[{"data":1,"prerenderedAt":1866},["ShallowReactive",2],{"/ja-jp/blog/the-ultimate-guide-to-token-management-at-gitlab":3,"navigation-ja-jp":1085,"banner-ja-jp":1514,"footer-ja-jp":1522,"blog-post-authors-ja-jp-Hakeem Abdul-Razak":1764,"blog-related-posts-ja-jp-the-ultimate-guide-to-token-management-at-gitlab":1780,"blog-promotions-ja-jp":1805,"next-steps-ja-jp":1857},{"id":4,"title":5,"authors":6,"body":8,"category":1061,"date":1062,"description":1063,"extension":1064,"externalUrl":1065,"faq":1065,"featured":1066,"heroImage":1067,"meta":1068,"navigation":1066,"path":1069,"seo":1070,"slug":1075,"stem":1076,"tags":1077,"template":1082,"updatedDate":1083,"__hash__":1084},"blogPosts/ja-jp/blog/the-ultimate-guide-to-token-management-at-gitlab.md","GitLabにおけるトークン管理の究極ガイド",[7],"Hakeem Abdul-Razak",{"type":9,"value":10,"toc":1039},"minimark",[11,15,25,28,84,87,90,93,100,109,141,143,152,346,358,361,364,367,370,405,408,421,426,447,471,475,484,499,502,508,511,514,534,545,559,565,569,572,662,664,667,676,699,703,711,714,717,812,814,817,820,852,854,861,888,903,909,912,915,953,956,959,1012,1015,1024,1035],[12,13,14],"p",{},"深夜2時、成長中のテック企業でエンジニアとして働いているあなたに、緊急の電話がかかってきました。重要なデプロイパイプラインが失敗し、チームはその原因を突き止めようと必死です。数時間後、1週間前に退職したエンジニアのパーソナルアクセストークンが失効していたことが判明します。そのトークンは複数の重要な自動化プロセスで使用されており、その影響でシステム全体が混乱状態に陥ってしまいました。これを防ぐためには、どのようにトークンを管理すべきなのでしょうか？",[12,16,17,18,24],{},"このガイドでは、トークンを適切に特定、管理、保護するためのエンドツーエンドのプロセスをご紹介します。このガイドは、プロジェクト内でのトークン管理を徹底したいGitLabの管理者、デベロッパー、セキュリティチームに向けて、",[19,20,23],"a",{"href":21,"rel":22},"https://docs.gitlab.com/ja-jp/security/tokens/",[],"トークンに関する詳しい文書","を補う参考資料として活用いただけます。",[12,26,27],{},"このガイドでは、以下の内容を取り上げています。",[29,30,31,38,44,58,64,70],"ul",{},[32,33,34],"li",{},[19,35,37],{"href":36},"#how-to-select-the-right-token-for-the-job","ジョブに適したトークンの選び方",[32,39,40],{},[19,41,43],{"href":42},"#token-types","トークンの種類",[32,45,46,50],{},[19,47,49],{"href":48},"#discovering-your-tokens","自分が使用しているトークンの把握方法",[29,51,52],{},[32,53,54],{},[19,55,57],{"href":56},"#credentials-inventory","認証情報インベントリ",[32,59,60],{},[19,61,63],{"href":62},"#managing-tokens-in-the-gitlab-ui-and-api","GitLab UIおよびAPIでのトークン管理",[32,65,66],{},[19,67,69],{"href":68},"#token-rotation-and-expiration-management","トークンのローテーションと有効期限の管理",[32,71,72,76],{},[19,73,75],{"href":74},"#token-management-best-practices","トークン管理のベストプラクティス",[29,77,78],{},[32,79,80],{},[19,81,83],{"href":82},"#service-accounts","サービスアカウント",[85,86,37],"h2",{"id":37},[12,88,89],{},"ユースケースに合ったトークンを選ぶことで、セキュリティと機能性の両面で最適な運用が可能になります。",[12,91,92],{},"トークンは、APIリクエストの認証、CI/CDパイプラインの自動化、サードパーティツールとの統合、デプロイやリポジトリの管理など、幅広い場面で活用できます。",[12,94,95],{},[96,97],"img",{"alt":98,"src":99},"トークン管理ガイド -\nトークンのフローチャート","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097435/Blog/Content%20Images/Blog/Content%20Images/image3_aHR0cHM6_1750097434869.png",[12,101,102,103,108],{},"わかりやすさを重視し、この図では1人のユーザーがトークンを所有するシンプルなユースケースを例にしています。詳細については、インスタンスまたはトップレベルグループの各",[19,104,107],{"href":105,"rel":106},"https://docs.gitlab.com/ja-jp/user/permissions/",[],"ネームスペース","（ユーザー/グループ）におけるユーザーロールや権限に関するGitLabの文書をご参照ください。以下のようなユースケースが考えられます。",[29,110,111,124],{},[32,112,113,117,118,123],{},[114,115,116],"strong",{},"パーソナルアクセストークン","（",[19,119,122],{"href":120,"rel":121},"https://docs.gitlab.com/ja-jp/user/profile/personal_access_tokens/#personal-access-token-scopes",[],"PAT","）：デベロッパーがユーザーの個人アクセスや権限を必要とする場合に使えるトークンです。このトークンは、ユーザーのステータスと権限に従って認証情報が管理されるため、ユーザーが特定のプロジェクトやグループへのアクセス権を失った場合や、アカウントが無効化された場合には、自動的にそのトークンも無効になります。",[32,125,126,117,129,134,135,140],{},[114,127,128],{},"プロジェクト/グループアクセストークン",[19,130,133],{"href":131,"rel":132},"https://docs.gitlab.com/ja-jp/user/project/settings/project_access_tokens/#scopes-for-a-project-access-token",[],"PrAT","/",[19,136,139],{"href":137,"rel":138},"https://docs.gitlab.com/ja-jp/user/group/settings/group_access_tokens/#scopes-for-a-group-access-token",[],"GrAT","）：特定のプロジェクトまたはグループ内でのリソースへのアクセスを制限する必要がある場合に適したトークンです。PrAT/GrATを持つユーザーは、割り当てられたスコープを通じてこれらのリソースにアクセスできるようになります。",[85,142,43],{"id":43},[12,144,145,146,151],{},"こちらは、GitLabトークンの種類と、それぞれのデフォルトのプレフィックスおよびユースケースの一覧です。詳細については、",[19,147,150],{"href":148,"rel":149},"https://docs.gitlab.com/ja-jp/security/tokens/#available-scopes",[],"GitLabトークンの概要ページ","をご覧ください。",[153,154,155,171],"table",{},[156,157,158],"thead",{},[159,160,161,165,168],"tr",{},[162,163,164],"th",{},"トークン",[162,166,167],{},"プレフィックス",[162,169,170],{},"説明",[172,173,174,185,196,206,216,226,237,248,259,270,281,292,303,314,325,336],"tbody",{},[159,175,176,179,182],{},[177,178,116],"td",{},[177,180,181],{},"glpat",[177,183,184],{},"ユーザー固有のデータにアクセス",[159,186,187,190,193],{},[177,188,189],{},"OAuth 2.0トークン",[177,191,192],{},"gloas",[177,194,195],{},"OAuth2.0 認証プロトコルを使ったサードパーティアプリとの連携",[159,197,198,201,203],{},[177,199,200],{},"なりすましトークン",[177,202,181],{},[177,204,205],{},"他のユーザーの代わりに管理操作を実行",[159,207,208,211,213],{},[177,209,210],{},"プロジェクトアクセストークン",[177,212,181],{},[177,214,215],{},"特定のプロジェクトのデータにアクセス",[159,217,218,221,223],{},[177,219,220],{},"グループアクセストークン",[177,222,181],{},[177,224,225],{},"特定のグループのデータにアクセス",[159,227,228,231,234],{},[177,229,230],{},"デプロイトークン",[177,232,233],{},"gldt",[177,235,236],{},"ユーザー名とパスワードなしでプロジェクトのコンテナイメージをクローン、プッシュ、プル",[159,238,239,242,245],{},[177,240,241],{},"デプロイキー",[177,243,244],{},"該当なし",[177,246,247],{},"リポジトリへの読み取り専用または読み書きアクセスを許可",[159,249,250,253,256],{},[177,251,252],{},"Runner認証トークン",[177,254,255],{},"glrt",[177,257,258],{},"GitLab Runnerを認証",[159,260,261,264,267],{},[177,262,263],{},"CI/CDジョブトークン",[177,265,266],{},"glcbt",[177,268,269],{},"CI/CDプロセスを自動化",[159,271,272,275,278],{},[177,273,274],{},"トリガートークン",[177,276,277],{},"glptt",[177,279,280],{},"パイプラインを手動またはプログラムでトリガー",[159,282,283,286,289],{},[177,284,285],{},"フィードトークン",[177,287,288],{},"glft",[177,290,291],{},"パッケージ/RSSフィードへのアクセス認証",[159,293,294,297,300],{},[177,295,296],{},"受信メールトークン",[177,298,299],{},"glimt",[177,301,302],{},"受信メールの処理",[159,304,305,308,311],{},[177,306,307],{},"Kubernetes向けGitLabエージェントトークン",[177,309,310],{},"glagent",[177,312,313],{},"GitLab GitLabエージェントを通じてKubernetesクラスターを管理",[159,315,316,319,322],{},[177,317,318],{},"SCIMトークン",[177,320,321],{},"glsoat",[177,323,324],{},"SCIMを利用したユーザー管理の統合",[159,326,327,330,333],{},[177,328,329],{},"機能フラグクライアントトークン",[177,331,332],{},"glffct",[177,334,335],{},"プログラムで機能フラグを有効化",[159,337,338,341,343],{},[177,339,340],{},"Webhookトークン",[177,342,244],{},[177,344,345],{},"WebhookのリクエストがGitLabから送信されたことを検証するための秘密トークン（ユーザーが設定）",[347,348,349],"blockquote",{},[12,350,351,352,357],{},"組織の規模が大きくなるほど、トークンの棚卸しや失効ポリシーの運用負荷は上がります。監査要件を含めた設計については、",[19,353,356],{"href":354,"rel":355},"https://about.gitlab.com/ja-jp/sales/",[],"自社の要件に合わせてご相談いただけます","。",[85,359,360],{"id":360},"トークンの確認方法",[362,363,57],"h3",{"id":57},[12,365,366],{},"GitLab Ultimateでは、GitLab\nSelf-Managedの管理者や、GitLab.com（バージョン17.5以降）における企業組織のトップレベルグループのオーナーが、自身のネームスペース内の認証情報を監視できます。",[12,368,369],{},"このインベントリでは、以下のようなトークン情報を確認できます。",[29,371,372,390,393,396,399,402],{},[32,373,43,374],{},[29,375,376,384],{},[32,377,378,383],{},[19,379,382],{"href":380,"rel":381},"https://docs.gitlab.com/ja-jp/administration/credentials_inventory/",[],"GitLab.com","で利用可能なトークン",[32,385,386,383],{},[19,387,389],{"href":380,"rel":388},[],"GitLab Self-Managed",[32,391,392],{},"関連付けられたユーザーアカウント",[32,394,395],{},"トークンのスコープ、および作成日と有効期限",[32,397,398],{},"最終使用時のIPアドレス（GitLab 17.10時点）",[32,400,401],{},"上記のユーザー定義パラメータに基づくトークンのフィルタリング",[32,403,404],{},"トークンの取り消しおよびローテーションの機能",[12,406,407],{},"認証情報インベントリを適切に管理することで、権限が過剰なトークンの特定や、ローテーションが必要な認証情報の把握が可能になり、安全かつ効率的な運用が実現します。",[409,410,413,414],"figure",{"className":411},[412],"video_container","\n  ",[415,416,420],"iframe",{"src":417,"frameBorder":418,"allowFullScreen":419},"https://www.youtube.com/embed/A9ONfnwswd0?si=4VIEUgJaD4daj81b&start=105","0","true"," ",[422,423,425],"h4",{"id":424},"認証情報インベントリapi","認証情報インベントリAPI",[12,427,428,429,434,435,440,441,446],{},"UIの機能に加えて、新しい/group/:id/manage",[19,430,433],{"href":431,"rel":432},"https://docs.gitlab.com/ja-jp/api/group_members/#list-all-members-of-a-group-or-project",[],"エンドポイント","を通じて認証情報インベントリAPIをリリースするための",[19,436,439],{"href":437,"rel":438},"https://gitlab.com/groups/gitlab-org/-/epics/16343",[],"開発が進行中","です。このエンドポイントでアクセスできる認証情報は企業",[19,442,445],{"href":443,"rel":444},"https://docs.gitlab.com/ja-jp/user/enterprise_user/",[],"ユーザー","に限定されており、企業組織のトップレベルグループのオーナーが利用可能です。将来のAPIコールの例は以下のとおりです。",[448,449,454],"pre",{"className":450,"code":451,"language":452,"meta":453,"style":453},"language-console shiki shiki-themes github-light","curl --header \"PRIVATE-TOKEN: \u003Cpat>\"\n\"https://verified_domain.com/api/v4/groups/\u003Cgroup_id>/manage/personal_access_tokens\"\n","console","",[455,456,457,465],"code",{"__ignoreMap":453},[458,459,462],"span",{"class":460,"line":461},"line",1,[458,463,464],{},"curl --header \"PRIVATE-TOKEN: \u003Cpat>\"\n",[458,466,468],{"class":460,"line":467},2,[458,469,470],{},"\"https://verified_domain.com/api/v4/groups/\u003Cgroup_id>/manage/personal_access_tokens\"\n",[362,472,474],{"id":473},"gitlab-api","GitLab API",[12,476,477,478,483],{},"GitLab\nAPIを使用すると、組織内のトークンをプログラムで一覧表示および管理できます。主要な認証関連エンドポイントは、個人用、グループ用、CI/CDトークンなど、",[19,479,482],{"href":480,"rel":481},"https://docs.gitlab.com/ja-jp/api/rest/authentication/",[],"さまざまなトークンの種類","をサポートしています。GitLab上で認証済みユーザーがアクセスできるすべてのプロジェクトを一覧表示する際のパーソナルアクセストークンの使用方法は次のとおりです。",[448,485,487],{"className":450,"code":486,"language":452,"meta":453,"style":453},"curl --header \"PRIVATE-TOKEN: \u003Cyour_access_token>\" \\\n      \"https://gitlab.example.com/api/v4/projects\"\n",[455,488,489,494],{"__ignoreMap":453},[458,490,491],{"class":460,"line":461},[458,492,493],{},"curl --header \"PRIVATE-TOKEN: \u003Cyour_access_token>\" \\\n",[458,495,496],{"class":460,"line":467},[458,497,498],{},"      \"https://gitlab.example.com/api/v4/projects\"\n",[12,500,501],{},"GitLab APIへのAPIコールの方法については、次の動画をご覧ください。",[409,503,413,505],{"className":504},[412],[415,506,420],{"src":507,"frameBorder":418,"allowFullScreen":419},"https://www.youtube.com/embed/0LsMC3ZiXkA?si=vj871YH610jwQdFc",[362,509,510],{"id":510},"トークンの使用場所の確認",[12,512,513],{},"トークンの使用場所を確認する方法は以下のとおりです。",[29,515,516,526,528,531],{},[32,517,518],{},[114,519,520,521],{},"ユーザープロフィール >\n",[19,522,525],{"href":523,"rel":524},"https://docs.gitlab.com/ja-jp/user/profile/personal_access_tokens/#view-the-time-at-and-ips-where-a-token-was-last-used",[],"アクセストークン",[32,527,57],{},[32,529,530],{},"監査イベント",[32,532,533],{},"API経由",[12,535,536,537,540,541,544],{},"トークンの使用状況に関する情報は、",[114,538,539],{},"last_used","は10分ごと、",[114,542,543],{},"last_used_ip","は1分ごとに更新されます。",[12,546,547,548,553,554,558],{},"IPアドレスの確認機能はGitLab 17.9で追加され、",[114,549,550],{},[551,552],"pat-ip",{},"機能フラグにより管理されます。",[19,555,557],{"href":523,"rel":556},[],"トークンの最終使用時間","と、そのトークンが使われた最後の5つの異なるIPアドレスを表示する方法は以下のとおりです。",[12,560,561],{},[96,562],{"alt":563,"src":564},"トークン管理ガイド -\nパーソナルアクセストークンの設定","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097435/Blog/Content%20Images/Blog/Content%20Images/image1_aHR0cHM6_1750097434870.png",[85,566,568],{"id":567},"gitlab-uiとapiにおけるトークンの管理","GitLab UIとAPIにおけるトークンの管理",[12,570,571],{},"以下の表には、UIにおけるトークン作成の詳細と、APIを介したトークンの使用方法を示すビデオが含まれています。",[153,573,574,585],{},[156,575,576],{},[159,577,578,580,583],{},[162,579,164],{},[162,581,582],{},"GitLab