论文标题
基础架构作为代码的静态分析：调查
Static Analysis of Infrastructure as Code: a Survey
论文作者
论文摘要
在DevOps中，基础架构作为代码（IAC）的越来越多会导致部署操作的速度和可靠性的好处，但扩展到了典型的软件系统的基础架构挑战。 IAC脚本可以包含导致部署基础架构中安全性和可靠性问题的缺陷：需要检测和预防它们的技术。我们通过对IAC的静态分析技术进行文献综述来分析和调查这方面的研究状态。我们描述了文献中工具针对的分析技术，缺陷类别和平台。
The increasing use of Infrastructure as Code (IaC) in DevOps leads to benefits in speed and reliability of deployment operation, but extends to infrastructure challenges typical of software systems. IaC scripts can contain defects that result in security and reliability issues in the deployed infrastructure: techniques for detecting and preventing them are needed. We analyze and survey the current state of research in this respect by conducting a literature review on static analysis techniques for IaC. We describe analysis techniques, defect categories and platforms targeted by tools in the literature.
