[{"data":1,"prerenderedAt":1201},["ShallowReactive",2],{"/ja-jp/blog/software-supply-chain-security-guide-why-organizations-struggle":3,"navigation-ja-jp":418,"banner-ja-jp":848,"footer-ja-jp":856,"blog-post-authors-ja-jp-Itzik Gan Baruch":1098,"blog-related-posts-ja-jp-software-supply-chain-security-guide-why-organizations-struggle":1113,"blog-promotions-ja-jp":1139,"next-steps-ja-jp":1192},{"id":4,"title":5,"authors":6,"body":8,"category":399,"date":400,"description":401,"extension":402,"externalUrl":403,"faq":403,"featured":404,"heroImage":405,"meta":406,"navigation":404,"path":407,"seo":408,"slug":410,"stem":411,"tags":412,"template":416,"updatedDate":403,"__hash__":417},"blogPosts/ja-jp/blog/software-supply-chain-security-guide-why-organizations-struggle.md","ソフトウェアサプライチェーンのセキュリティガイド：組織が直面する課題とは",[7],"Itzik Gan Baruch",{"type":9,"value":10,"toc":382},"minimark",[11,15,22,56,59,68,71,75,78,95,102,107,110,114,117,121,124,156,159,165,168,171,180,183,186,191,194,199,214,219,222,227,247,250,253,256,261,282,287,296,301,322,327,330,333,336,340,355,358,361,364,367,370],[12,13,14],"p",{},"大抵の開発チームは、サプライチェーンセキュリティについて尋ねられると、脆弱性スキャンや依存関係の管理を挙げるでしょう。確かにそれらはサプライチェーンセキュリティの構成要素ではありますが、実際の課題のごく一部であり、その視点は非常に限定的で、危険です。",[12,16,17,21],{},[18,19,20],"strong",{},"サプライチェーンセキュリティとは、単に依存関係をスキャンすることではありません。"," コードの作成から本番環境へのデプロイまで、以下を含む一連のプロセス全体を対象としています。",[23,24,25,32,38,44,50],"ul",{},[26,27,28,31],"li",{},[18,29,30],{},"ソースセキュリティ","：コードリポジトリの保護、コントリビューターのアクセス管理、コードの整合性の確保",[26,33,34,37],{},[18,35,36],{},"ビルドセキュリティ","：ビルド環境の保護、コンパイルやパッケージ化時の改ざん防止",[26,39,40,43],{},[18,41,42],{},"アーティファクトセキュリティ","：コンテナやパッケージ、デプロイ用アーティファクトの整合性の確保",[26,45,46,49],{},[18,47,48],{},"デプロイセキュリティ","：配信手段および実行環境の保護",[26,51,52,55],{},[18,53,54],{},"ツールセキュリティ","：開発ツールやプラットフォーム自体の強化",[12,57,58],{},"サプライチェーンセキュリティにおける「チェーン」とは、この一連の相互に連携したステップを指します。チェーンのどこかに脆弱性があると、ソフトウェアデリバリーのプロセス全体が危険にさらされてしまいます。",[12,60,61,67],{},[62,63,66],"a",{"href":64,"rel":65},"https://www.cisa.gov/news-events/news/joint-statement-federal-bureau-investigation-fbi-cybersecurity-and-infrastructure-security",[],"2020年に発生したSolarWinds攻撃","は、その典型的な例です。これは史上最大級のサプライチェーン攻撃の一つであり、国家の支援を受けた攻撃者がSolarWindsのネットワーク管理ソフト「Orion」のビルドパイプラインを侵害しました。攻撃者は脆弱な依存関係を悪用したり、完成したアプリケーションをハッキングしたのではなく、コンパイルプロセスそのものに悪意あるコードを注入したのです。",[12,69,70],{},"その結果は壊滅的でした。通常のソフトウェアアップデートを通じて、米国政府機関を含む18,000以上の組織が、気づかないうちにバックドア付きのソフトウェアをインストールしてしまいました。ソースコードには問題がなく、完成したアプリケーションも正規のものに見えましたが、ビルドプロセスが攻撃手段として利用されていたのです。この攻撃は数か月にわたって検出されず、サプライチェーンの脆弱性が従来のセキュリティ対策をいかに回避できるかを示す事例となりました。",[72,73,74],"h3",{"id":74},"組織を脆弱にするよくある誤解",[12,76,77],{},"サプライチェーンの脅威に対する認識は高まりつつありますが、多くの組織はいまだに危険にさらされています。というのも、「ソフトウェアサプライチェーンセキュリティとは何か」という根本的な理解に誤りがあるからです。こうした誤解が、重大な見落としを生んでしまいます。",[23,79,80,83,86,89,92],{},[26,81,82],{},"ソフトウェアサプライチェーンセキュリティは依存関係スキャンだけだと考えている",[26,84,85],{},"オープンソースコンポーネントにばかり注目し、プロプライエタリコードのリスクを無視している",[26,87,88],{},"コード署名だけで十分に保護できると思っている",[26,90,91],{},"安全なコーディング慣行さえ守っていれば、サプライチェーンのリスクはなくなると考えている",[26,93,94],{},"サプライチェーンセキュリティを、セキュリティチームだけの問題だと捉え、開発ワークフローの課題として見ていない",[12,96,97],{},[98,99],"img",{"alt":100,"src":101},"ソフトウェアサプライチェーンセキュリティ依存関係チャート","https://res.cloudinary.com/about-gitlab-com/image/upload/v1753200077/kqndvlxyvncshdiq0xea.png",[103,104,106],"h2",{"id":105},"aiが新たな脅威に","AIが新たな脅威に",[12,108,109],{},"多くの組織が従来型のソフトウェアサプライチェーンセキュリティの課題に取り組んでいる中、人工知能（AI）はまったく新しい攻撃ベクトルを生み出し、既存のリスクをこれまでにない形で拡大させています。",[72,111,113],{"id":112},"aiによる攻撃より巧妙により大規模に","AIによる攻撃：より巧妙に、より大規模に",[12,115,116],{},"攻撃者はAIを使って脆弱性の発見を自動化し、デベロッパーを狙った巧妙なソーシャルエンジニアリング攻撃を作成し、公開されているコードベースを体系的に分析して弱点を探しています。かつては手作業でしか行えなかったことが、いまや正確かつ大規模に実行できるようになっています。",[72,118,120],{"id":119},"ai開発のサプライチェーンがもたらす新たなリスク","AI開発のサプライチェーンがもたらす新たなリスク",[12,122,123],{},"AIは開発ライフサイクル全体を再構築していますが、それと同時に深刻なセキュリティの死角も生み出しています。",[23,125,126,132,138,144,150],{},[26,127,128,131],{},[18,129,130],{},"モデルのサプライチェーン攻撃","：Hugging FaceやGitHubなどから提供される事前学習済みモデルには、バックドアや汚染されたトレーニングデータが含まれている恐れがあります。",[26,133,134,137],{},[18,135,136],{},"安全でないAI生成コード","：AIコードアシスタントを使うデベロッパーが、気づかないうちに脆弱なパターンや危険な依存関係を導入することがあります。",[26,139,140,143],{},[18,141,142],{},"危険にさらされたAIツールチェーン","：AIモデルの学習、デプロイ、管理に使われるインフラが、新たなアタックサーフェス（攻撃対象領域）となります。",[26,145,146,149],{},[18,147,148],{},"自動化された偵察","：AIにより、攻撃者はエコシステム全体をスキャンして、高リスクなサプライチェーンの標的を特定できます。",[26,151,152,155],{},[18,153,154],{},"シャドーAIと非公認ツール","：デベロッパーが、安全性が確認されていない外部AIツールを組み込んでしまうことがあります。",[12,157,158],{},"その結果どうなるか？AIは単に新しい脆弱性をもたらすだけでなく、既存のリスクの規模と影響を増幅します。