebenzi yebhizinisi le-SAMM kanye namazinga okuvuthwa, izinhlangano zingalinganisa isimo sazo samanje sokuphepha, chaza amamephu ezindlela zokuthuthukisa acacile, futhi usebenzise ukuthuthukiswa kokuphepha okuhlelekile.
Ukuqondaniswa kwe-Xygeni nemisebenzi yebhizinisi le-SAMM
I-Xygeni ihambisana ne Imisebenzi emihlanu yebhizinisi ye-OWASP SAMM ngokwenza kube ngokuzenzakalela ukuqiniswa kokuphepha, okuvumela ukubekwa phambili kwengozi okuqhutshwa idatha, nokuqinisa ukuphathwa kwezehlakalo kanye nokuphathwa kwazo.
- Ukubusa: ASPM ithuthukisa ukubonakala kwengozi, ukuphoqelelwa kwenqubomgomo, kanye nokuphathwa kokuthobela imithetho, ukuqinisekisa izinhlangano landelela ukusebenza kokuphepha futhi usebenzise izinqubomgomo ngempumelelo.
- Idizayini: Dynamic ukuhlolwa kosongo kanye nokubekwa phambili kwengozi gxila emizamweni yokulungisa ubuthakathaka ngokusekelwe ekusetshenzisweni, ukufinyeleleka, kanye nomthelela webhizinisi.
- Ukuqaliswa:
- SCA, CI/CD Ezokuphepha, kanye SAST ukuhlanganisa ukuphepha ekwakhiweni nasekusetshenzisweni kwesofthiwe, ukuqinisekisa ukutholakala kobuthakathaka kusenesikhathi.
- Build Security inikeza ubufakazi besofthiwe ukuqinisekisa ubuqotho.
- Ukutholwa Kwezimfihlo ivikela iziqinisekiso yonkana CI/CD pipelineukuhlelwa kwengqalasizinda kanye nezakhiwo.
- Ukuqinisekiswa:
- Amasango Okuphepha ukuphoqelela Hamba/Cha-Hamba decision, ukuqinisekisa ukuthobela imithetho yezokuphepha ngaphambi kokuthunyelwa.
- CI/CD Ezokuphepha ziqinisa ukuqina kwengqalasizinda, ukunciphisa ukulungiselelwa okungalungile kanye nokuzulazula kokucushwa.
- ASPM Isitokwe siqinisekisa ukuthi amathuluzi okuphepha asetshenziswa njalo kuyo yonke indawo pipelines.
- Operations: Ukutholwa Kwe-Anomaly kanye Nokuvikelwa Kokuphazamiseka Kwekhodi Ukuhlinzeka ukuqapha izigameko ngesikhathi sangempela, ukuqinisekisa impendulo esheshayo ezinsongweni zokuphepha kanye nokuguqulwa okungagunyaziwe.
Umdwebo ongezansi uqokomisa imikhuba yokuphepha i-Xygeni engayisekela.
Izigaba ezilandelayo zinikeza umbono oningiliziwe wokuthi kanjani I-Xygeni isekela umsebenzi ngamunye webhizinisi le-SAMM, izinhlangano ezisizayo bathuthukise ukuvuthwa kwabo kokuphepha futhi balondoloze imikhuba yokuthuthukisa isofthiwe evikelekile.
Ukubusa
I-Xygeni iqinisa ukuphathwa kwezokuphepha ngokuhlinzeka ukubonakala kwezindlela zobungozi, ukwenza ngokuzenzakalelayo ukuphoqelelwa kwenqubomgomo, kanye nokufaka ulwazi lokuphepha emisebenzini yokuthuthukisa. Ngokusebenzisa Isu kanye nezilinganiso, Inqubomgomo kanye nokuthobela imithetho, kanye neMfundo kanye nesiqondiso, i-Xygeni iqinisekisa ukuthi izinhlangano zingakwazi ukulandelela, ukuphoqelela, nokuthuthukisa njalo ukuma kwabo kokuphepha.
Isu kanye nezilinganiso
Ukuqonda izitayela zokuphepha kanye nokulinganisa ukusebenza kahle kokulungisa kubalulekile ukuvumelanisa imizamo yokuphepha nezinhloso zebhizinisi. I-Xygeni's Application Security Posture Management (ASPM) ihlinzeka a umbono ophakathi wezingozi zokuphepha, okuvumela izinhlangano ukuthi zilandelele izitayela zobuthakathaka, ukuhlola ukusebenza kahle kokulungisa, kanye nokukala intuthuko yokuphepha ngokuhamba kwesikhathi.
I-Xygeni ihlaziya ifasitela lokudalulwa, ukunquma ukuthi ubuthakathaka buhlala isikhathi esingakanani ngaphambi kokulungiswa. Amaqembu ezokuphepha angenza ngcono izikhathi zokuphendula, athuthukise amasu okunciphisa ubungozi, futhi aphoqelele ama-SLA okulungisa ukuphepha ngokuhlonza ukubambezeleka kokulungisa. dashboardhlinzeka ama-KPI esikhathi sangempela, okunikeza ukubonakala okuphelele ku ukusebenza kohlelo lokuphepha kanye nokuvumela ubuholi ukuthi benze idatha eqhutshwa yi-decision ukuthuthukisa ukuma kokuphepha.
Inqubomgomo Nokuthobela
Ukuthobela imithetho ngokuzenzakalela kuyo yonke indawo ukuthuthukiswa, ukwakhiwa, kanye nokusetshenziswa pipelines kubalulekile ekubuseni. I-Xygeni zenza ngokuzenzakalelayo ukuphoqelelwa kwenqubomgomo, ukuhlanganisa izinhlaka zokuphepha ezifana ne-NIST, CIS, Futhi OpenSSF ku SDLC izinqubo.
Izinqubomgomo zokuphepha kuphoqelelwa ngqo ngaphakathi CI/CD pipelines, ukuvimbela ukwakhiwa okungahambisani nokusetshenziswa okuvela ekuqhubekeniUkulandelela ukuhambisana nemithetho kuhlinzeka ukubonakala kwesikhathi sangempela ekunamatheleni kwenqubomgomo, okuvumela izinhlangano ukuthi zithole futhi zilungise izikhala ngaphambi kokuba zibe izingozi. Ngokufaka isicelo ukuphoqelelwa okusekelwe engozini, I-Xygeni ibeka phambili ukwephulwa komthelela omkhulu ngenkathi kunciphisa umsindo ovela ekuphambukeni kwenqubomgomo okunengozi encane, kuqinisekisa ukuthi amaqembu ezokuphepha agxila kulokho okubaluleke ngempela.
