Container Security with Trivy

Slide 1

Slide 1 text

ίϯςφηΩϡϦςΟπʔϧ 5SJWZͷ঺հ ౻ଜڡ߂ʢ೥ʣ

Slide 2

Slide 2 text

໨࣍ w ࣗݾ঺հ w ҆શͳίϯςφͱ͸ w ίϯςφεΩϟφπʔϧ w 5SJWZͷ঺հ w 5SJWZͷ࢓૊Έʹ͍ͭͯ

Slide 3

Slide 3 text

ࣗݾ঺հ

Slide 4

Slide 4 text

౻ଜ ڡ߂ # Trivy/helmͷίϯτϦϏϡʔλ Github: @masahiro331

Slide 5

Slide 5 text

ࠓճͷ࿩ͷഎܠ ίϯςφΞϓϦέʔγϣϯͷ   ੬ऑੑΛ؅ཧ҆͠શʹ͍ͨ͠

Slide 6

Slide 6 text

ຊ୊

Slide 7

Slide 7 text

҆શͳίϯςφͱ͸ʁ

Slide 8

Slide 8 text

৴པ͞Εͨݸਓஂମ͕อक ҆શͳύοέʔδΛར༻

Slide 9

Slide 9 text

৴པ͞Εͨݸਓஂମ͕อक ҆શͳύοέʔδΛར༻

Slide 10

Slide 10 text

ίϯςφ಺Ͱར༻͞ΕΔύοέʔδ w 04ύοέʔδ   31.ύοέʔδ EFCύοέʔδ FUD w ΞϓϦέʔγϣϯύοέʔδ   OQNύοέʔδ HFNύοέʔδ FUD

Slide 11

Slide 11 text

ίϯςφ಺Ͱར༻͞ΕΔύοέʔδ w 04ύοέʔδ   31.ύοέʔδ EFCύοέʔδ FUD w ΞϓϦέʔγϣϯύοέʔδ   OQNύοέʔδ HFNύοέʔδ FUD ͜ΕΒͷύοέʔδʹ੬ऑੑ͕ແ͍͔ɺ   ΋͘͠͸Өڹ͠ͳ͍͜ͱ൑அ͢Δඞཁ͕͋Δ

Slide 12

Slide 12 text

ύοέʔδͷ੬ऑੑΛೝࣝ͢Δඞཁ͕͋Δ ͦͷͨΊʹ͸

Slide 13

Slide 13 text

ύοέʔδͷ੬ऑੑΛೝࣝ͢Δඞཁ͕͋Δ ίϯςφεΩϟϯπʔϧͰ੬ऑੑͷࣗಈݕ஌ ͦͷͨΊʹ͸

Slide 14

Slide 14 text

ίϯςφͷεΩϟϯπʔϧҰཡ w 5SJWZ w $MBJS w "ODIPSF&OHJOF w 2VBZ w .JDSP4DBOOFS w %PDLFS)VC w ($3

Slide 15

Slide 15 text

ίϯςφεΩϟϯπʔϧͱͯ͠5SJWZΛ࠾༻

Slide 16

Slide 16 text

5SJWZͱ͸ w LORZGࢯ͕։ൃͨ͠ίϯς φεΩϟϯπʔϧ w ଞͷεΩϟϯπʔϧͱൺֱͯ͠ ಋೖ͕༰қ w ΞϓϦέʔγϣϯύοέʔδͷ ੬ऑੑݕ஌΋Մೳ w ಠࣗͷํ๏Ͱ"MQJOFͷ੬ऑੑΛ ݕ஌͍ͯ͠ΔͨΊਫ਼౓͕ߴ͍ LORZGࢯ

Slide 17

Slide 17 text

֤εΩϟϯπʔϧͷݕূ݁Ռ ࢀߟ৘ใIUUQTHJUIVCDPNLORZGUSJWZPWFSWJFX

Slide 18

Slide 18 text

֤εΩϟϯπʔϧͷݕূ݁Ռ ࢀߟ৘ใIUUQTHJUIVCDPNLORZGUSJWZPWFSWJFX ΞϓϦέʔγϣϯ ύοέʔδ΋ΈΕΔ

Slide 19

Slide 19 text

5SJWZͷରԠύοέʔδ w (FN fi MFMPDL SVCZ w 1JQ fi MFMPDL QZUIPO w 1PFUSZMPDL QZUIPO w $PNQPTFSMPDL 1)1 w 1BDLBHFMPDLKTPO KBWBTDSJQU w ZBSOMPDL KBWBTDSJQU w $BSHPMPDL 3VTU

