Mphamvu yatsopano yowunikira ya Sonar imazindikira zovuta zachitetezo pamlingo wobisika

Kupanga uku kumavumbulutsa zovuta zomwe zimapangidwa ndi mgwirizano pakati pa ma source code ndi malaibulale ena

Sonar, wotsogola wopereka mayankho a Clean Code, lero alengeza zakupita patsogolo kwakukulu pakuperekedwa kwa Code Clean.

Tsopano opanga amatha kudzipezera okha ndikukonza zovuta zokhudzana ndi chitetezo chifukwa cha kuyanjana pakati pa ma code source code ndi malaibulale otseguka a gulu lachitatu.

Kutchedwa 'deeper SAST', kuzindikira kwatsopano kwatsopano kumathetsa mavuto omwe zida zachikhalidwe za SAST sizimatsatira chifukwa samatsata kutsata mkati mwa laibulale. Otsatsa achikhalidwe a SAST amasanthula ma code ogwiritsira ntchito. Zidazi sizimasiyanitsa ma code ophatikizidwa ndikuyika malaibulale movutikira, kunyalanyaza zomwe zikuchitika ndikugwiritsa ntchito mulaibulale. Chotsatira chake ndi chakuti mawonekedwe a laibulale amaonedwa ngati mabokosi akuda, kusiya mabungwe mumdima ngati ali otetezeka kwenikweni pazochitika zomwe zaperekedwa kapena ayi. Kuphatikiza apo, zida izi nthawi zambiri zimathandizira magwiridwe antchito ochepa, omwe nthawi zambiri amafuna kukhazikitsidwa koyambirira kuti kukhazikitsidwe. Zonsezi zimayambitsa zovuta zachitetezo zomwe zimapangidwa ndi kugwiritsa ntchito mwapadera malaibulale otseguka a gulu lachitatu kuti asadziwike.

Olivier Gaudin, CEO ndi co-founder wa Sonar

"Code ndi code, kaya yalembedwa ndi wopanga gulu lanu kapena gawo la library lomwe limathetsa vuto linalake. Njira ziwiri zosiyana zakhala zikundivutitsa nthawi zonse ndipo ndikusangalala kuti tsopano tikutha kusanthula ma code onse mofanana, kuthetsa zomwe zinkawoneka ngati vuto losatheka, "anatero Olivier Gaudin, CEO ndi co-founder Sonar. "Tithokoze chifukwa cha kupita patsogolo kwakuya kwa SAST komwe kwapangidwa ku Clean Code solution, mabungwe amatha kuzindikira zovutazi ndikuzikonza mwachangu pomwe code ikupangidwa."

Sonar imatsekereza kusiyana kwachikhalidwe cha SAST kudzera mu kusanthula kwake kwakanthawi kogwiritsa ntchito ma code code ndi kudalira kwakunja, zonse popanda kufunikira kwa kasinthidwe kwapadera kapena mtengo wowonjezera. Kupanga kwakuya kwa SAST uku kumapititsa patsogolo cholinga cha Sonar chokonzekeretsa mabungwe ndi zida zomwe amafunikira kuti akwaniritse udindo wawo. clean kodi : kachidindo kosasintha, mwadala, kosinthika komanso koyenera. Pamene code ikutsatira makhalidwe awa, mapulogalamuwa amakhala odalirika, odalirika komanso otetezeka.

"Akuyerekeza kuti opitilira 90% amagwiritsira ntchito malaibulale a chipani chachitatu ndikulumikizana ndi ma code omwe ali mkati mwawo, komabe zida zambiri za SAST siziuza opanga mapulogalamu kuti kudalira kwawo kumapangitsa nambala yawo kukhala pachiwopsezo. Chitetezo ndichinthu chofunikira kwambiri, ndipo mukapeza zovuta zambiri ndikuzikonza zisanachitike, bizinesi yanu idzakhala yabwinoko, "atero a Rik Turner, katswiri wamkulu wofufuza zachitetezo cha cyber ku Omdia. "Ichi ndiye chinsinsi cha chitetezo chokhazikika chomwe tikuwona mumakampani a IT: chipezeni ndikuchikonza chisanagwiritsidwe ntchito."

