Androidããã³iOSåãã¢ãã€ã« ãµãã©ã€ãã§ãŒã³ã»ãã¥ãªã㣠(SCA + SBOM)
ãã¹ãŠã®ãªãªãŒã¹ã«å«ãŸããã³ã³ããŒãã³ããç¹å®ããéèŠãªä¿®æ£ãåªå ãããããã§ã¹ãããŒã¹ã®ã¹ãã£ããŒãèŠéããã¡ãªéçã³ã³ãã€ã«æžã¿ã©ã€ãã©ãªãçºèŠããŸããé ä¿¡ãé ãããããšã¯ãããŸããã
- ã¢ãã€ã«ãã€ãã£ãã®äŸåé¢ä¿ã«ãã¬ããž (Androidããã³iOSãã¬ãŒã ã¯ãŒã¯)
- ããã¯ãã¡ã€ã«ãšSBOMã®ãµããŒã (SPDXãCycloneDXãããã³äž»èŠãšã³ã·ã¹ãã )
- é ããã©ã€ãã©ãªãªã¹ã¯ãé²åããéçäŸåé¢ä¿ã®ãã£ã³ã¬ãŒããªã³ã
å€ãã®ã»ãã¥ãªãã£ããŒã ã«ä¿¡é ŒãããŠããŸã
Secure your app before you go live
Built for how mobile apps are actually assembled
From embedded SDKs to framework modules, gain clear component mapping and release-to-release dependency traceability.
Mobile-native dependency coverage
Mobile apps aren't "just packages"; they include SDK bundles, multiple modules, and framework-specific dependency paths. Get dependency visibility across supported mobile frameworks and common mobile build realities so you can see what's actually included in your app.
- Dependency visibility across native and popular cross-platform stacks (where supported)
- Clear mapping from components to findings so ownership is obvious
- A dependency baseline you can carry from release to release
Works with your lockfiles and SBOMs
Bring the artifacts you already have in CI/CD. Upload an SBOM or lockfile to extend dependency detection and improve scan findings.
Supported SBOM / lock formats
éçã«ã³ã³ãã€ã«ãããäŸåé¢ä¿ãæ€åºããé ãããªã¹ã¯ã軜æžããŸã
é ãããã€ãã£ãã³ã³ããŒãã³ããçºèŠããçµã¿èŸŒã¿ãã€ããªããã£ã³ã¬ãŒããªã³ãåããŠãæ€èšŒå¯èœãªä¿®æ£ãšããã³ã¹ãšãšãã«çŸå®ã®è匱æ§ã«ãããã³ã°ããŸãã
æ€åºå¯Ÿè±¡: äŸåé¢ä¿ã®ãªã¹ã¯ãå®éã«é ããŠããå Žæ
- ã¢ããªããã±ãŒãžå ã®ãã€ãã£ãã©ã€ã³ãã©ãªããã³ãã³ãã« (.soã.frameworkã.xcframework)
- ã³ã³ãã€ã«ããããã€ããªã«çŽæ¥çµã¿èŸŒãŸããéçãªã³ã¯ã³ã³ããŒãã³ã
- ç¬èªã®ã³ã³ãã€ã«æžã¿äŸåé¢ä¿ãåºè·ãããµãŒãããŒãã£SDKã®ãã€ãã£ãã¢ãžã¥ãŒã«
ä»çµã¿
å®éã®ã¢ãã€ã«ãã«ããã€ãã©ã€ã³åãã«èšèšããããã€ããªãã¡ãŒã¹ãã®æ€åºã§ãã
- APK/IPAãã¡ã€ã«ãããã€ãã£ããã€ããªãæœåºããŸã
- ãã¡ã€ã«åã ãã§ãªããã€ããªã·ã°ãã«ã䜿çšããŠã©ã€ãã©ãªããã£ã³ã¬ãŒããªã³ãåããŸã