UI",[162,584,474],{},[172,586,587,614,638],{},[159,588,589,591,604],{},[177,590,116],{},[177,592,593,598,599],{},[19,594,597],{"href":595,"rel":596},"https://docs.gitlab.com/ja-jp/user/profile/personal_access_tokens/#create-a-personal-access-token",[],"ドキュメント","と",[19,600,603],{"href":601,"rel":602},"https://youtu.be/v5Nj3Jy4vaI?t=3",[],"動画",[177,605,606,598,610],{},[19,607,597],{"href":608,"rel":609},"https://docs.gitlab.com/ja-jp/api/personal_access_tokens/",[],[19,611,603],{"href":612,"rel":613},"https://youtu.be/v5Nj3Jy4vaI?t=43",[],[159,615,616,618,628],{},[177,617,220],{},[177,619,620,598,624],{},[19,621,597],{"href":622,"rel":623},"https://docs.gitlab.com/ja-jp/user/group/settings/group_access_tokens/#group-access-tokens",[],[19,625,603],{"href":626,"rel":627},"https://youtu.be/v5Nj3Jy4vaI?t=120",[],[177,629,630,598,634],{},[19,631,597],{"href":632,"rel":633},"https://docs.gitlab.com/ja-jp/api/group_access_tokens/",[],[19,635,603],{"href":636,"rel":637},"https://youtu.be/v5Nj3Jy4vaI?t=157",[],[159,639,640,642,652],{},[177,641,210],{},[177,643,644,598,648],{},[19,645,597],{"href":646,"rel":647},"https://docs.gitlab.com/ja-jp/user/project/settings/project_access_tokens/#project-access-tokens",[],[19,649,603],{"href":650,"rel":651},"https://youtu.be/v5Nj3Jy4vaI?t=254",[],[177,653,654,598,658],{},[19,655,597],{"href":656,"rel":657},"https://docs.gitlab.com/ja-jp/api/project_access_tokens/",[],[19,659,603],{"href":660,"rel":661},"https://youtu.be/v5Nj3Jy4vaI?t=285",[],[85,663,69],{"id":69},[12,665,666],{},"トークンローテーションと厳格な有効期限管理を実施することで、セキュリティリスクを減らし、セキュリティ基準への準拠を確保できます。定期的なローテーションと有効期限の強制により、期限切れの認証情報がセキュリティの脆弱性となるのを防ぎます。",[12,668,669,670,675],{},"これまで、グループおよびプロジェクトのアクセストークンは、有効期限が切れると自動的に削除されていました。そのため、無効なトークンの記録が残らず、監査やセキュリティレビューを行う上で課題となっていました。この問題に対応するため、",[19,671,674],{"href":672,"rel":673},"https://gitlab.com/gitlab-org/gitlab/-/issues/462217",[],"最近のアップデート","により、無効化されたグループおよびプロジェクトのアクセストークンの記録が、無効になってからUI上に30日間保持されるようになりました。これにより、トークンの使用状況や有効期限、取り消しの履歴を追跡しやすくなり、コンプライアンスやモニタリングの強化につながります。",[29,677,678,681,690],{},[32,679,680],{},"トークンのローテーションと有効期限の管理をより積極的に行うには、次の手順を実行します。",[32,682,683,684,689],{},"UIまたはAPIを介してトークンを積極的にローテーションする。APIを使用する場合は、",[19,685,688],{"href":686,"rel":687},"https://docs.gitlab.com/ja-jp/api/personal_access_tokens/#automatic-reuse-detection",[],"自動的にトークンの再利用を検知","するセキュリティ機能に注意が必要です。",[32,691,692,693,698],{},"インスタンス全体で、",[19,694,697],{"href":695,"rel":696},"https://docs.gitlab.com/ja-jp/administration/settings/account_and_limit_settings/#limit-the-lifetime-of-access-tokens",[],"アクセストークンの最大有効期間","を制限する設定を導入。",[362,700,702],{"id":701},"トークンローテーションapi","トークンローテーションAPI",[12,704,705,706,710],{},"GitLab 17.7までは、アクセストークンのローテーションはAPIを通じてプログラム上で行う必要がありましたが、現在はUI上でも実行可能になりました。操作方法は以下の表の動画または",[19,707,597],{"href":708,"rel":709},"https://docs.gitlab.com/ja-jp/user/project/settings/project_access_tokens/#use-the-ui",[],"をご確認ください。",[362,712,713],{"id":713},"トークンローテーションスニペット",[12,715,716],{},"以下の表には、GitLabトークンのローテーションに関する動画のリンクをまとめています。",[153,718,719,732],{},[156,720,721],{},[159,722,723,725,728,730],{},[162,724,164],{},[162,726,727],{},"前提条件",[162,729,582],{},[162,731,474],{},[172,733,734,760,786],{},[159,735,736,738,741,750],{},[177,737,116],{},[177,739,740],{},"スコープ：api",[177,742,743,598,746],{},[19,744,597],{"href":595,"rel":745},[],[19,747,603],{"href":748,"rel":749},"https://youtu.be/v5Nj3Jy4vaI?t=76",[],[177,751,752,598,756],{},[19,753,597],{"href":754,"rel":755},"https://docs.gitlab.com/ja-jp/api/personal_access_tokens/#rotate-a-personal-access-token",[],[19,757,603],{"href":758,"rel":759},"https://youtu.be/v5Nj3Jy4vaI?t=92",[],[159,761,762,764,767,777],{},[177,763,220],{},[177,765,766],{},"スコープ：apiと役割：オーナー",[177,768,769,598,773],{},[19,770,597],{"href":771,"rel":772},"https://docs.gitlab.com/ja-jp/user/group/settings/group_access_tokens/#create-a-group-access-token-using-ui",[],[19,774,603],{"href":775,"rel":776},"https://youtu.be/v5Nj3Jy4vaI?t=203",[],[177,778,779,598,782],{},[19,780,597],{"href":632,"rel":781},[],[19,783,603],{"href":784,"rel":785},"https://youtu.be/v5Nj3Jy4vaI?t=214",[],[159,787,788,790,793,803],{},[177,789,210],{},[177,791,792],{},"スコープ：apiと役割：オーナー、メンテナー",[177,794,795,598,799],{},[19,796,597],{"href":797,"rel":798},"https://docs.gitlab.com/ja-jp/user/project/settings/project_access_tokens/#create-a-project-access-token",[],[19,800,603],{"href":801,"rel":802},"https://youtu.be/v5Nj3Jy4vaI?t=335",[],[177,804,805,598,808],{},[19,806,597],{"href":656,"rel":807},[],[19,809,603],{"href":810,"rel":811},"https://youtu.be/v5Nj3Jy4vaI?t=349",[],[85,813,75],{"id":75},[362,815,816],{"id":816},"最小権限の原則",[12,818,819],{},"各トークンに割り当てる権限を、それぞれのタスクに必要な最小限に制限することで、リスクを軽減します。これにより、システム内の潜在的な障害箇所を事前に予測・対処しやすくなります。以下のような方法で、この原則を実践できます。",[29,821,822,825,834,837,846,849],{},[32,823,824],{},"それぞれのジョブに合った適切なトークンを選ぶ。フローチャートを参照。",[32,826,827,828,833],{},"トークンの作成時に必要なスコープのみを割り当てる。たとえば、監査目的のようなジョブには読み取り専用のスコープを使用します。詳細は",[19,829,832],{"href":830,"rel":831},"https://docs.gitlab.com/ja-jp/user/permissions/#roles",[],"ロール","を参照。",[32,835,836],{},"特別な理由がない限り、管理者権限を付与しない。",[32,838,839,840,845],{},"インスタンス全体でのデフォルトのトークン",[19,841,844],{"href":842,"rel":843},"https://docs.gitlab.com/ja-jp/administration/settings/account_and_limit_settings/#set-a-lifetime-1",[],"有効期限","を設定する。",[32,847,848],{},"トークンの権限を定期的に確認・監査し、運用実態に合っているか見直す。",[32,850,851],{},"タスク完了後は速やかにトークンを無効化する。",[362,853,83],{"id":83},[12,855,856,860],{},[19,857,83],{"href":858,"rel":859},"https://docs.gitlab.com/ja-jp/user/profile/service_accounts/",[],"を使用することで、トークンを人間のユーザーではなく非人間エンティティに紐づけることができ、特定ユーザーへの依存を減らせます。自動化にトークンを使う場合、個人アカウントではなく、スコープを制限したサービスアカウントを作成することが推奨されます。サービスアカウントを使用する主なメリットは次のとおりです。",[29,862,863,866,869,872,880],{},[32,864,865],{},"CI/CDパイプラインでサービスアカウントのトークンを使うことで、ユーザーアカウントの変更による中断を防げる",[32,867,868],{},"個人アカウントに影響を与えずに、プログラム上でトークンのローテーション処理を自動化できる",[32,870,871],{},"サービスアカウントによる操作のモニタリング・監査がより明確になる",[32,873,874,879],{},[19,875,878],{"href":876,"rel":877},"https://docs.gitlab.com/ja-jp/user/profile/personal_access_tokens/#create-a-service-account-personal-access-token-with-no-expiry-date",[],"有効期限のない","サービスアカウントを作成できる",[32,881,882,887],{},[19,883,886],{"href":884,"rel":885},"https://docs.gitlab.com/ja-jp/user/profile/service_accounts/#create-a-service-account",[],"ライセンスシート","を消費しない",[12,889,890,891,896,897,902],{},"GitLabでは、サービスアカウントとそのトークンの管理をより簡単にするために、",[19,892,895],{"href":893,"rel":894},"https://docs.gitlab.com/ja-jp/api/service_accounts/#create-a-service-account-user",[],"APIベースでの作成","に対応する新しい",[19,898,901],{"href":899,"rel":900},"https://gitlab.com/groups/gitlab-org/-/epics/9965",[],"サービスアカウントUI","の提供を予定しています。以下のデモでは、サービスアカウントをプログラム上で使用する方法を紹介しています。",[409,904,413,906],{"className":905},[412],[415,907,420],{"src":908,"frameBorder":418,"allowFullScreen":419},"https://youtu.be/oZvjg0SCsqY?si=hSXKtq87lDeY9aRq",[362,910,911],{"id":911},"脆弱性ツール",[12,913,914],{},"GitLabに組み込まれたセキュリティツールを活用することで、トークンの使用に関連する脆弱性を特定し、リスクを軽減できます。最大限のカバレッジを得るには、各ツールを併用することを推奨します。",[29,916,917,931,945],{},[32,918,919,924,925,930],{},[19,920,923],{"href":921,"rel":922},"https://docs.gitlab.com/ja-jp/user/application_security/secret_detection/",[],"シークレット検出","：リポジトリ内にハードコードされたシークレット（APIトークン、パスワード、その他の機密情報）がないかをスキャンします。",[19,926,929],{"href":927,"rel":928},"https://docs.gitlab.com/ja-jp/user/application_security/secret_detection/detected_secrets/",[],"検出されたシークレットの一覧","も確認可能です。",[32,932,933,938,939,944],{},[19,934,937],{"href":935,"rel":936},"https://docs.gitlab.com/ja-jp/user/application_security/sast/",[],"静的アプリケーションセキュリティテスト（SAST）","：ソースコードに存在するセキュリティ上の脆弱性を分析し、",[19,940,943],{"href":941,"rel":942},"https://docs.gitlab.com/ja-jp/user/application_security/sast/#features",[],"マージリクエスト内でUI上のレポートとして表示","するなどの機能を提供します。",[32,946,947,952],{},[19,948,951],{"href":949,"rel":950},"https://docs.gitlab.com/ja-jp/user/application_security/dependency_scanning/",[],"依存関係スキャン","：プロジェクトで使用しているサードパーティライブラリに、トークンに関連する脆弱性が含まれていないかを確認します",[362,954,955],{"id":955},"監査ログとモニタリング",[12,957,958],{},"インスタンスまたはグループ単位で、監査ログとトークンの使用状況を定期的に確認することで、トークンの健全性を維持できます。",[29,960,961,968,976,984,990,998],{},[32,962,963,967],{},[19,964,530],{"href":965,"rel":966},"https://docs.gitlab.com/ja-jp/user/compliance/audit_events/",[],"：GitLabの監査イベントログを有効にすると、トークンの作成、使用、削除、不審なAPIコール（ログ内の許可されていないパラメーターやレートリミッターの継続的なトリガーなど）を追跡できます。",[32,969,970,975],{},[19,971,974],{"href":972,"rel":973},"https://docs.gitlab.com/ja-jp/administration/reporting/ip_addr_restrictions/#configure-ip-address-restrictions",[],"IP許可リスト","：悪意のあるユーザーが複数のIPアドレスを使ってアクティビティを隠すことを防ぎます。",[32,977,978,983],{},[19,979,982],{"href":980,"rel":981},"https://docs.gitlab.com/ja-jp/operations/incident_management/alerts/",[],"アラート","：不審なアクティビティに対してアラートを設定できます（オンコールローテーションに関するページングのトリガーやインシデントの作成に活用可能）。",[32,985,986,989],{},[19,987,57],{"href":380,"rel":988},[],"：利用可能なすべてのアクセストークンを完全に管理し、必要に応じて取り消すことができます。",[32,991,992,997],{},[19,993,996],{"href":994,"rel":995},"https://docs.gitlab.com/ja-jp/user/profile/notifications/",[],"通知","：グループ、プロジェクト、パーソナルの各種トークンについて、有効期限が近づいた際に送信される通知メールを積極的に処理します。お客様からのご要望に応え、この通知機能は従来の7日前に加え、30日前、60日前の通知にも対応しました。",[32,999,1000,1005,1006,1011],{},[19,1001,1004],{"href":1002,"rel":1003},"https://docs.gitlab.com/ja-jp/user/project/integrations/webhooks/#create-a-webhook",[],"Webhooks","：アクセストークンのWebhookをグループとプロジェクトに設定して、トークンの有効期限7日前の通知イベントを送信できるようになりました。この機能も最近、",[114,1007,1008],{},[1009,1010],"extended-expiry-webhook-execution-setting",{},"機能\nフラグ（デフォルトでは無効）によって、30日、60日前の通知送信に対応しました。",[85,1013,1014],{"id":1014},"今後の展開",[12,1016,1017,1018,1023],{},"GitLabでは多くの種類のトークンを提供しており、今後はそれらを統合しつつ、トークンの有効期間や細かなスコープ設定、一貫した管理・運用に重点を置いた改善を進めていく",[19,1019,1022],{"href":1020,"rel":1021},"https://gitlab.com/gitlab-org/gitlab/-/issues/502630",[],"予定","です。現在注力しているトークン関連の機能には、サービスアカウント用の完全なUI、認証情報インベントリへの追加認証情報タイプの対応、トークンおよびサービスアカウントの監査強化などが含まれます。",[347,1025,1026],{},[12,1027,1028,1029,1034],{},"トークン管理機能を体験するには、",[19,1030,1033],{"href":1031,"rel":1032},"https://about.gitlab.com/ja-jp/free-trial/?hosted=saas",[],"GitLab\nUltimateの無料トライアル","にぜひご登録ください。",[1036,1037,1038],"style",{},"html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}",{"title":453,"searchDepth":467,"depth":467,"links":1040},[1041,1042,1043,1049,1050,1054,1060],{"id":37,"depth":467,"text":37},{"id":43,"depth":467,"text":43},{"id":360,"depth":467,"text":360,"children":1044},[1045,1047,1048],{"id":57,"depth":1046,"text":57},3,{"id":473,"depth":1046,"text":474},{"id":510,"depth":1046,"text":510},{"id":567,"depth":467,"text":568},{"id":69,"depth":467,"text":69,"children":1051},[1052,1053],{"id":701,"depth":1046,"text":702},{"id":713,"depth":1046,"text":713},{"id":75,"depth":467,"text":75,"children":1055},[1056,1057,1058,1059],{"id":816,"depth":1046,"text":816},{"id":83,"depth":1046,"text":83},{"id":911,"depth":1046,"text":911},{"id":955,"depth":1046,"text":955},{"id":1014,"depth":467,"text":1014},"security","2025-02-25","ソフトウェア開発ライフサイクル全体のセキュリティを向上させるために、トークンを特定、管理、保護するためのエンドツーエンドのプロセスをすべてご紹介します。","md",null,true,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097408/Blog/Hero%20Images/Blog/Hero%20Images/AdobeStock_1097303277_6gTk7M1DNx0tFuovupVFB1_1750097407860.jpg",{},"/ja-jp/blog/the-ultimate-guide-to-token-management-at-gitlab",{"ogTitle":5,"ogImage":1067,"ogDescription":1063,"ogSiteName":1071,"noIndex":1072,"ogType":1073,"ogUrl":1074,"title":5,"canonicalUrls":1074,"description":1063},"https://about.gitlab.com",false,"article","https://about.gitlab.com/blog/the-ultimate-guide-to-token-management-at-gitlab","the-ultimate-guide-to-token-management-at-gitlab","ja-jp/blog/the-ultimate-guide-to-token-management-at-gitlab",[1078,1061,1079,1080,1081],"tutorial","DevSecOps platform","features","product","BlogPost","2026-08-06","txtSLyt_uJrZUlMbi6qECO0Ny58ahjkGsheSJRPUFdc",{"logo":1086,"freeTrial":1091,"sales":1096,"login":1101,"items":1106,"search":1435,"minimal":1467,"duo":1484,"switchNav":1493,"pricingDeployment":1504},{"config":1087},{"href":1088,"dataGaName":1089,"dataGaLocation":1090},"/ja-jp/","gitlab logo","header",{"text":1092,"config":1093},"無料トライアルを開始",{"href":1094,"dataGaName":1095,"dataGaLocation":1090},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/ja-jp&glm_content=default-saas-trial/","free trial",{"text":1097,"config":1098},"デモをリクエスト",{"href":1099,"dataGaName":1100,"dataGaLocation":1090},"/ja-jp/sales/?contact-topic=request-demo","sales",{"text":1102,"config":1103},"サインイン",{"href":1104,"dataGaName":1105,"dataGaLocation":1090},"https://gitlab.com/users/sign_in/","sign in",[1107,1136,1238,1243,1357,1413],{"text":1108,"config":1109,"menu":1111},"プラットフォーム",{"dataNavLevelOne":1110},"platform",{"type":1112,"columns":1113},"cards",[1114,1120,1128],{"title":1108,"description":1115,"link":1116},"DevSecOpsに特化したインテリジェントオーケストレーションプラットフォーム",{"text":1117,"config":1118},"プラットフォームの詳細はこちら",{"href":1119,"dataGaName":1110,"dataGaLocation":1090},"/ja-jp/platform/",{"title":1121,"description":1122,"link":1123},"GitLab Duo Agent Platform","ソフトウェアライフサイクル全体を支えるエージェント型AI",{"text":1124,"config":1125},"GitLab Duoのご紹介",{"href":1126,"dataGaName":1127,"dataGaLocation":1090},"/ja-jp/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":1129,"description":1130,"link":1131},"GitLabが選ばれる理由","エンタープライズがGitLabを選ぶ主な理由をご覧ください",{"text":1132,"config":1133},"詳細はこちら",{"href":1134,"dataGaName":1135,"dataGaLocation":1090},"/ja-jp/why-gitlab/","why gitlab",{"text":1137,"left":1066,"config":1138,"menu":1140},"製品",{"dataNavLevelOne":1139},"solutions",{"type":1141,"link":1142,"columns":1146,"feature":1217},"lists",{"text":1143,"config":1144},"すべてのソリューションを表示",{"href":1145,"dataGaName":1139,"dataGaLocation":1090},"/ja-jp/solutions/",[1147,1172,1195],{"title":1148,"description":1149,"link":1150,"items":1155},"自動化","CI/CDと自動化でデプロイを加速",{"config":1151},{"icon":1152,"href":1153,"dataGaName":1154,"dataGaLocation":1090},"AutomatedCodeAlt","/ja-jp/solutions/delivery-automation/","automated software delivery",[1156,1160,1163,1168],{"text":1157,"config":1158},"CI/CD",{"href":1159,"dataGaLocation":1090,"dataGaName":1157},"/ja-jp/solutions/continuous-integration/",{"text":1121,"config":1161},{"href":1126,"dataGaLocation":1090,"dataGaName":1162},"gitlab duo agent platform - product menu",{"text":1164,"config":1165},"ソースコード管理",{"href":1166,"dataGaLocation":1090,"dataGaName":1167},"/ja-jp/solutions/source-code-management/","Source Code Management",{"text":1169,"config":1170},"自動化されたソフトウェアデリバリー",{"href":1153,"dataGaLocation":1090,"dataGaName":1171},"Automated software delivery",{"title":1173,"description":1174,"link":1175,"items":1180},"セキュリティ","セキュリティを犠牲にすることなくコード作成を高速化",{"config":1176},{"href":1177,"dataGaName":1178,"dataGaLocation":1090,"icon":1179},"/ja-jp/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[1181,1185,1190],{"text":1182,"config":1183},"アプリケーションセキュリティテスト",{"href":1177,"dataGaName":1184,"dataGaLocation":1090},"Application security testing",{"text":1186,"config":1187},"ソフトウェアサプライチェーンセキュリティ",{"href":1188,"dataGaLocation":1090,"dataGaName":1189},"/ja-jp/solutions/supply-chain/","Software supply chain security",{"text":1191,"config":1192},"ソフトウェアコンプライアンス",{"href":1193,"dataGaName":1194,"dataGaLocation":1090},"/ja-jp/solutions/software-compliance/","software compliance",{"title":1196,"link":1197,"items":1202},"測定",{"config":1198},{"icon":1199,"href":1200,"dataGaName":1201,"dataGaLocation":1090},"DigitalTransformation","/ja-jp/solutions/visibility-measurement/","visibility and measurement",[1203,1207,1212],{"text":1204,"config":1205},"可視性と測定",{"href":1200,"dataGaLocation":1090,"dataGaName":1206},"Visibility and Measurement",{"text":1208,"config":1209},"バリューストリーム管理",{"href":1210,"dataGaLocation":1090,"dataGaName":1211},"/ja-jp/solutions/value-stream-management/","Value Stream Management",{"text":1213,"config":1214},"分析とインサイト",{"href":1215,"dataGaLocation":1090,"dataGaName":1216},"/ja-jp/solutions/analytics-and-insights/","Analytics and insights",{"title":1218,"type":1141,"items":1219},"GitLabが活躍する場所",[1220,1226,1232],{"text":1221,"config":1222},"大企業",{"icon":1223,"href":1224,"dataGaLocation":1090,"dataGaName":1225},"Building","/ja-jp/enterprise/","enterprise",{"text":1227,"config":1228},"スモールビジネス",{"icon":1229,"href":1230,"dataGaLocation":1090,"dataGaName":1231},"Work","/ja-jp/small-business/","small business",{"text":1233,"config":1234},"公共部門",{"icon":1235,"href":1236,"dataGaLocation":1090,"dataGaName":1237},"Organization","/ja-jp/solutions/public-sector/","public sector",{"text":1239,"config":1240},"価格",{"href":1241,"dataGaName":1242,"dataGaLocation":1090,"dataNavLevelOne":1242},"/ja-jp/pricing/","pricing",{"text":1244,"config":1245,"menu":1247},"関連リソース",{"dataNavLevelOne":1246},"resources",{"type":1141,"link":1248,"columns":1252,"feature":1346},{"text":1249,"config":1250},"すべてのリソースを表示",{"href":1251,"dataGaName":1246,"dataGaLocation":1090},"/ja-jp/resources/",[1253,1286,1313],{"title":1254,"items":1255},"はじめに",[1256,1261,1266,1271,1276,1281],{"text":1257,"config":1258},"インストール",{"href":1259,"dataGaName":1260,"dataGaLocation":1090},"/ja-jp/install/","install",{"text":1262,"config":1263},"クイックスタートガイド",{"href":1264,"dataGaName":1265,"dataGaLocation":1090},"/ja-jp/get-started/","quick setup checklists",{"text":1267,"config":1268},"学ぶ",{"href":1269,"dataGaLocation":1090,"dataGaName":1270},"https://university.gitlab.com/","learn",{"text":1272,"config":1273},"製品ドキュメント",{"href":1274,"dataGaName":1275,"dataGaLocation":1090},"https://docs.gitlab.com/ja-jp/","product documentation",{"text":1277,"config":1278},"ベストプラクティスビデオ",{"href":1279,"dataGaName":1280,"dataGaLocation":1090},"/ja-jp/getting-started-videos/","best practice videos",{"text":1282,"config":1283},"インテグレーション",{"href":1284,"dataGaName":1285,"dataGaLocation":1090},"/ja-jp/integrations/","integrations",{"title":1287,"items":1288},"検索する",[1289,1294,1299,1304,1308],{"text":1290,"config":1291},"お客様成功事例",{"href":1292,"dataGaName":1293,"dataGaLocation":1090},"/ja-jp/customers/","customer success stories",{"text":1295,"config":1296},"ブログ",{"href":1297,"dataGaName":1298,"dataGaLocation":1090},"/ja-jp/blog/","blog",{"text":1300,"config":1301},"Demo Hub",{"href":1302,"dataGaName":1303,"dataGaLocation":1090},"/ja-jp/demo-hub/","demo hub",{"text":1305,"config":1306},"The Source",{"href":1307,"dataGaName":1298,"dataGaLocation":1090},"/ja-jp/the-source/",{"text":1309,"config":1310},"リモート",{"href":1311,"dataGaName":1312,"dataGaLocation":1090},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":1314,"items":1315},"つなげる",[1316,1321,1326,1331,1336,1341],{"text":1317,"config":1318},"GitLabサービス",{"href":1319,"dataGaName":1320,"dataGaLocation":1090},"/ja-jp/services/","services",{"text":1322,"config":1323},"コントリビュート",{"href":1324,"dataGaName":1325,"dataGaLocation":1090},"https://contributors.gitlab.com","contribute",{"text":1327,"config":1328},"コミュニティ",{"href":1329,"dataGaName":1330,"dataGaLocation":1090},"/community/","community",{"text":1332,"config":1333},"フォーラム",{"href":1334,"dataGaName":1335,"dataGaLocation":1090},"https://forum.gitlab.com/","forum",{"text":1337,"config":1338},"イベント",{"href":1339,"dataGaName":1340,"dataGaLocation":1090},"/events/","events",{"text":1342,"config":1343},"パートナー",{"href":1344,"dataGaName":1345,"dataGaLocation":1090},"/ja-jp/partners/","partners",{"config":1347,"title":1350,"text":1351,"link":1352},{"background":1348,"textColor":1349},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","GitLabの最新情報","最新の機能と改善点に関する情報をお届けします。",{"text":1353,"config":1354},"最新情報を読む",{"href":1355,"dataGaName":1356,"dataGaLocation":1090},"/ja-jp/whats-new/","whats new",{"text":1358,"config":1359,"menu":1361},"企業情報",{"dataNavLevelOne":1360},"company",{"type":1141,"columns":1362},[1363],{"items":1364},[1365,1370,1376,1378,1383,1388,1393,1398,1403,1408],{"text":1366,"config":1367},"GitLabについて",{"href":1368,"dataGaName":1369,"dataGaLocation":1090},"/ja-jp/company/","about",{"text":1371,"config":1372,"footerGa":1375},"採用情報",{"href":1373,"dataGaName":1374,"dataGaLocation":1090},"/jobs/","jobs",{"dataGaName":1374},{"text":1337,"config":1377},{"href":1339,"dataGaName":1340,"dataGaLocation":1090},{"text":1379,"config":1380},"経営陣",{"href":1381,"dataGaName":1382,"dataGaLocation":1090},"/company/team/e-group/","leadership",{"text":1384,"config":1385},"ハンドブック",{"href":1386,"dataGaName":1387,"dataGaLocation":1090},"https://handbook.gitlab.com/","handbook",{"text":1389,"config":1390},"投資家向け情報",{"href":1391,"dataGaName":1392,"dataGaLocation":1090},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":1394,"config":1395},"トラストセンター",{"href":1396,"dataGaName":1397,"dataGaLocation":1090},"/ja-jp/security/","trust center",{"text":1399,"config":1400},"AI Transparency Center",{"href":1401,"dataGaName":1402,"dataGaLocation":1090},"/ja-jp/ai-transparency-center/","ai transparency center",{"text":1404,"config":1405},"ニュースレター",{"href":1406,"dataGaName":1407,"dataGaLocation":1090},"/company/contact/#contact-forms","newsletter",{"text":1409,"config":1410},"プレス",{"href":1411,"dataGaName":1412,"dataGaLocation":1090},"/press/","press",{"text":1414,"config":1415,"menu":1416},"お問い合わせ",{"dataNavLevelOne":1360},{"type":1141,"columns":1417},[1418],{"items":1419},[1420,1425,1430],{"text":1421,"config":1422},"お問い合わせはこちら",{"href":1423,"dataGaName":1424,"dataGaLocation":1090},"/ja-jp/sales/","talk to sales",{"text":1426,"config":1427},"サポートを受ける",{"href":1428,"dataGaName":1429,"dataGaLocation":1090},"https://support.gitlab.com/hc/en-us","support portal",{"text":1431,"config":1432},"カスタマーポータル",{"href":1433,"dataGaName":1434,"dataGaLocation":1090},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":1436,"login":1437,"suggestions":1443},"閉じる",{"text":1438,"link":1439},"リポジトリとプロジェクトを検索するには、次にログインします",{"text":382,"config":1440},{"href":1104,"dataGaName":1441,"dataGaLocation":1442},"search login","search",{"text":1444,"default":1445},"提案",[1446,1448,1453,1455,1459,1463],{"text":1121,"config":1447},{"href":1126,"dataGaName":1121,"dataGaLocation":1442},{"text":1449,"config":1450},"コード提案（AI）",{"href":1451,"dataGaName":1452,"dataGaLocation":1442},"/ja-jp/solutions/code-suggestions/","Code Suggestions (AI)",{"text":1157,"config":1454},{"href":1159,"dataGaName":1157,"dataGaLocation":1442},{"text":1456,"config":1457},"GitLab on AWS",{"href":1458,"dataGaName":1456,"dataGaLocation":1442},"/ja-jp/partners/technology-partners/aws/",{"text":1460,"config":1461},"GitLab on Google Cloud",{"href":1462,"dataGaName":1460,"dataGaLocation":1442},"/ja-jp/partners/technology-partners/google-cloud-platform/",{"text":1464,"config":1465},"GitLabを選ぶ理由",{"href":1134,"dataGaName":1466,"dataGaLocation":1442},"Why GitLab?",{"freeTrial":1468,"mobileIcon":1472,"desktopIcon":1477,"secondaryButton":1480},{"text":1092,"config":1469},{"href":1470,"dataGaName":1095,"dataGaLocation":1471},"https://gitlab.com/-/trials/new/","nav",{"altText":1473,"config":1474},"GitLabアイコン",{"src":1475,"dataGaName":1476,"dataGaLocation":1471},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":1473,"config":1478},{"src":1479,"dataGaName":1476,"dataGaLocation":1471},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":1254,"config":1481},{"href":1482,"dataGaName":1483,"dataGaLocation":1471},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/ja-jp/get-started/","get started",{"freeTrial":1485,"mobileIcon":1489,"desktopIcon":1491},{"text":1486,"config":1487},"GitLab Duoの詳細について",{"href":1126,"dataGaName":1488,"dataGaLocation":1471},"gitlab duo",{"altText":1473,"config":1490},{"src":1475,"dataGaName":1476,"dataGaLocation":1471},{"altText":1473,"config":1492},{"src":1479,"dataGaName":1476,"dataGaLocation":1471},{"button":1494,"mobileIcon":1499,"desktopIcon":1501},{"text":1495,"config":1496},"/switch",{"href":1497,"dataGaName":1498,"dataGaLocation":1471},"#contact","switch",{"altText":1473,"config":1500},{"src":1475,"dataGaName":1476,"dataGaLocation":1471},{"altText":1473,"config":1502},{"src":1503,"dataGaName":1476,"dataGaLocation":1471},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":1505,"mobileIcon":1510,"desktopIcon":1512},{"text":1506,"config":1507},"料金ページに戻る",{"href":1241,"dataGaName":1508,"dataGaLocation":1471,"icon":1509},"back to pricing","GoBack",{"altText":1473,"config":1511},{"src":1475,"dataGaName":1476,"dataGaLocation":1471},{"altText":1473,"config":1513},{"src":1479,"dataGaName":1476,"dataGaLocation":1471},{"title":1515,"button":1516,"config":1520},"GitLab Orbitが登場: AIエージェントのためのコンテキストレイヤー",{"text":1132,"config":1517},{"href":1518,"dataGaName":1519,"dataGaLocation":1090},"/ja-jp/gitlab-orbit/","orbit",{"layout":1521,"disabled":1072},"release",{"data":1523},{"text":1524,"source":1525,"edit":1531,"contribute":1536,"config":1541,"items":1546,"minimal":1755},"GitはSoftware Freedom Conservancyの商標です。当社は「GitLab」をライセンスに基づいて使用しています",{"text":1526,"config":1527},"ページのソースを表示",{"href":1528,"dataGaName":1529,"dataGaLocation":1530},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":1532,"config":1533},"このページを編集",{"href":1534,"dataGaName":1535,"dataGaLocation":1530},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":1537,"config":1538},"ご協力をお願いします",{"href":1539,"dataGaName":1540,"dataGaLocation":1530},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":1542,"facebook":1543,"youtube":1544,"linkedin":1545},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[1547,1592,1645,1688,1722],{"title":1239,"links":1548,"subMenu":1563},[1549,1553,1558],{"text":1550,"config":1551},"プランの表示",{"href":1241,"dataGaName":1552,"dataGaLocation":1530},"view plans",{"text":1554,"config":1555},"Premiumを選ぶ理由",{"href":1556,"dataGaName":1557,"dataGaLocation":1530},"/ja-jp/pricing/premium/","why premium",{"text":1559,"config":1560},"Ultimateを選ぶ理由",{"href":1561,"dataGaName":1562,"dataGaLocation":1530},"/ja-jp/pricing/ultimate/","why ultimate",[1564],{"title":1414,"links":1565},[1566,1568,1570,1572,1577,1582,1587],{"text":1414,"config":1567},{"href":1423,"dataGaName":1100,"dataGaLocation":1530},{"text":1426,"config":1569},{"href":1428,"dataGaName":1429,"dataGaLocation":1530},{"text":1431,"config":1571},{"href":1433,"dataGaName":1434,"dataGaLocation":1530},{"text":1573,"config":1574},"ステータス",{"href":1575,"dataGaName":1576,"dataGaLocation":1530},"https://status.gitlab.com/","status",{"text":1578,"config":1579},"利用規約",{"href":1580,"dataGaName":1581,"dataGaLocation":1530},"/terms/","terms of use",{"text":1583,"config":1584},"プライバシーに関する声明",{"href":1585,"dataGaName":1586,"dataGaLocation":1530},"/ja-jp/privacy/","privacy statement",{"text":1588,"config":1589},"Cookie 優先設定",{"dataGaName":1590,"dataGaLocation":1530,"id":1591,"isOneTrustButton":1066},"cookie preferences","ot-sdk-btn",{"title":1137,"links":1593,"subMenu":1602},[1594,1598],{"text":1595,"config":1596},"DevSecOpsプラットフォーム",{"href":1119,"dataGaName":1597,"dataGaLocation":1530},"devsecops platform",{"text":1599,"config":1600},"AI支援開発",{"href":1126,"dataGaName":1601,"dataGaLocation":1530},"ai-assisted development",[1603],{"title":1604,"links":1605},"トピック",[1606,1610,1615,1620,1625,1630,1635,1640],{"text":1157,"config":1607},{"href":1608,"dataGaName":1609,"dataGaLocation":1530},"/ja-jp/topics/ci-cd/","cicd",{"text":1611,"config":1612},"GitOps",{"href":1613,"dataGaName":1614,"dataGaLocation":1530},"/ja-jp/topics/gitops/","gitops",{"text":1616,"config":1617},"DevOps",{"href":1618,"dataGaName":1619,"dataGaLocation":1530},"/ja-jp/topics/devops/","devops",{"text":1621,"config":1622},"バージョン管理",{"href":1623,"dataGaName":1624,"dataGaLocation":1530},"/ja-jp/topics/version-control/","version control",{"text":1626,"config":1627},"DevSecOps",{"href":1628,"dataGaName":1629,"dataGaLocation":1530},"/ja-jp/topics/devsecops/","devsecops",{"text":1631,"config":1632},"クラウドネイティブ",{"href":1633,"dataGaName":1634,"dataGaLocation":1530},"/ja-jp/topics/cloud-native/","cloud native",{"text":1636,"config":1637},"コーディングのためのAI",{"href":1638,"dataGaName":1639,"dataGaLocation":1530},"/ja-jp/topics/devops/ai-for-coding/","ai for coding",{"text":1641,"config":1642},"エージェント型AI",{"href":1643,"dataGaName":1644,"dataGaLocation":1530},"/ja-jp/topics/agentic-ai/","agentic ai",{"title":1646,"links":1647},"ソリューション",[1648,1651,1653,1658,1662,1665,1668,1671,1673,1675,1678,1683],{"text":1182,"config":1649},{"href":1177,"dataGaName":1650,"dataGaLocation":1530},"Application Security Testing",{"text":1169,"config":1652},{"href":1153,"dataGaName":1154,"dataGaLocation":1530},{"text":1654,"config":1655},"アジャイル開発",{"href":1656,"dataGaName":1657,"dataGaLocation":1530},"/ja-jp/solutions/agile-delivery/","agile delivery",{"text":1659,"config":1660},"SCM",{"href":1166,"dataGaName":1661,"dataGaLocation":1530},"source code management",{"text":1157,"config":1663},{"href":1159,"dataGaName":1664,"dataGaLocation":1530},"continuous integration & delivery",{"text":1208,"config":1666},{"href":1210,"dataGaName":1667,"dataGaLocation":1530},"value stream management",{"text":1611,"config":1669},{"href":1670,"dataGaName":1614,"dataGaLocation":1530},"/ja-jp/solutions/gitops/",{"text":1221,"config":1672},{"href":1224,"dataGaName":1225,"dataGaLocation":1530},{"text":1227,"config":1674},{"href":1230,"dataGaName":1231,"dataGaLocation":1530},{"text":1676,"config":1677},"公共機関",{"href":1236,"dataGaName":1237,"dataGaLocation":1530},{"text":1679,"config":1680},"教育",{"href":1681,"dataGaName":1682,"dataGaLocation":1530},"/ja-jp/solutions/education/","education",{"text":1684,"config":1685},"金融サービス",{"href":1686,"dataGaName":1687,"dataGaLocation":1530},"/ja-jp/solutions/finance/","financial