Aiming at the problem of collaborative optimization of code security and development efficiency in new complex scheduling systems, a code detection automation security protection system based on compilation is proposed. By integrating Zentao project management platform, GitLab platform and Jenkins automation tool, a full-process static scanning tool chain is constructed. This method realizes three-stage collaboration in the development of intelligent scheduling systems: iterative development management of complex systems, access control during code merging, and in-depth secondary scanning embedded in the Continuous Integration and Continuous Delivery/Deployment (CI/CD) process. Applications show that this solution provides an extensible engineering practice for the next-generation scheduling systems with high security requirements, achieving joint optimization of security and development efficiency.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Research on a New Security Development Toolchain for Scheduling Systems Based on Static Analysis and Continuous Integration

  • Wenjie Luo,
  • Hongxing Cen,
  • Hao Zhang,
  • Sijie Yang,
  • Shiyang Xue,
  • Xiaojian Zhao

摘要

Aiming at the problem of collaborative optimization of code security and development efficiency in new complex scheduling systems, a code detection automation security protection system based on compilation is proposed. By integrating Zentao project management platform, GitLab platform and Jenkins automation tool, a full-process static scanning tool chain is constructed. This method realizes three-stage collaboration in the development of intelligent scheduling systems: iterative development management of complex systems, access control during code merging, and in-depth secondary scanning embedded in the Continuous Integration and Continuous Delivery/Deployment (CI/CD) process. Applications show that this solution provides an extensible engineering practice for the next-generation scheduling systems with high security requirements, achieving joint optimization of security and development efficiency.