September 2021
Beginner to intermediate
392 pages
12h 13m
Chinese
book
Google系统架构解密： 构建安全可靠的系统
by Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield
Content preview from Google系统架构解密： 构建安全可靠的系统
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
210
｜
第
13
章
将静态分析工具集成到
CI/CD
流水线中的门槛很低，但对研发效能的提升可能会有很大帮
助。例如，针对空指针解引用错误，开发人员可收到错误告警和修复建议。当无法提交代
码时，开发人员就会记得要修复这种会导致系统崩溃或泄露敏感信息的问题。这样做也有
助于形成一种关注安全性和可靠性的文化（参见第
21
章
）。
为此，
Google
开发了
T
ricorder
应用程序分析平台
7
及其开源版本
Shipshape
。
Tricorder
每天
对约
50 000
个代码评审变更做静态分析
。有许多类型的应用程序分析工具运行在该平台
上，并在代码审查期间向开发人员发出错误告警供评估。这些工具旨在提供易于理解和修
复的检查结果，并且用户可感的误报率很低，不高于
10%
。
设计机制上，
T
ricorder
允许运行许多不同的应用程序分析工具。
2018
年年初，该平台囊括
了
146
款分析工具
，覆盖了
30
多种编程语言。其中，大部分分析工具是由
Google
员工研
发的。一般来说，常用的静态分析工具并不复杂。
T
ricorder
上运行的大多数检查工具是自
动代码检查器。针对不同的语言，这些工具会检查其是否符合编程风格规范并找出缺陷。
如前所述，
Error Prone
和
Clang-T
idy
可以在某些场景下生成修复建议。然后，代码作者可
通过点击按钮来应用修复建议。
图
13-2
展示了当传入一个
Java
文件时
T
ricorder
的分析结果截图，该界面和代码审查者
看到的是一样的。其结果显示了两个告警，一个来自
Java linter
，另一个来
Error Prone ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.