Munguva ichangopfuura, kubudiswa kwe mushumo mutsva kubva kune yekuvandudza kuchengetedza kambani Snyk uye iyo Linux Foundation, nezve tsvakiridzo yavo yakabatana mune iyo yakavhurika sosi software chengetedzo.
Mune yako posvo tsanangudzo yekuti mhedzisiro haisi kukurudzira kumakambani, saka kune zvakawanda zvakasiyana-siyana zvakakosha zvekuchengetedza njodzi zvichibva mukushandiswa kwakapararira kwesoftware yakavhurika mukati mekuvandudzwa kwemazuva ano kwekushandisa, pamwe nekuti mangani masangano parizvino asina kugadzirira kugadzirisa njodzi idzi nemazvo.
Kunyanya, iyo report yakawana:
Anopfuura mana mugumi (41%) masangano haana chivimbo chakanyanya mukuchengetedzeka kwesoftware yavo yakavhurika sosi;
Avhareji yepurojekiti yekuvandudza application ine 49 kusasimba uye makumi masere akananga kutsamira (yakavhurika sosi kodhi inodaidzwa neprojekti); Y,
Iyo nguva yainotora kugadzirisa kusasimba mumapurojekiti akavhurika sosi yave kuwedzera zvishoma nezvishoma, kudarika zvakapetwa kubva pamazuva makumi mana nemapfumbamwe muna 49 kusvika pamazuva zana negumi muna 2018.
Izvo zvinotaurwa kuti kazhinji chirongwa application development ine avhareji ye49 vulnerabilities uye makumi masere anotsamira akananga. Pamusoro pezvo, nguva inodiwa kugadzirisa kusasimba mumapurojekiti akavhurika sosi yakawedzera zvishoma, kudarika zvakapetwa kubva pamazuva makumi mana nemapfumbamwe muna 49 kusvika pamazuva zana negumi muna 2018.
»Vagadziri vesoftware vanhasi vane yavo yekugovera cheni: pachinzvimbo chekuunganidza zvikamu zvemotokari, vanounganidza kodhi nekubatanidza iripo yakavhurika sosi zvikamu nekodhi yavo yakasarudzika. Kana izvi zvichitungamira mukuwedzera kubereka uye hunyanzvi, "anotsanangura kudaro Matt Jarvis, Director weDeveloper Relations kuSnyk. Pamwe chete neLinux Foundation, isu tinoronga kuvaka pane izvi zvakawanikwa kuti tienderere mberi nekudzidzisa uye kugadzirira vanogadzira pasi rese, zvichiita kuti varambe vachivaka nekukurumidza, vachigara vakachengeteka. "
Pakati pezvimwe zvabuda, 49% chete yemasangano ane mutemo wekuchengetedza yekuvandudza kana kushandiswa kwesoftware yemahara (uye nhamba iyi ingori 27% yemakambani epakati uye makuru). Nepo makumi matatu muzana emasangano asina yemahara software yekuchengetedza mutemo anobvuma pachena kuti hapana munhu pachikwata chavo anobata zvakananga nemahara software chengetedzo.
Supply chain kuoma inyaya zvakare, nevanopfuura chikamu chimwe muzvina chevakabvunzwa vachiratidza kuti vane hanya nezvekuchengetedzwa kwemaitiro avo akananga. 18% chete vanoti vane chivimbo mukutonga kwavanobata.
Kusvika panguva ino, Zvakakosha kusimbisa mamiriro maviri, yekutanga wavo ari panguva iyo vagadziri vanowedzera chikamu yakavhurika sosi mumaapplication ako, wabva wangodaro kuva vanotsamira pane icho chikamu uye vari panjodzi kana chikamu ichocho chiine kusasimba.
Imwe uye iyo yave ichionekwa kazhinji mumakore achangopfuura ndeyekuti njodzi iyi inowedzerwawo nekusainanga kana transitive kutsamira, zvinova zvinotsamira zve "zvimwe zvinotsamira", pano vazhinji vanogadzira havatomboziva nezve izvi zvinotsamira, izvo zvinoita kuti zvive nyore. zvakaoma kutevera nekudzivirira.
Neizvi, isu tinogona kunzwisisa zvishoma kuti chirevo chinoratidza kuti njodzi iyi ndeyechokwadi sei, paine makumi ekusagadzikana akawanikwa mune akawanda anotsamira akananga mune yega yega application yakaongororwa. Izvo zvakati, kusvika pamwero wakati, vakapindura vanoziva nezve kuchengetedzeka kwakagadzirwa neyakavhurika sosi mune yanhasi software yekugovera keteni:
Vanopfuura chikamu chimwe muzvina chevakabvunzwa vakati vari kushushikana nezve kuchengetedzeka kunokonzerwa nekutsamira kwavo; 18% chete yevakapindura vakati vanovimba nekutonga kwavanazvo pakutsamira kwavo; uye, Makumi mana muzana ezvese kusasimba akawanikwa mune transitive dependencies.
Zvakakoshawo kutaura kuti kana makambani aya kana vanogadzira "vasina kuchengetedzeka" nesoftware yavanoshandisa, vazhinji vedu tichafunga nezvechinhu chine musoro, kuitira kuti "vabhadhare" kana "kutsigira kusimudzira, kungave nekugovera zviwanikwa kana vagadziri", asi pano mune ino poindi ndipo panouya imwe yemakakatanwa makuru eyakavhurika sosi software, apo kana yakavhurika sosi inofanirwa "kubhadharwa".
Saka nekudaro, kune mizhinji mienzaniso yeyakavhurika sosi software inobata shanduro mbiri, iyo inobhadharwa uye yemahara, uye kunyange yakabhadharwa chete, asi iyo sosi kodhi inowanikwa.
Kune rumwe rutivi, kwave kunewo mafambiro evagadziri uye makambani makuru, umo vanosarudza kushandura muenzaniso wekugovera kana kuenda kune imwe nzira yekubhadhara, somuenzaniso QT.
Pasina zvimwe, kune vanoda kuziva zvakawanda nezvazvo nezvechinyorwa, unogona kubvunza ruzivo mukati chinotevera chinongedzo.