SAST wa Sonar

Kuchita kwakuya kwa Sonar kwa SAST kumapezeka popanda mtengo wowonjezera mkati mwazogulitsa za SonarQube (self-paced) ndi SonarCloud (zochokera pamtambo), zida zowunikira zowunikira zotsogola zamakampani zomwe zimayendera mosalekeza ndikusanthula ma code pogwiritsa ntchito macheke kuti awone ngati malamulowo akukwaniritsa miyezo. defizakhazikitsidwa kuti zitukuke ndi kupanga. Deeper SAST pakadali pano imathandizira zilankhulo zamapulogalamu a Java, C # ndi TypeScript ndipo imayika masauzande ambiri ofunikira komanso omwe amagwiritsidwa ntchito kwambiri ndi malaibulale otseguka, kuphatikiza kudalira kwawo motsatizana (kusintha).

Kupeza code yoyera

Sonar imapatsa mphamvu magulu achitukuko kuti alembe malamulo oyera powapatsa zida zoyenera ndi machitidwe abwino, kuti athe kuwononga nthawi yocheperako komanso nthawi yochulukirapo kukwaniritsa zolinga zabizinesi ndi kutumiza. Kuphatikiza njira ya Sonar ndi njira Oyera Monga Mukulemba kampani (kukhazikitsa miyezo yosunga malamulo atsopano, owonjezera, kapena osinthidwa) ndi kalozera wake wamaphunziro amakhodi wotchedwa "Learn As You Code," Madivelopa amatha kuthana ndi mavuto mwachangu ndikubweretsa, kukonza ma code, ndipo amatha kulimbikitsa kukula kwa akatswiri ndi kusunga gulu. Masiku ano pali opanga oposa XNUMX miliyoni omwe amagwiritsa ntchito Sonar.

Sonar imagwiranso ntchito mwachangu ndi chilengedwe komanso madera amakasitomala, komanso mgwirizano ndi mayunivesite angapo pama projekiti ofufuza zachitetezo, mapulogalamu otseguka komanso madera oyambira. Kuphatikiza apo, Sonar ali ndi gulu lodzipatulira la ofufuza zachitetezo omwe amapeza ndikuwululira mosamala zachitetezo chatsiku la zero pamapulogalamu otseguka; zomwe zapezazi zimagwiritsidwa ntchito ngati kudzoza kwa malamulo atsopano achitetezo ndi kuzindikira kuti athandizire kupeza zofooka.

Dziwani zambiri zaukadaulo wathu wakuya wa SAST ndi yankho la Sonar (SonarQube, SonarCloud, SonarLint). Kumanani ndi akatswiri a Sonar ku Black Hat USA, booth no. 2760, Ogasiti 8-10.

Za Sonars

Sonar imathandizira otukula ndi mabungwe kuti akwaniritse bwino dziko la Code Code kuti ma code onse akhale oyenera chitukuko ndi kupanga. Pogwiritsa ntchito njira ya Sonar Clean as You Code, mabungwe amachepetsa chiwopsezo, amachepetsa ngongole zaukadaulo, ndikupeza phindu kuchokera ku mapulogalamu awo m'njira yodziwikiratu komanso yokhazikika.

Njira yotseguka komanso yamalonda ya Sonar - SonarLint, SonarCloud ndi SonarQube - imathandizira zilankhulo zopitilira 30, zomanga ndi matekinoloje azinthu. Wodalirika ndi mabungwe opitilira 400.000 padziko lonse lapansi kuti ayeretse mizere yopitilira theka la thililiyoni, Sonar ndi gawo lofunikira popereka mapulogalamu abwinoko. .

BlogInnovazione.it