Code Management
Apsara Devops Codeup is an enterprise-level code management platform that provides features such as code hosting, code review, code scanning, and quality checks. Codeup protects your enterprise code assets and helps you achieve secure, stable, and efficient research and development (R&D) management.
Problems for startups
If a startup chooses to build its own code hosting service, it must purchase physical servers or cloud storage. The startup also needs experienced personnel to build and maintain the service. This increases hardware and labor costs.
After setup, problems such as system failures, a lack of disaster recovery and backup, and occasional attacks can occur. This means code stability is not guaranteed.
Developer turnover is often high in startups. The team's code may not follow a unified standard. This means code quality is difficult to improve.
Code is the foundation of a small business. How can you ensure code security?
Introduction to Apsara Devops Codeup
Apsara Devops Codeup is a stable, free, and user-friendly enterprise-level code management platform. The platform automatically provides high availability (HA) with multiple replicas, Alibaba Cloud Anti-DDoS Protection, and high-speed access. This ensures the security and stability of your enterprise code.
When you commit code, you can configure automatic checks. These checks include scans based on the Alibaba Java Development Manual, sensitive information detection, and dependency package vulnerability detection. You can also use multiple code review mechanisms in merge requests to improve code security and quality.
To ensure enterprise code security, Codeup provides preventive controls such as IP address whitelists, automatic permission revocation for former employees, and three-level permission controls. It offers in-progress warnings by monitoring sensitive behaviors and sending high-risk notifications. It also enables post-event traceability by recording operation logs for repositories, groups, administrators, and code behaviors.
Try it now: Apsara Devops Codeup
How developers can get started quickly
1. Initialize a code repository
For code collaboration, developers first need a code repository. You can either import an existing repository or create a new one.
Import a repository:
You can batch import code from sources such as GitHub, self-hosted GitLab, Alibaba Cloud Code, Gitee, or using a URL. For different platforms, you can grant authorization using an access token or OAuth.
Create a new repository
To create a new repository, see Quick Start.
2. Develop code in the repository
Recommended best practices:
When you receive a development task, create a development branch from the master branch. For more information, see Branching Model Selection and Implementation Guide.
Download the development branch to your local machine and start developing. Commit your code promptly when a task is complete or before the end of the day. We recommend committing code twice a day. To learn how to write good commit messages, see How to Write Good Commits and Be a Classy Developer.
After you commit the code, a code scan is automatically triggered. To learn how to improve code quality and security, see Use Code Scanning to Improve Code Quality and Security.
After you resolve any critical issues that are found by the code scan, submit a merge request. For configuration details, see Create a merge request. If you need more advanced code scanning, you can use Apsara Devops Flow.
Codeup provides three code review mechanisms: lightweight merge request reviews, formal code reviews, and automated auxiliary code reviews. For more information, see How to Perform Effective Code Reviews on Apsara Devops.
After the code review is approved, the code is automatically merged.
How administrators can ensure code security
Code is a critical software asset for any enterprise. Ensuring code security and preventing leaks is a top priority for administrators. Apsara Devops Codeup helps administrators protect code security with preventive controls, in-progress warnings, and post-event traceability.
Preventive controls
IP address whitelist: You can configure an IP address whitelist to allow access only from specified IP addresses. All access attempts from other IP addresses are rejected. This feature greatly enhances repository security.
Three-level permission control: You can secure your code's privacy with three levels of permissions: enterprise, code group, and repository.
Automatic permission revocation for former employees: When an employee is marked as departed in the Apsara Devops enterprise management console, all of their code permissions are automatically revoked.
In-progress warnings
Security risk control: You can use sensitive information reports and sensitive behavior monitoring services to provide administrators with a clear and quick view of potential threats.
High-risk notifications: You can receive prompt notifications through internal messages or email about high-risk actions, such as deleting a repository or making a repository public. Recorded security notifications can be exported for more detailed data analytics.
Post-event traceability
Operation logs for repositories, groups, administrators, and code behaviors are recorded. This helps administrators trace events and troubleshoot problems after they occur.
More configuration information
Tips
Git Large File Storage (LFS) is supported.
The following topics describe how to use Apsara Devops Codeup: