[{"data":1,"prerenderedAt":1002},["ShallowReactive",2],{"/ja-jp/blog/gitlab-duo-security-review-flow":3,"navigation-ja-jp":223,"banner-ja-jp":653,"footer-ja-jp":661,"blog-post-authors-ja-jp-Mark Settle":903,"blog-related-posts-ja-jp-gitlab-duo-security-review-flow":918,"blog-promotions-ja-jp":941,"next-steps-ja-jp":993},{"id":4,"title":5,"authors":6,"body":8,"category":202,"date":203,"description":204,"extension":205,"externalUrl":206,"faq":206,"featured":207,"heroImage":208,"meta":209,"navigation":210,"path":211,"seo":212,"slug":214,"stem":215,"tags":216,"template":220,"updatedDate":221,"__hash__":222},"blogPosts/ja-jp/blog/gitlab-duo-security-review-flow.md","GitLab Duoセキュリティレビューでスキャナーが見逃すロジックの欠陥を検出",[7],"Mark Settle",{"type":9,"value":10,"toc":194},"minimark",[11,15,18,22,25,39,45,51,54,58,61,64,69,78,82,85,93,96,99,132,144,147,150,153,162,182,185],[12,13,14],"p",{},"静的スキャナーは、サニタイズされていないクエリ入力やハードコードされたシークレット、安全でないデシリアライゼーションのような、既知のパターンに当てはまる脆弱性の検出を得意としています。一方で、アプリケーションのロジックに潜む欠陥には弱く、そこには一致させるパターンは存在しません。あるのはただ、ドメインの文脈では誤った動作をする、構文的には正しいコードだけです。こうした欠陥は検出されないまま後工程で表面化し、修正コストを押し上げます。",[12,16,17],{},"パブリックベータ版として提供が始まったセキュリティレビューフローは、セキュリティエンジニアと同じ視点でコードの変更を精査します。シグネチャの一致ではなく意図を読み取ることで、ロジックの欠陥を本番環境に到達する前に捉えます。スキャナーが見逃しがちな危険な欠陥を発見するための、大きな一歩です。",[19,20,21],"h2",{"id":21},"パターンベーススキャナーの盲点",[12,23,24],{},"アプリケーションに最も大きな被害をもたらす脆弱性は、多くの場合、1行ずつ見れば正しいコードでありながら、認可モデルやデータの機密区分、意図されたワークフローといった、コード自体には含まれない文脈に違反しています。ここでは、代表的な3つの脆弱性クラスを見ていきましょう。",[12,26,27,31,32,38],{},[28,29,30],"strong",{},"アクセスと認可："," ユーザーがリソースを読み取ったり変更したりできるかどうかは、言語仕様ではなく認可モデルによって定義されます。オブジェクトレベル認可の不備（IDを変更するだけで他ユーザーのデータにアクセスできてしまう問題）は、2019年以降",[33,34,37],"a",{"href":35,"rel":36},"https://owasp.org/API-Security/editions/2023/en/0x11-t10/",[],"OWASP API Security Top 10","で常に上位を占めています。",[12,40,41,44],{},[28,42,43],{},"データの露出："," オブジェクトをシリアライズして返す処理自体は、ごく普通の、一見正しいコードです。それが情報漏えいになるかどうかは、どのフィールドが機密で誰がそれを受け取るかという、構文ではなくドメインの事実によって決まります。",[12,46,47,50],{},[28,48,49],{},"制御フローとワークフロー："," ビジネスロジックやレース条件に起因する欠陥は、有効な操作が誤った順序で実行されたり、想定外に繰り返されたり、操作されたりすることで発生します。例えば、支払いなしでチェックアウトに到達できてしまう、競合状態で同じ状態に再突入してしまう、パラメーターを改ざんして価格を変更してしまう、といったケースが挙げられます。",[12,52,53],{},"こうした欠陥を捉えるには、これまで手動でのセキュリティレビューが必要でした。しかし、これをすべてのマージリクエスト（MR）に対してスケールさせるにはコストがかかります。また、ペネトレーションテストやバグバウンティは有効な手段ですが、実施のタイミングが遅すぎます。その結果、開発のスピードとセキュリティの専門知識を適用できる速さとの間で、ギャップが広がり続けています。",[19,55,57],{"id":56},"すべてのmrにセキュリティの判断を","すべてのMRにセキュリティの判断を",[12,59,60],{},"GitLab Duo Agent Platformの基本フローであるセキュリティレビューフローは、コードが本来何をすべきかを推論することで、このギャップを埋めます。上述した脆弱性クラスを的確に検出します。具体的には、オブジェクトレベルおよび機能レベルの認可の不備、状態変更操作における認可の欠如、情報開示、マスアサインメント、ビジネスロジックのエラー、そしてステートフルなワークフローにおけるレース条件です。",[12,62,63],{},"従来のスキャナーや人間による分析を置き換えるのではなく補完するものであり、修正コストが最も低い変更の時点でコードをレビューします。GitLab自身のアプリケーションセキュリティチームも、開発期間を通じて社内のMR全体でセキュリティレビューフローを活用してきました。",[12,65,66],{},[28,67,68],{},"セキュリティレビューフローの実際の動作を見る：",[70,71],"iframe",{"src":72,"frameBorder":73,"allow":74,"referrerPolicy":75,"style":76,"title":77},"https://player.vimeo.com/video/1209923383?badge=0&autopause=0&player_id=0&app_id=58479","0","autoplay; fullscreen; picture-in-picture; clipboard-write; encrypted-media; web-share","strict-origin-when-cross-origin","position:absolute;top:0;left:0;width:100%;height:100%;","19.2 Security Review Flow",[79,80],"script",{"src":81},"https://player.vimeo.com/api/player.js",[19,83,84],{"id":84},"仕組み",[12,86,87,88,92],{},"MRの準備が整ったら、人にレビューを依頼するのと同じ要領で",[89,90,91],"code",{},"Duo Security Review","にレビューを依頼します。元のファイル、変更された行、MRでの議論、関連コードといった文脈の中で差分を解析します。その推論は精度を重視して最適化されており、さらに独立した検証パスが各所見を確認し、誤検出の可能性が高いものを除外します。",[12,94,95],{},"検出結果は、該当する行への差分スレッドとして表示されるほか、内部ノートにも要約が記載されます。