inflearn logo
๊ฐ•์˜

Course

Instructor

[DevOps Basics 3] Building CI Properly with GitHub Actions

Vulnerability Checking and SBOM Management Using Aqua Trivy and Dependency Track

๐Ÿ™‹๐Ÿป Trivy์™€ Dependency Track์ด ์†Œ๊ฐœ๋˜๋Š” ์„ธ์…˜ ๋๋ถ€๋ถ„์— ๊ฒฐ๊ณผ ์˜์ƒ์ด ์ž˜๋ฆฐ ๊ฒƒ ๊ฐ™์•„์š”

790

Jeongyeol Lee

1 asked

0

์•ˆ๋…•ํ•˜์„ธ์š”. ๊ฐ•์˜ ์ž˜ ๋ณด๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค!

Aqua Trivy๋กœ ์Šค์บ”๋œ sarif ํฌ๋งท์„ GitHub์— ์ „์†กํ•œ ๊ฒฐ๊ณผ์™€ Dependency Track์— ์ „๋‹ฌ๋œ ๊ฒฐ๊ณผ๋ฅผ ํ™•์ธํ•˜๋Š” ๊ณผ์ • ์˜์ƒ์ด ๋ˆ„๋ฝ๋œ ๊ฒƒ ๊ฐ™์Šต๋‹ˆ๋‹ค. ๋Œ€์ƒ ์„ธ์…˜์€ Aqua Trivy์™€ Dependency Track์„ ์ด์šฉํ•œ ์ทจ์•ฝ์  ์ ๊ฒ€ ๋ฐ SBOM ๊ด€๋ฆฌ ์ž…๋‹ˆ๋‹ค.

์ฒดํฌ ํ•œ๋ฒˆ ๋ถ€ํƒ๋“œ๋ฆฝ๋‹ˆ๋‹ค :)

Answer 1

1

JeongSuk Lee

์•ˆ๋…•ํ•˜์„ธ์š”,

ํ•ด๋‹น ๋ถ€๋ถ„์„ ํ™•์ธํ•ด๋ณธ ๊ฒฐ๊ณผ, Dependency Track์œผ๋กœ ์ „๋‹ฌํ•˜๋Š” ๊ณผ์ •์€ ""Container ๊ธฐ๋ฐ˜์˜ Custom Action ๊ตฌ์„ฑ" ํŒŒํŠธ์—์„œ ๋ˆ„๋ฝ๋œ ๋ถ€๋ถ„์„ ์ปค๋ฒ„ํ•˜๊ณ  ์žˆ๋Š” ๊ฒƒ์„ ํ™•์ธํ•˜์˜€์Šต๋‹ˆ๋‹ค.

๊ฐ•์˜์— ๋งŽ์€ ๊ด€์‹ฌ์„ ๊ฐ€์ ธ์ฃผ์…”์„œ ๊ฐ์‚ฌ๋“œ๋ฆฌ๋ฉฐ, ์ถ”ํ›„ ๊ธฐํšŒ๊ฐ€ ๋˜๋Š”๋Œ€๋กœ ๋ˆ„๋ฝ๋œ ๋ถ€๋ถ„์— ๋Œ€ํ•œ ์™„์„ฑ๋„๋ฅผ ๋†’์—ฌ๋ณด๋„๋ก ํ•˜๊ฒ ์Šต๋‹ˆ๋‹ค.

 

๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

 

 

0

Jeongyeol Lee

๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค! ํ™•์ธํ–ˆ์Šต๋‹ˆ๋‹ค :)

17๊ฐ• ๊ฐ•์˜์— ๋ชฉ๋ฐ์ดํ„ฐ ์ฒจ๋ถ€ํŒŒ์ผ์ด ์—†์Šต๋‹ˆ๋‹ค.

2

37

2

Jib ์ด๋ฏธ์ง€ ๋นŒ๋“œ์—์„œ docker credential ๊ด€๋ จ์œผ๋กœ ์ด์Šˆ๊ฐ€ ์žˆ๋‹ค๋ฉด

1

79

2

์•„๋ฌด๋„ ๋ชจ๋ฅด๊ฒŒ ์ฑ… ๋‚ด์‹œ๋ฉด ๋ชจ๋ฅด์‹ค ์ค„ ์•Œ๊ณ !!

1

54

2

6:13 ๋ถ€๊ทผ์—์„œ ๋๋‚˜๋ฒ„๋ฆฝ๋‹ˆ๋‹ค ๊ทธ ๋‹ค์Œ ์ง„ํ–‰๋ถ€ํ„ฐ๋Š” ๋‹ค์Œ ์ง„ํ–‰์ฐฝ์ด ๋‚˜์˜ค์ง€ ์•Š์•„์š”

1

57

6