Imfundo Nesiqondiso
Ukwakha isiko lokuphepha kuqala kudinga ukuthi ulwazi lokuphepha lube kufinyeleleka futhi kuyasebenza ngaphakathi kwemisebenzi yokuthuthukisa. I-Xygeni inikeza isiqondiso sokuphepha sesikhathi sangempela, ukusiza amaqembu ukuthi amukele imikhuba emihle kakhulu ngaphandle kokuphazamisa umkhiqizo.
Izincomo zokulungisa ezisekelwe kumongo ziyaqinisekisa onjiniyela bayaqonda futhi balungisa ubuthakathaka ngempumelelo, ukunciphisa ukuhlangana phakathi kwamaqembu ezokuphepha nawobunjiniyela. Ukuze kuvinjelwe izingozi zangaphakathi kanye nokuphoqelela ukuzibophezela kwezokuphepha, i-Xygeni ilandelela izindima zomnikeli futhi iphoqelela ukufinyelela kwamalungelo amancane, ukuqinisekisa ukuthi imisebenzi ebucayi ikhawulelwe kubasebenzisi abagunyaziwe.
- Ukubonakala okugcwele kwengozi ngokuphepha kwesikhathi sangempela dashboardkanye nokulandelela ukuchayeka.
- Ukuqinisa ukuthobela imithetho okuzenzakalelayo Ngaphakathi CI/CD ukuvimbela ukwephulwa kwenqubomgomo.
- Ukuqwashisa ngokuphepha okufakiwe ngokulungiswa komongo kanye nokulawulwa kwamalungelo amancane.
Design
Ukuthuthukisa i-Xygeni ukuhlolwa kosongo ngokunika amandla ukuhlolwa kwengozi okuhlelekile, ukubeka phambili okuzenzakalelayo, kanye nokuqapha okuqhubekayo. Ngokusebenzisa amandla ASPMama-funnel okubeka phambili, ukuhlaziywa kokufinyeleleka, kanye nokulinganisa ukuxhashazwa, izinhlangano zingakwazi ngokuhlelekile ukuhlonza, ukuhlola, nokuphatha izingozi zokuphepha, ngakho decisAma-ion aqhutshwa idatha futhi ahambisana nezinhloso zebhizinisi.
Ukuhlonza Nokubonakala Kwengozi Ehlelekile
Ukuhlolwa kobungozi okusebenzayo kuqala ngokuqonda indawo enengoziI-Xygeni inikeza ukuqonda kobuthakathaka besikhathi sangempela ukuhlukanisa izingozi ngokusekelwe kulokho ubukhali, ukuxhashazwa, kanye nomthelelaAmaqembu ezokuphepha angalandelela futhi aqaphe ukuchayeka engozini ngokusebenzisa ukuphepha okuzenzakalelayo dashboardsukuqinisekisa ukuthi ubuholi bubonakala ngokucacile ku- izinsongo ezingaba khona kulo lonke uchungechunge lokuhlinzekwa kwesofthiwe.
Ngokusungula a umbono ophakathi wezingozi zokuphepha, izinhlangano zingalinganisa ukusebenza kahle kwezinhlelo zokuphepha futhi kuqinisekiswe ukuthi imizamo yokulungisa ukubhekana nobuthakathaka obubaluleke kakhuluLe ndlela ehlelekile ivumela amaqembu ukuthi dlulela ngale kokuphathwa kwengozi okungahleliwe bese wamukela inqubo yokuhlola usongo ehlelekile nengandiswayo.
Ukuhlaziywa Kokubaluleka Okuzenzakalelayo kanye Nokufinyeleleka
Njengoba izinhlelo zokuphepha zivuthwa, izinhlangano zidinga a standarduhlaka lokuphathwa kwezingozi oluhlanganisiwe ukubeka phambili izinsongo zangempela kunobuthakathaka obungokwemfundiso. I-Xygeni yenza le nqubo ibe ngokuzenzakalelayo ngokusebenzisa ama-funnel okubeka phambili angenziwa ngezifiso ahlunga ubuthakathaka ngokusekelwe ku- umthelela webhizinisi, ukufaneleka kokuthobela imithetho, kanye nokuxhashazwa.
Ukuhlaziywa kokufinyeleleka kuqinisekisa ukuthi ubuthakathaka bukhona zibekwe phambili ngokusekelwe ekutheni zingasetshenziswa yini ngempela endaweni ethile yenhlanganoEsikhundleni sokuphatha zonke izinkinga zokuphepha ngokulinganayo, i-Xygeni igxile ekulungiseni ubuthakathaka obubeka ingozi enkulu kunazo zonke emhlabeni wangempela, ukunciphisa ukukhathala kokuqwashisa nokuvumela ukungenelela okuqondiwe kwezokuphepha.
Ngaphezu kwalokho, amaphuzu okusetshenziswa kuthuthukisa ukuhlolwa kwengozi ngokuhlola ukuthi kungenzeka kangakanani ukuthi ubuthakathaka buzosetshenziswa ekuhlaselweni kwangempela. Amaqembu ezokuphepha angabela izinsiza ngendlela ephumelelayo, abhekane nezingozi ezibucayi ngaphambi kokuba abahlaseli babaxhaphaze.
Ukuthuthukiswa Okuqhubekayo kanye Nokuphathwa Kwengozi Ehambisana Nezimo
Enamandla isu lokuhlola usongo iyathuthuka kanye nesimo sengozi senhlangano. I-Xygeni ivumela ukuqhubeka ukulungiswa kwama-funnel okubeka phambili, okuvumela ukuthi amaqembu ezokuphepha akwazi lungisa isimo sabo sengozi njengoba kuvela izinsongo ezintsha.
Izilinganiso zokuphepha zomlando kanye nemikhuba yokulungisa zisetshenziswa ukuze lungisa amasu okunciphisa ubungozi, kanye nokutshalwa kwezimali kwezokuphepha okutholakele ukuthuthukiswa okulinganisekayo. Ngokuhamba kwesikhathi, ukuphoqelelwa okuqhutshwa yinqubomgomo kuvumelanisa ukuphepha kwe-decisions nge ukubekezelela izingozi zebhizinisi ngenkathi izilawuli zokuphepha zisekhona ukukhuthala kunokusabela.
- Ukubeka phambili ubungozi ngobuhlakani igxile ebuthakathakeni obunomthelela emhlabeni wangempela.