パブリックプロジェクトでは、内部ノートのみに限定されるため、セキュリティの詳細が外部に露出することはありません。",[12,97,98],{},"各所見には、レビュアーに必要な次のような文脈が付与されます。",[100,101,102,109,115,121,126],"ul",{},[103,104,105,108],"li",{},[28,106,107],{},"脆弱性の種類","（CWE参照付き）",[103,110,111,114],{},[28,112,113],{},"重大度","：Critical、High、Medium、Low のいずれか",[103,116,117,120],{},[28,118,119],{},"ティア","：Tier 1（悪用可能）、Tier 2（ロジックの欠陥）、Tier 3（設計上の問題）のいずれか",[103,122,123],{},[28,124,125],{},"問題の平易な説明",[103,127,128,131],{},[28,129,130],{},"修正案","（利用可能な場合）",[12,133,134,135,139,140,143],{},"重大度によってレビュアーの状態が決まります。CriticalまたはHighの所見があった場合は",[136,137,138],"em",{},"変更をリクエスト","に、MediumまたはLowの所見の場合は",[136,141,142],{},"コメント","になります。何も検出されなかった場合でも、このフローが承認することはありません。最終判断は常に人間が担います。",[12,145,146],{},"その後は、コメントスレッドで組織のDuo Security Reviewサービスアカウントにメンションすることで、質問したり、修正方法を議論したり、所見に異議を唱えたりできます。各所見は、通常のMR提案として修正を適用する、誤検出として却下する、リスクを許容する、のいずれかの方法で解決します。修正をコミットしたら、変更内容を確認するために改めてレビューを依頼してください。",[19,148,149],{"id":149},"セキュリティレビューフローを始める",[12,151,152],{},"セキュリティレビューフローは、GitLab Ultimateのお客様向けにパブリックベータ版として提供されています。GitLab.com、GitLab Self-Managed、GitLab Dedicatedでご利用いただけます。",[12,154,155,156,161],{},"詳しい始め方は、",[33,157,160],{"href":158,"rel":159},"https://docs.gitlab.com/ja-jp/user/duo_agent_platform/flows/foundational_flows/security_review/",[],"セキュリティレビューフローのドキュメント","をご覧ください。",[12,163,164,169,170,175,176,181],{},[33,165,168],{"href":166,"rel":167},"https://gitlab.com/-/trials/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/gitlab-duo-agent-platform/",[],"GitLab Duo Agent Platformの無料トライアル","から、セキュリティレビューフローをご利用いただけます。すでにGitLab Ultimateをご契約中の方は、",[33,171,174],{"href":172,"rel":173},"https://docs.gitlab.com/ja-jp/user/duo_agent_platform/turn_on_off/",[],"Duo Agent Platformを有効にして","、",[33,177,180],{"href":178,"rel":179},"https://docs.gitlab.com/ja-jp/subscriptions/gitlab_credits/#included-credits",[],"サブスクリプションに含まれるGitLabクレジット","をご利用ください。",[12,183,184],{},"コストは差分の複雑さや選択するモデルによって変動するため、本格的に展開する前にいくつかのMRで試してみることをおすすめします。価格は一般提供（GA）時に変更される場合があります。",[12,186,187,188,193],{},"気づいた点があれば、ぜひ",[33,189,192],{"href":190,"rel":191},"https://gitlab.com/gitlab-org/gitlab/-/work_items/600304",[],"フィードバック用のイシュー","で共有してください。",{"title":195,"searchDepth":196,"depth":196,"links":197},"",2,[198,199,200,201],{"id":21,"depth":196,"text":21},{"id":56,"depth":196,"text":57},{"id":84,"depth":196,"text":84},{"id":149,"depth":196,"text":149},"security","2026-07-16","AIによるセキュリティ推論で、コードレビューの段階のうちに認可の不備やビジネスロジックのエラー、レース条件を検出します。","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1783980535/t3gez0gpayfndrhncunf.png",{},true,"/ja-jp/blog/gitlab-duo-security-review-flow",{"config":213,"title":5,"description":204},{"noIndex":207},"gitlab-duo-security-review-flow","ja-jp/blog/gitlab-duo-security-review-flow",[202,217,218,219],"AI","features","product","BlogPost","2026-07-17","9vGjxjGII3VcduOwcBahk8TIQv15EAQ_HTuyt8DZobQ",{"logo":224,"freeTrial":229,"sales":234,"login":239,"items":244,"search":573,"minimal":606,"duo":623,"switchNav":632,"pricingDeployment":643},{"config":225},{"href":226,"dataGaName":227,"dataGaLocation":228},"/ja-jp/","gitlab logo","header",{"text":230,"config":231},"無料トライアルを開始",{"href":232,"dataGaName":233,"dataGaLocation":228},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/ja-jp&glm_content=default-saas-trial/","free trial",{"text":235,"config":236},"デモをリクエスト",{"href":237,"dataGaName":238,"dataGaLocation":228},"/ja-jp/sales/?contact-topic=request-demo","sales",{"text":240,"config":241},"サインイン",{"href":242,"dataGaName":243,"dataGaLocation":228},"https://gitlab.com/users/sign_in/","sign in",[245,274,376,381,495,551],{"text":246,"config":247,"menu":249},"プラットフォーム",{"dataNavLevelOne":248},"platform",{"type":250,"columns":251},"cards",[252,258,266],{"title":246,"description":253,"link":254},"DevSecOpsに特化したインテリジェントオーケストレーションプラットフォーム",{"text":255,"config":256},"プラットフォームの詳細はこちら",{"href":257,"dataGaName":248,"dataGaLocation":228},"/ja-jp/platform/",{"title":259,"description":260,"link":261},"GitLab