Gradle
Log4Shell ã¿ãããªãã¨ãèµ·ããæã«æ ã¦ãã®ã¯å«ã ãªã¨ãããã¨ã§ãå»å¹´ã®å¹´æ«ä»¥é㯠dependency-check ã trivy ã®ã¬ãã¼ãã¨ã«ããã£ããã¦ãã (å®éã«ã¯ 0-day ã¯é²ããªããããç´æ¥ã¯é¢ä¿ããªãããè½ãæãã§ãããã¨ã¯è¯ããã¨ã§ããã¯ãã) github.â¦
dependabot ãçæãã pull request ã§å§æ»ãããã«ãªã£ã¦ãæ¥ã ã§ãã
dependabot ã¨ä»ãåã£ã¦ãã½ããã¦ã§ã¢ã¨ã³ã¸ãã¢ã®æ¹ã¯ããããããã¨æãã¾ããããªããããã£ã¦ã gem ã®ä¾ããåºã¦ããªãã¦ãgradle ã§ä½¿ã£ã¦ã人ã¯ããªãã®ãã¨ä¸å®ã«ãªã£ããããã¡ãã£ã¨æ®æ®µãã£ã¦ããã¨ãã¾ã¨ãã¦ããã¾ãã
ãã®è¨äºãåèã«å®éã«ããã¨ã©ããªæããªã®ããã£ã¦ã¿ãããã³ã³ãã¤ã©ä»¥å¤ã®ãã¼ã«ã¯è¿½å¾ãã¦ãªãããã ããã¡ãã£ã¨å°ãã®ã§ã¯ï¼ã¨ããæãã®çµæã«ãªã£ããããã¡ã¢ã£ã¦ããã¾ãã progret.hatenadiary.com