- Ukuhlolwa okuqhubekayo kosongo kuhlanganisa ukuxhashazwa, ukufinyeleleka, kanye nomthelela webhizinisi.
- Ukuthola amaphuzu engozi okuzenzakalelayo kanye nesiqondiso sokulungisa lula ukuphephacisukwenza ama-ion.
Implementation
Ukwakhiwa Okuphephile
I-Xygeni iyaqinisa imikhuba yokwakha evikelekile ngokuhlanganisa izilawuli zokuphepha ezizenzakalelayo kanye nokuphathwa kokuthembela kanye nokwakha ukuqinisekiswa kobuqotho ngqo ku CI/CD pipelines. Ngokusebenzisa Ukuhlaziywa Kokwakheka Kwesofthiwe (SCA), Ukuhlolwa Kokuphepha Kwesicelo Esimile (SAST), Ukuphathwa Kwezimfihlo, kanye Build Security, i-Xygeni iqinisekisa ukuthi yonke inqubo yokwakhiwa ilandela inqubo yokuphepha ephindaphindwayo, eqhutshwa yinqubomgomo, futhi eqinisekisiwe. Ukwengeza, CI/CD iziqinisekiso zokuqinisekisa ukuphepha ukuthi amathuluzi okuphepha abalulekile asetshenziswa njalo kuyo yonke indawo pipeline, kunciphisa ukuchayeka engozini.
Ukungaguquguquki Nokuphindaphindeka Enqubweni Yokwakha
Inqubo yokwakha ephephile idinga standardukwenziwa, ukuzenzekela, kanye nokuqinisekiswa okuqhubekayo. I-Xygeni iyaphoqelela standardizinqubomgomo zokwakha ezithuthukisiwe ngokusebenzisa CI/CD ukuqinisekiswa kokuphepha, okuphoqa yonke into yokwakha ukuthi isebenze amathuluzi okuphepha adingekayo, njenge SAST, SCA, kanye nokuskena izimfihlo ngaphambi kokuqhubeka.
I-Xygeni isungula build attestations ukuqinisekisa ubuqotho besofthiwe, ukuqinisekisa ukuvela kwesofthiwe, nokuvimbela izinto zobuciko eziphazanyisiwe noma ezingaqinisekisiwe kusukela ekuqhubekeni phambili ngokusebenzisa pipeline. Ngokushumeka izindlela ezinhle zokuphepha enqubweni yokwakha, izinhlangano zifinyelela ukungaguquguquki nokuphindaphinda, ukunciphisa amaphutha abantu kanye nokuthuthukisa ikhwalithi yesofthiwe iyonke.
Ukulawula Ukuphepha Okuzenzakalelayo Esakhiweni Pipeline
Ukuzenzakalela kokuphepha kubalulekile ekutholeni nasekulungiseni izingozi kusenesikhathi isiyathuthukiswa. I-Xygeni iyahlanganisa SAST ukuthola ubuthakathaka kukhodi ngaphambi kokusetshenziswa, ukubhekana nezinkinga zokuphepha ngokushesha okukhulu. Ngaphezu kwalokho, ukuskena izimfihlo kuvimbela ukuvezwa ngengozi kweziqinisekiso ngokuhlaziya ikhodi yomthombo ngokuqhubekayo, amafayela okucushwa, kanye nokwakha amalogi.
CI/CD ukuqinisekiswa kokuphepha kuqinisekisa ukuthi yakha izindawo kanye namathuluzi landela imikhuba emihle yokuphepha, ukukhawulela ukufinyelela okungadingekile kanye nokufaka imingcele izinqubomgomo zamalungelo aphansi kakhuluI-Xygeni iqeda izithiyo zokuphepha ngenkathi igcina isivinini esikhulu sentuthuko ngokuzenzakalelayo ukuhlola ukuphepha ngaphakathi pipeline.
Ukuvimbela Amaphutha Okuphepha Ekufinyeleleni Umkhiqizo
Izinto zobuciko ezingaqinisekisiwe noma ezingavikelekile akumele zifinyelele ekukhiqizweni. I-Xygeni iyaphoqelela amasango okuphepha lokho ngokuzenzakalelayo izakhiwo ezihlulekile eziqukethe ubuthakathaka obubalulekile, izimfihlo ezidaluliwe, noma ukwephulwa komthethoNgokuhlanganisa ukuphepha ngqo ku- CI/CD, kuphela izinto zobuciko eziphephile nezithobela imithetho qhubeka nokusetshenziswa.
I-Xygeni ihlanganisa ukutholwa kwe-malware ngaphakathi kwenqubo yokwakha ukuze ivikele ubuqotho bokwakha, ibone izinguquko ezingagunyaziwe, ukuhlaselwa kweketanga lokuhlinzeka, noma umsebenzi osolisayo ku CI/CD Amafomu okusebenzaIzinhlangano zinciphisa izingozi ngokuvimbela izinkinga zokuphepha ukuthi zingangeni ekukhiqizeni ngaphambi kokuba zikhule zibe izinsongo zomhlaba wangempela.
Ukuphatha Ukuthembela Kwesofthiwe Ngezilawuli Zokuphepha
Izinhlelo zokusebenza zesimanje zithembele kakhulu ku- ukuncika komuntu wesithathu kanye nomthombo ovulekile, okwenzayo ukuphepha kokuthembela kuyisici esibalulekile sokwakha okuphephile. I-Xygeni ivumela ukuphathwa kwengozi yochungechunge lokuhlinzekwa kwesofthiwe okuzenzakalelayo, ukulandelela njalo, ukuqinisekisa nokuqapha konke ukuncika.
Umthethosivivinywa Wezinto Zesofthiwe (SBOMs) ukunikeza izinhlangano ukubonakala okuphelele kwezingxenye zesofthiwe, ukusiza amaqembu okuphepha thola ukuncika osekuphelelwe yisikhathi, ukwephulwa kwelayisensi, kanye nezingozi ezingaba khona. Ukuqapha kwesikhathi sangempela kuyathola amaphakheji anonya, izinguquko ezingagunyaziwe, kanye nobuthakathaka, ukunciphisa ukuchayeka ekuhlaselweni kweketanga lokuhlinzeka.
Ukuqinisekiswa Kokuphepha Kokuxhomekeka Okuzenzakalelayo
Akuzona zonke izinkinga ezidinga ukulungiswa ngokushesha. SCA ngokuhlaziywa kokufinyeleleka kuqinisekisa ukuthi amaqembu ezokuphepha abeka phambili kuphela ubuthakathaka obuyisongo sangempela kuhlelo lokusebenzaEsikhundleni sokuqeda amandla amaqembu ngezaziso, i-Xygeni yenza ngokuzenzakalelayo ukuhlolwa kwengozi, ivumela ubuhlakani bokwenzacisukwenza ama-ion.