Duo Agent Platform","ソフトウェアライフサイクル全体を支えるエージェント型AI",{"text":262,"config":263},"GitLab Duoのご紹介",{"href":264,"dataGaName":265,"dataGaLocation":228},"/ja-jp/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":267,"description":268,"link":269},"GitLabが選ばれる理由","エンタープライズがGitLabを選ぶ主な理由をご覧ください",{"text":270,"config":271},"詳細はこちら",{"href":272,"dataGaName":273,"dataGaLocation":228},"/ja-jp/why-gitlab/","why gitlab",{"text":275,"left":210,"config":276,"menu":278},"製品",{"dataNavLevelOne":277},"solutions",{"type":279,"link":280,"columns":284,"feature":355},"lists",{"text":281,"config":282},"すべてのソリューションを表示",{"href":283,"dataGaName":277,"dataGaLocation":228},"/ja-jp/solutions/",[285,310,333],{"title":286,"description":287,"link":288,"items":293},"自動化","CI/CDと自動化でデプロイを加速",{"config":289},{"icon":290,"href":291,"dataGaName":292,"dataGaLocation":228},"AutomatedCodeAlt","/ja-jp/solutions/delivery-automation/","automated software delivery",[294,298,301,306],{"text":295,"config":296},"CI/CD",{"href":297,"dataGaLocation":228,"dataGaName":295},"/ja-jp/solutions/continuous-integration/",{"text":259,"config":299},{"href":264,"dataGaLocation":228,"dataGaName":300},"gitlab duo agent platform - product menu",{"text":302,"config":303},"ソースコード管理",{"href":304,"dataGaLocation":228,"dataGaName":305},"/ja-jp/solutions/source-code-management/","Source Code Management",{"text":307,"config":308},"自動化されたソフトウェアデリバリー",{"href":291,"dataGaLocation":228,"dataGaName":309},"Automated software delivery",{"title":311,"description":312,"link":313,"items":318},"セキュリティ","セキュリティを犠牲にすることなくコード作成を高速化",{"config":314},{"href":315,"dataGaName":316,"dataGaLocation":228,"icon":317},"/ja-jp/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[319,323,328],{"text":320,"config":321},"アプリケーションセキュリティテスト",{"href":315,"dataGaName":322,"dataGaLocation":228},"Application security testing",{"text":324,"config":325},"ソフトウェアサプライチェーンセキュリティ",{"href":326,"dataGaLocation":228,"dataGaName":327},"/ja-jp/solutions/supply-chain/","Software supply chain security",{"text":329,"config":330},"ソフトウェアコンプライアンス",{"href":331,"dataGaName":332,"dataGaLocation":228},"/ja-jp/solutions/software-compliance/","software compliance",{"title":334,"link":335,"items":340},"測定",{"config":336},{"icon":337,"href":338,"dataGaName":339,"dataGaLocation":228},"DigitalTransformation","/ja-jp/solutions/visibility-measurement/","visibility and measurement",[341,345,350],{"text":342,"config":343},"可視性と測定",{"href":338,"dataGaLocation":228,"dataGaName":344},"Visibility and Measurement",{"text":346,"config":347},"バリューストリーム管理",{"href":348,"dataGaLocation":228,"dataGaName":349},"/ja-jp/solutions/value-stream-management/","Value Stream Management",{"text":351,"config":352},"分析とインサイト",{"href":353,"dataGaLocation":228,"dataGaName":354},"/ja-jp/solutions/analytics-and-insights/","Analytics and insights",{"title":356,"type":279,"items":357},"GitLabが活躍する場所",[358,364,370],{"text":359,"config":360},"大企業",{"icon":361,"href":362,"dataGaLocation":228,"dataGaName":363},"Building","/ja-jp/enterprise/","enterprise",{"text":365,"config":366},"スモールビジネス",{"icon":367,"href":368,"dataGaLocation":228,"dataGaName":369},"Work","/ja-jp/small-business/","small business",{"text":371,"config":372},"公共部門",{"icon":373,"href":374,"dataGaLocation":228,"dataGaName":375},"Organization","/ja-jp/solutions/public-sector/","public