もはや、段階的な改善では追いつけません。脅威の状況は、現在のセキュリティ対策が対応できるスピードを上回る勢いで進化しています。",[12,160,161],{},[98,162],{"alt":163,"src":164},"AIによる増幅効果","https://res.cloudinary.com/about-gitlab-com/image/upload/v1753200139/xuxezxld6ztlvjocgjlx.png",[103,166,167],{"id":167},"多くの組織がいまだに苦戦している理由",[12,169,170],{},"サプライチェーンセキュリティの重要性を理解している組織でさえ、効果的に対処できていないことがよくあります。統計は、「認識しているのに行動が伴わない」という深刻な傾向を明らかにしています。",[12,172,173,174,179],{},"2021年に",[62,175,178],{"href":176,"rel":177},"https://www.cnn.com/2021/05/19/politics/colonial-pipeline-ransom/index.html",[],"コロニアル・パイプライン社が業務復旧のためにハッカーに440万ドルを支払った事件","や、18,000もの組織が被害を受けたSolarWinds攻撃は、サプライチェーンの脆弱性が、重要インフラを停止させ、かつてない規模で機密データを危険にさらす可能性があることを世に知らしめました。",[12,181,182],{},"それにもかかわらず、多くの組織はいまだに従来どおりの運用を続けています。本質的な問いは、「組織がサプライチェーンセキュリティを重要だと考えているか」ではなく、「なぜそう考えていても、実効的な対策につながらないのか」という点です。",[12,184,185],{},"その答えは、効果的な行動を妨げている4つの重要な障壁にあります。",[12,187,188],{},[18,189,190],{},"1. 誤った「コスト優先」思考",[12,192,193],{},"組織はしばしば、「最も効果的な方法は何か？」ではなく、「コストがかからないのはどれか？」という観点で考えてしまいます。こうしたコスト第一の考え方は、後に高くつく問題を生み出すことになります。",[12,195,196],{},[18,197,198],{},"2. スキル不足という現実",[12,200,201,202,207,208,213],{},"BSIMM（Building Security In Maturity Model）の調査によると、",[62,203,206],{"href":204,"rel":205},"https://codific.com/bsimm-building-security-in-maturity-model-a-complete-guide/",[],"組織にはデベロッパー100人あたり平均でセキュリティ専門家がわずか4人しかおらず","、さらにISC2の調査では、",[62,209,212],{"href":210,"rel":211},"https://www.isc2.org/Insights/2024/09/Employers-Must-Act-Cybersecurity-Workforce-Growth-Stalls-as-Skills-Gaps-Widen",[],"90%の組織が深刻なサイバーセキュリティ人材の不足を報告","しています。このような状況では、従来のアプローチをスケールさせることは数学的に不可能です。",[12,215,216],{},[18,217,218],{},"3. 組織内のインセンティブの不一致",[12,220,221],{},"デベロッパーのOKR（Objective and Key Results）は機能の開発速度に重点が置かれる一方で、セキュリティチームはまったく異なる成果を指標にしています。経営陣が市場投入のスピードをセキュリティ対策状況よりも重視するような状況では、部門間の摩擦は避けられません。",[12,223,224],{},[18,225,226],{},"4. 複雑すぎるツール環境",[12,228,229,234,235,240,241,246],{},[62,230,233],{"href":231,"rel":232},"https://www.gartner.com/en/newsroom/press-releases/2025-03-03-gartner-identifiesthe-top-cybersecurity-trends-for-2025",[],"一般的な企業では平均して45種類ものサイバーセキュリティツールを使っており","、そのうちの",[62,236,239],{"href":237,"rel":238},"https://www.ponemon.org/news-updates/blog/security/new-ponemon-study-on-malware-detection-prevention-released.html",[],"40%は誤検知","です。また、",[62,242,245],{"href":243,"rel":244},"https://newsroom.ibm.com/2020-06-30-IBM-Study-Security-Response-Planning-on-the-Rise-But-Containing-Attacks-Remains-an-Issue",[],"インシデント対応には平均して19種類ものツールをまたいで調整を行う","必要があります。",[12,248,249],{},"こうした障壁によって悪循環が生まれます。組織は脅威を認識し、セキュリティソリューションに投資はするものの、期待される効果が得られるような実装ができていないのです。",[103,251,252],{"id":252},"サプライチェーンの脆弱性がもたらす本当の代償",[12,254,255],{},"サプライチェーン攻撃によって生じるリスクとコストは、初期の対処だけでは収まりません。こうした見えにくい追加的な負担を理解することで、予防が「望ましい」どころか、「ビジネスを継続するために不可欠」だということがわかります。",[12,257,258],{},[18,259,260],{},"時間が最大の敵になる",[23,262,263,271,279],{},[26,264,265,266],{},"サプライチェーンの侵害を特定して封じ込めるまでの平均時間：",[62,267,270],{"href":268,"rel":269},"https://keepnetlabs.com/blog/171-cyber-security-statistics-2024-s-updated-trends-and-data",[],"277日",[26,272,273,274],{},"顧客の信頼を回復するまでの期間：",[62,275,278],{"href":276,"rel":277},"https://www.bcg.com/publications/2024/rebuilding-corporate-trust",[],"2〜3年以上",[26,280,281],{},"製品開発に充てるはずの工数が、セキュリティ対策に振り向けられる",[12,283,284],{},[18,285,286],{},"評判へのダメージは拡大する一方",[12,288,289,290,295],{},"攻撃者にサプライチェーンを突破された場合、奪われるのはデータだけではありません。顧客との信頼関係という土台そのものが揺らいでしまいます。実際、侵害後には",[62,291,294],{"href":292,"rel":293},"https://www.metacompliance.com/blog/data-breaches/5-damaging-consequences-of-a-data-breach",[],"顧客の解約率が平均で33%上昇","し、パートナーとの関係も再認証プロセスなどで多大なコストが発生します。さらに、「より安全だと見なされる」競合に見込み顧客が流れてしまい、競争力の低下にもつながります。",[12,297,298],{},[18,299,300],{},"規制の現実が重くのしかかる",[12,302,303,304,309,310,315,316,321],{},"規制の状況は根本的に変化しています。",[62,305,308],{"href":306,"rel":307},"https://www.skillcast.com/blog/20-biggest-gdpr-fines",[],"GDPR（EU一般データ保護規則）による罰金は、重大なデータ侵害の場合、平均して5,000万ドルを超えています","。EUの新しい",[62,311,314],{"href":312,"rel":313},"https://about.gitlab.com/blog/gitlab-supports-banks-in-navigating-regulatory-challenges/#european-cyber-resilience-act-(cra)",[],"サイバーレジリエンス法","では、サプライチェーンの透明性が義務づけられています。アメリカの連邦契約業者は、すべてのソフトウェア購入においてソフトウェア部品表（",[62,317,320],{"href":318,"rel":319},"https://about.gitlab.com/ja-jp/blog/the-ultimate-guide-to-sboms/",[],"SBOM","）を提供しなければならず、この要件は民間企業の調達にも急速に広がりつつあります。",[12,323,324],{},[18,325,326],{},"業務への混乱がさらに広がる",[12,328,329],{},"直接的なコストだけでなく、サプライチェーン攻撃は、攻撃対応中のプラットフォームのダウンタイム、テクノロジースタック全体にわたる緊急セキュリティ監査、顧客からの訴訟や規制当局の調査による法的コストなど、業務に深刻な混乱をもたらします。",[103,331,332],{"id":332},"現在のアプローチの問題点",[12,334,335],{},"多くの組織は、「セキュリティ対策をしていること」と「実際にセキュリティ効果があること」を混同しています。