inflearn logo
๊ฐ•์˜

๊ฐ•์˜

N
์ฑŒ๋ฆฐ์ง€

์ฑŒ๋ฆฐ์ง€

๋ฉ˜ํ† ๋ง

๋ฉ˜ํ† ๋ง

N
ํด๋ฆฝ

ํด๋ฆฝ

๋กœ๋“œ๋งต

๋กœ๋“œ๋งต

์ง€์‹๊ณต์œ 

[DevOps ์ •์„ 3] GitHub Actions์œผ๋กœ ์ œ๋Œ€๋กœ ๊ตฌ์ถ•ํ•˜๋Š” CI

Aqua Trivy์™€ Dependency Track์„ ์ด์šฉํ•œ ์ทจ์•ฝ์  ์ ๊ฒ€ ๋ฐ SBOM ๊ด€๋ฆฌ

๐Ÿ™‹๐Ÿป Trivy์™€ Dependency Track์ด ์†Œ๊ฐœ๋˜๋Š” ์„ธ์…˜ ๋๋ถ€๋ถ„์— ๊ฒฐ๊ณผ ์˜์ƒ์ด ์ž˜๋ฆฐ ๊ฒƒ ๊ฐ™์•„์š”

772

Jeongyeol Lee

์ž‘์„ฑํ•œ ์งˆ๋ฌธ์ˆ˜ 1

0

์•ˆ๋…•ํ•˜์„ธ์š”. ๊ฐ•์˜ ์ž˜ ๋ณด๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค!

Aqua Trivy๋กœ ์Šค์บ”๋œ sarif ํฌ๋งท์„ GitHub์— ์ „์†กํ•œ ๊ฒฐ๊ณผ์™€ Dependency Track์— ์ „๋‹ฌ๋œ ๊ฒฐ๊ณผ๋ฅผ ํ™•์ธํ•˜๋Š” ๊ณผ์ • ์˜์ƒ์ด ๋ˆ„๋ฝ๋œ ๊ฒƒ ๊ฐ™์Šต๋‹ˆ๋‹ค. ๋Œ€์ƒ ์„ธ์…˜์€ Aqua Trivy์™€ Dependency Track์„ ์ด์šฉํ•œ ์ทจ์•ฝ์  ์ ๊ฒ€ ๋ฐ SBOM ๊ด€๋ฆฌ ์ž…๋‹ˆ๋‹ค.

์ฒดํฌ ํ•œ๋ฒˆ ๋ถ€ํƒ๋“œ๋ฆฝ๋‹ˆ๋‹ค :)

๋‹ต๋ณ€ 1

1

JeongSuk Lee

์•ˆ๋…•ํ•˜์„ธ์š”,

ํ•ด๋‹น ๋ถ€๋ถ„์„ ํ™•์ธํ•ด๋ณธ ๊ฒฐ๊ณผ, Dependency Track์œผ๋กœ ์ „๋‹ฌํ•˜๋Š” ๊ณผ์ •์€ ""Container ๊ธฐ๋ฐ˜์˜ Custom Action ๊ตฌ์„ฑ" ํŒŒํŠธ์—์„œ ๋ˆ„๋ฝ๋œ ๋ถ€๋ถ„์„ ์ปค๋ฒ„ํ•˜๊ณ  ์žˆ๋Š” ๊ฒƒ์„ ํ™•์ธํ•˜์˜€์Šต๋‹ˆ๋‹ค.

๊ฐ•์˜์— ๋งŽ์€ ๊ด€์‹ฌ์„ ๊ฐ€์ ธ์ฃผ์…”์„œ ๊ฐ์‚ฌ๋“œ๋ฆฌ๋ฉฐ, ์ถ”ํ›„ ๊ธฐํšŒ๊ฐ€ ๋˜๋Š”๋Œ€๋กœ ๋ˆ„๋ฝ๋œ ๋ถ€๋ถ„์— ๋Œ€ํ•œ ์™„์„ฑ๋„๋ฅผ ๋†’์—ฌ๋ณด๋„๋ก ํ•˜๊ฒ ์Šต๋‹ˆ๋‹ค.

 

๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

 

 

0

Jeongyeol Lee

๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค! ํ™•์ธํ–ˆ์Šต๋‹ˆ๋‹ค :)

์–ดํ”Œ๋ฆฌ์ผ€์ด์…˜ ์‹คํ–‰ ํ›„ ์—๋Ÿฌ์— ๊ด€ํ•˜์—ฌ ์งˆ๋ฌธ ๋“œ๋ฆฝ๋‹ˆ๋‹ค.

2

32

2

install๊นŒ์ง€ ์„ค์น˜ ํ•˜์˜€๋Š”๋ฐ start ๊ฐ€์•ˆ๋ฉ๋‹ˆ๋‹ค.

1

42

2

์ง€์›๋™๊ธฐ์— ๋Œ€ํ•˜์—ฌ

1

48

2

ํ”ผ๊ทธ๋งˆ ์Šคํ‚ฌ์„ค์น˜ ๊ฐ•์˜ ์ค‘ ํ”ผ๊ทธ๋งˆ ๋””์ž์ธ ํŒŒ์ผ ๋งํฌ ๊ด€๋ จ ๋ฌธ์˜

1

38

2