[{"data":1,"prerenderedAt":969},["ShallowReactive",2],{"/ja-jp/blog/transcend-dependency-firewall":3,"navigation-ja-jp":205,"banner-ja-jp":638,"footer-ja-jp":646,"blog-post-authors-ja-jp-Alisa Ho|Amit Shalem":900,"blog-related-posts-ja-jp-transcend-dependency-firewall":925,"blog-share-wrapper-ja-jp":950,"next-steps-ja-jp":960},{"id":4,"title":5,"authors":6,"body":9,"category":186,"date":187,"description":188,"extension":189,"externalUrl":190,"faq":190,"featured":191,"heroImage":192,"meta":193,"navigation":194,"path":195,"seo":196,"slug":198,"stem":199,"tags":200,"template":203,"updatedDate":187,"__hash__":204},"blogPosts/ja-jp/blog/transcend-dependency-firewall.md","Dependency Firewall: リスクのあるパッケージをビルド前にブロック",[7,8],"Alisa Ho","Amit Shalem",{"type":10,"value":11,"toc":177},"minimark",[12,23,26,35,46,50,53,56,91,94,97,104,108,111,114,117,123,126,129,132,135,141,145,148,151,154,160,164],[13,14,15,16,22],"p",{},"ビルドが依存する公開レジストリには、",[17,18,21],"a",{"href":19,"rel":20},"https://about.gitlab.com/ja-jp/blog/gitlab-discovers-widespread-npm-supply-chain-attack/",[],"悪意のあるパッケージが紛れ込むおそれがあります","。しかも、何を取り込むかを決めるのは、もはやデベロッパーだけではありません。AIコーディングエージェントがオープンソースの依存関係を自ら追加するようになり、ビルドに何が入ったのかを誰もレビューしていない、見てすらいないというケースが増えています。",[13,24,25],{},"つまり、許可の判断を誰も下さないまま、悪意のあるパッケージや脆弱性を含むパッケージがビルドに入り込みかねないということです。いったん入り込めば、そのコードはパイプラインと同じ権限でビルド内部で動き、開発パイプラインが触れるあらゆるシステムへ到達する可能性があります。",[13,27,28,29,34],{},"本日Transcendで早期アクセス版として発表された",[17,30,33],{"href":31,"rel":32},"https://about.gitlab.com/dependency-firewall/beta/",[],"GitLab Dependency Firewall","は、マルウェア、脆弱性、コンプライアンス要件を満たさないものなど、ポリシーに一致するパッケージをビルドに届く前にブロックします。組み込みのガバナンスにより、修正に向けた影響範囲の追跡は数週間から数分へと短縮されます。デベロッパーとそのエージェントは手動のセキュリティレビューを待たずに必要な依存関係を取り込み続けられ、ポリシー要件を満たしたパッケージが正式なビルドの一部となります。",[36,37,38],"blockquote",{},[13,39,40,45],{},[17,41,44],{"href":42,"rel":43},"https://about.gitlab.com/ja-jp/events/transcend/virtual/",[],"Transcendイベントのリプレイ","では、新しいプラットフォーム機能のデモをご覧いただけます。エージェント型AIのスピードをソフトウェアライフサイクル全体に展開するために必要な要素を、ぜひご確認ください。",[47,48,49],"h2",{"id":49},"ビルドを壊さずに悪意のあるパッケージをブロック",[13,51,52],{},"インストールの時点でポリシーがなければ、問題のあるパッケージはまずビルドに入り、後から検出されることになります。ソフトウェアコンポジション解析（SCA）が調べるのは、すでに取り込まれたものです。マルウェアや重大度の高い脆弱性、法務部門が許容しないライセンスを検出した時点で、その依存関係はすでにインストールされ、アーティファクトとして出荷されている可能性すらあります。どこまで広がったかを追跡し、取り除き、ビルドし直す。この作業は、通常のパイプライン実行をエンジニアリングチームの計画外対応へと変えてしまいます。",[13,54,55],{},"Dependency Firewallでは、インストールされる前の段階で、何をビルドに入れてよいかを次のポリシーで定義します。",[57,58,59,73,79,85],"ol",{},[60,61,62,66,67,72],"li",{},[63,64,65],"strong",{},"マルウェア判定",": ",[17,68,71],{"href":69,"rel":70},"https://docs.gitlab.com/ja-jp/user/application_security/gitlab_advisory_database/#gitlab-malware-advisories",[],"GitLabのマルウェアアドバイザリデータベース","でフラグが立てられたパッケージ",[60,74,75,78],{},[63,76,77],{},"脆弱性の重大度",": 設定した重大度（critical、high、medium、low）と、そのレベルで許容する検出件数（ゼロ件の指定も可能）",[60,80,81,84],{},[63,82,83],{},"ライセンスの種類",": 正式名称で指定する許可・拒否ライセンスと、ライセンスを判別できないパッケージの扱い",[60,86,87,90],{},[63,88,89],{},"パッケージの経過日数",": ビルドに入れるまでに必要な最低経過日数。公開から数分しか経っていないバージョンが、誰の検証も経ずに入り込むことを防ぎます",[13,92,93],{},"適用を広げるにあたって、デリバリーをリスクにさらす必要はありません。まずは警告モードから始めます。このモードでは、ポリシーが何を検出したかを記録しながら、ビルドはそのまま継続します。監査イベント、ダッシュボードの記録、CIサマリーの1行が残るため、ビルドをブロックすべきかどうかを腰を据えて分析できます。",[13,95,96],{},"ポリシーに確信が持てたら、ブロックモードに切り替えます。ポリシーに一致した時点でパイプラインを停止し、その理由を提示する仕組みです。承認済みパッケージをどうしても通す必要がある場合は、記録に残るバイパスによって、指定したユーザーまたはトークンが処理を進められます。",[13,98,99],{},[100,101],"img",{"alt":102,"src":103},"セキュリティポリシーを適用する","https://res.cloudinary.com/about-gitlab-com/image/upload/v1791198870/smilnde9xskkyon7rzyn.jpg",[47,105,107],{"id":106},"ポリシーを一括で設定しチーム単位で調整する","ポリシーを一括で設定し、チーム単位で調整する",[13,109,110],{},"レジストリ単位でしか適用できないファイアウォールは、全員に同じポリシーを課すことになりますが、それが実際のチームの働き方に合うことはほとんどありません。決済サービスと社内のプロトタイプではリスクプロファイルが大きく異なります。レジストリ全体に一律のルールセットでは、片方だけをより高い基準に保てません。",[13,112,113],{},"Dependency Firewallでは、トップレベルグループでポリシーを1つ設定すれば、配下のすべてのプロジェクトが同じルールを継承します。