Slide 20

Slide 20 text

֤εΩϟϯπʔϧͷݕূ݁Ռ ࢀߟ৘ใIUUQTHJUIVCDPNLORZGUSJWZPWFSWJFX ಋೖ͕༰қ

Slide 21

Slide 21 text

5SJWZͷಋೖ

Slide 22

Slide 22 text

5SJWZͷ࢖͍ํ

Slide 23

Slide 23 text

֤εΩϟϯπʔϧͷݕূ݁Ռ ࢀߟ৘ใIUUQTHJUIVCDPNLORZGUSJWZPWFSWJFX ݕ஌ਫ਼౓͕ߴ͍

Slide 24

Slide 24 text

֤εΩϟϯπʔϧͷݕূ݁Ռ ࢀߟ৘ใIUUQTHJUIVCDPNLORZGUSJWZPWFSWJFX $*্Ͱ࢖͍΍͍͢

Slide 25

Slide 25 text

5SJWZͷ࢓૊Έʹ͍ͭͯ঺հ

Slide 26

Slide 26 text

5SJWZͷߏ੒ %PDLFS3FHJTUSZ ᶅ੬ऑੑݕ஌ ੬ऑੑ%# ᶃ੬ऑੑ৘ใͷऔಘ ᶄ%PDLFS-BZFSΛऔಘ͠ *NBHFΛ૊ΈཱͯΔ

Slide 27

Slide 27 text

੬ऑੑ%# %PDLFS3FHJTUSZ ᶃ੬ऑੑ৘ใͷऔಘ ᶅ੬ऑੑݕ஌ ੬ऑੑ%#ʹ͍ͭͯ ᶄ%PDLFS-BZFSΛऔಘ͠ *NBHFΛ૊ΈཱͯΔ

Slide 28

Slide 28 text

੬ऑੑ%#ʹ͍ͭͯ w ੬ऑੑ৘ใ͸HJUIVCϦϙδτϦͰ؅ཧ͍ͯ͠Δ w 5SJWZ͸ॳճىಈ࣌ʹ੬ऑੑ৘ใΛDMPOF͢Δ w ࣍ճىಈҎ߱͸HJUͷࠩ෼Ξοϓσʔτ w ϩʔΧϧͷσʔλϕʔεͱͯ͠CCPMU%#Λ࢖༻

Slide 29

Slide 29 text

ॳճ࣮ߦ࣌ʹHJUIVC͔Β੬ऑੑ৘ใΛऔಘ ੬ऑੑϦϙδτϦ $BDIFWVMOMJTU HJUDMPOF

Slide 30

Slide 30 text

࣍ճҎ߱͸HJUQVMMͰͷࠩ෼ߋ৽ ੬ऑੑϦϙδτϦ $BDIFWVMOMJTU HJUQVMM

Slide 31

Slide 31 text

੬ऑੑ৘ใ͸$JSDMF$*Ͱఆظߋ৽ ੬ऑੑϦϙδτϦ $BDIFWVMOMJTU $SPO+PCͰͷߋ৽ ੬ऑੑσʔλιʔε 5SBWJT$*

Slide 32

Slide 32 text

HJUϦϙδτϦΛܦ༝͢Δཧ༝ w ੬ऑੑσʔλιʔε 3FE)BU4FDVSJUZ%BUB ͳͲ ͷλΠϜΞ΢τ͕ϢʔβʹӨڹ͢ΔͷΛΛ๷͙ͨΊ w ߋ৽σʔλΛࠩ෼Ξοϓσʔτ͢Δ͜ͱ͕Մೳ

Slide 33

Slide 33 text

%PDLFS*NBHFͷղੳʹ͍ͭͯ

Slide 34

Slide 34 text

੬ऑੑ%# %PDLFS3FHJTUSZ ᶃ੬ऑੑ৘ใͷऔಘ ᶅ੬ऑੑݕ஌ %PDLFS*NBHFͷղੳʹ͍ͭͯ ᶄ%PDLFS-BZFSΛऔಘ͠ *NBHFΛ૊ΈཱͯΔ

Slide 35

Slide 35 text

%PDLFS*NBHFͷղੳʹ͍ͭͯ w 5SJWZ͸ҎԼͷεςοϓͰ%PDLFS*NBHFΛղੳ %PDLFS3FHJTUSZ͔Β*NBHF-BZFSΛऔಘ *NBHF-BZFSΛ૊ΈཱͯͯϑΝΠϧΛऔΓग़͢ ੬ऑੑݕ஌ʹඞཁͳϑΝΠϧΛऔಘ ECJOTUBMMFE (FN fi MFMPDLͳͲ   w "MQJOFʹ͍ͭͯ͸36/ίϚϯυ΋ղੳ͢ΔͨΊελςΟοΫϦ ϯΫ͞ΕͨϥΠϒϥϦͷ੬ऑੑ΋ݕ஌