スキャナーを導入し、長大なレポートを作成して、各チームに手作業で対応させています。こうした取り組みはしばしば逆効果で、問題を解決するどころか、かえって新たな問題を生んでしまいます。",[72,337,339],{"id":338},"大量のスキャンvs実効性のある保護","大量のスキャンvs.実効性のある保護",[12,341,342,343,348,349,354],{},"企業は",[62,344,347],{"href":345,"rel":346},"https://www.securityweek.com/enterprises-generate-10000-security-events-day-average-report/",[],"毎月1万件以上のセキュリティアラートを生成しており、中には1日15万件ものイベントを記録するケースもあります","。しかし、これらの",[62,350,353],{"href":351,"rel":352},"https://panther.com/blog/identifying-and-mitigating-false-positive-alerts",[],"63%","は誤検出や優先度の低いノイズにすぎません。結果として、セキュリティチームは処理しきれず、推進役ではなくボトルネックになってしまいます。",[72,356,357],{"id":357},"コラボレーションの崩壊",[12,359,360],{},"最も安全な組織というのは、ツールをたくさん使っている組織ではなく、DevSecOps間の連携が強い組織です。しかし、現在のほとんどの体制では、この連携が難しくなっています。ワークフローが互換性のないツールで分断されているため、デベロッパーは自分の環境でセキュリティ結果を確認できず、リスクやビジネスへの影響もチーム間で共有できていません。",[103,362,363],{"id":363},"今後に向けて",[12,365,366],{},"こうした課題を理解することが、効果的なソフトウェアサプライチェーンセキュリティを構築するための第一歩です。成功している組織は、単にセキュリティツールを追加するのではなく、セキュリティを開発ワークフローにどのように統合するかを根本から見直しています。また、ソフトウエアデリバリーのプロセス全体を振り返り、プロセスの簡素化、ツールの削減、コラボレーションの改善にも取り組んでいます。",[12,368,369],{},"GitLabでは、統合型DevSecOpsプラットフォームによって、セキュリティが開発ワークフローに直接組み込まれることで、こうした課題に対応できることを目の当たりにしてきました。このシリーズの次回の記事では、先進的な組織がどのようにして「デベロッパーにとって使いやすいソリューション」や「AIによる自動化」、そして「セキュリティをソフトウェア開発の自然な一部にできるプラットフォーム」を活用し、サプライチェーンセキュリティへの取り組みを根本から変えているのかをご紹介します。",[371,372,373],"blockquote",{},[12,374,375,376,381],{},"GitLabのソフトウェアサプライチェーンのセキュリティ機能について詳しくは、",[62,377,380],{"href":378,"rel":379},"https://about.gitlab.com/ja-jp/solutions/supply-chain/",[],"こちら","をご覧ください。",{"title":383,"searchDepth":384,"depth":384,"links":385},"",2,[386,388,392,393,394,398],{"id":74,"depth":387,"text":74},3,{"id":105,"depth":384,"text":106,"children":389},[390,391],{"id":112,"depth":387,"text":113},{"id":119,"depth":387,"text":120},{"id":167,"depth":384,"text":167},{"id":252,"depth":384,"text":252},{"id":332,"depth":384,"text":332,"children":395},[396,397],{"id":338,"depth":387,"text":339},{"id":357,"depth":387,"text":357},{"id":363,"depth":384,"text":363},"security","2025-07-24","この新シリーズの第1部では、すべての開発チームが理解すべき、基本的な課題、実践的な解決策、そしてAIを含む新たなトレンドを探ります。","md",null,true,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097701/Blog/Hero%20Images/Blog/Hero%20Images/blog-image-template-1800x945%20%285%29_1iy516k40hwBDChKcUJ2zb_1750097700983.png",{},"/ja-jp/blog/software-supply-chain-security-guide-why-organizations-struggle",{"noIndex":409,"title":5,"description":401},false,"software-supply-chain-security-guide-why-organizations-struggle","ja-jp/blog/software-supply-chain-security-guide-why-organizations-struggle",[413,414,415],"Security","Product","Tutorial","BlogPost","OUsqjqDGS6dB8X8BQrQdPR6P_XJGrs0sF68RsIedf08",{"logo":419,"freeTrial":424,"sales":429,"login":434,"items":439,"search":768,"minimal":801,"duo":818,"switchNav":827,"pricingDeployment":838},{"config":420},{"href":421,"dataGaName":422,"dataGaLocation":423},"/ja-jp/","gitlab logo","header",{"text":425,"config":426},"無料トライアルを開始",{"href":427,"dataGaName":428,"dataGaLocation":423},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/ja-jp&glm_content=default-saas-trial/","free trial",{"text":430,"config":431},"デモをリクエスト",{"href":432,"dataGaName":433,"dataGaLocation":423},"/ja-jp/sales/?contact-topic=request-demo","sales",{"text":435,"config":436},"サインイン",{"href":437,"dataGaName":438,"dataGaLocation":423},"https://gitlab.com/users/sign_in/","sign in",[440,469,571,576,690,746],{"text":441,"config":442,"menu":444},"プラットフォーム",{"dataNavLevelOne":443},"platform",{"type":445,"columns":446},"cards",[447,453,461],{"title":441,"description":448,"link":449},"DevSecOpsに特化したインテリジェントオーケストレーションプラットフォーム",{"text":450,"config":451},"プラットフォームの詳細はこちら",{"href":452,"dataGaName":443,"dataGaLocation":423},"/ja-jp/platform/",{"title":454,"description":455,"link":456},"GitLab Duo Agent Platform","ソフトウェアライフサイクル全体を支えるエージェント型AI",{"text":457,"config":458},"GitLab Duoのご紹介",{"href":459,"dataGaName":460,"dataGaLocation":423},"/ja-jp/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":462,"description":463,"link":464},"GitLabが選ばれる理由","エンタープライズがGitLabを選ぶ主な理由をご覧ください",{"text":465,"config":466},"詳細はこちら",{"href":467,"dataGaName":468,"dataGaLocation":423},"/ja-jp/why-gitlab/","why