瀹氭湡瀹夊叏鎵弿
瀹氭湡杩涜瀹夊叏鎵弿鏄槻姝㈡紡娲炲拰鏀诲嚮鐨勯噸瑕佹墜娈点�傚彲浠ヤ娇鐢ㄤ互涓嬪伐鍏峰浠ｇ爜搴撹繘琛屾壂鎻忥細
Snyk锛氳繖鏄竴涓己澶х殑馃敟寮�婧愬畨馃幆鍏ㄥ伐鍏凤紝鍙互鑷姩鎵弿渚濊禆鍖呬腑鐨勬紡娲炪�傞泦鎴愬埌GitHubActions涓紝鍙互鑷姩鍦ㄦ瘡娆′唬鐮佹彁浜ゆ椂杩涜鎵弿銆�
Dependabot锛氳繖鏄疓itHub鑷甫馃摑鐨勪緷璧栨壂鎻忓伐鍏凤紝鍙互鑷姩妫�娴嬩緷璧栧簱涓殑瀹夊叏婕忔礊锛屽苟鎻愬嚭鍗囩骇寤鸿銆�
OWASPDependency-Check锛氳繖鏄竴涓紑婧愮殑渚濊禆瀹夊叏鎵弿宸ュ叿锛屽彲浠ラ泦鎴愬埌CI/CD绠￠亾涓紝鑷姩妫�鏌ラ」鐩腑鐨勬墍鏈変緷璧栧寘銆�
鏁版嵁搴撲紭鍖栦笌杩佺Щ
绱㈠紩浼樺寲:纭繚鏁版嵁搴撴煡璇㈢殑鎬ц兘锛岄�氳繃娣诲姞鍚堥�傜殑绱㈠紩銆傚垎搴撳垎琛�:瀵逛簬澶ц妯℃暟鎹紝鑰冭檻浣跨敤鍒嗗簱鍒嗚〃绛栫暐锛屼互鎻愰珮鏁版嵁璇诲啓鐨勬晥鐜囥�傝縼绉诲埌鏇撮珮鏁堢殑鏁版嵁搴�:濡傛灉褰撳墠鐨勬暟鎹簱宸茬粡涓嶈兘婊¤冻闇�姹傦紝鍙互鑰冭檻杩佺Щ鍒版洿楂樻晥鐨勬暟鎹簱绯荤粺锛屽浠嶮ySQL杩佺Щ鍒癙ostgreSQL鎴朚ongoDB銆�
鑷姩鍖栨祴馃檪璇曚笌CI/CD
鑷姩鍖栨祴璇曞拰鎸佺画闆嗘垚/鎸佺画閮ㄧ讲锛圕I/CD锛夋槸纭繚浠ｇ爜璐ㄩ噺鍜屽揩閫熻凯浠ｇ殑鍏抽敭銆傚湪椤圭洰鏍圭洰褰曚腑锛屾坊鍔犳祴璇曠敤渚嬪拰CI/CD閰嶇疆鏂囦欢锛�
娴嬭瘯妗嗘灦:濡侸est锛圢ode.js锛夊拰pytest锛圥ython锛夈�侰I/CD宸ュ叿:濡侴itHubActions銆乀ravisCI銆丆ircleCI绛夈��
浠�涔堟槸閫硅應钖剧殑鏃楀笢鐨凣itHub2024浠撳簱锛�
閫硅應钖剧殑鏃楀笢鐨凣itHub2024浠撳簱鏄竴涓笓闂ㄨ璁＄殑骞冲彴锛屼负寮�鍙戣�呮彁渚涗竴涓泦鎴愮殑宸ュ叿锛屾敮鎸佷粠浠ｇ爜鎵樼銆佸崗浣滃紑鍙戝埌鎸佺画闆嗘垚鍜屼氦浠橈紙CI/CD锛夌殑鍏ㄦ祦绋嬨�傝繖涓粨搴撲笉浠呭寘鍚渶鏂扮殑鎶�鏈敮鎸侊紝杩樻彁渚涗簡涓板瘜鐨勮祫婧愬拰鏂囨。锛屼互甯姪寮�鍙戣�呭揩閫熶笂鎵嬨��
鍒╃敤涓�浜涘畨鍏ㄥ伐鍏峰彲浠ュ府鍔╂娴嬪拰淇瀹夊叏婕忔礊锛�
SonarQube锛氳繖鏄竴涓唬鐮佽川閲忓拰瀹夝煄叏妫�娴嬪伐鍏凤紝鍙互闆嗘垚鍒癈I/CD绠￠亾涓紝鑷姩妫�娴嬩唬鐮佷腑鐨勫畨鍏ㄦ紡娲炪��
GitLabSecurity锛氬鏋滀娇鐢℅itLab锛屽彲浠ュ埄鐢ㄥ叾鍐呯疆鐨勫畨鍏ㄥ姛鑳斤紝濡傞潤鎬佷唬鐮佸垎鏋愩�佹紡娲炴壂鎻忕瓑銆�
閫氳繃浠ヤ笂杩欎簺鎺柦锛屼綘鍙互鏈夋晥鎻愬崌閫硅應钖剧殑鏃楀笢鐨凣itHub2024浠撳簱鐨勫畨鍏ㄦ�э紝淇濇姢浣犵殑浠ｇ爜鍜屾暟鎹紝纭繚寮�鍙戠幆澧冪殑绋冲畾鍜岄珮鏁堛��
绠＄悊鏁忔劅淇℃伅
鍦ㄥ紑鍙戣繃绋嬩腑锛屽彲鑳戒細娑夊強鍒版晱鎰熶俊鎭API瀵嗛挜銆佹暟鎹簱瀵嗙爜绛夈�傜‘淇濊繖浜涗俊鎭笉馃幆浼氳娉勯湶锛屽彲浠ラ噰馃敟鍙栦互涓嬫帾鏂斤細
浣跨敤Secrets绠＄悊锛氬湪GitHub涓紝鍙互浣跨敤Secrets鍔熻兘鏉ョ鐞嗘晱鎰熶俊鎭�傚皢鏁忔劅淇℃伅娣诲姞鍒癝ecrets涓紝鐒跺悗鍦ㄤ唬馃幆鐮佷腑閫氳繃鐜鍙橀噺璁块棶銆�
涓嶆彁浜ゆ晱鎰熶俊鎭細姘歌繙涓嶐煄灏嗘晱鎰熶俊鎭彁浜ゅ埌浠ｇ爜搴撲腑銆傚彲浠ヤ娇鐢�.gitignore鏂囦欢锛岄槻姝㈡煇浜涙枃浠舵垨鐩綍琚彁浜ゃ��
鑷姩鍖栨祴璇曚笌CI/CD
鑷姩鍖栨祴璇曞拰鎸佺画闆嗘垚/鎸佲瓙缁儴缃诧紙CI/CD锛夋槸纭繚浠ｇ爜璐ㄩ噺鍜屽揩閫熻凯浠ｐ煄殑鍏抽敭銆傚湪椤圭洰鏍圭洰褰曚腑锛屾坊鍔犳祴馃檪璇曠敤渚嬪拰CI/CD閰嶇疆鏂囦欢锛�
娴嬭瘯妗嗘灦:濡侸est锛圢ode.js锛夊拰pytest锛圥ython锛夈�侰I/CD宸ュ叿:濡侴itHubActions銆乀ravisCI銆丆ircleCI绛夈��
鏍″锛氬紶楦�(1C0m4pJyqZtPma0S7t9ZFfz4hTykKag)