sector",{"text":377,"config":378},"価格",{"href":379,"dataGaName":380,"dataGaLocation":228,"dataNavLevelOne":380},"/ja-jp/pricing/","pricing",{"text":382,"config":383,"menu":385},"関連リソース",{"dataNavLevelOne":384},"resources",{"type":279,"link":386,"columns":390,"feature":484},{"text":387,"config":388},"すべてのリソースを表示",{"href":389,"dataGaName":384,"dataGaLocation":228},"/ja-jp/resources/",[391,424,451],{"title":392,"items":393},"はじめに",[394,399,404,409,414,419],{"text":395,"config":396},"インストール",{"href":397,"dataGaName":398,"dataGaLocation":228},"/ja-jp/install/","install",{"text":400,"config":401},"クイックスタートガイド",{"href":402,"dataGaName":403,"dataGaLocation":228},"/ja-jp/get-started/","quick setup checklists",{"text":405,"config":406},"学ぶ",{"href":407,"dataGaLocation":228,"dataGaName":408},"https://university.gitlab.com/","learn",{"text":410,"config":411},"製品ドキュメント",{"href":412,"dataGaName":413,"dataGaLocation":228},"https://docs.gitlab.com/ja-jp/","product documentation",{"text":415,"config":416},"ベストプラクティスビデオ",{"href":417,"dataGaName":418,"dataGaLocation":228},"/ja-jp/getting-started-videos/","best practice videos",{"text":420,"config":421},"インテグレーション",{"href":422,"dataGaName":423,"dataGaLocation":228},"/ja-jp/integrations/","integrations",{"title":425,"items":426},"検索する",[427,432,437,442,446],{"text":428,"config":429},"お客様成功事例",{"href":430,"dataGaName":431,"dataGaLocation":228},"/ja-jp/customers/","customer success stories",{"text":433,"config":434},"ブログ",{"href":435,"dataGaName":436,"dataGaLocation":228},"/ja-jp/blog/","blog",{"text":438,"config":439},"Demo Hub",{"href":440,"dataGaName":441,"dataGaLocation":228},"/ja-jp/demo-hub/","demo hub",{"text":443,"config":444},"The Source",{"href":445,"dataGaName":436,"dataGaLocation":228},"/ja-jp/the-source/",{"text":447,"config":448},"リモート",{"href":449,"dataGaName":450,"dataGaLocation":228},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":452,"items":453},"つなげる",[454,459,464,469,474,479],{"text":455,"config":456},"GitLabサービス",{"href":457,"dataGaName":458,"dataGaLocation":228},"/ja-jp/services/","services",{"text":460,"config":461},"コントリビュート",{"href":462,"dataGaName":463,"dataGaLocation":228},"https://contributors.gitlab.com","contribute",{"text":465,"config":466},"コミュニティ",{"href":467,"dataGaName":468,"dataGaLocation":228},"/community/","community",{"text":470,"config":471},"フォーラム",{"href":472,"dataGaName":473,"dataGaLocation":228},"https://forum.gitlab.com/","forum",{"text":475,"config":476},"イベント",{"href":477,"dataGaName":478,"dataGaLocation":228},"/events/","events",{"text":480,"config":481},"パートナー",{"href":482,"dataGaName":483,"dataGaLocation":228},"/ja-jp/partners/","partners",{"config":485,"title":488,"text":489,"link":490},{"background":486,"textColor":487},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","GitLabの最新情報","最新の機能と改善点に関する情報をお届けします。",{"text":491,"config":492},"最新情報を読む",{"href":493,"dataGaName":494,"dataGaLocation":228},"/ja-jp/whats-new/","whats new",{"text":496,"config":497,"menu":499},"企業情報",{"dataNavLevelOne":498},"company",{"type":279,"columns":500},[501],{"items":502},[503,508,514,516,521,526,531,536,541,546],{"text":504,"config":505},"GitLabについて",{"href":506,"dataGaName":507,"dataGaLocation":228},"/ja-jp/company/","about",{"text":509,"config":510,"footerGa":513},"採用情報",{"href":511,"dataGaName":512,"dataGaLocation":228},"/jobs/","jobs",{"dataGaName":512},{"text":475,"config":515},{"href":477,"dataGaName":478,"dataGaLocation":228},{"text":517,"config":518},"経営陣",{"href":519,"dataGaName":520,"dataGaLocation":228},"/company/team/e-group/","leadership",{"text":522,"config":523},"ハンドブック",{"href":524,"dataGaName":525,"dataGaLocation":228},"https://handbook.gitlab.com/","handbook",{"text":527,"config":528},"投資家向け情報",{"href":529,"dataGaName":530,"dataGaLocation":228},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":532,"config":533},"トラストセンター",{"href":534,"dataGaName":535,"dataGaLocation":228},"/ja-jp/security/","trust