gitlab",{"text":470,"left":404,"config":471,"menu":473},"製品",{"dataNavLevelOne":472},"solutions",{"type":474,"link":475,"columns":479,"feature":550},"lists",{"text":476,"config":477},"すべてのソリューションを表示",{"href":478,"dataGaName":472,"dataGaLocation":423},"/ja-jp/solutions/",[480,505,528],{"title":481,"description":482,"link":483,"items":488},"自動化","CI/CDと自動化でデプロイを加速",{"config":484},{"icon":485,"href":486,"dataGaName":487,"dataGaLocation":423},"AutomatedCodeAlt","/ja-jp/solutions/delivery-automation/","automated software delivery",[489,493,496,501],{"text":490,"config":491},"CI/CD",{"href":492,"dataGaLocation":423,"dataGaName":490},"/ja-jp/solutions/continuous-integration/",{"text":454,"config":494},{"href":459,"dataGaLocation":423,"dataGaName":495},"gitlab duo agent platform - product menu",{"text":497,"config":498},"ソースコード管理",{"href":499,"dataGaLocation":423,"dataGaName":500},"/ja-jp/solutions/source-code-management/","Source Code Management",{"text":502,"config":503},"自動化されたソフトウェアデリバリー",{"href":486,"dataGaLocation":423,"dataGaName":504},"Automated software delivery",{"title":506,"description":507,"link":508,"items":513},"セキュリティ","セキュリティを犠牲にすることなくコード作成を高速化",{"config":509},{"href":510,"dataGaName":511,"dataGaLocation":423,"icon":512},"/ja-jp/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[514,518,523],{"text":515,"config":516},"アプリケーションセキュリティテスト",{"href":510,"dataGaName":517,"dataGaLocation":423},"Application security testing",{"text":519,"config":520},"ソフトウェアサプライチェーンセキュリティ",{"href":521,"dataGaLocation":423,"dataGaName":522},"/ja-jp/solutions/supply-chain/","Software supply chain security",{"text":524,"config":525},"ソフトウェアコンプライアンス",{"href":526,"dataGaName":527,"dataGaLocation":423},"/ja-jp/solutions/software-compliance/","software compliance",{"title":529,"link":530,"items":535},"測定",{"config":531},{"icon":532,"href":533,"dataGaName":534,"dataGaLocation":423},"DigitalTransformation","/ja-jp/solutions/visibility-measurement/","visibility and measurement",[536,540,545],{"text":537,"config":538},"可視性と測定",{"href":533,"dataGaLocation":423,"dataGaName":539},"Visibility and Measurement",{"text":541,"config":542},"バリューストリーム管理",{"href":543,"dataGaLocation":423,"dataGaName":544},"/ja-jp/solutions/value-stream-management/","Value Stream Management",{"text":546,"config":547},"分析とインサイト",{"href":548,"dataGaLocation":423,"dataGaName":549},"/ja-jp/solutions/analytics-and-insights/","Analytics and insights",{"title":551,"type":474,"items":552},"GitLabが活躍する場所",[553,559,565],{"text":554,"config":555},"大企業",{"icon":556,"href":557,"dataGaLocation":423,"dataGaName":558},"Building","/ja-jp/enterprise/","enterprise",{"text":560,"config":561},"スモールビジネス",{"icon":562,"href":563,"dataGaLocation":423,"dataGaName":564},"Work","/ja-jp/small-business/","small business",{"text":566,"config":567},"公共部門",{"icon":568,"href":569,"dataGaLocation":423,"dataGaName":570},"Organization","/ja-jp/solutions/public-sector/","public sector",{"text":572,"config":573},"価格",{"href":574,"dataGaName":575,"dataGaLocation":423,"dataNavLevelOne":575},"/ja-jp/pricing/","pricing",{"text":577,"config":578,"menu":580},"関連リソース",{"dataNavLevelOne":579},"resources",{"type":474,"link":581,"columns":585,"feature":679},{"text":582,"config":583},"すべてのリソースを表示",{"href":584,"dataGaName":579,"dataGaLocation":423},"/ja-jp/resources/",[586,619,646],{"title":587,"items":588},"はじめに",[589,594,599,604,609,614],{"text":590,"config":591},"インストール",{"href":592,"dataGaName":593,"dataGaLocation":423},"/ja-jp/install/","install",{"text":595,"config":596},"クイックスタートガイド",{"href":597,"dataGaName":598,"dataGaLocation":423},"/ja-jp/get-started/","quick setup checklists",{"text":600,"config":601},"学ぶ",{"href":602,"dataGaLocation":423,"dataGaName":603},"https://university.gitlab.com/","learn",{"text":605,"config":606},"製品ドキュメント",{"href":607,"dataGaName":608,"dataGaLocation":423},"https://docs.gitlab.com/ja-jp/","product documentation",{"text":610,"config":611},"ベストプラクティスビデオ",{"href":612,"dataGaName":613,"dataGaLocation":423},"/ja-jp/getting-started-videos/","best practice videos",{"text":615,"config":616},"インテグレーション",{"href":617,"dataGaName":618,"dataGaLocation":423},"/ja-jp/integrations/","integrations",{"title":620,"items":621},"検索する",[622,627,632,637,641],{"text":623,"config":624},"お客様成功事例",{"href":625,"dataGaName":626,"dataGaLocation":423},"/ja-jp/customers/","customer success