別の基準が必要なチームには、そのグループまたはプロジェクト単位でポリシーを設定します。レジストリレベルで適用して組織全体を1つのプラットフォームから統制しながら、リスクの高い箇所でルールを厳しくする余地も残せます。",[13,115,116],{},"ルールはセキュリティポリシープロジェクトにコードとして置かれ、他の設定と同じようにマージリクエストを通じてレビューし、変更します。ルールはトップレベルグループから各プロジェクトへと継承され、重なる場合は最も厳しいものが適用されます。重要なサービスを組織のベースラインより高い水準に保ちつつ、どのプロジェクトもその水準を下回りません。",[13,118,119],{},[100,120],{"alt":121,"src":122},"新しいDependency Firewallポリシー","https://res.cloudinary.com/about-gitlab-com/image/upload/v1791198870/aykp66qb64pskauvzbmm.jpg",[47,124,125],{"id":125},"取り込む前にパッケージを確認する",[13,127,128],{},"デベロッパー、あるいはその代理として作業するエージェントがパッケージの不許可を知るのは、たいていパイプラインが失敗したときです。作業が乗ってきたまさにそのタイミングで、ビルド1回分のコストと集中力が失われます。",[13,130,131],{},"GitLab Dependency Firewallなら、依存関係を追加する前に、すでに作業している場所で答えが得られます。一度目から通るパッケージを選べるということです。",[13,133,134],{},"ターミナルやスクリプトからGitLab CLIを使えば、そのパッケージがポリシーを通過するのかブロックされるのかを、コマンドラインで判定できます。別のコンソールを開く必要はありません。npm、pip、Poetry、Maven、Gradle、Bundlerといった主要なパッケージマネージャーに対応しており、対応範囲は今後さらに広がる予定です。",[13,136,137],{},[100,138],{"alt":139,"src":140},"コマンドラインでパッケージがポリシーを通過するかブロックされるかを判定する","https://res.cloudinary.com/about-gitlab-com/image/upload/v1791198870/itqcvrmp8gvw1phihd2l.jpg",[47,142,144],{"id":143},"すべての判断を可視化し証明する","すべての判断を可視化し、証明する",[13,146,147],{},"セキュリティリーダーは、監査の場でその統制が何をしているのかを証明できなければなりません。記録を残さず静かにブロックするだけの統制では、監査担当者の問いに答えられず、統制の対象となるチームからの信頼も得られません。",[13,149,150],{},"ファイアウォールが何を許可し、何に警告し、何をブロックしたのか。その全体像を1つのビューで把握でき、個々の判断の改変できない記録を監査担当者に提出できます。",[13,152,153],{},"Dependency Firewallのダッシュボードには、対象となるプロジェクト全体の動作と結果が表示されます。警告、ブロック、バイパスのいずれについても、一致したルール、その背後にあるポリシー、対象パッケージを記録した監査イベントが書き込まれます。",[13,155,156],{},[100,157],{"alt":158,"src":159},"Dependency Firewallのダッシュボード","https://res.cloudinary.com/about-gitlab-com/image/upload/v1791198871/oiieystaargq3ctrqfs1.jpg",[47,161,163],{"id":162},"gitlab-dependency-firewallの早期アクセスを申し込む","GitLab Dependency Firewallの早期アクセスを申し込む",[13,165,166,167,172,173],{},"悪意のあるパッケージ、脆弱性を含むパッケージ、コンプライアンス要件を満たさないパッケージを、ビルドに到達する前に止められます。",[17,168,171],{"href":169,"rel":170},"https://about.gitlab.com/blog/transcend-artifact-central/",[],"GitLab Artifact Central","や、Sonatype Nexus Repository、JFrog Artifactoryといった外部レジストリと互換性があり、GitLab環境の隣に別のツールを立ち上げる必要もありません。Dependency Firewallは現在、PremiumまたはUltimateプランをご利用のGitLab.comおよびGitLab Self-Managedのお客様を対象に、早期アクセス版として提供しています。",[17,174,176],{"href":31,"rel":175},[],"今すぐ早期アクセスをリクエストしてください",{"title":178,"searchDepth":179,"depth":179,"links":180},"",2,[181,182,183,184,185],{"id":49,"depth":179,"text":49},{"id":106,"depth":179,"text":107},{"id":125,"depth":179,"text":125},{"id":143,"depth":179,"text":144},{"id":162,"depth":179,"text":163},"security","2026-10-06","GitLab Dependency Firewallは、悪意のあるパッケージや脆弱性を含むパッケージを自動でビルドから締め出します。チームとそのエージェントは、信頼できる依存関係のまま開発スピードを維持できます。","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1791198675/kmajkudog4fj3xc6qfyb.png",{},true,"/ja-jp/blog/transcend-dependency-firewall",{"config":197,"title":5,"description":188},{"noIndex":191},"transcend-dependency-firewall","ja-jp/blog/transcend-dependency-firewall",[201,202],"features","product","BlogPost","196Zuwnt0cNQLZVKvKUeMgGeu5n4HSjLH5OfFAVG2Fs",{"logo":206,"freeTrial":211,"sales":216,"login":221,"items":226,"search":557,"minimal":590,"duo":608,"switchNav":617,"pricingDeployment":628},{"config":207},{"href":208,"dataGaName":209,"dataGaLocation":210},"/ja-jp/","gitlab logo","header",{"text":212,"config":213},"無料トライアルを開始",{"href":214,"dataGaName":215,"dataGaLocation":210},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/ja-jp&glm_content=default-saas-trial/","free trial",{"text":217,"config":218},"デモをリクエスト",{"href":219,"dataGaName":220,"dataGaLocation":210},"/request-a-demo/","sales",{"text":222,"config":223},"サインイン",{"href":224,"dataGaName":225,"dataGaLocation":210},"https://gitlab.com/users/sign_in/","sign in",[227,313,401,406,481,535],{"text":228,"left":194,"config":229,"menu":231},"プラットフォーム",{"dataNavLevelOne":230},"platform",{"type":232,"link":233,"columns":237,"feature":302},"lists",{"text":234,"config":235},"プラットフォームを詳しく見る",{"href":236,"dataGaName":230,"dataGaLocation":210},"/ja-jp/platform/",[238,261,284],{"title":239,"items":240},"実行とワークフロー",[241,246,251,256],{"text":242,"config":243},"CI/CD",{"href":244,"dataGaLocation":210,"dataGaName":245},"/ja-jp/solutions/continuous-integration/","ci/cd",{"text":247,"config":248},"ソースコード管理",{"href":249,"dataGaLocation":210,"dataGaName":250},"/ja-jp/solutions/source-code-management/","source code management",{"text":252,"config":253},"アジャイルデリバリー",{"href":254,"dataGaLocation":210,"dataGaName":255},"/ja-jp/solutions/agile-delivery/","agile delivery",{"text":257,"config":258},"アーティファクト管理",{"href":259,"dataGaLocation":210,"dataGaName":260},"/ja-jp/artifact-central/","artifact management",{"title":262,"items":263},"セキュリティとガバナンス",[264,269,274,279],{"text":265,"config":266},"アプリケーションセキュリティテスト",{"href":267,"dataGaLocation":210,"dataGaName":268},"/ja-jp/solutions/application-security-testing/","application security testing",{"text":270,"config":271},"ガバナンスとコンプライアンス",{"href":272,"dataGaLocation":210,"dataGaName":273},"/ja-jp/solutions/software-compliance/","governance and compliance",{"text":275,"config":276},"シークレット管理",{"href":277,"dataGaLocation":210,"dataGaName":278},"/ja-jp/gitlab-secrets-manager/","secrets management",{"text":280,"config":281},"サプライチェーンセキュリティ",{"href":282,"dataGaLocation":210,"dataGaName":283},"/ja-jp/solutions/supply-chain/","supply chain security",{"title":285,"items":286},"コンテキストとAI",[287,292,297],{"text":288,"config":289},"エージェント型オーケストレーション",{"href":290,"dataGaLocation":210,"dataGaName":291},"/ja-jp/gitlab-duo-agent-platform/","agentic orchestration",{"text":293,"config":294},"コンテキストグラフ",{"href":295,"dataGaLocation":210,"dataGaName":296},"/ja-jp/gitlab-orbit/","context graph",{"text":298,"config":299},"可視性と測定",{"href":300,"dataGaLocation":210,"dataGaName":301},"/ja-jp/solutions/visibility-measurement/","visibility and measurement",{"config":303,"title":306,"text":307,"link":308},{"background":304,"textColor":305},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1790185102/o7dn32anqcb6z8dgd3as.jpg')","#000","GitLabが選ばれる理由","ひとつのプラットフォームで、ソフトウェアライフサイクル全体を通じてスピードと制御を両立できます。",{"text":309,"config":310},"詳細はこちら",{"href":311,"dataGaName":312,"dataGaLocation":210},"/ja-jp/why-gitlab/","why gitlab",{"text":314,"left":194,"config":315,"menu":317},"ソリューション",{"dataNavLevelOne":316},"solutions",{"type":232,"link":318,"columns":322,"feature":392},{"text":319,"config":320},"すべてのソリューションを表示",{"href":321,"dataGaName":316,"dataGaLocation":210},"/ja-jp/solutions/",[323,341,359],{"title":324,"items":325},"成果",[326,331,336],{"text":327,"config":328},"DevOpsモダナイゼーション",{"href":329,"dataGaLocation":210,"dataGaName":330},"/ja-jp/assessments/devops-modernization-assessment/","devops modernization",{"text":332,"config":333},"セキュリティモダナイゼーション",{"href":334,"dataGaLocation":210,"dataGaName":335},"/ja-jp/assessments/security-modernization-assessment/","security modernization",{"text":337,"config":338},"AIモダナイゼーション",{"href":339,"dataGaLocation":210,"dataGaName":340},"/ja-jp/assessments/ai-modernization-assessment/","ai modernization",{"title":342,"items":343},"規模別",[344,349,354],{"text":345,"config":346},"エンタープライズ",{"href":347,"dataGaLocation":210,"dataGaName":348},"/ja-jp/enterprise/","enterprise",{"text":350,"config":351},"スモールビジネス",{"href":352,"dataGaLocation":210,"dataGaName":353},"/ja-jp/small-business/","small