ã‚»ã‚ュリティツールã®è©•ä¾¡ã¯é›£ã—ã„ - knqyf263's blogå‰ã‹ã‚‰æ€ã£ã¦ãŸã“ã¨ã‚’ã¡ã‚‡ã£ã¨æ›¸ã‹ãšã«ã„られãªããªã£ãŸã®ã§ãƒã‚¨ãƒ を書ãã¾ã—ãŸã€‚ 背景 å•é¡Œ 検知ã—ã¦ã„ã‚‹æ–¹ãŒæ£ã—ã„よã†ã«è¦‹ãˆãŒã¡ æ¡ä»¶ã‚’æƒãˆã‚‹ã®ãŒé›£ã—ㄠ環境ã®å†ç¾ãŒé›£ã—ㄠ検知数ãŒå¤šã„æ–¹ãŒè‰¯ã•ãã†ã«è¦‹ãˆã‚‹ æ£è§£ã‹ã©ã†ã‹ã®åˆ¤æ–ãŒé›£ã—ã„ ã‚«ãƒãƒ¼ç¯„囲ã®æ£ç¢ºãªè¦‹æ¥µã‚ãŒé›£ã—ㄠ検知ã•ã‚Œãªã„ã»ã†ãŒå¬‰ã—ã„ ã¾ã¨ã‚ 背景 ãŠå‰èª°ã よã£ã¦ãªã‚‹ã‹ã‚‚ã—ã‚Œãªã„ã®ã§æ›¸ã„ã¦ãŠãã¨ã€Trivyã¨ã„ã†è„†å¼±æ€§ã‚¹ã‚ャナーã®ãƒ¡ãƒ³ãƒ†ãƒŠã‚’ã‚„ã£ã¦ã„ã¾ã™ã€‚ github.com ã¨ã‚る有åãªæ–¹ã«ã‚ˆã‚‹ä»¥ä¸‹ã®ãƒ„イートãŒã‚ã‚Šã¾ã—ãŸã€‚ I just discovered, during @cloudflare #SecurityWeek no less, that Trivy (the vuln scanner) doesn't detect known issues in Alpine images. Including a critica
{{#tags}}- {{label}}
{{/tags}}