stories",{"text":628,"config":629},"ブログ",{"href":630,"dataGaName":631,"dataGaLocation":423},"/ja-jp/blog/","blog",{"text":633,"config":634},"Demo Hub",{"href":635,"dataGaName":636,"dataGaLocation":423},"/ja-jp/demo-hub/","demo hub",{"text":638,"config":639},"The Source",{"href":640,"dataGaName":631,"dataGaLocation":423},"/ja-jp/the-source/",{"text":642,"config":643},"リモート",{"href":644,"dataGaName":645,"dataGaLocation":423},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":647,"items":648},"つなげる",[649,654,659,664,669,674],{"text":650,"config":651},"GitLabサービス",{"href":652,"dataGaName":653,"dataGaLocation":423},"/ja-jp/services/","services",{"text":655,"config":656},"コントリビュート",{"href":657,"dataGaName":658,"dataGaLocation":423},"https://contributors.gitlab.com","contribute",{"text":660,"config":661},"コミュニティ",{"href":662,"dataGaName":663,"dataGaLocation":423},"/community/","community",{"text":665,"config":666},"フォーラム",{"href":667,"dataGaName":668,"dataGaLocation":423},"https://forum.gitlab.com/","forum",{"text":670,"config":671},"イベント",{"href":672,"dataGaName":673,"dataGaLocation":423},"/events/","events",{"text":675,"config":676},"パートナー",{"href":677,"dataGaName":678,"dataGaLocation":423},"/ja-jp/partners/","partners",{"config":680,"title":683,"text":684,"link":685},{"background":681,"textColor":682},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","GitLabの最新情報","最新の機能と改善点に関する情報をお届けします。",{"text":686,"config":687},"最新情報を読む",{"href":688,"dataGaName":689,"dataGaLocation":423},"/ja-jp/whats-new/","whats new",{"text":691,"config":692,"menu":694},"企業情報",{"dataNavLevelOne":693},"company",{"type":474,"columns":695},[696],{"items":697},[698,703,709,711,716,721,726,731,736,741],{"text":699,"config":700},"GitLabについて",{"href":701,"dataGaName":702,"dataGaLocation":423},"/ja-jp/company/","about",{"text":704,"config":705,"footerGa":708},"採用情報",{"href":706,"dataGaName":707,"dataGaLocation":423},"/jobs/","jobs",{"dataGaName":707},{"text":670,"config":710},{"href":672,"dataGaName":673,"dataGaLocation":423},{"text":712,"config":713},"経営陣",{"href":714,"dataGaName":715,"dataGaLocation":423},"/company/team/e-group/","leadership",{"text":717,"config":718},"ハンドブック",{"href":719,"dataGaName":720,"dataGaLocation":423},"https://handbook.gitlab.com/","handbook",{"text":722,"config":723},"投資家向け情報",{"href":724,"dataGaName":725,"dataGaLocation":423},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":727,"config":728},"トラストセンター",{"href":729,"dataGaName":730,"dataGaLocation":423},"/ja-jp/security/","trust center",{"text":732,"config":733},"AI Transparency Center",{"href":734,"dataGaName":735,"dataGaLocation":423},"/ja-jp/ai-transparency-center/","ai transparency center",{"text":737,"config":738},"ニュースレター",{"href":739,"dataGaName":740,"dataGaLocation":423},"/company/contact/#contact-forms","newsletter",{"text":742,"config":743},"プレス",{"href":744,"dataGaName":745,"dataGaLocation":423},"/press/","press",{"text":747,"config":748,"menu":749},"お問い合わせ",{"dataNavLevelOne":693},{"type":474,"columns":750},[751],{"items":752},[753,758,763],{"text":754,"config":755},"お問い合わせはこちら",{"href":756,"dataGaName":757,"dataGaLocation":423},"/ja-jp/sales/","talk to sales",{"text":759,"config":760},"サポートを受ける",{"href":761,"dataGaName":762,"dataGaLocation":423},"https://support.gitlab.com/hc/en-us","support portal",{"text":764,"config":765},"カスタマーポータル",{"href":766,"dataGaName":767,"dataGaLocation":423},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":769,"login":770,"suggestions":777},"閉じる",{"text":771,"link":772},"リポジトリとプロジェクトを検索するには、次にログインします",{"text":773,"config":774},"GitLab.com",{"href":437,"dataGaName":775,"dataGaLocation":776},"search login","search",{"text":778,"default":779},"提案",[780,782,787,789,793,797],{"text":454,"config":781},{"href":459,"dataGaName":454,"dataGaLocation":776},{"text":783,"config":784},"コード提案（AI）",{"href":785,"dataGaName":786,"dataGaLocation":776},"/ja-jp/solutions/code-suggestions/","Code Suggestions (AI)",{"text":490,"config":788},{"href":492,"dataGaName":490,"dataGaLocation":776},{"text":790,"config":791},"GitLab on AWS",{"href":792,"dataGaName":790,"dataGaLocation":776},"/ja-jp/partners/technology-partners/aws/",{"text":794,"config":795},"GitLab on Google Cloud",{"href":796,"dataGaName":794,"dataGaLocation":776},"/ja-jp/partners/technology-partners/google-cloud-platform/",{"text":798,"config":799},"GitLabを選ぶ理由",{"href":467,"dataGaName":800,"dataGaLocation":776},"Why