business",{"text":355,"config":356},"スタートアップ",{"href":357,"dataGaLocation":210,"dataGaName":358},"/ja-jp/solutions/startups/","startups",{"title":360,"items":361},"業界",[362,367,372,377,382,387],{"text":363,"config":364},"金融サービス",{"href":365,"dataGaLocation":210,"dataGaName":366},"/ja-jp/solutions/finance/","financial services",{"text":368,"config":369},"公共部門",{"href":370,"dataGaLocation":210,"dataGaName":371},"/ja-jp/solutions/public-sector/","public sector",{"text":373,"config":374},"通信",{"href":375,"dataGaLocation":210,"dataGaName":376},"/ja-jp/solutions/telecommunications/","telecommunications",{"text":378,"config":379},"自動車",{"href":380,"dataGaLocation":210,"dataGaName":381},"/ja-jp/solutions/automotive/","automotive",{"text":383,"config":384},"教育",{"href":385,"dataGaLocation":210,"dataGaName":386},"/ja-jp/solutions/education/","education",{"text":388,"config":389},"航空宇宙",{"href":390,"dataGaLocation":210,"dataGaName":391},"/ja-jp/solutions/aerospace/","aerospace",{"config":393,"title":394,"text":395,"link":396},{"background":304,"textColor":305},"GitLabのセキュリティ標準","セキュリティを犠牲にすることなく、ソフトウェアファクトリーを強化し、自律的なAIエージェントを実現する方法をご覧ください。",{"text":397,"config":398},"標準を見る",{"href":399,"dataGaName":400,"dataGaLocation":210},"/ja-jp/gitlab-security-standard/","gitlab security standard",{"text":402,"config":403},"価格",{"href":404,"dataGaName":405,"dataGaLocation":210,"dataNavLevelOne":405},"/ja-jp/pricing/","pricing",{"text":407,"config":408,"menu":410},"関連リソース",{"dataNavLevelOne":409},"resources",{"type":232,"link":411,"columns":415,"feature":472},{"text":412,"config":413},"すべてのリソースを表示",{"href":414,"dataGaName":409,"dataGaLocation":210},"/ja-jp/resources/",[416,444],{"title":417,"items":418},"検索する",[419,424,429,434,439],{"text":420,"config":421},"製品ドキュメント",{"href":422,"dataGaName":423,"dataGaLocation":210},"https://docs.gitlab.com/ja-jp/","docs",{"text":425,"config":426},"GitLab University",{"href":427,"dataGaName":428,"dataGaLocation":210},"https://university.gitlab.com/","university",{"text":430,"config":431},"技術デモ",{"href":432,"dataGaName":433,"dataGaLocation":210},"/ja-jp/gitlab-technical-demo-series/","demo series",{"text":435,"config":436},"インタラクティブデモ",{"href":437,"dataGaName":438,"dataGaLocation":210},"/ja-jp/demo-hub/","demo hub",{"text":440,"config":441},"GitLabサービス",{"href":442,"dataGaName":443,"dataGaLocation":210},"/ja-jp/services/","services",{"title":445,"items":446},"つなげる",[447,452,457,462,467],{"text":448,"config":449},"ブログ",{"href":450,"dataGaName":451,"dataGaLocation":210},"/ja-jp/blog/","blog",{"text":453,"config":454},"コミュニティ",{"href":455,"dataGaName":456,"dataGaLocation":210},"/community/","community",{"text":458,"config":459},"お客様事例",{"href":460,"dataGaName":461,"dataGaLocation":210},"/ja-jp/customers/","customers",{"text":463,"config":464},"パートナー",{"href":465,"dataGaName":466,"dataGaLocation":210},"/ja-jp/partners/","partners",{"text":468,"config":469},"イベント",{"href":470,"dataGaName":471,"dataGaLocation":210},"/events/","events",{"config":473,"title":474,"text":475,"link":476},{"background":304,"textColor":305},"GitLabの最新情報","最新の機能と改善点に関する情報をお届けします。",{"text":477,"config":478},"最新情報を読む",{"href":479,"dataGaName":480,"dataGaLocation":210},"/ja-jp/whats-new/","whats new",{"text":482,"config":483,"menu":485},"企業情報",{"dataNavLevelOne":484},"company",{"type":232,"columns":486},[487],{"items":488},[489,494,500,505,510,515,520,525,530],{"text":490,"config":491},"GitLabについて",{"href":492,"dataGaName":493,"dataGaLocation":210},"/ja-jp/company/","about",{"text":495,"config":496,"footerGa":499},"採用情報",{"href":497,"dataGaName":498,"dataGaLocation":210},"/jobs/","jobs",{"dataGaName":498},{"text":501,"config":502},"プレス",{"href":503,"dataGaName":504,"dataGaLocation":210},"/press/","press",{"text":506,"config":507},"ハンドブック",{"href":508,"dataGaName":509,"dataGaLocation":210},"https://handbook.gitlab.com/","handbook",{"text":511,"config":512},"経営陣",{"href":513,"dataGaName":514,"dataGaLocation":210},"/company/team/e-group/","leadership",{"text":516,"config":517},"投資家向け情報",{"href":518,"dataGaName":519,"dataGaLocation":210},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":521,"config":522},"トラストセンター",{"href":523,"dataGaName":524,"dataGaLocation":210},"/ja-jp/security/","trust