Chii chinonzi DevSecOps?
Context:DevSecOps ndiko kuwedzera kweDevOps kubvumira kuti kuchengetedzwa kwekuchengetedzwa kuve kwakabatanidzwa muDevOps nzira. Kusiyana neyakajairwa centralized chikwata chengetedzo modhi, yega yega yekuendesa timu inopihwa simba rekutarisa mune chaiyo chengetedzo kudzora mune yavo software kuendesa. Maitiro ekuchengetedza uye kuyedza kunoitwa pakutanga muhupenyu hwekugadzira, saka izwi rekuti "kuchinjira kuruboshwe" rinogona kushandiswa. Kuchengeteka kunoedzwa munzvimbo nhatu huru: static, software composition, uye dynamic.  Kuongorora kodhi statically Via kunofambira mberi chikumbiro kuchengeteka yokuedzwa (SAST) ndiye chena-bhokisi yokuedzwa pamwe rinonyanya kuchengeteka. Zvichienderana nemutauro wokuronga, zvishandiso zvakasiyana-siyana zvinodiwa kuti zviite kuongorora kwakadaro kwekodhi. Kuumbwa kwesoftware kunoongororwa, kunyanya maraibhurari uye shanduro dzawo dzinoongororwa zvichienzaniswa nerondedzero dzezvikanganiso dzakaburitswa neCERT nemamwe mapoka evanyanzvi. Apo kupa purogiramu yepurogiramu kune vatengi, marezenisi uye kuwirirana kwayo kune imwe yepurogiramu yakaparadzirwa zviri mucherechedzo, zvikurukuru marezenisi ecopyleft. Kuongorora kwokufambira mberi kunonziwo kuongorora kwebhokisi dema. Purogiramu yacho inoedzwa pasina kuziva mabasa ayo omukati. MuDevSecOps pane rumwe rutivi inonzi dynamically (DAST), kana kuti penetration testing. Chinangwa ndechokubata, pakati pevamwe, zvikanganiso zvakadai se cross-site scripting, kana kuti SQL injection nokukurumidza. Mhando dzekutyisidzira dzinoshandiswa semuenzaniso nehurongwa hwekuchengetedzwa kwewebhu yakavhurika, semuenzaniso TOP10 yayo. Kune rumwe rutivi, kunyanya nemicroservices interactive application testing (IAST) inobatsira kuongorora kuti ndeipi kodhi inoitwa kana ichimhanya otomatiki bvunzo dzinoshanda, tarisiro ndeyekuona kusagadzikana mukati mekushandisa. Kusiyana neSAST neDAST, IAST inoshanda mukati mekushandisa.  DevSecOps yakatsanangurwawo sekushandurwa kwetsika kunosanganisira nzira yakazara yekugadzira software yakachengeteka nekubatanidza dzidzo yekuchengetedza, yakachengeteka nekugadzira, uye yekuchengetedza otomatiki.
DevSecOps ndiko kuwedzera kweDevOps nekuchengetedzwa kwakabatanidzwa muDevOps nzira. Yave ichikura mumakore achangobva kupfuura sezvo kugadzirwa kwesoftware yakachengeteka kuri kuva chinhu chinokosha kumakambani.