GitLab?",{"freeTrial":802,"mobileIcon":806,"desktopIcon":811,"secondaryButton":814},{"text":425,"config":803},{"href":804,"dataGaName":428,"dataGaLocation":805},"https://gitlab.com/-/trials/new/","nav",{"altText":807,"config":808},"GitLabアイコン",{"src":809,"dataGaName":810,"dataGaLocation":805},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":807,"config":812},{"src":813,"dataGaName":810,"dataGaLocation":805},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":587,"config":815},{"href":816,"dataGaName":817,"dataGaLocation":805},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/ja-jp/get-started/","get started",{"freeTrial":819,"mobileIcon":823,"desktopIcon":825},{"text":820,"config":821},"GitLab Duoの詳細について",{"href":459,"dataGaName":822,"dataGaLocation":805},"gitlab duo",{"altText":807,"config":824},{"src":809,"dataGaName":810,"dataGaLocation":805},{"altText":807,"config":826},{"src":813,"dataGaName":810,"dataGaLocation":805},{"button":828,"mobileIcon":833,"desktopIcon":835},{"text":829,"config":830},"/switch",{"href":831,"dataGaName":832,"dataGaLocation":805},"#contact","switch",{"altText":807,"config":834},{"src":809,"dataGaName":810,"dataGaLocation":805},{"altText":807,"config":836},{"src":837,"dataGaName":810,"dataGaLocation":805},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":839,"mobileIcon":844,"desktopIcon":846},{"text":840,"config":841},"料金ページに戻る",{"href":574,"dataGaName":842,"dataGaLocation":805,"icon":843},"back to pricing","GoBack",{"altText":807,"config":845},{"src":809,"dataGaName":810,"dataGaLocation":805},{"altText":807,"config":847},{"src":813,"dataGaName":810,"dataGaLocation":805},{"title":849,"button":850,"config":854},"GitLab Orbitが登場: AIエージェントのためのコンテキストレイヤー",{"text":465,"config":851},{"href":852,"dataGaName":853,"dataGaLocation":423},"/ja-jp/gitlab-orbit/","orbit",{"layout":855,"disabled":409},"release",{"data":857},{"text":858,"source":859,"edit":865,"contribute":870,"config":875,"items":880,"minimal":1089},"GitはSoftware Freedom Conservancyの商標です。当社は「GitLab」をライセンスに基づいて使用しています",{"text":860,"config":861},"ページのソースを表示",{"href":862,"dataGaName":863,"dataGaLocation":864},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":866,"config":867},"このページを編集",{"href":868,"dataGaName":869,"dataGaLocation":864},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":871,"config":872},"ご協力をお願いします",{"href":873,"dataGaName":874,"dataGaLocation":864},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":876,"facebook":877,"youtube":878,"linkedin":879},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[881,926,979,1022,1056],{"title":572,"links":882,"subMenu":897},[883,887,892],{"text":884,"config":885},"プランの表示",{"href":574,"dataGaName":886,"dataGaLocation":864},"view plans",{"text":888,"config":889},"Premiumを選ぶ理由",{"href":890,"dataGaName":891,"dataGaLocation":864},"/ja-jp/pricing/premium/","why premium",{"text":893,"config":894},"Ultimateを選ぶ理由",{"href":895,"dataGaName":896,"dataGaLocation":864},"/ja-jp/pricing/ultimate/","why ultimate",[898],{"title":747,"links":899},[900,902,904,906,911,916,921],{"text":747,"config":901},{"href":756,"dataGaName":433,"dataGaLocation":864},{"text":759,"config":903},{"href":761,"dataGaName":762,"dataGaLocation":864},{"text":764,"config":905},{"href":766,"dataGaName":767,"dataGaLocation":864},{"text":907,"config":908},"ステータス",{"href":909,"dataGaName":910,"dataGaLocation":864},"https://status.gitlab.com/","status",{"text":912,"config":913},"利用規約",{"href":914,"dataGaName":915,"dataGaLocation":864},"/terms/","terms of use",{"text":917,"config":918},"プライバシーに関する声明",{"href":919,"dataGaName":920,"dataGaLocation":864},"/ja-jp/privacy/","privacy statement",{"text":922,"config":923},"Cookie 優先設定",{"dataGaName":924,"dataGaLocation":864,"id":925,"isOneTrustButton":404},"cookie preferences","ot-sdk-btn",{"title":470,"links":927,"subMenu":936},[928,932],{"text":929,"config":930},"DevSecOpsプラットフォーム",{"href":452,"dataGaName":931,"dataGaLocation":864},"devsecops platform",{"text":933,"config":934},"AI支援開発",{"href":459,"dataGaName":935,"dataGaLocation":864},"ai-assisted development",[937],{"title":938,"links":939},"トピック",[940,944,949,954,959,964,969,974],{"text":490,"config":941},{"href":942,"dataGaName":943,"dataGaLocation":864},"/ja-jp/topics/ci-cd/","cicd",{"text":945,"config":946},"GitOps",{"href":947,"dataGaName":948,"dataGaLocation":864},"/ja-jp/topics/gitops/","gitops",{"text":950,"config":951},"DevOps",{"href":952,"dataGaName":953,"dataGaLocation":864},"/ja-jp/topics/devops/","devops",{"text":955,"config":956},"バージョン管理",{"href":957,"dataGaName":958,"dataGaLocation":864},"/ja-jp/topics/version-control/","version