Code auditing method and device based on version number comparison and medium

Abstract

The invention relates to a code auditing method based on version number comparison, which comprises the following steps: acquiring a latest published version number of a to-be-audited project from a source code warehouse of the project, and pulling a corresponding code and / or file to a local directory; searching a version number published by the project last time, and obtaining a corresponding code and / or file to a local directory; comparing the difference between the two versions, and storing the difference code and / or file in an audit database; obtaining a web routing address influenced by the difference code and / or the difference file; and checking the difference between the latest submitted version and the last version of the project according to the web routing address and auditing the latest submitted version and the last version. An auditor audits the simulation test of the difference code and / or file of the latest version and the last version, the workload is reduced, the codeauditing efficiency is improved, and due to the fact that only the difference code and / or file is obtained, leakage of a complete source code can be prevented.

Description

Technical field [0001] The invention belongs to the technical field of network security, and particularly relates to a code audit method, an audit device, a computer device and a storage medium based on version number comparison. Background technique [0002] The existing system construction process often uses two methods, one is to synchronize directly from the test server to the online server through the rsync script, and the other is to deploy the built system version to the online server through the version building tool , Both of these methods have a feature that is non-continuous. In the microservice architecture, each functional module is disassembled into microservices. If you use these two construction methods, you will encounter the problem of dependency between services and low construction efficiency. [0003] Git is an open source distributed version control system that can effectively and quickly handle the version management of projects from very small to very large....

AI Technical Summary

Problems solved by technology

[0004] The two biggest problems with this control system are: first, when performing code difference auditing and other related operations, the project administrator must open the corresponding permissions. After opening the permissions, the personnel have the permission to modify and download the project

And the authority of each project is managed by the project leader himself, the flow of personnel leads to management difficulties, and there is a risk that the source code will be leaked by non-project participants; the second is that the version control system only controls the submission of the source code and the version before each submission Control, unable to associate and communicate with the version that is actually launched, so every time it is actually launched, the version submitted multiple times will be repeatedly audited

Images