center",{"text":526,"config":527},"AI Transparency Center",{"href":528,"dataGaName":529,"dataGaLocation":210},"/ja-jp/ai-transparency-center/","ai transparency center",{"text":531,"config":532},"ニュースレター",{"href":533,"dataGaName":534,"dataGaLocation":210},"/company/contact/#contact-forms","newsletter",{"text":536,"config":537,"menu":538},"お問い合わせ",{"dataNavLevelOne":484},{"type":232,"columns":539},[540],{"items":541},[542,547,552],{"text":543,"config":544},"お問い合わせはこちら",{"href":545,"dataGaName":546,"dataGaLocation":210},"/ja-jp/sales/","talk to sales",{"text":548,"config":549},"サポートポータル",{"href":550,"dataGaName":551,"dataGaLocation":210},"https://support.gitlab.com/hc/en-us","support portal",{"text":553,"config":554},"カスタマーポータル",{"href":555,"dataGaName":556,"dataGaLocation":210},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":558,"login":559,"suggestions":566},"閉じる",{"text":560,"link":561},"リポジトリとプロジェクトを検索するには、次にログインします",{"text":562,"config":563},"GitLab.com",{"href":224,"dataGaName":564,"dataGaLocation":565},"search login","search",{"text":567,"default":568},"提案",[569,572,576,578,582,586],{"text":570,"config":571},"GitLab Duo Agent Platform",{"href":290,"dataGaName":570,"dataGaLocation":565},{"text":573,"config":574},"コード提案（AI）",{"href":290,"dataGaName":575,"dataGaLocation":565},"Code Suggestions (AI)",{"text":242,"config":577},{"href":244,"dataGaName":242,"dataGaLocation":565},{"text":579,"config":580},"GitLab on AWS",{"href":581,"dataGaName":579,"dataGaLocation":565},"/ja-jp/partners/technology-partners/aws/",{"text":583,"config":584},"GitLab on Google Cloud",{"href":585,"dataGaName":583,"dataGaLocation":565},"/ja-jp/partners/technology-partners/google-cloud-platform/",{"text":587,"config":588},"GitLabを選ぶ理由",{"href":311,"dataGaName":589,"dataGaLocation":565},"Why GitLab?",{"freeTrial":591,"mobileIcon":595,"desktopIcon":600,"secondaryButton":603},{"text":212,"config":592},{"href":593,"dataGaName":215,"dataGaLocation":594},"https://gitlab.com/-/trials/new/","nav",{"altText":596,"config":597},"GitLabアイコン",{"src":598,"dataGaName":599,"dataGaLocation":594},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":596,"config":601},{"src":602,"dataGaName":599,"dataGaLocation":594},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":604,"config":605},"はじめに",{"href":606,"dataGaName":607,"dataGaLocation":594},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/ja-jp/get-started/","get started",{"freeTrial":609,"mobileIcon":613,"desktopIcon":615},{"text":610,"config":611},"GitLab Duoの詳細はこちら",{"href":290,"dataGaName":612,"dataGaLocation":594},"gitlab duo",{"altText":596,"config":614},{"src":598,"dataGaName":599,"dataGaLocation":594},{"altText":596,"config":616},{"src":602,"dataGaName":599,"dataGaLocation":594},{"button":618,"mobileIcon":623,"desktopIcon":625},{"text":619,"config":620},"/switch",{"href":621,"dataGaName":622,"dataGaLocation":594},"#contact","switch",{"altText":596,"config":624},{"src":598,"dataGaName":599,"dataGaLocation":594},{"altText":596,"config":626},{"src":627,"dataGaName":599,"dataGaLocation":594},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":629,"mobileIcon":634,"desktopIcon":636},{"text":630,"config":631},"料金ページに戻る",{"href":404,"dataGaName":632,"dataGaLocation":594,"icon":633},"back to pricing","GoBack",{"altText":596,"config":635},{"src":598,"dataGaName":599,"dataGaLocation":594},{"altText":596,"config":637},{"src":602,"dataGaName":599,"dataGaLocation":594},{"title":639,"titleMobile":640,"button":641,"config":644},"GitLab Orbitが登場: AIエージェントのためのコンテキストレイヤー","GitLab Orbitが登場",{"text":309,"config":642},{"href":295,"dataGaName":643,"dataGaLocation":210},"orbit",{"layout":645,"disabled":191},"release",{"data":647},{"text":648,"source":649,"edit":655,"contribute":660,"config":665,"items":670,"minimal":892},"GitはSoftware Freedom Conservancyの商標です。