control",{"text":960,"config":961},"DevSecOps",{"href":962,"dataGaName":963,"dataGaLocation":864},"/ja-jp/topics/devsecops/","devsecops",{"text":965,"config":966},"クラウドネイティブ",{"href":967,"dataGaName":968,"dataGaLocation":864},"/ja-jp/topics/cloud-native/","cloud native",{"text":970,"config":971},"コーディングのためのAI",{"href":972,"dataGaName":973,"dataGaLocation":864},"/ja-jp/topics/devops/ai-for-coding/","ai for coding",{"text":975,"config":976},"エージェント型AI",{"href":977,"dataGaName":978,"dataGaLocation":864},"/ja-jp/topics/agentic-ai/","agentic ai",{"title":980,"links":981},"ソリューション",[982,985,987,992,996,999,1002,1005,1007,1009,1012,1017],{"text":515,"config":983},{"href":510,"dataGaName":984,"dataGaLocation":864},"Application Security Testing",{"text":502,"config":986},{"href":486,"dataGaName":487,"dataGaLocation":864},{"text":988,"config":989},"アジャイル開発",{"href":990,"dataGaName":991,"dataGaLocation":864},"/ja-jp/solutions/agile-delivery/","agile delivery",{"text":993,"config":994},"SCM",{"href":499,"dataGaName":995,"dataGaLocation":864},"source code management",{"text":490,"config":997},{"href":492,"dataGaName":998,"dataGaLocation":864},"continuous integration & delivery",{"text":541,"config":1000},{"href":543,"dataGaName":1001,"dataGaLocation":864},"value stream management",{"text":945,"config":1003},{"href":1004,"dataGaName":948,"dataGaLocation":864},"/ja-jp/solutions/gitops/",{"text":554,"config":1006},{"href":557,"dataGaName":558,"dataGaLocation":864},{"text":560,"config":1008},{"href":563,"dataGaName":564,"dataGaLocation":864},{"text":1010,"config":1011},"公共機関",{"href":569,"dataGaName":570,"dataGaLocation":864},{"text":1013,"config":1014},"教育",{"href":1015,"dataGaName":1016,"dataGaLocation":864},"/ja-jp/solutions/education/","education",{"text":1018,"config":1019},"金融サービス",{"href":1020,"dataGaName":1021,"dataGaLocation":864},"/ja-jp/solutions/finance/","financial services",{"title":1023,"links":1024},"リソース",[1025,1027,1029,1031,1035,1037,1040,1042,1044,1046,1048,1050,1052,1054],{"text":590,"config":1026},{"href":592,"dataGaName":593,"dataGaLocation":864},{"text":595,"config":1028},{"href":597,"dataGaName":598,"dataGaLocation":864},{"text":600,"config":1030},{"href":602,"dataGaName":603,"dataGaLocation":864},{"text":605,"config":1032},{"href":1033,"dataGaName":1034,"dataGaLocation":864},"https://docs.gitlab.com/ja-jp","docs",{"text":628,"config":1036},{"href":630,"dataGaName":631,"dataGaLocation":864},{"text":1038,"config":1039},"最新リリース",{"href":688,"dataGaName":689,"dataGaLocation":864},{"text":623,"config":1041},{"href":625,"dataGaName":626,"dataGaLocation":864},{"text":642,"config":1043},{"href":644,"dataGaName":645,"dataGaLocation":864},{"text":650,"config":1045},{"href":652,"dataGaName":653,"dataGaLocation":864},{"text":655,"config":1047},{"href":657,"dataGaName":658,"dataGaLocation":864},{"text":660,"config":1049},{"href":662,"dataGaName":663,"dataGaLocation":864},{"text":665,"config":1051},{"href":667,"dataGaName":668,"dataGaLocation":864},{"text":670,"config":1053},{"href":672,"dataGaName":673,"dataGaLocation":864},{"text":675,"config":1055},{"href":677,"dataGaName":678,"dataGaLocation":864},{"title":1057,"links":1058},"会社情報",[1059,1061,1063,1065,1067,1069,1073,1078,1080,1082,1084],{"text":699,"config":1060},{"href":701,"dataGaName":693,"dataGaLocation":864},{"text":704,"config":1062},{"href":706,"dataGaName":707,"dataGaLocation":864},{"text":712,"config":1064},{"href":714,"dataGaName":715,"dataGaLocation":864},{"text":717,"config":1066},{"href":719,"dataGaName":720,"dataGaLocation":864},{"text":722,"config":1068},{"href":724,"dataGaName":725,"dataGaLocation":864},{"text":1070,"config":1071},"Sustainability",{"href":1072,"dataGaName":1070,"dataGaLocation":864},"/sustainability/",{"text":1074,"config":1075},"ダイバーシティ、インクルージョン、ビロンギング（DIB）",{"href":1076,"dataGaName":1077,"dataGaLocation":864},"/ja-jp/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":727,"config":1079},{"href":729,"dataGaName":730,"dataGaLocation":864},{"text":737,"config":1081},{"href":739,"dataGaName":740,"dataGaLocation":864},{"text":742,"config":1083},{"href":744,"dataGaName":