Upgrade to Pro — share decks privately, control downloads, hide ads and more …

車輪の再発明 / reinventing the wheel

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Teppei Fukuda Teppei Fukuda
June 17, 2019
Technology
1
1.3k

車輪の再発明 / reinventing the wheel

コンテナイメージの脆弱性スキャナTrivyの開発経験を通して得た教訓についてのLTです（Vuls祭り#5の資料）

Avatar for Teppei Fukuda

Teppei Fukuda

June 17, 2019
Tweet

More Decks by Teppei Fukuda

See All by Teppei Fukuda
Simplify Cloud Native Security with Trivy
Avatar for Teppei Fukuda knqyf263
2
5.6k
セキュリティ・キャンプ全国大会2020 オンライン B8 / seccamp2020-b8
Avatar for Teppei Fukuda knqyf263
5
1.5k
企業でOSS開発をするということ
Avatar for Teppei Fukuda knqyf263
0
28k
Trivy - Container vulnerability scanning
Avatar for Teppei Fukuda knqyf263
1
1.8k
HelmとService Brokerで始める検証環境自動構築 / Helm and Service Broker
Avatar for Teppei Fukuda knqyf263
7
2.8k
新機能 "Vuls Server" / Vuls Server
Avatar for Teppei Fukuda knqyf263
3
7.3k
OSSの脆弱性を探すためにやったこと
Avatar for Teppei Fukuda knqyf263
16
4.1k
今すぐVulsにContributeするべき5つの理由
Avatar for Teppei Fukuda knqyf263
1
800

Other Decks in Technology

See All in Technology
配列に見る bash と zsh の違い
Avatar for kazzpapa3 kazzpapa3
3
160
Oracle Cloud Observability and Management Platform - OCI 運用監視サービス概要 -
Avatar for oracle4engineer oracle4engineer
PRO
2
14k
Codex 5.3 と Opus 4.6 にコーポレートサイトを作らせてみた / Codex 5.3 vs Opus 4.6
Avatar for ama-ch ama_ch
0
180
今日から始める Amazon Bedrock AgentCore
Avatar for Har1101 har1101
4
410
OWASP Top 10:2025 リリースと 少しの日本語化にまつわる裏話
Avatar for Riotaro OKADA okdt
PRO
3
820
ランサムウェア対策としてのpnpm導入のススメ
Avatar for Satoru Ishikawa ishikawa_satoru
0
180
学生・新卒・ジュニアから目指すSRE
Avatar for Hiroya Onoe hiroyaonoe
2
650
日本の85%が使う公共SaaSは、どう育ったのか
Avatar for たけだ taketakekaho
1
230
こんなところでも（地味に）活躍するImage Modeさんを知ってるかい？- Image Mode for OpenShift -
Avatar for Masataka Tsukamoto tsukaman
1
160
Greatest Disaster Hits in Web Performance
Avatar for Estela Franco guaca
0
270
M&A 後の統合をどう進めるか ─ ナレッジワーク × Poetics が実践した組織とシステムの融合
Avatar for KNOWLEDGE WORK / 株式会社ナレッジワーク kworkdev
PRO
1
470
We Built for Predictability; The Workloads Didn’t Care
Avatar for Michael Stahnke stahnma
0
140

Featured

See All Featured
16th Malabo Montpellier Forum Presentation
Avatar for AKADEMIYA2063 akademiya2063
PRO
0
51
YesSQL, Process and Tooling at Scale
Avatar for Rocio Delgado rocio
174
15k
Google's AI Overviews - The New Search
Avatar for Barry Adams badams
0
910
StorybookのUI Testing Handbookを読んだ
Avatar for Shingo Yamazaki zakiyama
31
6.6k
Thoughts on Productivity
Avatar for Jon Yablonski jonyablonski
74
5k
SEO in 2025: How to Prepare for the Future of Search
Avatar for Michael King ipullrank
3
3.3k
10 Git Anti Patterns You Should be Aware of
Avatar for Lemi Orhan Ergin lemiorhan
PRO
659
61k
Prompt Engineering for Job Search
Avatar for Mfonobong Umondia mfonobong
0
160
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
191
11k
We Analyzed 250 Million AI Search Results: Here's What I Found
Avatar for Josh Blyskal joshbly
1
730
How to audit for AI Accessibility on your Front & Back End
Avatar for davetheseo davetheseo
0
180
SEOcharity - Dark patterns in SEO and UX: How to avoid them and build a more ethical web
Avatar for Sara Fernández Carmona sarafernandez
0
120

Transcript

  1. ंྠͷ࠶ൃ໌ VulsࡇΓ#5 @knqyf263

  2. ίϯςφΠϝʔδεΩϟφ https://github.com/knqyf263/trivy

  3. ίϯςφΠϝʔδεΩϟφ Dagda Anchore Engine GCR

  4. 9൪໨ͷίϯςφΠϝʔδεΩϟφ ʢଟ෼ʣ

  5. 5൪໨͙Β͍ͷDocker༻Linter ʢଟ෼ʣ https://github.com/goodwithtech/dockle

  6. ά ʔάϧ͸ 1 2൪໨ͷݕࡧΤϯδϯͩͬͨ ɻ ϑΣΠεϒοΫ͸ 1 0൪໨ͷι ʔγϟϧωοτϫ ʔΫ

    ɺ iPad͸ 2 0൪໨ͷλϒϨοτͩͬͨ ɻ େ੾ͳͷ͸୭͕࠷ॳ͔Ͱ͸ͳ͍ ɻ ࢢ৔͕ख़ͨ͠ͱ͖ ɺ୭͕࠷ॳʹͳΔ͔ͩ ɻ ʮΤϯδΣϧ౤ࢿՈ ϦεΫΛେ୾ʹऔΓڊֹͷϦλʔϯΛಘΔਓ͸ԿΛݟൈ͘ͷ͔ʯΑΓ

  7. ਫ਼౓ൺֱ

  8. ઓ͏લ͔ΒఘΊͳ͍ ͨͩͷंྠ͡Όͳͯ͘ελουϨελΠϠ͔΋͠Εͳ͍ ʢద౰ʣ