Ukugcina inhlanzeko eqinile yokuphepha, I-Xygeni iyaphoqelela izinqubomgomo zokuphepha ezizenzakalelayo ukuthi hlaba umkhosi futhi uvimbele ukuncika okuyingozi ngesikhathi senqubo yokwakha, ukuvimbela ukuthi izingxenye ezingavikelekile zingeniswe.
Amasango Okuphepha kanye Nokulungiswa Kwabaxhomeke Emithwalweni
Kuya vimbela izingozi zochungechunge lokuhlinzekwa kwempahla, Imishini ye-Xygeni amasango okuphepha avimba izakhiwo eziqukethe ukuncika okungagunyaziwe noma ubuthakathaka obuyingozi kakhulu. Imisebenzi yokulungisa ezenzakalelayo yenza kube lula izibuyekezo zokuthembela, futhi usebenzise ukulungiswa kwezokuphepha ngaphandle kokuphazamisa intuthuko.
Ngokuhlaziya ukuncika kwe iminyango yangemuva, i-malware efihliwe, noma ukuziphatha okusolisayo, i-Xygeni iyasebenza izimiso zokuphepha ze-zero-trust kukhodi yenkampani yangaphandle, ukunciphisa amathuba okuba kube nokuphazamiseka kochungechunge lokuhlinzeka ngempahla.
- Standardukuqiniswa kokuphepha kuqinisekisa ukuthi zonke izakhiwo zilandela ukuhlolwa kokuphepha okuqhutshwa yinqubomgomo.
- Ukuqinisekiswa kwesakhiwo kanye nokuqinisekiswa kokuthembela vimbela izinto zobuciko eziphazanyisiwe noma ezisengozini.
- Ukuskena izimfihlo kanye nokutholwa kwe-malware vikela ubuqotho be-software supply chain.
Ukuthunyelwa Okuvikelekile
I-Xygeni iqinisekisa ukuthunyelwa okuphephile, okuqhutshwa yinqubomgomo ngokuzenzakalelayo ukuqinisekiswa kokuphepha, ukulawulwa kokuthobela imithetho, kanye nokuthola izinguquko ezingagunyaziwe. Ngokuhlanganisa CI/CD Ezokuphepha, Ingqalasizinda-njengeKhodi (IaC) Ukuphepha, kanye nokutholwa kwe-Anomaly, I-Xygeni ivimbela ukulungiselelwa okungalungile, ukuguqulwa okungagunyaziwe, kanye nokuvezwa kweziqinisekiso, ukuqinisekisa lokho izinhlelo zokusebenza eziqinisekisiwe neziphephile kuphela ezifinyelela ekukhiqizweni.
Ukuqinisekisa Ukuphepha Kokusetshenziswa kanye Nokuphoqelela Ukuthobela Imithetho
Inqubo yokuthunyelwa ephephile idinga ukuqinisekiswa kokuphepha okuqhubekayo kuzo zonke izigaba CI/CD. I-Xygeni ihlanganisa izindlela zokuqinisekisa ukuphepha Ngaphakathi pipelines, ukuqinisekisa ukuthi konke ukuthunyelwa landela izinqubomgomo zokuphepha kanye nemikhuba emihle kakhulu yemboni.
Ukucushwa kokusetshenziswa ku- kuqinisekiswe ngokuzenzakalelayo ngokumelene izinqubomgomo zokuphepha ezichazwe kusengaphambili, ukuvimbela ukulungiselelwa okungalungile okungaletha ubuthakathaka. CI/CD ukuqinisekiswa kokuphepha kuqinisekisa ukuthi ukuhlolwa kokuphepha okubalulekile—SAST, SCA, ukuskena izimfihlo, kanye nokuphoqelelwa kokuthobela imithetho— zisetshenziswa njalo kuyo yonke indawo zonke izigaba zokusetshenziswa, ukususa izindawo ezingabonakali zokuphepha.
I-Xygeni iyaqinisekisa IaC amathempulethi kanye nezikripthi zokuthunyelwa ukuze kuvikelwe izindawo zamafu kanye nokucushwa kwengqalasizinda, kuqinisekiswe ukuthi yonke ingqalasizinda ihlinzekwa ngokuphephile futhi inamathela kuyo izisekelo zokuphepha zenhlangano yonkeAmasango okuphepha ahlinzeka ukusetshenziswa okuzenzakalelayo, ukuvimbela ukusetshenziswa okuqukethe ubuthakathaka obuyingozi kakhulu, ukwephulwa kwenqubomgomo, noma ukungalungiselelwa kahle, ukuqinisekisa ukuthi kuphela izinto zobuciko ezivikelekile zifinyelela ekukhiqizweni.
Ukuqinisekisa Ubuqotho Bokusetshenziswa Nokuthola Izinguquko Ezingagunyaziwe
I-Xygeni isebenzisa ubufakazi bokusetshenziswa ukuqinisekisa ukuthi isofthiwe ethembekile nengaphazanyiswa kuphela engena ekukhiqizweni. Lezi ziqinisekiso ziqinisekisa imvelaphi kanye nobuqotho bezinto zobuciko zesofthiwe, ukuvimbela ukwethulwa kwe izingxenye ezingaqinisekisiwe noma ikhodi eyonakalisiwe ezindaweni ezibukhoma.
I-Xygeni iqapha njalo izinqubo zokuthunyelwa ukuze ithole izinguquko ezingagunyaziwe, ibone izinguquko ezingavamile ku pipeline ukucushwa, izilungiselelo zengqalasizinda, kanye nemisebenzi yokuthunyelwaLokhu kutholwa kwe-anomaly okusebenzayo kunciphisa ingozi yezinsongo zangaphakathi, ukungalungiselelwa kahle, kanye nokuhlaselwa kweketanga lokuhlinzeka, ukuvimbela izinguquko ezingagunyaziwe ukuthi zithinte izindawo zokukhiqiza.
CI/CD imisebenzi ilandelwa njalo ukuze ukuphambuka ezinqubweni zokuphepha, ukuqinisekisa lokho konke ukuthunyelwa kulandela izinqubo ezigunyaziwe neziphephileUma kutholakala ukuphambuka, i-Xygeni iphawula inkinga, inikeze ukuqonda okuningiliziwe kokuphepha kanye nezincomo zokunciphisa okuzenzakalelayo ukubuyisela ukuthobela imithetho.