center",{"text":537,"config":538},"AI Transparency Center",{"href":539,"dataGaName":540,"dataGaLocation":228},"/ja-jp/ai-transparency-center/","ai transparency center",{"text":542,"config":543},"ニュースレター",{"href":544,"dataGaName":545,"dataGaLocation":228},"/company/contact/#contact-forms","newsletter",{"text":547,"config":548},"プレス",{"href":549,"dataGaName":550,"dataGaLocation":228},"/press/","press",{"text":552,"config":553,"menu":554},"お問い合わせ",{"dataNavLevelOne":498},{"type":279,"columns":555},[556],{"items":557},[558,563,568],{"text":559,"config":560},"お問い合わせはこちら",{"href":561,"dataGaName":562,"dataGaLocation":228},"/ja-jp/sales/","talk to sales",{"text":564,"config":565},"サポートを受ける",{"href":566,"dataGaName":567,"dataGaLocation":228},"https://support.gitlab.com/hc/en-us","support portal",{"text":569,"config":570},"カスタマーポータル",{"href":571,"dataGaName":572,"dataGaLocation":228},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":574,"login":575,"suggestions":582},"閉じる",{"text":576,"link":577},"リポジトリとプロジェクトを検索するには、次にログインします",{"text":578,"config":579},"GitLab.com",{"href":242,"dataGaName":580,"dataGaLocation":581},"search login","search",{"text":583,"default":584},"提案",[585,587,592,594,598,602],{"text":259,"config":586},{"href":264,"dataGaName":259,"dataGaLocation":581},{"text":588,"config":589},"コード提案（AI）",{"href":590,"dataGaName":591,"dataGaLocation":581},"/ja-jp/solutions/code-suggestions/","Code Suggestions (AI)",{"text":295,"config":593},{"href":297,"dataGaName":295,"dataGaLocation":581},{"text":595,"config":596},"GitLab on AWS",{"href":597,"dataGaName":595,"dataGaLocation":581},"/ja-jp/partners/technology-partners/aws/",{"text":599,"config":600},"GitLab on Google Cloud",{"href":601,"dataGaName":599,"dataGaLocation":581},"/ja-jp/partners/technology-partners/google-cloud-platform/",{"text":603,"config":604},"GitLabを選ぶ理由",{"href":272,"dataGaName":605,"dataGaLocation":581},"Why GitLab?",{"freeTrial":607,"mobileIcon":611,"desktopIcon":616,"secondaryButton":619},{"text":230,"config":608},{"href":609,"dataGaName":233,"dataGaLocation":610},"https://gitlab.com/-/trials/new/","nav",{"altText":612,"config":613},"GitLabアイコン",{"src":614,"dataGaName":615,"dataGaLocation":610},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":612,"config":617},{"src":618,"dataGaName":615,"dataGaLocation":610},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":392,"config":620},{"href":621,"dataGaName":622,"dataGaLocation":610},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/ja-jp/get-started/","get started",{"freeTrial":624,"mobileIcon":628,"desktopIcon":630},{"text":625,"config":626},"GitLab Duoの詳細について",{"href":264,"dataGaName":627,"dataGaLocation":610},"gitlab duo",{"altText":612,"config":629},{"src":614,"dataGaName":615,"dataGaLocation":610},{"altText":612,"config":631},{"src":618,"dataGaName":615,"dataGaLocation":610},{"button":633,"mobileIcon":638,"desktopIcon":640},{"text":634,"config":635},"/switch",{"href":636,"dataGaName":637,"dataGaLocation":610},"#contact","switch",{"altText":612,"config":639},{"src":614,"dataGaName":615,"dataGaLocation":610},{"altText":612,"config":641},{"src":642,"dataGaName":615,"dataGaLocation":610},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":644,"mobileIcon":649,"desktopIcon":651},{"text":645,"config":646},"料金ページに戻る",{"href":379,"dataGaName":647,"dataGaLocation":610,"icon":648},"back to pricing","GoBack",{"altText":612,"config":650},{"src":614,"dataGaName":615,"dataGaLocation":610},{"altText":612,"config":652},{"src":618,"dataGaName":615,"dataGaLocation":610},{"title":654,"button":655,"config":659},"GitLab Orbitが登場: AIエージェントのためのコンテキストレイヤー",{"text":270,"config":656},{"href":657,"dataGaName":658,"dataGaLocation":228},"/ja-jp/gitlab-orbit/","orbit",{"layout":660,"disabled":207},"release",{"data":662},{"text":663,"source":664,"edit":670,"contribute":675,"config":680,"items":685,"minimal":894},"GitはSoftware Freedom Conservancyの商標です。