当社は「GitLab」をライセンスに基づいて使用しています",{"text":650,"config":651},"ページのソースを表示",{"href":652,"dataGaName":653,"dataGaLocation":654},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":656,"config":657},"このページを編集",{"href":658,"dataGaName":659,"dataGaLocation":654},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":661,"config":662},"ご協力をお願いします",{"href":663,"dataGaName":664,"dataGaLocation":654},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":666,"facebook":667,"youtube":668,"linkedin":669},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[671,717,774,816,859],{"title":402,"links":672,"subMenu":687},[673,677,682],{"text":674,"config":675},"プランの表示",{"href":404,"dataGaName":676,"dataGaLocation":654},"view plans",{"text":678,"config":679},"Premiumを選ぶ理由",{"href":680,"dataGaName":681,"dataGaLocation":654},"/ja-jp/pricing/premium/","why premium",{"text":683,"config":684},"Ultimateを選ぶ理由",{"href":685,"dataGaName":686,"dataGaLocation":654},"/ja-jp/pricing/ultimate/","why ultimate",[688],{"title":536,"links":689},[690,693,695,697,702,707,712],{"text":691,"config":692},"営業担当へのお問い合わせ",{"href":545,"dataGaName":220,"dataGaLocation":654},{"text":548,"config":694},{"href":550,"dataGaName":551,"dataGaLocation":654},{"text":553,"config":696},{"href":555,"dataGaName":556,"dataGaLocation":654},{"text":698,"config":699},"ステータス",{"href":700,"dataGaName":701,"dataGaLocation":654},"https://status.gitlab.com/","status",{"text":703,"config":704},"利用規約",{"href":705,"dataGaName":706,"dataGaLocation":654},"/terms/","terms of use",{"text":708,"config":709},"プライバシーに関する声明",{"href":710,"dataGaName":711,"dataGaLocation":654},"/ja-jp/privacy/","privacy statement",{"text":713,"config":714},"Cookie設定",{"dataGaName":715,"dataGaLocation":654,"id":716,"isOneTrustButton":194},"cookie preferences","ot-sdk-btn",{"title":228,"links":718,"subMenu":731},[719,721,723,725,727,729],{"text":234,"config":720},{"href":236,"dataGaName":230,"dataGaLocation":654},{"text":288,"config":722},{"href":290,"dataGaName":291,"dataGaLocation":654},{"text":242,"config":724},{"href":244,"dataGaName":245,"dataGaLocation":654},{"text":293,"config":726},{"href":295,"dataGaName":296,"dataGaLocation":654},{"text":275,"config":728},{"href":277,"dataGaName":278,"dataGaLocation":654},{"text":306,"config":730},{"href":311,"dataGaName":312,"dataGaLocation":654},[732],{"title":733,"links":734},"トピック",[735,739,744,749,754,759,764,769],{"text":242,"config":736},{"href":737,"dataGaName":738,"dataGaLocation":654},"/ja-jp/topics/ci-cd/","cicd",{"text":740,"config":741},"GitOps",{"href":742,"dataGaName":743,"dataGaLocation":654},"/ja-jp/topics/gitops/","gitops",{"text":745,"config":746},"DevOps",{"href":747,"dataGaName":748,"dataGaLocation":654},"/ja-jp/topics/devops/","devops",{"text":750,"config":751},"バージョン管理",{"href":752,"dataGaName":753,"dataGaLocation":654},"/ja-jp/topics/version-control/","version control",{"text":755,"config":756},"DevSecOps",{"href":757,"dataGaName":758,"dataGaLocation":654},"/ja-jp/topics/devsecops/","devsecops",{"text":760,"config":761},"クラウドネイティブ",{"href":762,"dataGaName":763,"dataGaLocation":654},"/ja-jp/topics/cloud-native/","cloud