DevSecOps with Trivy and GitHub Actions

The premise of DevSecOps is that in the Software Development Life Cycle (SDLC), each member is responsible for security. This unifies the operations and development teams in terms of security operations. DevSecOps’ goal is to add security to each step of the development process by integrating security controls and processes as early as possible in the DevOps process. In this post, I’ll describe ho

[braitom]

コンテナの脆弱性スキャナツールのTrivyをGitHub Actionで実行する方法について。