Upgrade to Pro — share decks privately, control downloads, hide ads and more …

安全なソフトウェアサプライチェーンの実現 / secure-software-supply-c...

Avatar for Tsuyoshi Miyake Tsuyoshi Miyake
May 18, 2022
Technology
53
0

安全なソフトウェアサプライチェーンの実現 / secure-software-supply-chain-with-jfrog

2022/05/18 に実施した JFrog x SoftBank x PrismaCloud 共同 DevSecOps セミナーの JFrog 発表分です

Avatar for Tsuyoshi Miyake

Tsuyoshi Miyake

May 18, 2022

More Decks by Tsuyoshi Miyake

See All by Tsuyoshi Miyake
JFrog 最新情報 - JFrog DevOps プラットフォームの今までとこれから / jfrog-update-for-devopskaigi-2022
Avatar for Tsuyoshi Miyake tsuyo
0
460
猿でもわかるコンテナ V3 / a-monkeys-guide-to-container-v3
Avatar for Tsuyoshi Miyake tsuyo
0
91
猿でもわかる DevOps / a-monkeys-guide-to-devops
Avatar for Tsuyoshi Miyake tsuyo
0
870
はじめての JFrog Platform V2 / getting-started-with-jfrog-platform-v2
Avatar for Tsuyoshi Miyake tsuyo
0
420
はじめての JFrog Distribution / getting-started-with-jfrog-distribution
Avatar for Tsuyoshi Miyake tsuyo
0
200
はじめての JFrog Pipelines / getting-started-with-jfrog-pipelines
Avatar for Tsuyoshi Miyake tsuyo
0
240
はじめての JFrog Xray / getting-started-with-jfrog-xray
Avatar for Tsuyoshi Miyake tsuyo
0
1.6k
はじめての JFrog Artifactory / getting-started-with-jfrog-artifactory
Avatar for Tsuyoshi Miyake tsuyo
0
1.2k
はじめての JFrog Platform / getting-started-with-jfrog-platform
Avatar for Tsuyoshi Miyake tsuyo
0
850

Other Decks in Technology

See All in Technology
インプロセスQAのための要因から捉えるプロジェクトリスクマネジメントnano #1 開発リソース効率状態への対処 #jasstnano
Avatar for barus_qa_dev barus_qa
0
150
R&D 祭 2024 UE5で絵コンテ・作画の制作支援ツールをつくる話
Avatar for OLM Digital R&D olmdrd
PRO
0
180
障害対応のRunbookは作った、でも本当に動くの？ AWS FIS で EKS の AZ 障害を再現してみた
Avatar for Hiroki Takatsuka tk3fftk
0
100
PdM・Eng・QAで進めるAI駆動開発の現在地/aidd-with-pdm-eng-qa
Avatar for butatamasoba / Shota Kusaba / 草場翔太 shota_kusaba
0
250
Swift Sequence の便利 API 再発見
Avatar for treastrain / Tanaka Ryoga treastrain
1
290
20260516_SecJAWS_Days
Avatar for Takuya Yonezawa takuyay0ne
2
440
JaSSTに関わることで変わった人生観 #jasstnano
Avatar for Makky makky_tyuyan
0
110
【関西製造業祭り2026春】現場を変える技術はここまで来た〜世界最大の製造業見本市から持って帰ってきたもの〜
Avatar for 田中 聖也 tanakaseiya
0
170
Terragrunt x Snowflake + dbt で作るマルチテナントなデータ基盤構築プラットフォーム
Avatar for Gaku TASHIRO gak_t12
0
260
生成AI時代に信頼性をどう保ち続けるか - Policy as Code の実践
Avatar for akitok akitok_
1
470
いつの間にかデータエンジニア以外の業務も増えていたけど、意外と経験が役に立ってる
Avatar for ZOZO Developers zozotech
PRO
0
640
React Compiler導入から21ヶ月、いま始めるならこうやる
Avatar for Tatsuya Asami astatsuya
2
210

Featured

See All Featured
SEO for Brand Visibility & Recognition
Avatar for Aleyda Solis aleyda
0
4.5k
We Are The Robots
Avatar for Honza Javorek honzajavorek
0
230
The Spectacular Lies of Maps
Avatar for Per Axbom axbom
PRO
1
740
We Have a Design System, Now What?
Avatar for Morgane Peng morganepeng
55
8.1k
Side Projects
Avatar for Sacha Greif sachag
455
43k
エンジニアに許された特別な時間の終わり
Avatar for watany watany
106
240k
Color Theory Basics | Prateek | Gurzu
Avatar for Gurzu gurzu
0
310
sira's awesome portfolio website redesign presentation
Avatar for ElsiraPls elsirapls
0
240
Data-driven link building: lessons from a $708K investment (BrightonSEO talk)
Avatar for Szymon Słowik szymonslowik
1
1.1k
Applied NLP in the Age of Generative AI
Avatar for Ines Montani inesmontani
PRO
4
2.2k
Why Our Code Smells
Avatar for Brandon Keepers bkeepers
PRO
340
58k
Odyssey Design
Avatar for Ryan Kendrick rkendrick25
PRO
2
620

Transcript

  1. DevSecOps with JFrog Platform

  2. 2 § § Sr. DevOps Acceleration Engineer @JFrog § DevOps

    Liquid Software § @tsuyoshi_miyake [email protected]

  3. 3 TPS TPS - Wikipedia: Toyota Production System (https://en.wikipedia.org/wiki/Toyota_Production_System) DevOps

  4. • • • 4

  5. 1 SSC N 5 • • •

  6. 1 N 6 VCS (Git) CI/CD ??? • • •

  7. SSC OSS B C A OSS OSS SSC SSC 7

  8. 8 • • • •

  9. (CVE) by OSS (CVE) Executive Order on Improving the Nation

    s Cybersecurity CVE 9

  10. 24/7 Dedicated Support + DevOps Acceleration Service Arm BUILD TEST

    RELEASE DEPLOY CI/CD On Premises & Multicloud VCS ACCESS FEDERATION ACL SSO 10 JFrog Platform

  11. Artifactory for 11 docker-prod-local docker-dev-local (default) docker-qa-local Docker Hub docker-remote

    docker

  12. WATCHES Xray for SBOM (Software Bill of Materials) 12 POLICIES

    Security License Fail Build Web Hooks, Slack, Emails XUC (Xray Update Center) Bundle Build Build Repo Repo Frogbot IDE XRAY ARTIFACTORY SBOM (SPDX, CycloneDX)

  13. 13 PIPELINES > git commit Public Repos IDE Git Repo

    package .json ARTIFACTORY XRAY PLUGIN XRAY DISTRIBUTION DISTRIBUTION EDGE DISTRIBUTION EDGE Connect Pull Request with JFrog Platform

  14. JFrog 14

  15. THANK YOU!