当社は「GitLab」をライセンスに基づいて使用しています",{"text":665,"config":666},"ページのソースを表示",{"href":667,"dataGaName":668,"dataGaLocation":669},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":671,"config":672},"このページを編集",{"href":673,"dataGaName":674,"dataGaLocation":669},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":676,"config":677},"ご協力をお願いします",{"href":678,"dataGaName":679,"dataGaLocation":669},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":681,"facebook":682,"youtube":683,"linkedin":684},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[686,731,784,827,861],{"title":377,"links":687,"subMenu":702},[688,692,697],{"text":689,"config":690},"プランの表示",{"href":379,"dataGaName":691,"dataGaLocation":669},"view plans",{"text":693,"config":694},"Premiumを選ぶ理由",{"href":695,"dataGaName":696,"dataGaLocation":669},"/ja-jp/pricing/premium/","why premium",{"text":698,"config":699},"Ultimateを選ぶ理由",{"href":700,"dataGaName":701,"dataGaLocation":669},"/ja-jp/pricing/ultimate/","why ultimate",[703],{"title":552,"links":704},[705,707,709,711,716,721,726],{"text":552,"config":706},{"href":561,"dataGaName":238,"dataGaLocation":669},{"text":564,"config":708},{"href":566,"dataGaName":567,"dataGaLocation":669},{"text":569,"config":710},{"href":571,"dataGaName":572,"dataGaLocation":669},{"text":712,"config":713},"ステータス",{"href":714,"dataGaName":715,"dataGaLocation":669},"https://status.gitlab.com/","status",{"text":717,"config":718},"利用規約",{"href":719,"dataGaName":720,"dataGaLocation":669},"/terms/","terms of use",{"text":722,"config":723},"プライバシーに関する声明",{"href":724,"dataGaName":725,"dataGaLocation":669},"/ja-jp/privacy/","privacy statement",{"text":727,"config":728},"Cookie 優先設定",{"dataGaName":729,"dataGaLocation":669,"id":730,"isOneTrustButton":210},"cookie preferences","ot-sdk-btn",{"title":275,"links":732,"subMenu":741},[733,737],{"text":734,"config":735},"DevSecOpsプラットフォーム",{"href":257,"dataGaName":736,"dataGaLocation":669},"devsecops platform",{"text":738,"config":739},"AI支援開発",{"href":264,"dataGaName":740,"dataGaLocation":669},"ai-assisted development",[742],{"title":743,"links":744},"トピック",[745,749,754,759,764,769,774,779],{"text":295,"config":746},{"href":747,"dataGaName":748,"dataGaLocation":669},"/ja-jp/topics/ci-cd/","cicd",{"text":750,"config":751},"GitOps",{"href":752,"dataGaName":753,"dataGaLocation":669},"/ja-jp/topics/gitops/","gitops",{"text":755,"config":756},"DevOps",{"href":757,"dataGaName":758,"dataGaLocation":669},"/ja-jp/topics/devops/","devops",{"text":760,"config":761},"バージョン管理",{"href":762,"dataGaName":763,"dataGaLocation":669},"/ja-jp/topics/version-control/","version control",{"text":765,"config":766},"DevSecOps",{"href":767,"dataGaName":768,"dataGaLocation":669},"/ja-jp/topics/devsecops/","devsecops",{"text":770,"config":771},"クラウドネイティブ",{"href":772,"dataGaName":773,"dataGaLocation":669},"/ja-jp/topics/cloud-native/","cloud native",{"text":775,"config":776},"コーディングのためのAI",{"href":777,"dataGaName":778,"dataGaLocation":669},"/ja-jp/topics/devops/ai-for-coding/","ai for coding",{"text":780,"config":781},"エージェント型AI",{"href":782,"dataGaName":783,"dataGaLocation":669},"/ja-jp/topics/agentic-ai/","agentic ai",{"title":785,"links":786},"ソリューション",[787,790,792,797,801,804,807,810,812,814,817,822],{"text":320,"config":788},{"href":315,"dataGaName":789,"dataGaLocation":669},"Application Security