Slide 36

Slide 36 text

'30.DPNQPTFSBMQJOF "%%DPNQPTFSMPDLQIQBQQDPNQPTFSMPDL $.%<CJOCBTI> ྫ͑͹͜Μͳ%PDLFS fi MF

Slide 37

Slide 37 text

*NBHF-BZFSΛऔಘ͢Δ '30.DPNQPTFS "%%DPNQPTFSMPDL 36/CJOCBTI

Slide 38

Slide 38 text

*NBHF-BZFSΛੵΈॏͶ*NBHFΛ࡞੒ %PDLFS*NBHF '30.DPNQPTFS "%%DPNQPTFSMPDL 36/CJOCBTI

Slide 39

Slide 39 text

*NBHF͔Βొ࿥ͨ͠ϑΝΠϧΛऔΓग़͢ %PDLFS*NBHF $PNQPTFSMPDL BMQJOFSFMFBTF ECJOTUBMMFE '30.DPNQPTFS "%%DPNQPTFSMPDL 36/CJOCBTI

Slide 40

Slide 40 text

੬ऑੑ%# %PDLFS3FHJTUSZ ᶃ੬ऑੑ৘ใͷऔಘ ᶅ੬ऑੑݕ஌ ੬ऑੑݕ஌ʹ͍ͭͯ ᶄ%PDLFS-BZFSΛऔಘ͠ *NBHFΛ૊ΈཱͯΔ

Slide 41

Slide 41 text

(FN fi MFMPDL ΠϯετʔϧࡁΈύοέʔδΛύʔε (&. SFNPUFIUUQTSVCZHFNTPSH TQFDT BDUJPODBCMF BDUJPOQBDL OJPS d XFCTPDLFUESJWFS BDUJPONBJMFS BDUJPOQBDL BDUJPOWJFX BDUJWFKPC NBJM d SBJMTEPNUFTUJOH d 1JQ fi MFMPDL BNRQ\ IBTIFT< TIBCFC TIBBCD > WFSTJPO ^ BVUPQFQ\ IBTIFT< TIBECC > WFSTJPO ^ $2C[FL,/CH/R6K$S%+LPH71%H 1MJCTTM 7DS "Y@ 4 * 544-TIBSFEMJCSBSJFT 6IUUQTXXXPQFOTTMPSH -0QFO44- PPQFOTTM N5JNP5FSBTUJNPUFSBT!JLJ fi U DCCCCDEDBCCFFFCC %TPMJCDNVTMY@TPTPMJCDSZQUPTP QTPMJCTTMTP SMJCSFTTM 'MJC 3MJCTTMTP B ;24I29.-(31(CR%Q8;/-Y/N#V5 'VTS 'VTSMJC 3MJCTTMTP B ;2KQFZQ)0H.JIXM(1NND ECJOTUBMMFE

Slide 42

Slide 42 text

੬ऑੑ%#͔Βऔಘͨ͠σʔλͱಥ߹ (FN fi MFMPDL (&. SFNPUFIUUQTSVCZHFNTPSH TQFDT BDUJPODBCMF BDUJPOQBDL OJPS d XFCTPDLFUESJWFS BDUJPONBJMFS BDUJPOQBDL BDUJPOWJFX 1JQ fi MFMPDL BNRQ\ IBTIFT< TIBCFC TIBBCD > WFSTJPO ^ BVUPQFQ\ $2C[FL,/CH/R6K$S%+LPH71%H 1MJCTTM 7DS "Y@ 4 * 544-TIBSFEMJCSBSJFT 6IUUQTXXXPQFOTTMPSH -0QFO44- PPQFOTTM N5JNP5FSBTUJNPUFSBT!JLJ fi U DCCCCDEDBCCFFFC C %TPMJCDNVTMY@TPTPMJCDSZQUPTP QTPMJCTTMTP SMJCSFTTM 'MJC 3MJCTTMTP ECJOTUBMMFE ੬ऑੑ৘ใ

Slide 43

Slide 43 text

࠷ޙʹ w 5SJWZ͸γϯϓϧͳ੬ऑੑݕ஌͚ͩΛఏڙ w ͜ͷػೳΛར༻ͯ͠৽ͨͳ%FW4FD0QTπʔ ϧͷ։ൃͳͲ΋ظ଴Ͱ͖Δ w ͜ͷػೳΛར༻ͯ͠LVCFSOFUFT؀ڥͷ੬ऑੑ ݕ஌ΛࣗಈԽ͍ͨ͠

Slide 44

Slide 44 text

͓ΘΓ