Apsara Devops Codeup is an enterprise-level code management platform that provides features such as code hosting, code review, code scanning, and quality checks. Codeup protects your enterprise code assets and helps you achieve secure, stable, and efficient research and development (R&D) management.
Problems for startups
If a startup chooses to build its own code hosting service, it must purchase physical servers or cloud storage. The startup also needs experienced personnel to build and maintain the service. This increases hardware and labor costs.
After setup, problems such as system failures, a lack of disaster recovery and backup, and occasional attacks can occur. This means code stability is not guaranteed.
Developer turnover is often high in startups. The team's code may not follow a unified standard. This means code quality is difficult to improve.
Code is the foundation of a small business. How can you ensure code security?
Introduction to Apsara Devops Codeup
Apsara Devops Codeup is a stable, free, and user-friendly enterprise-level code management platform. The platform automatically provides high availability (HA) with multiple replicas, Alibaba Cloud Anti-DDoS Protection, and high-speed access. This ensures the security and stability of your enterprise code.
When you commit code, you can configure automatic checks. These checks include scans based on the Alibaba Java Development Manual, sensitive information detection, and dependency package vulnerability detection. You can also use multiple code review mechanisms in merge requests to improve code security and quality.
To ensure enterprise code security, Codeup provides preventive controls such as IP address whitelists, automatic permission revocation for former employees, and three-level permission controls. It offers in-progress warnings by monitoring sensitive behaviors and sending high-risk notifications. It also enables post-event traceability by recording operation logs for repositories, groups, administrators, and code behaviors.
Try it now: Apsara Devops Codeup
How developers can get started quickly
1. Initialize a code repository
For code collaboration, developers first need a code repository. You can either import an existing repository or create a new one.
Import a repository:
You can batch import code from sources such as GitHub, self-hosted GitLab, Alibaba Cloud Code, Gitee, or using a URL. For different platforms, you can grant authorization using an access token or OAuth. For more information, see Import a repository.
Create a new repository
To create a new repository, see Quick Start.
2. Develop code in the repository
Recommended best practices:
When you receive a development task, create a development branch from the master branch. For more information, see Branching Model Selection and Implementation Guide.
Download the development branch to your local machine and start developing. Commit your code promptly when a task is complete or before the end of the day. We recommend committing code twice a day. For more information, see Submit code. To learn how to write good commit messages, see How to Write Good Commits and Be a Classy Developer.
After you commit the code, a code scan is automatically triggered. For more information, see Code scanning. To learn how to improve code quality and security, see Use Code Scanning to Improve Code Quality and Security.
After you resolve any critical issues that are found by the code scan, submit a merge request. For configuration details, see Create a merge request. If you need more advanced code scanning, you can use Apsara Devops Flow.
Codeup provides three code review mechanisms: lightweight merge request reviews, formal code reviews, and automated auxiliary code reviews. For more information, see How to Perform Effective Code Reviews on Apsara Devops.
After the code review is approved, the code is automatically merged.
How administrators can ensure code security
Code is a critical software asset for any enterprise. Ensuring code security and preventing leaks is a top priority for administrators. Apsara Devops Codeup helps administrators protect code security with preventive controls, in-progress warnings, and post-event traceability.
Preventive controls
IP address whitelist: You can configure an IP address whitelist to allow access only from specified IP addresses. All access attempts from other IP addresses are rejected. This feature greatly enhances repository security. For more information, see IP address whitelist.
Three-level permission control: You can secure your code's privacy with three levels of permissions: enterprise, code group, and repository. For information about permission configuration, see Member permissions.
Automatic permission revocation for former employees: When an employee is marked as departed in the Apsara Devops enterprise management console, all of their code permissions are automatically revoked.
In-progress warnings
Security risk control: You can use sensitive information reports and sensitive behavior monitoring services to provide administrators with a clear and quick view of potential threats. For more information, see Security risk control.
High-risk notifications: You can receive prompt notifications through internal messages or email about high-risk actions, such as deleting a repository or making a repository public. Recorded security notifications can be exported for more detailed data analytics. For more information, see High-risk action notifications.
Post-event traceability
Operation logs for repositories, groups, administrators, and code behaviors are recorded. This helps administrators trace events and troubleshoot problems after they occur. For more information, see Operation logs.
More configuration information
Tips
Git Large File Storage (LFS) is supported. For more information, see Guide to Improving Large Repository Performance.
The following topics describe how to use Apsara Devops Codeup: