Terraform, Dockerfile, Kubernetesãªã©IaCã®è„†å¼±ãªè¨å®šã‚’CI/CDã§æ¤œçŸ¥ã™ã‚‹ - knqyf263's blogæ¦‚è¦ è‡ªåˆ†ã®æ‰€å±žä¼æ¥ã§ã‚ã‚‹Aqua SecurityãŒTFsecã¨ã„ã†OSSã‚’è²·åŽã—ã¾ã—ãŸã€‚ blog.aquasec.com TFsecã¯ã©ã†ã„ã†ãƒ„ールã‹ã¨ã„ã†ã¨Terraformã®é™çš„解æžã‚¹ã‚ャナーã§ã™ã€‚Terraformã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’渡ã™ã“ã¨ã§ã‚»ã‚ュリティã«é–¢ã™ã‚‹è¨å®šãƒŸã‚¹ã‚’主ã«æ¤œçŸ¥ã—ã¦ãã‚Œã¾ã™ã€‚ github.com ãã®ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã«ä¼´ã„ã€TFsecã¯è‡ªåˆ†ãŒé–‹ç™ºã—ã¦ã„る脆弱性スã‚ャナーã§ã‚ã‚‹Trivyã«çµ±åˆã•ã‚Œã¾ã—ãŸã€‚Trivyã§ã¯Terraformã«åŠ ãˆDockerfileã‚„Kubernetesãªã©ã€ã„ã‚ゆるInfrastructure as Code（IaC）ã®è¨å®šãƒŸã‚¹ã‚’検知ã™ã‚‹ãƒžãƒãƒ¼ã‚¸ãƒ‰ãƒãƒªã‚·ãƒ¼ã‚‚æä¾›ã—ã¦ã„ã¾ã™ã€‚ä»–ã«ã‚‚JSONã‚„YAMLãªã©ä¸€èˆ¬çš„ãªãƒ•ã‚¡ã‚¤ãƒ«ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã«å¯¾å¿œã—ã¦ã„ã‚‹ãŸã‚自分ã§ãƒãƒªã‚·ãƒ¼ã‚’書ãã“ã¨ã§ãれらã®æ¤œçŸ¥ã«ã‚‚使ãˆã¾ã™ã€‚CloudFormationã‚„Ansib
{{#tags}}- {{label}}
{{/tags}}