Ukuvimbela Ukudalulwa Kwezimfihlo Ekusetshenzisweni Pipelines
Iziqinisekiso ezibucayi ezifana Okhiye be-API, amathokheni okufinyelela, kanye nezimfihlo zokubethela kumele ihlale ivikelwe phakathi nokusetshenziswa. I-Xygeni ithuthukisa ukuphepha kwezimfihlo ngokuthola nokunciphisa ukuvuza kweziqinisekiso ezindaweni zokuthunyelwa ngaphambi kokuba zisetshenziswe kabi.
Ukuskena kwe-Xygeni amafayela, pipelines, izikripthi zokucushwa, kanye neziguquguquko zemvelo ngezimfihlo ezifihliwe, ukuvimbela ukudalulwa ngengozi ngaphesheya SCM, CI/CD imisebenzi, kanye nokucushwa kwengqalasizinda. SCM ukuhlolwa komlando kuvumela amaqembu ezokuphepha ukuthi athole ngaphambilini commitizimfihlo ezifihliwe ezihlala zifinyeleleka, okuqinisekisa ukuthi iziqinisekiso zesikhathi esidlule ziphathwa ngendlela efanele.
I-Xygeni iqinisekisa izimfihlo ezitholakele ukuze ibeke phambili imizamo yokulungisa, ihlukanise phakathi iziqinisekiso ezisebenzayo nezingasebenziAmaqembu ezokuphepha angavimba ngokushesha izingozi zangempela ngokugxila ezimfihlweni ezivumelekile nezingasetshenziswa esikhundleni sokuphishekela okuhle okungamanga.
Uma imfihlo evumelekile iyadalulwa, i-Xygeni ivumela ukulungiswa okuzenzakalelayo ngu-:
- Ukuqala ukuphepha playbooks abahoxisa, bajikelezise, noma basebenzise izenzo zokunciphisa ngokwezifiso, ukuqinisekisa ukuthi iziqinisekiso ezisengozini azishintshi.
- Ukuvimbela ukuthunyelwa equkethe izimfihlo eziveziwe, okuvimbela izinhlelo zokusebenza ezisengozini ukuthi zikhishwe ekukhiqizweni.
- Ukunikeza izingodo zokuhlola ezinemininingwane izimfihlo ezitholakele kanye nezenzo zokulungisa, ukuqinisekisa ukuthobela izinqubomgomo zokuphepha kanye nezidingo zomthetho.
- Ukuqinisekiswa kokuphepha okuzenzakalelayo iqinisekisa ukuthunyelwa okuhambisanayo ku CI/CD.
- Ingqalasizinda-njengeKhodi (IaC) ukuskena kuvimbela ukulungiselelwa okungalungile ngaphambi kokukhiqizwa.
- Ukutholwa kokudidayo kwesikhathi sangempela amafulegi ezinguquko ezingagunyaziwe kanye nokuphambuka kokuphepha.
Ukuphathwa Kwesici
Ukuthuthukisa i-Xygeni ukuphathwa kwamaphutha by ukwenza ngokuzenzakalelayo ukulandelwa kwezinkinga zokuphepha, ukubeka phambili ubuthakathaka ngokusekelwe engcupheni yangempela, kanye nokuhlanganisa imisebenzi yokulungisa. Ngokusebenzisa amandla Application Security Posture Management (ASPM), Ama-Funnel Okubeka Izinto Ezibalulekile, kanye CI/CD Security, izinhlangano zingabona, zihlukanise, futhi zixazulule izinkinga zokuphepha kahle, ukunciphisa ukuchayeka ezingozini ezingaxhashazwa kanye nokwephulwa komthetho.
Ukulandelela Nokuphatha Amaphutha Okuphepha
Umbono ohlukene ngezinkinga zokuphepha ungaholela ubuthakathaka obungatholakali, ukulungiswa okungaguquki, kanye nokuphathwa kwezingozi okungasebenzi kahleI-Xygeni inikeza umbono ophakathi weziphambeko zokuphepha, ukuhlanganisa okutholakele okuvela ku- SAST, SCA, IaC security, Futhi CI/CD ukuskena kokuphepha a isikhombikubona sokuphathwa kwengozi eyodwa.
By ukuhlanganisa izinkinga zokuphepha emithonjeni eminingi, I-Xygeni iqinisekisa ukuthi amaqembu okuphepha ayazuza ukubonakala okuphelele ngezingozi zohlelo lokusebenza, ukugwema izexwayiso eziphindaphindwayo noma ukungabhekwa kweziphambeko ezibucayi. Amaphutha kuhlukaniswe ngokusekelwe kumthelela webhizinisi, ukuxhashazwa, kanye nobunzima bobuchwepheshe, okuvumela izinhlangano ukuthi beka phambili ukulungiswa okunenjongo ngenkathi ukunciphisa ukukhathala kokuqwashisa.
I-Xygeni yenza kube lula ukuphathwa komjikelezo wokuphila kwezinkinga ukuze kube lula imizamo yokulungisa. Ivumela amaqembu ukulandelela, ukwabela, nokuxazulula amaphutha ngaphakathi noma nge- izinhlelo zangaphandle zokuthengisa amathikithi njengeJira futhi amapulatifomu okuthumela imiyalezo afana ne-Slack. Lokhu kuqinisekisa izinkinga zokuphepha ziphathwa ngendlela efanele ngaphakathi kwemisebenzi yokuthuthukisa ekhona, ukuthuthukisa ukubambisana phakathi kwamaqembu ezokuphepha nawobunjiniyela.
Ukubekwa Kwangaphambili Okuzenzakalelayo kanye Nokuphathwa Kwamaphutha Okusekelwe Engozini
Ngaphandle kokubeka izinto eziza kuqala ngendlela ehlelekile, amaqembu ezokuphepha asengozini yokukhungathekiswa yizaziso ezingalethi izinsongo ezisheshayo. I-Xygeni ibhekana nalokhu ngokuhlanganisa Ama-Funnel Okubeka Izinto Ezibalulekile, okuvumela izinhlangano ukuthi hlunga amaphutha okuphepha ngokusekelwe ezintweni eziyingozi zangempela njenge ukufinyeleleka, ukuxhashazwa, kanye nomthelela ebhizinisini.
