ニュース

ASCII.jp3年

マイクロソフトとGitHubが実現し、進化させるDevSecOpsの姿

「DevOps」にセキュリティを加えた「DevSecOps」という言葉が広まりつつある。だが、その意味は曖昧になりやすく、誰が何をどのようにやるかを考えると難しい。結果として、既存の組織をそのまま当てはめるだけになってしまうケースも多い。 2022年5月25日 ...
CSOonline2月

GitHub Actions attack renders even security-aware orgs vulnerable

Many open-source repositories contain privileged GitHub Actions workflows that execute untrusted code and can be triggered by attackers to expose credentials and access tokens, as MITRE and Splunk ...
InfoWorld6月

Thousands of open source projects at risk from hack of GitHub Actions tool

App development teams who use a popular utility in the GitHub Actions continuous integration and continuous delivery/deployment (CI/CD) platform need to scrub their code because the tool was ...
Bleeping Computer5月

GitHub Action supply chain attack exposed secrets in 218 repos

The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it, with it estimated that only 218 repositories exposed secrets due to the ...
MSN による配信26 日

GitLab (GTLB) Signs Three-Year Strategic Collaboration with AWS to Expand Secure DevSecOps ...

GitLab Inc. (NASDAQ:GTLB) is one of the best mid cap AI stocks to buy right now. GitLab Inc. (NASDAQ:GTLB) is one of the best mid‑cap AI stocks to buy right now. On August 6, 2025, GitLab signed a ...
InfoWorld1月

Anthropic targets DevSecOps with Claude Code update as AI rivals gear up

With GPT-5 on the horizon and Meta ramping up AI hiring, Anthropic’s new security-focused features aim to differentiate Claude in the increasingly crowded GenAI coding space. Anthropic has introduced ...