745,"dataGaLocation":864},{"text":1085,"config":1086},"現代奴隷制の透明性に関する声明",{"href":1087,"dataGaName":1088,"dataGaLocation":864},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":1090},[1091,1093,1096],{"text":912,"config":1092},{"href":914,"dataGaName":915,"dataGaLocation":864},{"text":1094,"config":1095},"Cookieの設定",{"dataGaName":924,"dataGaLocation":864,"id":925,"isOneTrustButton":404},{"text":917,"config":1097},{"href":919,"dataGaName":920,"dataGaLocation":864},[1099],{"id":1100,"title":7,"body":403,"config":1101,"content":1103,"description":403,"extension":1107,"meta":1108,"navigation":404,"path":1109,"seo":1110,"stem":1111,"__hash__":1112},"blogAuthors/en-us/blog/authors/itzik-gan-baruch.yml",{"template":1102},"BlogAuthor",{"name":7,"config":1104},{"headshot":1105,"ctfId":1106},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749658921/Blog/Author%20Headshots/iganbaruch-headshot.jpg","iganbaruch","yml",{},"/en-us/blog/authors/itzik-gan-baruch",{},"en-us/blog/authors/itzik-gan-baruch","bz9VMiTQ1ixvnoxUFk0jiUcnLG3oQsymgXNCqyRqfsk",[1114,1123,1131],{"title":1115,"description":1116,"heroImage":1117,"category":399,"date":1118,"authors":1119,"slug":1122,"externalUrl":403},"GitLab Secrets ManagerがESO、Terraform、APIに対応","スタック全体の認証情報管理をシンプルに。GitLab Secrets Managerは External Secrets Operator（ESO）、Terraform、Secrets Manager APIに対応し、CI/CD以外の ワークフローからもシークレットを安全に取得できます。","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-08-06",[1120,1121],"Erick Bajao","Joe Randazzo","gitlab-secrets-manager-add-eso-terraform-api-support",{"title":1124,"description":1125,"heroImage":1126,"category":399,"date":1127,"authors":1128,"slug":1130,"externalUrl":403},"Claudeが書き、GitLabがつなぐ：本番環境まで途切れないセキュリティ","Claude Securityはコーディングセッション内で脆弱性を検出します。そこから先はGitLabが引き継ぎ、スキャン、ポリシーの適用、そしてソフトウェアライフサイクル全体の監査エビデンス作成までを担います。","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-08-03",[1129],"Alisa Ho","claude-security-and-gitlab",{"title":1132,"description":1133,"heroImage":1134,"category":399,"date":1135,"authors":1136,"slug":1138,"externalUrl":403},"GitLab Duoセキュリティレビューでスキャナーが見逃すロジックの欠陥を検出","AIによるセキュリティ推論で、コードレビューの段階のうちに認可の不備やビジネスロジックのエラー、レース条件を検出します。","https://res.cloudinary.com/about-gitlab-com/image/upload/v1783980535/t3gez0gpayfndrhncunf.png","2026-07-16",[1137],"Mark Settle","gitlab-duo-security-review-flow",{"promotions":1140},[1141,1155,1167,1178],{"id":1142,"categories":1143,"header":1145,"text":1146,"button":1147,"image":1152},"ai-modernization",[1144],"ai","AIの真価、組織全体で発揮できていますか？","所要時間は5分以内です",{"text":1148,"config":1149},"AI成熟度スコアを確認する",{"href":1150,"dataGaName":1151,"dataGaLocation":631},"/ja-jp/assessments/ai-modernization-assessment/","modernization assessment",{"config":1153},{"src":1154},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":1156,"categories":1157,"header":1159,"text":1146,"button":1160,"image":1164},"devops-modernization",[1158,963],"product","単にツールを管理するだけでなく、イノベーションを提供していますか？",{"text":1161,"config":1162},"DevOps成熟度スコアを確認しましょう",{"href":1163,"dataGaName":1151,"dataGaLocation":631},"/ja-jp/assessments/devops-modernization-assessment/",{"config":1165},{"src":1166},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":1168,"categories":1169,"header":1170,"text":1146,"button":1171,"image":1175},"security-modernization",[399],"スピードのためにセキュリティを犠牲にしていませんか？",{"text":1172,"config":1173},"セキュリティ成熟度スコアを確認しましょう",{"href":1174,"dataGaName":1151,"dataGaLocation":631},"/ja-jp/assessments/security-modernization-assessment/",{"config":1176},{"src":1177},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":1179,"paths":1180,"header":1183,"text":1184,"button":1185,"image":1190},"github-azure-migration",[1181,1182],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","チームはGitHubのAzure移行に対応できていますか？","GitHubはすでにAzureを基盤として再構築を進めています。それがあなたのチームにとって何を意味するのか、ご確認ください。",{"text":1186,"config":1187},"GitLabとGitHubの比較を見る",{"href":1188,"dataGaName":1189,"dataGaLocation":631},"/ja-jp/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1191},{"src":1166},{"header":1193,"blurb":1194,"button":1195,"secondaryButton":1199},"今すぐ開発をスピードアップ","DevSecOpsに特化したインテリジェントオーケストレーションプラットフォームで実現できることをご確認ください。\n",{"text":425,"config":1196},{"href":1197,"dataGaName":428,"dataGaLocation":1198},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/ja-jp/","feature",{"text":747,"config":1200},{"href":756,"dataGaName":433,"dataGaLocation":1198},1786803770593]