Upgrade to Pro — share decks privately, control downloads, hide ads and more …

安全なソフトウェアサプライチェーンの実現 / secure-software-supply-c...

Avatar for Tsuyoshi Miyake Tsuyoshi Miyake
May 18, 2022
Technology
53
0

安全なソフトウェアサプライチェーンの実現 / secure-software-supply-chain-with-jfrog

2022/05/18 に実施した JFrog x SoftBank x PrismaCloud 共同 DevSecOps セミナーの JFrog 発表分です

Avatar for Tsuyoshi Miyake

Tsuyoshi Miyake

May 18, 2022

More Decks by Tsuyoshi Miyake

See All by Tsuyoshi Miyake
JFrog 最新情報 - JFrog DevOps プラットフォームの今までとこれから / jfrog-update-for-devopskaigi-2022
Avatar for Tsuyoshi Miyake tsuyo
0
460
猿でもわかるコンテナ V3 / a-monkeys-guide-to-container-v3
Avatar for Tsuyoshi Miyake tsuyo
0
94
猿でもわかる DevOps / a-monkeys-guide-to-devops
Avatar for Tsuyoshi Miyake tsuyo
0
870
はじめての JFrog Platform V2 / getting-started-with-jfrog-platform-v2
Avatar for Tsuyoshi Miyake tsuyo
0
420
はじめての JFrog Distribution / getting-started-with-jfrog-distribution
Avatar for Tsuyoshi Miyake tsuyo
0
200
はじめての JFrog Pipelines / getting-started-with-jfrog-pipelines
Avatar for Tsuyoshi Miyake tsuyo
0
240
はじめての JFrog Xray / getting-started-with-jfrog-xray
Avatar for Tsuyoshi Miyake tsuyo
0
1.6k
はじめての JFrog Artifactory / getting-started-with-jfrog-artifactory
Avatar for Tsuyoshi Miyake tsuyo
0
1.2k
はじめての JFrog Platform / getting-started-with-jfrog-platform
Avatar for Tsuyoshi Miyake tsuyo
0
860

Other Decks in Technology

See All in Technology
地元にいないローカルオーガナイザーの立ち回り
Avatar for uvb_76 uvb_76
1
450
oracle-to-databricks-migration-with-llm-and-dbt
Avatar for case-k-git casek
1
430
Oracle AI Database@AWS：サービス概要のご紹介
Avatar for oracle4engineer oracle4engineer
PRO
4
2.8k
JEP 522 Deep Dive - G1 GC同期コスト削減によるスループット向上を徹底検証&解説
Avatar for Daishi Tabata tabatad
1
680
Oracle AI Database@Google Cloud：サービス概要のご紹介
Avatar for oracle4engineer oracle4engineer
PRO
6
1.5k
エンジニアは生成AIと どのように向き合うべきか？ ことばの意味という観点から
Avatar for Hitomi Yanaka verypluming
3
340
OCI Oracle AI Database Services新機能アップデート(2026/03-2026/05)
Avatar for oracle4engineer oracle4engineer
PRO
0
170
電子辞書Brainをネットに繋げてみた(自力編)
Avatar for らすぴー raspython3
0
430
はじめてのDatadog
Avatar for KairiM kairim0
0
260
サイバーセキュリティ概論 / Introduction to Cybersecurity
Avatar for Kenji Saito ks91
PRO
0
130
「嘘をつくテスト」の失敗例から学ぶ 良いテストコード #frontend_phpcon_do
Avatar for asumikam asumikam
0
160
AI-DLCを活用した高品質・安全なAI駆動開発実践 / AI Driven Development
Avatar for 吉田真吾 yoshidashingo
1
320

Featured

See All Featured
The Curious Case for Waylosing
Avatar for Cassini Nazir cassininazir
1
370
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
234
18k
Why Your Marketing Sucks and What You Can Do About It - Sophie Logan
Avatar for Sophie Logan marketingsoph
0
160
Redefining SEO in the New Era of Traffic Generation
Avatar for Szymon Słowik szymonslowik
1
320
Building AI with AI
Avatar for Ines Montani inesmontani
PRO
1
1k
Code Review Best Practice
Avatar for Trisha Gee trishagee
74
20k
Max Prin - Stacking Signals: How International SEO Comes Together (And Falls Apart)
Avatar for Tech SEO Connect techseoconnect
PRO
0
170
Sam Torres - BigQuery for SEOs
Avatar for Tech SEO Connect techseoconnect
PRO
0
280
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
183
10k
Java REST API Framework Comparison - PWX 2021
Avatar for Matt Raible mraible
34
9.3k
A Modern Web Designer's Workflow
Avatar for Chris Coyier chriscoyier
698
190k
Building the Perfect Custom Keyboard
Avatar for Naoto Takai takai
2
780

Transcript

  1. DevSecOps with JFrog Platform

  2. 2 § § Sr. DevOps Acceleration Engineer @JFrog § DevOps

    Liquid Software § @tsuyoshi_miyake [email protected]

  3. 3 TPS TPS - Wikipedia: Toyota Production System (https://en.wikipedia.org/wiki/Toyota_Production_System) DevOps

  4. • • • 4

  5. 1 SSC N 5 • • •

  6. 1 N 6 VCS (Git) CI/CD ??? • • •

  7. SSC OSS B C A OSS OSS SSC SSC 7

  8. 8 • • • •

  9. (CVE) by OSS (CVE) Executive Order on Improving the Nation

    s Cybersecurity CVE 9

  10. 24/7 Dedicated Support + DevOps Acceleration Service Arm BUILD TEST

    RELEASE DEPLOY CI/CD On Premises & Multicloud VCS ACCESS FEDERATION ACL SSO 10 JFrog Platform

  11. Artifactory for 11 docker-prod-local docker-dev-local (default) docker-qa-local Docker Hub docker-remote

    docker

  12. WATCHES Xray for SBOM (Software Bill of Materials) 12 POLICIES

    Security License Fail Build Web Hooks, Slack, Emails XUC (Xray Update Center) Bundle Build Build Repo Repo Frogbot IDE XRAY ARTIFACTORY SBOM (SPDX, CycloneDX)

  13. 13 PIPELINES > git commit Public Repos IDE Git Repo

    package .json ARTIFACTORY XRAY PLUGIN XRAY DISTRIBUTION DISTRIBUTION EDGE DISTRIBUTION EDGE Connect Pull Request with JFrog Platform

  14. JFrog 14

  15. THANK YOU!