Testing",{"text":307,"config":791},{"href":291,"dataGaName":292,"dataGaLocation":669},{"text":793,"config":794},"アジャイル開発",{"href":795,"dataGaName":796,"dataGaLocation":669},"/ja-jp/solutions/agile-delivery/","agile delivery",{"text":798,"config":799},"SCM",{"href":304,"dataGaName":800,"dataGaLocation":669},"source code management",{"text":295,"config":802},{"href":297,"dataGaName":803,"dataGaLocation":669},"continuous integration & delivery",{"text":346,"config":805},{"href":348,"dataGaName":806,"dataGaLocation":669},"value stream management",{"text":750,"config":808},{"href":809,"dataGaName":753,"dataGaLocation":669},"/ja-jp/solutions/gitops/",{"text":359,"config":811},{"href":362,"dataGaName":363,"dataGaLocation":669},{"text":365,"config":813},{"href":368,"dataGaName":369,"dataGaLocation":669},{"text":815,"config":816},"公共機関",{"href":374,"dataGaName":375,"dataGaLocation":669},{"text":818,"config":819},"教育",{"href":820,"dataGaName":821,"dataGaLocation":669},"/ja-jp/solutions/education/","education",{"text":823,"config":824},"金融サービス",{"href":825,"dataGaName":826,"dataGaLocation":669},"/ja-jp/solutions/finance/","financial services",{"title":828,"links":829},"リソース",[830,832,834,836,840,842,845,847,849,851,853,855,857,859],{"text":395,"config":831},{"href":397,"dataGaName":398,"dataGaLocation":669},{"text":400,"config":833},{"href":402,"dataGaName":403,"dataGaLocation":669},{"text":405,"config":835},{"href":407,"dataGaName":408,"dataGaLocation":669},{"text":410,"config":837},{"href":838,"dataGaName":839,"dataGaLocation":669},"https://docs.gitlab.com/ja-jp","docs",{"text":433,"config":841},{"href":435,"dataGaName":436,"dataGaLocation":669},{"text":843,"config":844},"最新リリース",{"href":493,"dataGaName":494,"dataGaLocation":669},{"text":428,"config":846},{"href":430,"dataGaName":431,"dataGaLocation":669},{"text":447,"config":848},{"href":449,"dataGaName":450,"dataGaLocation":669},{"text":455,"config":850},{"href":457,"dataGaName":458,"dataGaLocation":669},{"text":460,"config":852},{"href":462,"dataGaName":463,"dataGaLocation":669},{"text":465,"config":854},{"href":467,"dataGaName":468,"dataGaLocation":669},{"text":470,"config":856},{"href":472,"dataGaName":473,"dataGaLocation":669},{"text":475,"config":858},{"href":477,"dataGaName":478,"dataGaLocation":669},{"text":480,"config":860},{"href":482,"dataGaName":483,"dataGaLocation":669},{"title":862,"links":863},"会社情報",[864,866,868,870,872,874,878,883,885,887,889],{"text":504,"config":865},{"href":506,"dataGaName":498,"dataGaLocation":669},{"text":509,"config":867},{"href":511,"dataGaName":512,"dataGaLocation":669},{"text":517,"config":869},{"href":519,"dataGaName":520,"dataGaLocation":669},{"text":522,"config":871},{"href":524,"dataGaName":525,"dataGaLocation":669},{"text":527,"config":873},{"href":529,"dataGaName":530,"dataGaLocation":669},{"text":875,"config":876},"Sustainability",{"href":877,"dataGaName":875,"dataGaLocation":669},"/sustainability/",{"text":879,"config":880},"ダイバーシティ、インクルージョン、ビロンギング（DIB）",{"href":881,"dataGaName":882,"dataGaLocation":669},"/ja-jp/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":532,"config":884},{"href":534,"dataGaName":535,"dataGaLocation":669},{"text":542,"config":886},{"href":544,"dataGaName":545,"dataGaLocation":669},{"text":547,"config":888},{"href":549,"dataGaName":550,"dataGaLocation":669},{"text":890,"config":891},"現代奴隷制の透明性に関する声明",{"href":892,"dataGaName":893,"dataGaLocation":669},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":895},[896,898,901],{"text":717,"config":897},{"href":719,"dataGaName":720,"dataGaLocation":669},{"text":899,"config":900},"Cookieの設定",{"dataGaName":729,"dataGaLocation":669,"id":730,"isOneTrustButton":210},{"text":722,"config":902},{"href":724,"dataGaName":725,"dataGaLocation":669},[904],{"id":905,"title":7,"body":206,"config":906,"content":908,"description":206,"extension":912,"meta":913,"navigation":210,"path":914,"seo":915,"stem":916,"__hash__":917},"blogAuthors/en-us/blog/authors/mark-settle.yml",{"template":907},"BlogAuthor",{"name":7,"config":909},{"headshot":910,"ctfId":911},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1779215794/fw131xublkzdvjdadd4q.png","marksettle","yml",{},"/en-us/blog/authors/mark-settle",{},"en-us/blog/authors/mark-settle","aur3jcqDyhashUtyXhd1W7N3ZrN09waCQv135AABEt4",[919,928,936],{"title":920,"description":921,"heroImage":922,"category":202,"date":923,"authors":924,"slug":927,"externalUrl":206},"GitLab Secrets ManagerがESO、Terraform、APIに対応","スタック全体の認証情報管理をシンプルに。GitLab Secrets Managerは External Secrets Operator（ESO）、Terraform、Secrets Manager APIに対応し、CI/CD以外の ワークフローからもシークレットを安全に取得できます。","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-08-06",[925,926],"Erick Bajao","Joe Randazzo","gitlab-secrets-manager-add-eso-terraform-api-support",{"title":929,"description":930,"heroImage":931,"category":202,"date":932,"authors":933,"slug":935,"externalUrl":206},"Claudeが書き、GitLabがつなぐ：本番環境まで途切れないセキュリティ","Claude Securityはコーディングセッション内で脆弱性を検出します。そこから先はGitLabが引き継ぎ、スキャン、ポリシーの適用、そしてソフトウェアライフサイクル全体の監査エビデンス作成までを担います。","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-08-03",[934],"Alisa Ho","claude-security-and-gitlab",{"title":937,"description":938,"heroImage":208,"category":202,"date":203,"authors":939,"slug":940,"externalUrl":206},"バージョンアップでビルドが壊れてもGitLabが修正します","依存関係の自動アップグレード、破壊的変更へのコード調整、承認のための変更ルーティングを実現するのはGitLabだけ。すべてのコンテキストを踏まえたネイティブな対応です。",[7],"dependency-scanning-auto-remediation",{"promotions":942},[943,957,968,979],{"id":944,"categories":945,"header":947,"text":948,"button":949,"image":954},"ai-modernization",[946],"ai","AIの真価、組織全体で発揮できていますか？","所要時間は5分以内です",{"text":950,"config":951},"AI成熟度スコアを確認する",{"href":952,"dataGaName":953,"dataGaLocation":436},"/ja-jp/assessments/ai-modernization-assessment/","modernization assessment",{"config":955},{"src":956},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":958,"categories":959,"header":960,"text":948,"button":961,"image":965},"devops-modernization",[219,768],"単にツールを管理するだけでなく、イノベーションを提供していますか？",{"text":962,"config":963},"DevOps成熟度スコアを確認しましょう",{"href":964,"dataGaName":953,"dataGaLocation":436},"/ja-jp/assessments/devops-modernization-assessment/",{"config":966},{"src":967},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":969,"categories":970,"header":971,"text":948,"button":972,"image":976},"security-modernization",[202],"スピードのためにセキュリティを犠牲にしていませんか？",{"text":973,"config":974},"セキュリティ成熟度スコアを確認しましょう",{"href":975,"dataGaName":953,"dataGaLocation":436},"/ja-jp/assessments/security-modernization-assessment/",{"config":977},{"src":978},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":980,"paths":981,"header":984,"text":985,"button":986,"image":991},"github-azure-migration",[982,983],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","チームはGitHubのAzure移行に対応できていますか？","GitHubはすでにAzureを基盤として再構築を進めています。それがあなたのチームにとって何を意味するのか、ご確認ください。",{"text":987,"config":988},"GitLabとGitHubの比較を見る",{"href":989,"dataGaName":990,"dataGaLocation":436},"/ja-jp/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":992},{"src":967},{"header":994,"blurb":995,"button":996,"secondaryButton":1000},"今すぐ開発をスピードアップ","DevSecOpsに特化したインテリジェントオーケストレーションプラットフォームで実現できることをご確認ください。\n",{"text":230,"config":997},{"href":998,"dataGaName":233,"dataGaLocation":999},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/ja-jp/","feature",{"text":552,"config":1001},{"href":561,"dataGaName":238,"dataGaLocation":999},1786803770065]