Utuntu n'utundi twongeye kwibasirwa: Gukwirakwiza ibikorwa bya GitHub Ibikorwa byo guhisha amabanga | Mewayz Blog Skip to main content
Hacker News

Utuntu n'utundi twongeye kwibasirwa: Gukwirakwiza ibikorwa bya GitHub Ibikorwa byo guhisha amabanga

Ibitekerezo

5 min read Via socket.dev

Mewayz Team

Editorial Team

Hacker News

Utuntu n'utundi twongeye kwibasirwa: Ikwirakwizwa rya GitHub Ibikorwa byinshi biranga amabanga

Umutekano wurwego rutanga software urakomeye gusa nkumuyoboro udakomeye. Ku matsinda atabarika yiterambere, iyo link yahindutse ibikoresho bashingiraho kugirango babone intege nke. Ku bijyanye n’ibihe byagenze, Trivy, icyamamare kizwi cyane cyo gufungura imbogamizi zagenzuwe n’umutekano wa Aqua, yisanze hagati y’igitero gikomeye. Abakinnyi babi bahungabanije tagi yihariye (`v0.48.0`) mububiko bwayo bwa GitHub, gutera inshinge zagenewe kwiba amabanga akomeye mubikorwa byose byayikoresheje. Ibi byabaye nibutsa rwose ko murwego rwibidukikije rwiterambere rwibidukikije, ikizere kigomba guhora kigenzurwa, ntabwo gifatwa.

Anatomy yigitero cyubwumvikane buke

Ntabwo byari ukurenga kode yibanze ya Trivy, ahubwo ni uguhindura ubwenge bwa CI / CD yikora. Abagabye igitero bibasiye ububiko bwa GitHub, bakora verisiyo mbi ya dosiye ya `action.yml` ya tagi ya` v0.48.0`. Mugihe ibikorwa byuwitezimbere yerekanaga tagi yihariye, igikorwa cyakora inyandiko yangiza mbere yo gukora Trivy scan yemewe. Iyi nyandiko yakozwe kugirango isohore amabanga-nkibimenyetso byububiko, ibyangombwa bitanga ibicu, nurufunguzo rwa API-kuri seriveri ya kure iyobowe nigitero. Imiterere yuburiganya yiki gitero iri muburyo bwihariye; abashinzwe iterambere bakoresha tagi itekanye `@ v0.48` cyangwa` @ main` ntabwo byagize ingaruka, ariko abashyizeho tagi yabangamiwe batabizi binjije intege nke zikomeye mumiyoboro yabo.

Impamvu iyi mpanuka yongeye kumvikana kwisi ya DevOps

Ubwumvikane buke ni ngombwa kubwimpamvu nyinshi. Ubwa mbere, Trivy nigikoresho cyumutekano cyibanze gikoreshwa na miriyoni mugusuzuma intege nke muri kontineri na kode. Igitero ku gikoresho cyumutekano gihungabanya ikizere shingiro gisabwa kugirango iterambere ryihute. Icya kabiri, irerekana imyiyerekano igenda itera yibitero byimuka "hejuru", byibanda kubikoresho no kwishingikirizaho izindi software zubakiyeho. Mu kwangiza ikintu kimwe gikoreshwa cyane, barashobora kubona uburyo bwo kugera kumurongo munini wimishinga nimiryango. Ibi byabaye nk'ubushakashatsi bukomeye mu mutekano wo gutanga amasoko, byerekana ko nta gikoresho, nubwo cyaba cyubahwa gute, kidakingirwa gukoreshwa nk'igitero cy’ibitero.

"Iki gitero kigaragaza imyumvire ihanitse ku myitwarire y’abateza imbere ndetse n’ubukanishi bwa CI / CD. Gushira ku murongo wihariye wa verisiyo bifatwa nkigikorwa cyiza cyo guhungabana, ariko iki kibazo cyerekana ko gishobora no guteza ibyago niba iyo verisiyo yihariye ihungabanye. Isomo ni uko umutekano ari inzira ikomeza, atari gahunda imwe."

Intambwe Zihita zo Kurinda Ibikorwa bya GitHub

Nyuma yibi bibaye, abashinzwe iterambere hamwe nitsinda ryumutekano bagomba gufata ingamba zifatika zo gukaza umurego ibikorwa bya GitHub. Kwishima ni umwanzi wumutekano. Hano hari intambwe zingenzi zo gushyira mubikorwa ako kanya:

Ready to put this into practice?

Join 6,208+ businesses using Mewayz. Free forever plan — no credit card required.

Start Free Trial →

Ready to take action?

Start your free Mewayz trial today

All-in-one business platform. No credit card required.

Start Free →

14-day free trial · No credit card · Cancel anytime