Ngokuqinisekisa lokho ubuthakathaka obusetshenziswa ngenkuthalo ezindaweni zokukhiqiza kubhekwana nabo kuqala, I-Xygeni isiza amaqembu okuphepha gxila ezinsongweni ezibucayi kakhulu ngenkathi kubekwa phansi izinto ezibalulekile ingozi encane noma engekho nhlobo emhlabeni wangempela. Okuzenzakalelayo ukulandelwa kwenqubomgomo kuqinisekisa futhi ukuthi ukuthunyelwa kuvinjiwe uma amaphutha abucayi angaxazululwa ziyatholakala, ukuvimbela ubuthakathaka obuyingozi kakhulu ekufinyeleleni ekukhiqizeni.
Ukulungisa Ukulungiswa Nokuthuthukiswa Okuqhubekayo
Ukulungisa amaphutha okuphepha ngempumelelo kudinga ukuhlanganiswa okungenamthungo nemisebenzi yonjiniyela futhi ukuzenzekela ukunciphisa umzamo owenziwa ngesandla. I-Xygeni iyasheshisa ukulungiswa kwephutha lokuphepha ngokufaka ngqo isiqondiso sokuphepha esisebenzayo ku CI/CD pipelines, ukuqinisekisa ukuthi onjiniyela bathola izincomo zokulungisa isimo ngaphandle kokuphazamisa ukusebenza kwazo.
Ukuze kuqedwe imisebenzi ephindaphindwayo yesandla, i-Xygeni yenza ngokuzenzakalelayo izenzo zokulungisa, ukucupha ukulungiswa okuqhutshwa yincwadi yokudlala kobuthakathaka obuvamileLokhu kunciphisa isikhathi nomzamo odingekayo ukubhekana nezinkinga zokuphepha, okuvumela amaqembu ukuthi gxila ezinsongweni eziyinkimbinkimbi nezinomthelela omkhulu.
I-Xygeni iphinde ilandelele ukusebenza kahle kokulungisa, ilinganise izindlela zokulungisa isikhathi kanye nokunciphisa ubungozi jikeleleLokhu kwenza izinhlangano zikwazi ukuqhubeka lungisa ukuma kwabo kokuphepha, thola izithiyo zenqubo, futhi uthuthukise izikhathi zokuphendula, ukuqinisekisa ukuthi izinkinga zokuphepha ziyaxazululeka ukuphathwa ngendlela ephumelelayo kunokuba ngendlela ephendulayo.
- Ukulandelela izinkinga zokuphepha ezihlanganisiwe kuqeda ukuhlukana ekuphathweni kobuthakathaka.
- Ama-Funnel Okubeka Izinto Ezibalulekile qinisekisa ukuthi amaqembu agxila ezingozini ezingaxhashazwa futhi ezinomthelela omkhulu.
- Imisebenzi yokulungisa ezenzakalelayo ukusheshisa ukulungiswa kwezinkinga zokuphepha.
Ukuqinisekiswa kwe-
I-Xygeni iqinisa izinqubo zokuqinisekisa ngokushumeka Ukuhlolwa Okuqhutshwa Yizidingo futhi Ukuhlolwa Kwezokuphepha emisebenzini yokuthuthukisa. Ngokuzenzakalela ukuqiniswa kokuphepha CI/CD, ibeka phambili ubuthakathaka ngokusekelwe engcupheni, futhi ihlanganisa ukuqinisekiswa kokuphepha kuzo zonke izigaba, i-Xygeni iqinisekisa ukuthi ukuphepha kuba yingxenye ebalulekile yokulethwa kwesofthiwe kunokuba kube yindawo yokuhlola ngomzuzu wokugcina.
Ukuhlolwa Okuqhutshwa Yizidingo
Ukuhlolwa kokuphepha kumele kube kuchaziwe futhi kwasetshenziswa ngendlela ehlelekile kuzo zonke izigaba zokuthuthukiswa. I-Xygeni iqinisekisa ukuthi izidingo zokuphepha kuphoqelelwa ngokuzenzakalelayo ngokuhlanganisa amasheke ku- CI/CD pipelines. Yonke into eyakhiwe iqinisekiswa ngokuhlolwa kokuphepha kwesicelo esingaguquki (SAST) mayelana nobuthakathaka bekhodi, ukuhlaziywa kokwakheka kwesofthiwe (SCA) ngezingozi zokuncika, ukuskena izimfihlo ukuvimbela ukuvezwa kweziqinisekiso, kanye nengqalasizinda njengekhodi (IaC) ukuhlolwa kokuphepha kokuqinisekiswa kokucushwa.
Amasango okuphepha asebenza njengezindlela zokuphoqelela, avimba ngokuzenzakalelayo ukwakhiwa uma ukuhlolwa kokuphepha kungekho noma kwehluleka izinqubomgomo ezichazwe ngaphambilini. kulandelela ukumbozwa kokuhlolwa kuzo zonke izinhlelo zokusebenza, ukuqinisekisa ukuthi zonke izingxenye ziqinisekiswa njalo ngokwezidingo zokuphepha. Uma kutholakala izikhala, izinhlangano zithola izincomo ezenzakalelayo zokuzivala. Ukuqinisekisa ukuthi ukuhlolwa kokuphepha kuhlala kusetshenziswa, i-Xygeni isusa ukungahambisani futhi ivimbele isofthiwe engakahlolwa ukuthi ifinyelele ekukhiqizweni.
Isisekelo Esingakhula Sokuhlolwa Kokuphepha
Ukuhlolwa kokuphepha okuzenzakalelayo kumele kuhambisane futhi kukhuliswe ukuze kuhambisane nemijikelezo yokuthuthukiswa okusheshayo. I-Xygeni ihlanganisa ukuskena kokuphepha okuzenzakalelayo kuzo zonke izigaba CI/CD, ukuqinisekisa ukuthi ubuthakathaka buyatholakala ngokushesha okukhulu. Ukuqinisekiswa kokuphepha kuyaqaliswa kuyo yonke ikhodi commit, ukwakha, kanye nokusabalalisa, ukuqapha njalo ukuma kokuphepha kwezinhlelo zokusebenza. Amasango okuphepha avimba ukusabalalisa uma kutholakala ubuthakathaka obukhulu, ukungalungiselelwa kahle, noma ukwephulwa komthetho.
I-Xygeni ivimbela nokubuyela emuva kokuphepha ngokuzenzakalelayo ukulandelela ubuthakathaka obuhleliwe nokuqinisekisa ukuthi aziphinde zivele ezinguqulweni ezizayo. Lokhu kuhlolwa kokuhlehla kuqinisekisa ukuthi ukuthuthukiswa kokuphepha kuyagcinwa ngokuhamba kwesikhathi. Ngokufaka ukuhlolwa kokuphepha ngqo ku CI/CD, I-Xygeni kuqeda izithiyo ezenziwa ngesandla futhi kuqinisekisa ukuthi ukuqinisekiswa kokuphepha kwenzeka ngaphandle kokuphazamisa intuthuko.
