[B! security] budougumi0617ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

budougumi0617 id:budougumi0617

securityã«é–¢ã™ã‚‹budougumi0617ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒ—ãƒãƒ€ã‚¯ãƒˆã‚³ãƒ¼ãƒ‰ã®é™çš„è§£æžã«horusecã‚’å…¥ã‚ŒãŸè©± - freee Developers Hub
ã“ã®è¨˜äº‹ã¯freee ã‚¢ãƒ‰ãƒ™ãƒ³ãƒˆã‚«ãƒ¬ãƒ³ãƒ€ãƒ¼16æ—¥ç›®ã§ã™ã€‚ ã¿ãªã•ã‚“ã“ã‚“ã«ã¡ã¯ã€‚PSIRTã¨ã„ã†ãƒãƒ¼ãƒ ã§ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã‚’ã—ã¦ã„ã‚‹livaã§ã™ã€‚PSIRTã¨ã„ã†èžãæ…£ã‚Œãªã„å˜èªžã§ã™ãŒã€ŒProduct Security Incident Response Teamã€ã®ç•¥ã§ã€æ–‡å—é€šã‚Šãƒ—ãƒãƒ€ã‚¯ãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ãƒ•ã‚©ãƒ¼ã‚«ã‚¹ã—ãŸãƒãƒ¼ãƒ ã§ã™ã€‚å…ƒã¯CSIRT(Computer Security Incident Response Team)ã§ã¾ã¨ã‚ã¦ã‚„ã£ã¦ã„ãŸã‚“ã§ã™ãŒã€ä»Šå¹´ã®å¤é ƒã‹ã‚‰åˆ†ã‹ã‚Œã¦å‹•ã„ã¦ã„ã¾ã™ã€‚æ¥å‹™å†…å®¹ã¯ä»Šã¾ã§ã¨ä½•ä¸€ã¤å¤‰ã‚ã£ã¦ãŠã‚‰ãšã€AWSè§¦ã£ãŸã‚ŠGCPè§¦ã£ãŸã‚Šãƒ—ãƒãƒ€ã‚¯ãƒˆãƒãƒ¼ãƒ ã¸ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢ä¿‚ã®ã“ã¨ã§é¦–çªã£è¾¼ã‚“ã ã‚Šã¨ãƒ—ãƒãƒ€ã‚¯ãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ã“ã¨ã¯è‰²ã€…ã‚„ã£ã¦ã„ã¾ã™ã€‚ ã•ã¦ã€ä»Šå›žã®è©±é¡Œã¯ã‚¿ã‚¤ãƒˆãƒ«é€šã‚Šã€Œãƒ—ãƒãƒ€ã‚¯ãƒˆã‚³ãƒ¼ãƒ‰ã®é™çš„è§£æžã€ã«ã¤ã„ã¦ã§ã™ã€‚ ä»Šã¾ã§å„ãƒ—ãƒãƒ€ã‚¯ãƒˆã”ã¨ã«ãƒ„ãƒ¼ãƒ«ãŒé‹ç”¨ã•ã‚Œã¦ã„ãŸã‚Šã„ãª
budougumi0617 2020/12/17
â€œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®é™çš„è§£æžã‚’è¡Œã†ã“ã¨ã‚’SAST(Static Application Security Testing)ã¨å‘¼ã¶ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚â€

