Iyini i-DevSecOps?
Context:I-DevSecOps ingukuthuthukiswa kwe-DevOps ukuvumela ukuthi izindlela zokuphepha zihlanganiswe nendlela ye-DevOps. Ngokuphambene nemodeli yendabuko yethimba lezokuphepha elihlanganisiwe, ithimba ngalinye lokulethwa linikezwe amandla okufaka izilawuli zokuphepha ezifanele ekulethweni kwesoftware yabo. Imikhuba yokuphepha nokuhlolwa kwenziwa ekuqaleni komjikelezo wokuphila wokuthuthukiswa, ngakho-ke igama elithi "shift left" lingasetshenziswa. Ukuphepha kuhlolwa ezindaweni ezintathu eziyinhloko: static, software ukwakheka, futhi ashukumisayo.  Ukuhlola ikhodi statically nge static isicelo ukuhlolwa ukuphepha (SAST) kuyinto ukuhlolwa white-ibhokisi ngokugxila ekhethekile ukuphepha. Ngokuya ngolimi lokuhlela, kudingeka amathuluzi ahlukahlukene ukuze kwenziwe ukuhlaziywa kwekhodi okungaguquki okunjalo. Ukuhlelwa kwesofthiwe kuhlaziywa, ikakhulukazi imitapo yolwazi futhi izinguqulo zazo zihlolwe ngokumelene nohlu lokungavikeleki olushicilelwe yiCERT namanye amaqembu ochwepheshe. Lapho kunikezwa isofthiwe kumakhasimende, amalayisense nokufana kwawo nalelo isofthiwe esatshalaliswa kugxilwe, ikakhulukazi amalayisense e-copyleft. Ukuhlolwa okunamandla kubizwa nangokuthi ukuhlolwa kwebhokisi elimnyama. Isofthiwe ihlolwa ngaphandle kokwazi imisebenzi yayo yangaphakathi. Ku-DevSecOps ngakolunye uhlangothi ibizwa ngokuthi yi-dynamically (DAST), noma ukuhlolwa kokungena. Umgomo ukubamba, phakathi kwabanye, amaphutha afana cross-site scripting, noma SQL umjovo kusenesikhathi. Izinhlobo zezinsongo zishicilelwa ngokwesibonelo yi-Open Web Application Security Project, isibonelo i-TOP10 yayo. Ngakolunye uhlangothi, ikakhulukazi ngama-microservices interactive application testing (IAST) kuyasiza ukuhlola ukuthi iyiphi ikhodi eqhutshwa lapho kuqhutshwa izivivinyo ezisebenzayo ezizenzakalelayo, ukugxila ukuthola ubuthakathaka ngaphakathi kwezicelo. Ngokuphambene ne-SAST ne-DAST, i-IAST isebenza ngaphakathi kwesicelo.  I-DevSecOps nayo ichazwe njengokushintsha kwesiko okubandakanya indlela ephelele yokukhiqiza isoftware ephephile ngokuhlanganisa imfundo yezokuphepha, ephephile ngokwakhiwa, kanye nokuzenzakalela kwezokuphepha.
I-DevSecOps ingukuthuthukiswa kwe-DevOps ngokuvikeleka okuhlanganiswe nendlela ye-DevOps. Kuye kwanda eminyakeni yamuva njengoba ukukhiqizwa kwesofthiwe ephephile sekuyinto ebaluleke kakhulu ezinkampanini.