Javaŏ4s̃R[hAˑWǂ51sɁ\\G\tgEFA\ASBOMŒTɂFWF1PVX̂߂̐Ǝ㐫Ǘ^̌i3j
OSS̎gpXNΏƂĒڂW߂ĂSBOMBSBOMgĂǂ̂悤ɃTvC`F[Uŝ낤B{eł́AITJÂuIT \tgEFAiZ~i[v̊uuSBOMɂTvC`F[U `Ѓ\tgEFÃXNAcĂ܂H`vŌꂽAOSS̎gpɐރXNւ̑Ώ@ɂāAvĂ͂B
̋L͉łBo^ijƑSĂ܂B
@ITҏW2022N822AfW^CxguIT \tgEFAiZ~i[vJÂBuł́AuSBOMɂTvC`F[U`Ѓ\tgEFÃXNAcĂ܂H`vƑ肵āAJFrog Japan̉cގifxbp[Ah{PCgJavaqEJJUG^cjAƂɂI[v\[X\tgEFAiOSSj̎gpɐރXNɂ͂ǂ̂悤Ȃ̂AɂǂΏĂ悢ɂĉB
\tgEFÃZLeBŒڂ\tgEFATvC`F[U
@SBOMƃ\tgEFATvC`F[̘b̑OɁAcDevSecOpsƂ͉bn߂BDevOpśAJ҂Ɖ^p҂͂ăT[rXPẮB[U[̃tB[hobNȂǂĎg݂JԂAPpB̂߂̍lłAgDƂĉP̕ƂłBDevSecOpśADevOpsɃZLeBgݍ̂ŁAJA^pɃZLeBSA͂ăT[rX̉PɎgށB
JFrog Japan̉cގ@ł͌AuJvu^pvuZLeBv̊eGWjÅA100101ƂĂBJ҂ɑZLeBS҂͋ɂ߂ďȂBŃ\tgEFAT[rXɑTCo[ÚAǂǂĂBJҕs͂悭bɂȂ邪AZLeBlޕs͂[B̂悤ȏDevSecOpsƂľAꂼꂪΗ̂ł͂Ȃ͂Ȃǂi߂lsƂȂB
@̂悤ȏ̒A\tgEFÃZLeBƂčlׂƂ̈TvC`F[B\tgEFAł́AJ{ԊɃfvCă[U[ɓ͂܂ł̈A̗AH\tgEFATvC`F[ƌĂԁBă\tgEFATvC`F[̂ǂňӂ̂R[hpbP[Wgݍ܂邱ƂA\tgEFATvC`F[UƂB
֘AL
čł͊ɕW̗A{ƂΉ𔗂uSBOMvƂ
uSBOMv傫Ȓڂ𗁂тĂBSBOMƂ͉Ȃ̂낤BȂč͑哝̗߂łグ̂B{Ƃ͑ΉKv̂BǂΉBł́AOSS̃TvC`F[ǗɊւAڂ3ڂƂāASBOMB
uKubernetesv̐Ǝ㐫SBOMœAGoogleڍׂȎ@J
GoogleSBOM̊pJBI[v\[Xc[gāAuKubernetesvSBOMuOpen Source Vulnerabilitiesvf[^x[XƏƍAKubernetes̍\vfɊ܂܂Ǝ㐫肵vZXЉB
ZLeB߂uSBOMvAȂpił̂
The Linux Foundation̓\tgEFA̍ėpɊւۑɂĒ|[guThe State of Software Bill of MaterialsiSBOMj and Cybersecurity Readinessvi\tgEFAi\sSBOMtƃTCo[ZLeBւ̑Ήj\BSBOM͍ŋ߂̃AvP[V̂悻90I[v\[X\tgEFA𗘗pĂƂɉB
Copyright © ITmedia, Inc. All Rights Reserved.
ڂ̃e[}
ITmedia̓ACeBfBAЂ̓o^WłB