freee

ci

security
ãƒªãƒ³ã‚¯
ãƒ‘ãƒ¼ãƒ•ã‚§ã‚¯ãƒˆRailsè‘—è€…ãŒè§£èª¬ã™ã‚‹deviseã®ç¾ä»£çš„ãªãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã®ãƒ¢ãƒ‡ãƒ«æ§‹æˆã«ã¤ã„ã¦ - joker1007â€™s diary
æœ€è¿‘ã€ãƒ‘ãƒ¼ãƒ•ã‚§ã‚¯ãƒˆRuby on Railsã®å¢—è£œæ”¹è¨‚ç‰ˆã‚’ãƒªãƒªãƒ¼ã‚¹ã•ã›ã¦ã„ãŸã ã„ãŸèº«ãªã®ã§ã€ä¹…ã—ã¶ã‚Šã«Railsã«ã¤ã„ã¦æ›¸ã„ã¦ã¿ã‚ˆã†ã¨æ€ã†ã€‚ ã¾ã‚ã€æ›¸ç±ã®å®£ä¼ã¿ãŸã„ãªã‚‚ã®ã§ã™ã€‚ æ•°æ—¥å‰ã«ã€noteã¨ã„ã†ã‚µãƒ¼ãƒ“ã‚¹ã§Webãƒ•ãƒãƒ³ãƒˆå´ã«æŠ•ç¨¿è€…ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ãŒéœ²å‡ºã™ã‚‹ã¨ã„ã†æ¼æ´©äº‹æ•…ãŒèµ·ãã¾ã—ãŸã€‚ã“ã‚ŒãŒã©ã‚Œãã‚‰ã„å•é¡Œã‹ã¯ä¸€æ—¦ç½®ã„ã¦ãŠã„ã¦ã€ä½•æ•…ã“ã†ã„ã†ã“ã¨ã«ãªã‚‹ã®ã‹ã€ãã—ã¦Railsã§ã‚ˆãä½¿ã‚ã‚Œã‚‹deviseã¨ã„ã†èªè¨¼æ©Ÿæ§‹ä½œæˆãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®ã‚ˆã‚Šè‰¯ã„ä½¿ã„æ–¹ã«ã¤ã„ã¦è©±ã‚’ã—ã¦ã„ãã¾ã™ã€‚ (noteãŒRailsã‚’ä½¿ã£ã¦ã„ã‚‹ã‹ã€ã“ã“ã§è©±ã‚’ã™ã‚‹deviseã‚’æŽ¡ç”¨ã—ã¦ã„ã‚‹ã‹ã¯å®šã‹ã§ã¯ãªã„ã®ã§ã€ã“ã“ã‹ã‚‰å…ˆã®è©±ã¯ãã®äº‹æ•…ã¨ã¯ç›´æŽ¥é–¢ä¿‚ã‚ã‚Šã¾ã›ã‚“ã€‚Railsã ã£ãŸã¨ã—ã¦ã‚‚æã‚‰ãä½¿ã£ã¦ãªã„ã‹å¤‰ãªä½¿ã„æ–¹ã—ã¦ã‚‹ã¨æ€ã†ã‚“ã§ã™ãŒã€ç†ç”±ã¯å¾Œè¿°) ä½•æ•…ã“ã‚“ãªã“ã¨ãŒèµ·ãã‚‹ã®ã‹ ãã‚‚ãã‚‚ã€ãƒ•ãƒãƒ³ãƒˆå´ã«ä½•æ•…IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’é€ã£ã¦ã‚“ã ã€ã¨ã„ã†è©±ã§ã™
budougumi0617 2020/08/17
rails

devise

authentication

database

security

ruby
ãƒªãƒ³ã‚¯
GitHub - OWASP/Go-SCP: Golang Secure Coding Practices guide
Go Language - Web Application Secure Coding Practices is a guide written for anyone who is using the Go Programming Language and aims to use it for web development. It was originally created by Checkmarx Security Research Team and later donated to the OWASP Foundation: see the project page. The book follows the OWASP Secure Coding Practices - Quick Reference Guide v2 (stable) release. The main goa
budougumi0617 2019/08/06
go

programming

security

github
ãƒªãƒ³ã‚¯
Docker å…¬å¼ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ–ãƒ„ãƒ¼ãƒ«ã€ŒDocker Bench for Securityã€ã‚’è©¦ã—ãŸ - kakakakakku blog
æœ€è¿‘ Docker é–¢é€£ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ„ãƒ¼ãƒ«ã‚’èª¿æŸ»ã™ã‚‹æ©Ÿä¼šãŒã‚ã‚Šï¼Œä»Šå›žã¯ã€ŒDocker Bench for Securityã€ã‚’è©¦ã—ãŸãƒã‚°ã‚’æ®‹ã—ã¦ãŠãï¼Žã€ŒDocker Bench for Securityã€ã¯ Docker ã‹ã‚‰å…¬å¼ã«æä¾›ã•ã‚Œã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ–ãƒ„ãƒ¼ãƒ«ã§ï¼Œå…·ä½“çš„ã«ã¯ã€ŒCIS Docker Community Edition Benchmark v1.1.0ã€ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ï¼Ž github.com ã‚³ãƒ³ãƒ†ãƒŠå®Ÿè¡Œ ã€ŒDocker Bench for Securityã€ã‚’å®Ÿè¡Œã™ã‚‹æ–¹æ³•ã¯è¤‡æ•°ã‚ã‚‹ï¼Ž1ç•ªç°¡å˜ãªã®ã¯ã‚³ãƒ³ãƒ†ãƒŠã‚’å®Ÿè¡Œã™ã‚‹æ–¹æ³•ã§ï¼ŒDocker ã‚¤ãƒ¡ãƒ¼ã‚¸ã€Œdocker/docker-bench-securityã€ãŒ Docker Hub ã«å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ï¼Ž https://hub.docker.com/r/docker/docker-bench-security æ³¨æ„ç‚¹ã¨
budougumi0617 2019/01/21
è‡ªåˆ†ã®ã‚³ãƒ³ãƒ†ãƒŠã«ã‹ã‘ãŸã‚ŠCIã®ã‚¸ãƒ§ãƒ–ã®ä¸ã«å…¥ã‚Œã¦ã¿ã‚ˆã†ã‹ãªï¼Ÿ

docker

container

security
ãƒªãƒ³ã‚¯
1