DevSecOpsã¨ã¯ä½•ã‹ — å°Žå…¥ã™ã‚‹çµ„ç¹”ãŒå¢—åŠ ã—ã¦ã„ã‚‹ç†ç”± | メルカリエンジニアリングMercari Advent Calendar 2020 ã®15日目ã¯ã€ãƒ¡ãƒ«ã‚«ãƒª Product Security ãƒãƒ¼ãƒ ã® Gloria Chow ãŒãŠé€ã‚Šã—ã¾ã™ã€‚ ã“ã‚“ã«ã¡ã¯ã€Product Securityãƒãƒ¼ãƒ ã®@gloriaã§ã™ã€‚以å‰ã€ã‚ªãƒ¼ãƒ—ンソースã¨ã—ã¦å…¬é–‹ã—ã¦ã„ã‚‹Testdeckã¨ã„ã†ã€ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“スã®è‡ªå‹•åŒ–テストã®ãŸã‚ã®ç¤¾å†…ツールã«ã¤ã„ã¦è¨˜äº‹ã‚’書ãã¾ã—ãŸã€‚ 今回ã¯ã€2020å¹´ã®Advent Calendarã®è¨˜äº‹ã¨ã—ã¦ã€DevSecOpsã«ã¤ã„ã¦ãŠè©±ã‚’ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚è¿‘å¹´ã€è€³ã«ã™ã‚‹æ©Ÿä¼šã®å¤šã„話題ã®ä¸€ã¤ãªã®ã§æ—¢ã«ã”å˜ã˜ã®æ–¹ã‚‚ã„らã£ã—ゃるã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€DevSecOpsã®åŸºæœ¬çš„ãªã‚³ãƒ³ã‚»ãƒ—トã€æ³¨ç›®ã•ã‚Œã¦ã„ã‚‹ç†ç”±ã€ã‚ˆãã‚ã‚‹ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã¨ãƒ¡ãƒ«ã‚«ãƒªã«ãŠã‘ã‚‹DevSecOpsã®å®Ÿè·µäº‹ä¾‹ã‚’紹介ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ DevSecOpsã¨ã¯? DevSecOps以å‰ã‹ã‚‰æå”±ã•ã‚Œã¦ã„ã‚‹Dev
https://www.a10o.net/devsecops/docker-image-security-static-analysis-tool-comparison-anchore-engine-vs-clair-vs-trivy/
AWS×コンテナã§åŸºæœ¬çš„ãªDevSecOpsアーã‚テクãƒãƒ£ã‚’デザインã—ãŸãŠè©± - How elegant the tech world is...!
GitHub - awslabs/git-secrets: Prevents you from committing secrets and credentials into git repositories
{{#tags}}- {{label}}
{{/tags}}