Ukuqonda Okujulile Nokubeka Izinto Ezibalulekile Ezisekelwe Engozini
Akuzona zonke izinkinga ezibeka izinga elifanayo lengozi. I-Xygeni ithuthukisa ukuhlolwa kokuphepha ngokugxila ku ukubeka phambili okusekelwe engcupheni, ukuqinisekisa ukuthi izingxenye ezinomthelela omkhulu zithola ukuhlolwa okujulile. Ukuskena kokuphepha kucebiswe ngokuhlolwa komthelela webhizinisi, ukusiza amaqembu ukugxila ebuthakathakeni obungasetshenziswa futhi obufinyelelekayo obuhlobene nesicelo.
Ukubeka izinto kuqala kuyashintshashintsha futhi kuyaqhubeka kuthuthukiswa njengoba izinsongo zithuthuka. Uma kuvela ukuxhashazwa endle noma ubuthakathaka buba bucayi kakhulu, ukubeka izinto kuqala kulungiswa ngokuzenzakalelayo, kubangele ukuqinisekiswa kabusha okusheshayo kanye nokuphoqelelwa kokuphephaLe ndlela yokuqaphela ubungozi ivumela amaqembu okuphepha ukuthi abelane ngezinsiza lapho kudingeka khona, alinganisele ukuhlolwa okuzenzakalelayo nokubuyekezwa okuqondiwe ngesandla.
Ukuhlolwa Kokuphepha Okuhlanganisiwe Ekuhambeni Komsebenzi Wokuthuthukiswa
Ukuhlolwa kokuphepha kumele kuhlanganiswe kahle imisebenzi yonjiniyela ukuze isebenze kahle. I-Xygeni iqinisekisa ukuthi ubuthakathaka obutholakele bungatholakala inikezwe onjiniyela ngokuhlanganiswa ne izinhlelo zokuthengisa amathikithi njengeJira kanye namapulatifomu okuthumela imiyalezo njengeSlackOkutholakele kwezokuphepha kuhlobene ngqo nemisebenzi yokulungisa, ukuvumela amaqembu ukuthi athathe isinyathelo ngabo ngaphambi kokuthunyelwa.
- CI/CDamasango okuphepha ahlanganisiwe ukuphoqelela ukuthobela imithetho ngaphambi kokuba ikhodi ifinyelele ekukhiqizweni.
- Ukuhlolwa kokuphepha okuzenzakalelayo nokuqhutshwa yingozi ithola ubuthakathaka kusenesikhathi.
- Ukuqinisekiswa kokuphepha okuqhubekayo kuvimbela ukuhlehla futhi kuthuthukisa ukusebenza kahle kokuhlolwa.
Operations
I-Xygeni iyaqinisa ukuphepha kokusebenza ngokunika amandla ukutholwa kwe-anomaly ngesikhathi sangempela, ukuphathwa kwengqalasizinda evikelekile, kanye nokulungiswa kobuthakathaka okuzenzakalelayo. Ngokusebenzisa Ukuphathwa Kwezehlakalo Nokwemvelo, i-Xygeni iqinisekisa ukuthi izehlakalo zokuphepha ziyatholwa futhi zincishiswe ngokushesha ngenkathi igcina izindawo zohlelo lokusebenza ziqinile futhi zisesikhathini.
Ukuphathwa Kwezehlakalo
Izehlakalo zokuphepha zivame ukungatholakali isikhathi eside, okuvumela abahlaseli ukuthi basebenzise ubuthakathaka futhi babangele umonakalo. I-Xygeni iyanciphisa kakhulu le ngozi ngokuhlanganisa ukutholwa kwe-anomaly kanye nokuvikelwa kokuphazamiseka kwekhodi, ukuqinisekisa ukuhlonza kusenesikhathi izinsongo zokuphepha kanye nokuguqulwa okungagunyaziwe.
Ukutholwa Kwesigameko kuthuthukiswe yi-Xygeni's ukuqapha kwesikhathi sangempela kwezindawo zokuthuthukiswa kwesofthiwe, ukuhlonza imisebenzi esolisayo ku CI/CD pipelines, izindawo zokugcina amakhodi omthombo, kanye nezinhlelo zokusebenza ezisetshenzisiweUkutholwa kwe-Anomaly kuhlaziya njalo ukuziphatha ngaphakathi SCM, CI/CD, kanye nezindawo zokukhiqiza, ukumaka imizamo yokufinyelela okungagunyaziwe, ukuguqulwa kwefayela okungavamile, kanye nokuphambuka kusuka ku- standard amaphethini omsebenziLe ndlela yokuthatha isinyathelo kuqala kunciphisa isikhathi sokuhlala, okuvumela izinhlangano ukuthi zithole izehlakalo zokuphepha ngaphambi kokuba zibhebhetheke.
Ukutholwa kokuphazamiseka kwekhodi kuqinisekisa ukuthi ubuqotho besicelo buhlala buqinile ngokuqapha izinguquko ezingagunyaziwe kukhodi yomthombo, izinto zokwakha, kanye nezikripthi zokuthunyelwaUma umhlaseli ezama ukushintsha indlela yohlelo lokusebenza noma ukwethula imithwalo eyingozi, i-Xygeni ixwayisa amaqembu okuphepha ngokushesha. Izinhlangano zithola ukubonakala okuphelele kokuzama ukuxhaphaza, okubavumela ukuthi phendula ngaphambi kokuba abahlaseli basebenzise ngempumelelo isofthiwe eyonakalisiwe.
I-Xygeni inikeza imisebenzi ezenzakalelayo kanye nokuhlanganiswa ngamathuluzi okuhlanganisa ezokuphepha ukuze kuphendulwe izigameko. Amaqembu ezokuphepha angakwazi isixhumanisi sithole izinsongo ezisekelweni zokuphendula ezigamekweni, ukuqinisekisa ukuphathwa okuhlelekile kwezigameko ngokusebenzisa playbooks, izenzo zokuvimbela ezenzakalelayo, kanye nokuhlaziywa kwe-forensic. Ngu ukwenza lula ukutholwa kanye nokuphendula, i-Xygeni ivumela izinhlangano ukuthi zilawule izinsongo ngokushesha futhi zinciphise umthelela wokusebenza.
