2022年12月8日

分享1密码,以人为中心的安全和隐私的领导者,发起了一项解决方案,帮助简化企业如何管理和安全基础设施的秘密在整个开发生命周期——从第一行代码投入生产。今天的大量的技术漏洞离开自营公司细节容易攻击从糟糕的演员以及人为错误的员工。1密码的新特性,包括壳CI / CD集成和1密码插件,允许开发人员保持他们的代码安全通过管理钥匙,凭证和秘密,随着项目通过不同的环境。“真正的业务安全要求我们解决漏洞,不只是在一个或两个点,但是在整个开发生命周期。我们简化开发人员如何管理基础设施的秘密,同时也向他们提供更强大,让安全从项目生命周期的一个阶段到下一个,”首席产品官史蒂夫就说1密码。“我们热爱我们的开发者社区,致力于帮雷竞技 raybet助他们减少无用功,提高可用性和安全性。开发人员工作流程是一个关键支柱在2023年我们的路线图,其中包括承诺使他们的生活尽可能容易。”在其报告中“隐藏在普通的场景中,”1密码如何秘密管理不善造成的网络安全威胁,企业和公司每年花费120万美元。该报告还发现,80%的IT / DevOps组织承认没能很好地管理自己的秘密,这一半的/ Dev工人不知道如何分散在很多地方他们的公司机密,有太多的计算。此外,60%的IT / DevOps组织以某种形式经历了机密泄漏。 Related Posts The software development lifecycle typically comprises several stages that move through coding, building, testing, deployment and operation. Where Developer Tools (coding and building) helps secure development credentials, and Secrets Automation (operation) secures enterprises’ infrastructure and machine-to-machine secrets, these new features announced today will help bridge gaps within the development lifecycle to offer protection for testing, deployment and beyond: 1Password Shell Plugins: Allow developers to sign in to any CLI with a fingerprint, by storing their API access keys in 1Password. This makes it possible to sync credentials, in encrypted vaults, across devices and eliminates the need to store plaintext keys on disk. Developers can install existing plugins for their toolchain via the 1Password CLI and can build their own plugins via the open source community project. CI/CD Integrations: Enable developers to secure secrets in 1Password and access them directly within CI/CD environments with pre-built integrations for CircleCI, GitHub Actions, and Jenkins. Developers can reference secrets directly within jobs and can update as needed within 1Password without requiring admin access for their CI/CD platform. Git Commit Signing: Allows developers to sign their Git commits and receive a “verified” badge on GitHub and GitLab via SSH keys that are generated, configured and stored in 1Password. “Many of our users rely on GitLab to shorten code review cycles, increase their developer productivity and strengthen overall security at every step,” said Kai Armstrong, senior product manager at GitLab. “1Password’s latest rollout is an important development in that last bucket. Launching Shell Plugins will help ensure developers can access our tools in their terminals as quickly and securely as possible.”