Darussan da aka koya daga lokacin 'oapi-codegen' a cikin GitHub Secure Open Source Fund

\u003ch2\u003e Darussan da aka koya daga lokacin 'oapi-codegen' a cikin GitHub Secure Open Source Fund\u003c/h2\u003e \u003cp\u003e Wannan buɗaɗɗen tushen tushen GitHub ma'ajiyar tana wakiltar babbar gudummawa ga mahalli mai haɓakawa. Aikin yana nuna ayyukan ci gaban zamani da coding na haɗin gwiwa.\u003c/p\u003e \u003ch3\u003e Fasalolin Fasaha\u003c/h3\u003e \u003cp\u003e Mai yiwuwa ma'ajiyar ta ƙunshi:\u003c/p\u003e \u003cul\u003e \u003c\u003e Tsabtace, lambar da aka rubuta da kyau\u003c/li\u003e \u003c\u003e Cikakken README tare da misalan amfani\u003c/li\u003e \u003c\u003e Ba da jagorar bin diddigi da gudummawar\u003c/li\u003e \u003c\u003e Sabuntawa na yau da kullun da kiyayewa\u003c/li\u003e \u003c/ul\u003e \u003ch3\u003e Tasirin Al'umma\u003c/h3\u003e \u003cp\u003e Ayyukan buɗaɗɗen tushe kamar wannan yana haɓaka ilimin raba ilimi da haɓaka sabbin fasahohi ta hanyar lambar da ake iya samu da haɓaka haɗin gwiwa.\u003c/p\u003e

Tambayoyin da ake yawan yi

Menene GitHub Secure Open Source Fund kuma ta yaya oapi-codegen ya amfana daga gare ta?

Asusun GitHub Secure Open Source yunƙuri ne wanda ke ba da tallafin kuɗi ga mahimman ayyukan buɗaɗɗen tushe don inganta yanayin tsaro. Don oapi-codegen, sa hannu yana nufin sadaukar da lokaci don duba abin dogaro, taurare bututun samar da lambar, da kafa ingantattun hanyoyin sakin. Asusun ya baiwa masu kulawa damar ɗaukar tsaro a matsayin abin damuwa na aji na farko maimakon tunani na baya, wanda ya haifar da ingantaccen kayan aiki don yanayin yanayin Go.

Mene ne mafi mahimman darussan tsaro da aka koya daga wannan gogewar?

Manyan hanyoyin da za a ɗauka sun haɗa da mahimmancin ƙulla abin dogaro, ginanniyar haɓakawa, da kiyaye ingantaccen tsarin bayyanar da lahani. Masu kula sun gano cewa hatta kayan aikin tsara lambobin na iya gabatar da haɗarin sarkar samar da kayayyaki idan ba a kula da abin dogaro da nasu a hankali ba. Ƙirƙirar fayil ɗin SECURITY.md, ba da damar bincikar dogaro da kai ta atomatik, da yin bincike akai-akai suna daga cikin takamaiman matakan da aka ɗauka don rage haɗari a tsawon rayuwar aikin.

Ta yaya masu haɓakawa za su haɗa oapi-codegen amintattu cikin ayyukan nasu?

Masu haɓakawa yakamata su sanya oapi-codegen zuwa takamaiman sakin da aka tantance maimakon bin diddigin @last. Gudun kayan aiki a cikin CI tare da abubuwan dogaro da aka kulle da kuma tabbatar da fitowar da aka samar akan ingantaccen tushe mai kyau yana ƙara wani Layer na kariya. Don ƙungiyoyin da ke sarrafa hadaddun tarin API, dandamali kamar Mewayz - suna ba da kayan haɗin kai guda 207 a $19/mo - na iya daidaita ayyukan API masu aminci ba tare da buƙatar kowane ƙungiya don saita nasu kayan aikin kayan aiki daga karce ba.

Shin oapi-codegen zai ci gaba da samun kulawa da tsaro bayan ƙarshen lokacin kuɗin?

Iya. Ɗaya daga cikin mahimman sakamakon haɗin gwiwar GitHub Secure Open Source Asusun shine shigar da ayyukan tsaro kai tsaye cikin jagororin gudummawar aikin da tsarin sakin, don haka sun dage fiye da lokacin da aka ba da kuɗi. Masu kiyayewa sun rubuta duk ayyukan tsaro don tabbatar da ci gaba. Ga masu haɓakawa waɗanda suka dogara ga abokan cinikin API da aka ƙirƙira a sikelin, haɗa oapi-codegen tare da dandamali mai sarrafawa kamar Mewayz (Modules 207, $19/mo) na iya ƙara rage nauyin aiki na kiyaye haɗin kai har zuwa yau.