Upgrade to Pro — share decks privately, control downloads, hide ads and more …

安全なソフトウェアサプライチェーンの実現 / secure-software-supply-c...

Avatar for Tsuyoshi Miyake Tsuyoshi Miyake
May 18, 2022
Technology
0
31

安全なソフトウェアサプライチェーンの実現 / secure-software-supply-chain-with-jfrog

2022/05/18 に実施した JFrog x SoftBank x PrismaCloud 共同 DevSecOps セミナーの JFrog 発表分です
Avatar for Tsuyoshi Miyake

Tsuyoshi Miyake

May 18, 2022
Tweet

More Decks by Tsuyoshi Miyake

See All by Tsuyoshi Miyake
JFrog 最新情報 - JFrog DevOps プラットフォームの今までとこれから / jfrog-update-for-devopskaigi-2022
Avatar for Tsuyoshi Miyake tsuyo
0
410
猿でもわかるコンテナ V3 / a-monkeys-guide-to-container-v3
Avatar for Tsuyoshi Miyake tsuyo
0
57
猿でもわかる DevOps / a-monkeys-guide-to-devops
Avatar for Tsuyoshi Miyake tsuyo
0
780
はじめての JFrog Platform V2 / getting-started-with-jfrog-platform-v2
Avatar for Tsuyoshi Miyake tsuyo
0
330
はじめての JFrog Distribution / getting-started-with-jfrog-distribution
Avatar for Tsuyoshi Miyake tsuyo
0
160
はじめての JFrog Pipelines / getting-started-with-jfrog-pipelines
Avatar for Tsuyoshi Miyake tsuyo
0
200
はじめての JFrog Xray / getting-started-with-jfrog-xray
Avatar for Tsuyoshi Miyake tsuyo
0
1.5k
はじめての JFrog Artifactory / getting-started-with-jfrog-artifactory
Avatar for Tsuyoshi Miyake tsuyo
0
1k
はじめての JFrog Platform / getting-started-with-jfrog-platform
Avatar for Tsuyoshi Miyake tsuyo
0
790

Other Decks in Technology

See All in Technology
IAMのマニアックな話 2025を執筆して、​ 見えてきたAWSアカウント管理の現在
Avatar for NRI Netcom nrinetcom
PRO
4
550
vLLM meetup Tokyo
Avatar for jpishikawa jpishikawa
1
210
技術職じゃない私がVibe Codingで感じた、AGIが身近になる未来
Avatar for ayane blueb
0
120
CI/CDとタスク共有で加速するVibe Coding
Avatar for tnbe21 tnbe21
0
150
「実体」で築く共通認識: 開発現場のコミュニケーション最適化 / Let's Get on the Same Page with Concrete Artifacts: Optimization of Communication in dev teams
Avatar for kazizi kazizi55
0
140
Model Mondays S2E01: Advanced Reasoning
Avatar for Nitya Narasimhan, PhD nitya
0
340
DB 醬，嗨！哪泥嘎斯基？
Avatar for LINE Developers Taiwan line_developers_tw
PRO
0
150
Whats_new_in_Podman_and_CRI-O_2025-06
Avatar for orimanabu orimanabu
3
180
Autonomous Database サービス・アップデート (FY25)
Avatar for oracle4engineer oracle4engineer
PRO
2
770
AWS全冠したので振りかえってみる
Avatar for tajimon tajimon
0
140
上長や社内ステークホルダーに対する解像度を上げて、より良い補完関係を築く方法 / How-to-increase-resolution-and-build-better-complementary-relationships-with-your-bosses-and-internal-stakeholders
Avatar for MADOX madoxten
13
7.6k
開発効率と信頼性を両立する Ubieのプラットフォームエンジニアリング
Avatar for teru0x1 teru0x1
0
140

Featured

See All Featured
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
269
20k
Documentation Writing (for coders)
Avatar for Carmen Chung carmenintech
71
4.9k
Scaling GitHub
Avatar for Zach Holman holman
459
140k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
Avatar for Vitaly Friedman smashingmag
252
21k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
Avatar for Irina Nazarova irinanazarova
8
780
YesSQL, Process and Tooling at Scale
Avatar for Rocio Delgado rocio
172
14k
Navigating Team Friction
Avatar for Lara Hogan lara
186
15k
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
Avatar for Addy Osmani addyosmani
6
690
Mobile First: as difficult as doing things right
Avatar for Swwweet swwweet
223
9.6k
Faster Mobile Websites
Avatar for Dean Hume deanohume
307
31k
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
68
11k
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
35
2.3k

Transcript

  1. DevSecOps with JFrog Platform

  2. 2 § § Sr. DevOps Acceleration Engineer @JFrog § DevOps

    Liquid Software § @tsuyoshi_miyake [email protected]

  3. 3 TPS TPS - Wikipedia: Toyota Production System (https://en.wikipedia.org/wiki/Toyota_Production_System) DevOps

  4. • • • 4

  5. 1 SSC N 5 • • •

  6. 1 N 6 VCS (Git) CI/CD ??? • • •

  7. SSC OSS B C A OSS OSS SSC SSC 7

  8. 8 • • • •

  9. (CVE) by OSS (CVE) Executive Order on Improving the Nation

    s Cybersecurity CVE 9

  10. 24/7 Dedicated Support + DevOps Acceleration Service Arm BUILD TEST

    RELEASE DEPLOY CI/CD On Premises & Multicloud VCS ACCESS FEDERATION ACL SSO 10 JFrog Platform

  11. Artifactory for 11 docker-prod-local docker-dev-local (default) docker-qa-local Docker Hub docker-remote

    docker

  12. WATCHES Xray for SBOM (Software Bill of Materials) 12 POLICIES

    Security License Fail Build Web Hooks, Slack, Emails XUC (Xray Update Center) Bundle Build Build Repo Repo Frogbot IDE XRAY ARTIFACTORY SBOM (SPDX, CycloneDX)

  13. 13 PIPELINES > git commit Public Repos IDE Git Repo

    package .json ARTIFACTORY XRAY PLUGIN XRAY DISTRIBUTION DISTRIBUTION EDGE DISTRIBUTION EDGE Connect Pull Request with JFrog Platform

  14. JFrog 14

  15. THANK YOU!