Los Abaphuhlisi bakaGoogle bazisiwe "SLSA" (Amanqanaba okhenketho lweeSoftware) ezinenjongo yokujongana neefayile ze- ukukhuselwa kweziseko zophuhliso Uhlaselo olwenziwe kwikhowudi, ukuvavanya, ukwakha kunye nokuhambisa inqanaba lemveliso.
Abaphuhlisi khankanya ukuba iinkqubo zophuhliso ziya zisiba nzima kwaye zixhomekeke kwizixhobo zomntu wesithathu, ethi idale iimeko ezincomekayo zokukhuthaza uhlaselo olunxulumene nokungachongi kunye nokuxhaphaza ubungozi kwimveliso yokugqibela, kodwa kukuzinikela kwenkqubo yophuhliso uqobo.
Malunga neSLSA
Kukhankanyiwe ukuba iSLSA igxile kule migaqo mibini ilandelayo:
Akukho Cala-elinye - Akukho mntu unokuguqula isoftware ye-artifact naphi na kwindawo yokuhanjiswa kwesoftware ngaphandle koqwalaselo olucacileyo kunye nemvume evela komnye "umntu omthembileyo". [^ 1] Injongo kukuthintela, ukuthintela okanye ukufumanisa kwangaphambili umngcipheko / utshintsho olubi.
Ukuphicothwa-Isoftware ye-artifact inokukhuseleka nangokucacileyo ukuba ibuyiselwe kwimvelaphi, kwimithombo enokufundwa ngabantu nasekuxhomekekeni. Eyona njongo iphambili ngumthombo ozenzekelayo kunye nohlalutyo lokuxhomekeka, kunye nophando lwe-ad-hoc.
Ukuthintela izoyikiso ezineflegi, I-SLSA ibonelela ngeseti yezikhokelo kunye nezixhobo zokuzenzekelayo ukwenziwa kwemethadatha kuphicotho. I-SLSA ishwankathela iindlela eziqhelekileyo zokuhlasela kwaye yazise umxholo wokhuselo.
Uluhlu ngalunye luneemfuno ezithile zeziseko zophuhliso ukuqinisekisa ukuthembeka kwezinto zakudala ezisetyenzisiweyo kuphuhliso, oko kukuthi, inqanaba eliphezulu le-SLSA elixhaswayo, kokukhona iindlela ziya kukhuselwa kwaye iziseko zoncedo ziya kukhuselwa ngcono kuhlaselo oluqhelekileyo.
Inqanaba le-SLSA 1
Kweli nqanaba ifuna inkqubo yokwakha ukuba isebenze ngokuzenzekelayo kwaye ivelise imethadatha ("Iprovenance") ngendlela eziqokelelwa ngayo izinto zakudala, kubandakanya umthombo, ukuxhomekeka, kunye nokwakhiwa kolwazi lwenkqubo (isampula yemethadatha yokuphicothwa kubonelelwa ngezenzo zeGitHub). I-SLSA 1 ayibandakanyi izinto zokhuselo kutshintsho olubiIchonga kuphela ikhowudi ngendlela elula kwaye ibonelele ngemethadatha yolawulo lomngcipheko kunye nohlalutyo lomngcipheko.
Inqanaba le-SLSA 2
Apha umaleko wokuqala uyandiswa ngokufuna ukusetyenziswa kwenkqubo yolawulo lomthombo kunye nokwakha iinkonzo ezivelisa imethadatha eqinisekisiweyo. Ukusetyenziswa kwe I-SLSA 2 ikuvumela ukuba ulandele imvelaphi yekhowudi kwaye uthintele utshintsho olungagunyaziswanga kwikhowudi yakho, kwimeko yokusebenzisa iinkonzo zendibano ezinokuthenjwa.
Inqanaba le-SLSA 3
Ukusuka kweli nqanabaokanye ikhowudi yemvelaphi kunye neqonga lokwakha liqinisekisiwe ukuba liyahlangabezana neemfuno zemigangatho Ukuqinisekisa ukuba ikhowudi inokuphicothwa kwaye ukuthembeka kwemethadatha ebonelelweyo kuqinisekisiwe. Abaphicothi zincwadi kufuneka babenakho ukuqinisekisa amaqonga okuthotyelwa kweemfuno zemigangatho.
Inqanaba le-SLSA 4
Eli lelona nqanaba liphezulu kwaye likwagcwalisa amanqanaba angaphambili ngokudibanisa iimfuno ezingqongqo zazo kukuphononongwa okunyanzelekileyo kwazo zonke iinguqu ngabaphuhlisi ababini abohlukeneyo, kunye nawo onke amanyathelo okuhlanganisa, ikhowudi kunye nokuxhomekeka. ibhengezwe ngokupheleleyo, zonke izixhomekeki kufuneka zijongwe kwaye zijongwe ngokwahlukeneyo, kwaye inkqubo yokwakha kufuneka yenziwe ngaphandle kweintanethi.
Sebenzisa inkqubo yokudibanisa ephindayo ikwabonelela ngesakhono sokuphinda inkqubo yokuhlanganisa kunye nokuqinisekisa ukuba into enokwenzeka iyaqulunqwa kwimithombo ebonelelweyo.
Ukongeza kuyo Esi sikhokelo sithathela ingqalelo iintlobo ezi-8 zokuhlaselwa inxulumene nosongelo lotshintsho olubi kuphuhliso, ukuhlanganiswa, ukuvavanywa kunye nenqanaba lokusasazwa kwekhowudi yemveliso.
Iindidi zohlaselo ezithathelwa ingqalelo Zizo zilandelayo:
1.- Ukubandakanywa kwikhowudi yomthombo yotshintsho equlathe ngasemva okanye iimpazamo ezifihlakeleyo ezikhokelela ekubeni sesichengeni.
Ukuzibophelela kweqonga lolawulo lomthombo.
3.- Yenza utshintsho kwinqanaba lokuhambisa ikhowudi kuqokelelo okanye inkqubo yokudityaniswa okuqhubekayo (ikhowudi engahambelaniyo nekhowudi yokugcina iyaqokelelwa).
4.- Ukuzibophelela kweqonga lokwakha
5.- Ukunyusa ikhowudi enobungozi ngokuxhomekeka kumgangatho osezantsi.
6.- Ukulayisha izinto ezingafunekiyo eziveliswe kwinkqubo yeCI / CD.
7.- Ukuvuma ukugcinwa kwephakheji.
8.- Ukudideka kumsebenzisi ukufaka iphakheji engeyiyo.
Gqibela ukuba ufuna ukwazi ngakumbi ngayo, ungajonga iinkcukacha Kule khonkco ilandelayo.