- Ukutholwa kokudidayo kwesikhathi sangempela kunciphisa isikhathi sokuhlala kwesigameko.
- Ukuvikelwa kokuphazamiseka kwekhodi kuvimbela izinguquko ezingagunyaziwe.
- Imisebenzi yokuphendula ezenzakalelayo lula ukulawula nokulungisa izigameko.
Ukuphathwa Kwemvelo
Ukuvikela izindawo zokusebenza kudinga ukuphoqelelwa okuqhubekayo kwezilungiselelo eziqinile kanye nokulungiswa okusheshayo kobuthakathakaI-Xygeni iqinisekisa ukuthi CI/CD pipelines baphoqelele isisekelo sezokuphepha kuzo zonke izindawo zengqalasizinda nentuthuko, ukunciphisa ukuchayeka ekulungiselelweni okungalungile kanye nesofthiwe esiphelelwe yisikhathi.
Ukuqina kokucushwa ngokuzenzakalela ngokusebenzisa CI/CD ukuqinisekiswa kokuphepha, ukuqinisekisa ukuthi zonke izingxenye zengqalasizinda, okuhlanganisa izindawo zokwakha, ukucushwa kwamafu, kanye nokuncika kwesikhathi sokusebenza, ziyanamathela ku izindlela ezingcono kakhulu zokuvikelaI-Xygeni iqapha njalo ingqalasizinda-njengekhodi (IaC) amathempulethi, izikripthi zokuthunyelwa, kanye nezinqubomgomo zokuphepha ukuthola ukuphambuka kusuka ezisekelweni ezimisiwe. Noma yikuphi ukulungiselelwa okungalungile kumakwe njengeziphambeko zokuphepha, okuvimbela ukulungiselelwa okungavikelekile ukuthi kufinyelele ekukhiqizweni.
Ukulungisa nokubuyekeza isheshiswa ngokusebenzisa amakhono okulungisa okuzenzakalelayo, ukuqinisekisa ukuthi ubuthakathaka ekuncikeni kwezicelo kanye nezingxenye zengqalasizinda kubhekwana nazo ngesikhathi. I-Xygeni ihlanganisa ukubeka phambili okusekelwe engcupheni ekuphathweni kobuthakathaka, ukuqinisekisa ukuthi Ama-patches okuphepha abalulekile kanye nezibuyekezo ziyasetshenziswa kuqalaIzinhlangano zingakwazi ukwenza ngokuzenzakalelayo imisebenzi yokulungisa, ukuxhumanisa amaphutha okuphepha ukuze kukhishwe izinhlelo zokulandelela, futhi kuphoqelelwe ukuhambisana ne-patch ngaphakathi CI/CD pipelines.
- CI/CDukuqina kokucushwa okuqhutshwayo kuqinisekisa izisekelo zengqalasizinda ezivikelekile.
- Ukuchibiyela nokulungisa okuzenzakalelayo ukusheshisa ukuxazulula ubuthakathaka.
- Ukuqapha okuqhubekayo kokuthobela igcina izindawo ziphephile futhi zisesikhathini.
Isiphetho
I-Xygeni yenza kube lula Ukuqaliswa kwe-SAMM ngokuhlanganisa ukuqiniswa kokuphepha okuzenzakalelayo, ukubeka phambili okusekelwe engcupheni, kanye nokuqapha okuqhubekayo ukungena umjikelezo wokuphila kokuthuthukiswa kwesofthiwe (SDLC). Ngokushumeka ukulawulwa kokuphepha kokuphatha, ukuklama, ukuqaliswa, ukuqinisekiswa, kanye nokusebenza, izinhlangano zingakwazi ukuthuthukisa ngokuhlelekile ukuma kwabo kokuphepha ngaphandle kokuphazamisa isivinini sentuthuko.
Ngokusebenzisa I-SAMM ene-Xygeni, izinhlangano zifeza:
- Ukulandelela ubungozi okuqhubekayo kanye nokwenza ngokuzenzakalelayo kokuthobela imithetho ngokubonakala kwesikhathi sangempela, ukuphoqelelwa kwenqubomgomo, kanye nokuphathwa kwezokuphepha.
- Ukubekwa phambili kwengozi eqondiwe kanye nokuhlolwa kwengozi ngokulinganisa ubungozi obuguquguqukayo, ukuhlaziywa kokuxhashazwa, kanye nemisebenzi yokulungisa eqondiwe.
- Ukuqiniswa kokuphepha okuzenzakalelayo kuzo zonke izakhiwo kanye nokusetshenziswa, ukuqinisekisa ubufakazi obuvikelekile bezinto zokwenziwa, ukuqinisekiswa kokuthembela, kanye CI/CD ukuhlanganiswa kokuphepha.
- Ukuqinisekiswa kokuphepha okuqinile kanye nokuqinisekiswa kwesikhathi sangempela ngokusebenzisa amaSango Okuphepha, ukuhlolwa kokuphepha okuzenzakalelayo, kanye ASPMukuphoqelelwa kokuthobela imithetho okuqhutshwa yibo.
- Ukuphathwa kwezehlakalo okusebenzayo kanye nokuphepha kwengqalasizinda, kusetshenziswa ukutholwa kwe-anomaly ngesikhathi sangempela, ukuvikelwa kokuphazamiseka kwekhodi, kanye nokusebenza kokulungisa okuzenzakalelayo.
With ukubekwa phambili kwengozi okuzenzakalelayo, ukuphoqelelwa okuqhutshwa ukuphepha, kanye nokuqapha okuhlanganisiwe, i-Xygeni ivumela izinhlangano ukuthi lula ukwamukelwa kwe-SAMM futhi uqinisekise ukuvuthwa kokuphepha kwesofthiwe kukhula kahle kanye nokukhula kwebhizinisi.
Izinhlangano ziyafeza ukuthuthukiswa okusheshayo ekubuseni, ukuhlolwa kokuphepha, ukuzenzekela kokuthobela imithetho, kanye nokunciphisa ubungozi, ukunciphisa ukuchayeka ku- ukuhlaselwa kwe-software supply chain, ukungalungiselelwa kahle, kanye nezinsongo zokusebenza noXygeni.
Ukwamukelwa kwe-SAMM kuba kuhlelekile, kuyalinganiswa, futhi kuyakalwa, okuvumela amaqembu ezokuphepha kanye nentuthuko ukuthi thuthukisa ukuvuthwa kokuphepha ngaphandle kokunciphisa ukusungula izinto ezintsha.
