Upgrade to Pro — share decks privately, control downloads, hide ads and more …

車輪の再発明 / reinventing the wheel

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Teppei Fukuda Teppei Fukuda
June 17, 2019
Technology
1
1.3k

車輪の再発明 / reinventing the wheel

コンテナイメージの脆弱性スキャナTrivyの開発経験を通して得た教訓についてのLTです（Vuls祭り#5の資料）

Avatar for Teppei Fukuda

Teppei Fukuda

June 17, 2019
Tweet

More Decks by Teppei Fukuda

See All by Teppei Fukuda
Simplify Cloud Native Security with Trivy
Avatar for Teppei Fukuda knqyf263
2
5.6k
セキュリティ・キャンプ全国大会2020 オンライン B8 / seccamp2020-b8
Avatar for Teppei Fukuda knqyf263
5
1.5k
企業でOSS開発をするということ
Avatar for Teppei Fukuda knqyf263
0
28k
Trivy - Container vulnerability scanning
Avatar for Teppei Fukuda knqyf263
1
1.8k
HelmとService Brokerで始める検証環境自動構築 / Helm and Service Broker
Avatar for Teppei Fukuda knqyf263
7
2.8k
新機能 "Vuls Server" / Vuls Server
Avatar for Teppei Fukuda knqyf263
3
7.3k
OSSの脆弱性を探すためにやったこと
Avatar for Teppei Fukuda knqyf263
16
4.1k
今すぐVulsにContributeするべき5つの理由
Avatar for Teppei Fukuda knqyf263
1
800

Other Decks in Technology

See All in Technology
OCI Database Management サービス詳細
Avatar for oracle4engineer oracle4engineer
PRO
1
7.4k
Digitization部 紹介資料
Avatar for Sansan, Inc. sansan33
PRO
1
6.8k
AzureでのIaC - Bicep? Terraform? それ早く言ってよ会議
Avatar for Toru Makabe torumakabe
1
580
【Ubie】AIを活用した広告アセット「爆速」生成事例 | AI_Ops_Community_Vol.2
Avatar for Yoshiki yoshiki_0316
1
110
AIと新時代を切り拓く。これからのSREとメルカリIBISの挑戦
Avatar for ktykogm 0gm
1
2.8k
仕様書駆動AI開発の実践： Issue→Skill→PRテンプレで 再現性を作る
Avatar for 西岡 賢一郎 (Kenichiro Nishioka) knishioka
2
680
生成AIを活用した音声文字起こしシステムの2つの構築パターンについて
Avatar for Kazuki Miura miu_crescent
PRO
3
210
We Built for Predictability; The Workloads Didn’t Care
Avatar for Michael Stahnke stahnma
0
140
All About Sansan – for New Global Engineers
Avatar for Sansan, Inc. sansan33
PRO
1
1.4k
プロポーザルに込める段取り八分
Avatar for ShoheiMitani shoheimitani
1
500
学生・新卒・ジュニアから目指すSRE
Avatar for Hiroya Onoe hiroyaonoe
2
650
ファインディの横断SREがTakumi byGMOと取り組む、セキュリティと開発スピードの両立
Avatar for adachi.ryo rvirus0817
1
1.5k

Featured

See All Featured
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
Avatar for mongodb mongodb
49
9.9k
Efficient Content Optimization with Google Search Console & Apps Script
Avatar for Katarina Dahlin katarinadahlin
PRO
1
330
JAMstack: Web Apps at Ludicrous Speed - All Things Open 2022
Avatar for David Neal reverentgeek
1
350
16th Malabo Montpellier Forum Presentation
Avatar for AKADEMIYA2063 akademiya2063
PRO
0
52
Measuring & Analyzing Core Web Vitals
Avatar for Philip Tellis bluesmoon
9
760
Building a Modern Day 
E-commerce SEO Strategy
Avatar for Aleyda Solis aleyda
45
8.7k
Ruling the World: When Life Gets Gamed
Avatar for Sebastian Deterding codingconduct
0
140
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
32
2.1k
Product Roadmaps are Hard
Avatar for C. Todd Lombardo iamctodd
PRO
55
12k
JavaScript: Past, Present, and Future - NDC Porto 2020
Avatar for David Neal reverentgeek
52
5.8k
Amusing Abliteration
Avatar for ianozsvald ianozsvald
0
100
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
Avatar for soudai sone soudai
PRO
196
71k

Transcript

  1. ंྠͷ࠶ൃ໌ VulsࡇΓ#5 @knqyf263

  2. ίϯςφΠϝʔδεΩϟφ https://github.com/knqyf263/trivy

  3. ίϯςφΠϝʔδεΩϟφ Dagda Anchore Engine GCR

  4. 9൪໨ͷίϯςφΠϝʔδεΩϟφ ʢଟ෼ʣ

  5. 5൪໨͙Β͍ͷDocker༻Linter ʢଟ෼ʣ https://github.com/goodwithtech/dockle

  6. ά ʔάϧ͸ 1 2൪໨ͷݕࡧΤϯδϯͩͬͨ ɻ ϑΣΠεϒοΫ͸ 1 0൪໨ͷι ʔγϟϧωοτϫ ʔΫ

    ɺ iPad͸ 2 0൪໨ͷλϒϨοτͩͬͨ ɻ େ੾ͳͷ͸୭͕࠷ॳ͔Ͱ͸ͳ͍ ɻ ࢢ৔͕ख़ͨ͠ͱ͖ ɺ୭͕࠷ॳʹͳΔ͔ͩ ɻ ʮΤϯδΣϧ౤ࢿՈ ϦεΫΛେ୾ʹऔΓڊֹͷϦλʔϯΛಘΔਓ͸ԿΛݟൈ͘ͷ͔ʯΑΓ

  7. ਫ਼౓ൺֱ

  8. ઓ͏લ͔ΒఘΊͳ͍ ͨͩͷंྠ͡Όͳͯ͘ελουϨελΠϠ͔΋͠Εͳ͍ ʢద౰ʣ