native",{"text":765,"config":766},"コーディングのためのAI",{"href":767,"dataGaName":768,"dataGaLocation":654},"/ja-jp/topics/devops/ai-for-coding/","ai for coding",{"text":770,"config":771},"エージェント型AI",{"href":772,"dataGaName":773,"dataGaLocation":654},"/ja-jp/topics/agentic-ai/","agentic ai",{"title":314,"links":775},[776,778,780,782,784,787,789,791,793,795,797,799,801,804,808,812],{"text":327,"config":777},{"href":329,"dataGaName":330,"dataGaLocation":654},{"text":332,"config":779},{"href":334,"dataGaName":335,"dataGaLocation":654},{"text":337,"config":781},{"href":339,"dataGaName":340,"dataGaLocation":654},{"text":363,"config":783},{"href":365,"dataGaName":366,"dataGaLocation":654},{"text":785,"config":786},"公共機関",{"href":370,"dataGaName":371,"dataGaLocation":654},{"text":373,"config":788},{"href":375,"dataGaName":376,"dataGaLocation":654},{"text":378,"config":790},{"href":380,"dataGaName":381,"dataGaLocation":654},{"text":383,"config":792},{"href":385,"dataGaName":386,"dataGaLocation":654},{"text":388,"config":794},{"href":390,"dataGaName":391,"dataGaLocation":654},{"text":345,"config":796},{"href":347,"dataGaName":348,"dataGaLocation":654},{"text":350,"config":798},{"href":352,"dataGaName":353,"dataGaLocation":654},{"text":355,"config":800},{"href":357,"dataGaName":358,"dataGaLocation":654},{"text":740,"config":802},{"href":803,"dataGaName":743,"dataGaLocation":654},"/ja-jp/solutions/gitops/",{"text":805,"config":806},"ソフトウェアコンポジション解析",{"href":282,"dataGaName":807,"dataGaLocation":654},"software composition analysis",{"text":809,"config":810},"バリューストリーム管理",{"href":300,"dataGaName":811,"dataGaLocation":654},"value stream management",{"text":813,"config":814},"すべてのソリューション",{"href":321,"dataGaName":815,"dataGaLocation":654},"all solutions",{"title":817,"links":818},"リソース",[819,824,829,832,834,836,838,840,842,844,846,848,850,852,855],{"text":820,"config":821},"インストール",{"href":822,"dataGaName":823,"dataGaLocation":654},"/ja-jp/install/","install",{"text":825,"config":826},"クイックスタートガイド",{"href":827,"dataGaName":828,"dataGaLocation":654},"/ja-jp/get-started/","quick setup checklists",{"text":420,"config":830},{"href":831,"dataGaName":423,"dataGaLocation":654},"https://docs.gitlab.com/ja-jp",{"text":425,"config":833},{"href":427,"dataGaName":428,"dataGaLocation":654},{"text":430,"config":835},{"href":432,"dataGaName":433,"dataGaLocation":654},{"text":435,"config":837},{"href":437,"dataGaName":438,"dataGaLocation":654},{"text":440,"config":839},{"href":442,"dataGaName":443,"dataGaLocation":654},{"text":448,"config":841},{"href":450,"dataGaName":451,"dataGaLocation":654},{"text":453,"config":843},{"href":455,"dataGaName":456,"dataGaLocation":654},{"text":458,"config":845},{"href":460,"dataGaName":461,"dataGaLocation":654},{"text":463,"config":847},{"href":465,"dataGaName":466,"dataGaLocation":654},{"text":468,"config":849},{"href":470,"dataGaName":471,"dataGaLocation":654},{"text":531,"config":851},{"href":533,"dataGaName":534,"dataGaLocation":654},{"text":853,"config":854},"最新リリース",{"href":479,"dataGaName":480,"dataGaLocation":654},{"text":856,"config":857},"すべてのリソース",{"href":414,"dataGaName":858,"dataGaLocation":654},"all resources",{"title":860,"links":861},"会社情報",[862,864,866,868,870,872,874,876,878,882,887],{"text":490,"config":863},{"href":492,"dataGaName":484,"dataGaLocation":654},{"text":495,"config":865},{"href":497,"dataGaName":498,"dataGaLocation":654},{"text":501,"config":867},{"href":503,"dataGaName":504,"dataGaLocation":654},{"text":506,"config":869},{"href":508,"dataGaName":509,"dataGaLocation":654},{"text":511,"config":871},{"href":513,"dataGaName":514,"dataGaLocation":654},{"text":516,"config":873},{"href":518,"dataGaName":519,"dataGaLocation":654},{"text":521,"config":875},{"href":523,"dataGaName":524,