services",{"title":1689,"links":1690},"リソース",[1691,1693,1695,1697,1701,1703,1706,1708,1710,1712,1714,1716,1718,1720],{"text":1257,"config":1692},{"href":1259,"dataGaName":1260,"dataGaLocation":1530},{"text":1262,"config":1694},{"href":1264,"dataGaName":1265,"dataGaLocation":1530},{"text":1267,"config":1696},{"href":1269,"dataGaName":1270,"dataGaLocation":1530},{"text":1272,"config":1698},{"href":1699,"dataGaName":1700,"dataGaLocation":1530},"https://docs.gitlab.com/ja-jp","docs",{"text":1295,"config":1702},{"href":1297,"dataGaName":1298,"dataGaLocation":1530},{"text":1704,"config":1705},"最新リリース",{"href":1355,"dataGaName":1356,"dataGaLocation":1530},{"text":1290,"config":1707},{"href":1292,"dataGaName":1293,"dataGaLocation":1530},{"text":1309,"config":1709},{"href":1311,"dataGaName":1312,"dataGaLocation":1530},{"text":1317,"config":1711},{"href":1319,"dataGaName":1320,"dataGaLocation":1530},{"text":1322,"config":1713},{"href":1324,"dataGaName":1325,"dataGaLocation":1530},{"text":1327,"config":1715},{"href":1329,"dataGaName":1330,"dataGaLocation":1530},{"text":1332,"config":1717},{"href":1334,"dataGaName":1335,"dataGaLocation":1530},{"text":1337,"config":1719},{"href":1339,"dataGaName":1340,"dataGaLocation":1530},{"text":1342,"config":1721},{"href":1344,"dataGaName":1345,"dataGaLocation":1530},{"title":1723,"links":1724},"会社情報",[1725,1727,1729,1731,1733,1735,1739,1744,1746,1748,1750],{"text":1366,"config":1726},{"href":1368,"dataGaName":1360,"dataGaLocation":1530},{"text":1371,"config":1728},{"href":1373,"dataGaName":1374,"dataGaLocation":1530},{"text":1379,"config":1730},{"href":1381,"dataGaName":1382,"dataGaLocation":1530},{"text":1384,"config":1732},{"href":1386,"dataGaName":1387,"dataGaLocation":1530},{"text":1389,"config":1734},{"href":1391,"dataGaName":1392,"dataGaLocation":1530},{"text":1736,"config":1737},"Sustainability",{"href":1738,"dataGaName":1736,"dataGaLocation":1530},"/sustainability/",{"text":1740,"config":1741},"ダイバーシティ、インクルージョン、ビロンギング（DIB）",{"href":1742,"dataGaName":1743,"dataGaLocation":1530},"/ja-jp/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":1394,"config":1745},{"href":1396,"dataGaName":1397,"dataGaLocation":1530},{"text":1404,"config":1747},{"href":1406,"dataGaName":1407,"dataGaLocation":1530},{"text":1409,"config":1749},{"href":1411,"dataGaName":1412,"dataGaLocation":1530},{"text":1751,"config":1752},"現代奴隷制の透明性に関する声明",{"href":1753,"dataGaName":1754,"dataGaLocation":1530},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":1756},[1757,1759,1762],{"text":1578,"config":1758},{"href":1580,"dataGaName":1581,"dataGaLocation":1530},{"text":1760,"config":1761},"Cookieの設定",{"dataGaName":1590,"dataGaLocation":1530,"id":1591,"isOneTrustButton":1066},{"text":1583,"config":1763},{"href":1585,"dataGaName":1586,"dataGaLocation":1530},[1765],{"id":1766,"title":1767,"body":1065,"config":1768,"content":1770,"description":1065,"extension":1774,"meta":1775,"navigation":1066,"path":1776,"seo":1777,"stem":1778,"__hash__":1779},"blogAuthors/en-us/blog/authors/hakeem-abdul-razak.yml","Hakeem Abdul Razak",{"template":1769},"BlogAuthor",{"name":7,"config":1771},{"headshot":1772,"ctfId":1773},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749662077/Blog/Author%20Headshots/Hakeem_Abdul-Razak_headshot.png","7H6nuZfVCK5mqJBK4fuaDH","yml",{},"/en-us/blog/authors/hakeem-abdul-razak",{},"en-us/blog/authors/hakeem-abdul-razak","Nn-O6dna3fLJxdKk54UPgaggYeqIBnLWiK0QzAVjnZc",[1781,1789,1797],{"title":1782,"description":1783,"heroImage":1784,"category":1061,"date":1083,"authors":1785,"slug":1788,"externalUrl":1065},"GitLab Secrets ManagerがESO、Terraform、APIに対応","スタック全体の認証情報管理をシンプルに。GitLab Secrets Managerは External Secrets Operator（ESO）、Terraform、Secrets Manager APIに対応し、CI/CD以外の ワークフローからもシークレットを安全に取得できます。","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png",[1786,1787],"Erick Bajao","Joe Randazzo","gitlab-secrets-manager-add-eso-terraform-api-support",{"title":1790,"description":1791,"heroImage":1792,"category":1061,"date":1793,"authors":1794,"slug":1796,"externalUrl":1065},"Claudeが書き、GitLabがつなぐ：本番環境まで途切れないセキュリティ","Claude Securityはコーディングセッション内で脆弱性を検出します。そこから先はGitLabが引き継ぎ、スキャン、ポリシーの適用、そしてソフトウェアライフサイクル全体の監査エビデンス作成までを担います。","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-08-03",[1795],"Alisa Ho","claude-security-and-gitlab",{"title":1798,"description":1799,"heroImage":1800,"category":1061,"date":1801,"authors":1802,"slug":1804,"externalUrl":1065},"GitLab Duoセキュリティレビューでスキャナーが見逃すロジックの欠陥を検出","AIによるセキュリティ推論で、コードレビューの段階のうちに認可の不備やビジネスロジックのエラー、レース条件を検出します。","https://res.cloudinary.com/about-gitlab-com/image/upload/v1783980535/t3gez0gpayfndrhncunf.png","2026-07-16",[1803],"Mark Settle","gitlab-duo-security-review-flow",{"promotions":1806},[1807,1821,1832,1843],{"id":1808,"categories":1809,"header":1811,"text":1812,"button":1813,"image":1818},"ai-modernization",[1810],"ai","AIの真価、組織全体で発揮できていますか？","所要時間は5分以内です",{"text":1814,"config":1815},"AI成熟度スコアを確認する",{"href":1816,"dataGaName":1817,"dataGaLocation":1298},"/ja-jp/assessments/ai-modernization-assessment/","modernization assessment",{"config":1819},{"src":1820},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":1822,"categories":1823,"header":1824,"text":1812,"button":1825,"image":1829},"devops-modernization",[1081,1629],"単にツールを管理するだけでなく、イノベーションを提供していますか？",{"text":1826,"config":1827},"DevOps成熟度スコアを確認しましょう",{"href":1828,"dataGaName":1817,"dataGaLocation":1298},"/ja-jp/assessments/devops-modernization-assessment/",{"config":1830},{"src":1831},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":1833,"categories":1834,"header":1835,"text":1812,"button":1836,"image":1840},"security-modernization",[1061],"スピードのためにセキュリティを犠牲にしていませんか？",{"text":1837,"config":1838},"セキュリティ成熟度スコアを確認しましょう",{"href":1839,"dataGaName":1817,"dataGaLocation":1298},"/ja-jp/assessments/security-modernization-assessment/",{"config":1841},{"src":1842},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":1844,"paths":1845,"header":1848,"text":1849,"button":1850,"image":1855},"github-azure-migration",[1846,1847],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","チームはGitHubのAzure移行に対応できていますか？","GitHubはすでにAzureを基盤として再構築を進めています。それがあなたのチームにとって何を意味するのか、ご確認ください。",{"text":1851,"config":1852},"GitLabとGitHubの比較を見る",{"href":1853,"dataGaName":1854,"dataGaLocation":1298},"/ja-jp/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1856},{"src":1831},{"header":1858,"blurb":1859,"button":1860,"secondaryButton":1864},"今すぐ開発をスピードアップ","DevSecOpsに特化したインテリジェントオーケストレーションプラットフォームで実現できることをご確認ください。\n",{"text":1092,"config":1861},{"href":1862,"dataGaName":1095,"dataGaLocation":1863},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/ja-jp/","feature",{"text":1414,"config":1865},{"href":1423,"dataGaName":1100,"dataGaLocation":1863},1786803783300]