"dataGaLocation":654},{"text":526,"config":877},{"href":528,"dataGaName":529,"dataGaLocation":654},{"text":879,"config":880},"Sustainability",{"href":881,"dataGaName":879,"dataGaLocation":654},"/sustainability/",{"text":883,"config":884},"ダイバーシティ、インクルージョン、ビロンギング（DIB）",{"href":885,"dataGaName":886,"dataGaLocation":654},"/ja-jp/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":888,"config":889},"現代奴隷制の透明性に関する声明",{"href":890,"dataGaName":891,"dataGaLocation":654},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":893},[894,896,898],{"text":703,"config":895},{"href":705,"dataGaName":706,"dataGaLocation":654},{"text":713,"config":897},{"dataGaName":715,"dataGaLocation":654,"id":716,"isOneTrustButton":194},{"text":708,"config":899},{"href":710,"dataGaName":711,"dataGaLocation":654},[901,914],{"id":902,"title":7,"body":190,"config":903,"content":905,"description":190,"extension":908,"meta":909,"navigation":194,"path":910,"seo":911,"stem":912,"__hash__":913},"blogAuthors/en-us/blog/authors/alisa-ho.yml",{"template":904},"BlogAuthor",{"name":7,"config":906},{"headshot":907},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1771440109/xcnydlisb91u4qiwdyw2.jpg","yml",{},"/en-us/blog/authors/alisa-ho",{},"en-us/blog/authors/alisa-ho","WU4QiU5Np9PQ8aLtvZXnH41_rF4JeUvaD9lOvDqkzYw",{"id":915,"title":8,"body":190,"config":916,"content":917,"description":190,"extension":908,"meta":920,"navigation":194,"path":921,"seo":922,"stem":923,"__hash__":924},"blogAuthors/en-us/blog/authors/amit-shalem.yml",{"template":904},{"name":8,"config":918},{"headshot":919},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1789051782/t66kjqncbzsznqsokogo.png",{},"/en-us/blog/authors/amit-shalem",{},"en-us/blog/authors/amit-shalem","myYkfCRRxt-YcE_B3aEI5IBr8ZsVXHZ7UdbKwEabo4I",[926,933,941],{"title":927,"description":928,"heroImage":929,"category":186,"date":930,"authors":931,"slug":932,"externalUrl":190},"組織全体のセキュリティリスクを1つのダッシュボードで把握する","複数のトップレベルグループを運用する企業向けに、GitLabが組織全体の脆弱性と単一のリスクスコアを集約して表示します。","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-10-08",[7],"security-risk-in-one-dashboard",{"title":934,"description":935,"heroImage":936,"category":186,"date":937,"authors":938,"slug":940,"externalUrl":190},"GitLab CISOが示すAI時代のソフトウェア防御3つのレイヤー","AIモデルの進化によって、脆弱性の発見と悪用はかつてないほど速く、安価になりました。エージェント型ソフトウェア開発を支える基盤もモデルとともに進化し、検出から検証済みの修正までの時間を絶えず短縮し続けなければなりません。GitLabのCISOが、そのために必要な3つのレイヤーと運用モデルを解説します。","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-09-18",[939],"Chaim Mazal","securing-the-software-factory-at-machine-speed",{"title":942,"description":943,"heroImage":944,"category":186,"date":945,"authors":946,"slug":949,"externalUrl":190},"SASTとLLMセキュリティスキャナーはどう使い分けるか","AIによるレビューとSASTでは、検出できるバグの種類が異なり、それぞれに利点があります。どちらをどこで動かすかを判断する基準と、チームに両方が必要になるタイミングを、コスト・一貫性・監査証跡の観点から解説します。","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756989645/fojzxakmfdea6jfqjkrl.png","2026-09-16",[947,948],"Meir Benayoun","Chris Widstrom","sast-vs-llm-security-scanner",{"header":951,"text":952,"button":956,"disclaimer":959},"無料の\n\n30日間のGitLabトライアルを開始\n",[953,954,955],"GitLab Duo Agent Platformへのアクセス","GitLabの最も高度な機能を試す","AIで複雑なタスクを自動化する",{"text":212,"config":957},{"href":958,"dataGaName":215,"dataGaLocation":451},"https://gitlab.com/-/trials/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/ja-jp/blog/","クレジットカードなしでご登録いただけます。",{"header":961,"blurb":962,"button":963,"secondaryButton":967},"今すぐ開発をスピードアップ","DevSecOpsに特化したインテリジェントオーケストレーションプラットフォームで実現できることをご確認ください。\n",{"text":212,"config":964},{"href":965,"dataGaName":215,"dataGaLocation":966},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/ja-jp/","feature",{"text":536,"config":968},{"href":545,"dataGaName":220,"dataGaLocation":966},1791944945559]