- ããŒãžã§ã³ãæšæž¬ããè匱æ§ã€ã³ããªãžã§ã³ã¹ã«ãããã³ã°ããŸã
- æ£ç¢ºãªå Žæãšä¿®æ£ã¬ã€ãã³ã¹ãå«ãå®çšçãªãšããã³ã¹ãå ±åããŸã
åºåã§åŸããããã®
åãªãã¢ã©ãŒãã§ã¯ãªããæç¢ºã§å®çšçãªã€ã³ããªãžã§ã³ã¹ãæäŸããŸãã
- ã³ã³ããŒãã³ãã®è奿 å ±ïŒã©ã€ãã©ãª/ãã³ããŒïŒãšæ€åºããŒãžã§ã³
- ã¢ããªãã³ãã«å ã®æ£ç¢ºãªãã¡ã€ã«ãã¹ãŸãã¯ã¢ãžã¥ãŒã«ã®å Žæ
- ã¢ããã°ã¬ãŒã/ãªãã¬ã€ã¹ã®æšå¥šäºé ãšãšãã«ãããã³ã°ãããè匱æ§
- è匱æ§ã®ã¯ããŒãºãæ€èšŒããããã®ãªãªãŒã¹ããšã®è¿œè·¡
éèŠæ§
é ãããã€ãã£ãã³ã³ããŒãã³ãã¯ãå€ãã®å Žåãçã®ãµãã©ã€ãã§ãŒã³ãªã¹ã¯ãšãªããŸãã
- SDKã®ã¢ããããŒãã«ã¯ãå€ããã€ãã£ãã©ã€ã³ãã©ãªããã³ãã«ãããŠããå¯èœæ§ããããŸã
- æšç§»çãªãã€ãã£ãäŸåé¢ä¿ã¯ãããã¯ãã¡ã€ã«ããã¯èŠããŸãã
- æ°ãããã€ãã£ãCVEãå ¬éãããéã®è¿ éãªåœ±é¿è©äŸ¡ãå®çŸããŸã
ã¯ããã«
ã¢ãã€ã«ã»ãã¥ãªãã£ãã¹ããç°¡çŽ åãã çŸå®ã®ãªãªãŒã¹ãµã€ã¯ã«
ã¢ãã€ã«ãã€ãã©ã€ã³ã«é©åãããã¹ãŠã®ãã«ããæ¬çªéçšå¯èœãªç¶æ ã«ä¿ã€ããªãªãŒã¹ã«é£åããç¶ç¶çãªãã¹ãã§ã
AndroidãŸãã¯iOSã®ã¹ãã£ã³ãéå§ãã
ã¢ããªã±ãŒã·ã§ã³ã¢ãŒãã£ãã¡ã¯ããã¢ããããŒãããŠãå®å šãªã¢ãã€ã«ã»ãã¥ãªãã£ã¹ãã£ã³ãéå§ããŸãã
SBOMãŸãã¯ããã¯ãã¡ã€ã«ãã¢ããããŒããã
CI/CDãã€ãã©ã€ã³ã«æ¢ã«ããã¢ãŒãã£ãã¡ã¯ããåã蟌ãããšã§ãäŸåé¢ä¿ã®æ€åºãæ¡åŒµããŸãã
åªå é äœä»ããããæ€åºçµæãã¬ãã¥ãŒããä¿®æ£ãé©çšãã
åãªãã¢ã©ãŒãã®é·ããªã¹ãã§ã¯ãªãã圱é¿åºŠé ã«äžŠã¹ãããä¿®æ£å¯èœãªã¬ã€ãã³ã¹ãååŸããŸãã
次ã®ãã«ãã§åãã¹ãããã¯ããŒãºã確èªãã
æ°ãããã«ãããšã«ã¹ãã£ã³ãå®è¡ããè匱æ§ãé©åã«è§£æ±ºãããããšãæ€èšŒããŸãã
ãªãªãŒã¹ããŒã¹ã©ã€ã³ãç¶æãã
åºè·ãããåããŒãžã§ã³ã«ããã¬ãŒãµããªãã£ãšã³ã³ãã©ã€ã¢ã³ã¹ã®ããã®ä¿¡é Œã§ããã€ã³ãã³ããªå±¥æŽã確å®ã«ããããã«ããŸãã
SCAããã³SBOMã¹ãã£ã³ã®å€é©
åªå é äœä»ã
Ostorlab Mobile SCA + SBOM: ã¢ã¯ã·ã§ã³ãä¿ããªã¹ã¯éèŠã®é åºä»ãäžè¬çãªäŸåé¢ä¿ã¹ãã£ã³ / SBOMãã©ã¯ãã£ã¹: ã¢ã©ãŒãã®é·ããªã¹ãéçºè ã®äœ¿ãããã
Ostorlab Mobile SCA + SBOM: ãšã³ãžãã¢ãªã³ã°åãã®ä¿®æ£å¯èœãªã¬ã€ãã³ã¹äžè¬çãªäŸåé¢ä¿ã¹ãã£ã³ / SBOMãã©ã¯ãã£ã¹: ã»ãã¥ãªãã£äžå¿ã®åºåä¿®æ£ã®æ€èšŒ
Ostorlab Mobile SCA + SBOM: ãªãªãŒã¹ã«çŽã¥ãåçŸå¯èœãªåãã¹ãã«ãŒãäžè¬çãªäŸåé¢ä¿ã¹ãã£ã³ / SBOMãã©ã¯ãã£ã¹: æå / äžè²«æ§ã®æ¬ åŠãã¬ãŒãµããªãã£
Ostorlab Mobile SCA + SBOM: ç¹å®ã®ããŒãžã§ã³/ãã«ãã«æ¥ç¶ãããSBOMäžè¬çãªäŸåé¢ä¿ã¹ãã£ã³ / SBOMãã©ã¯ãã£ã¹: ãªãªãŒã¹ã«çŽã¥ããªãã€ã³ãã³ããªéç/ãã€ãã£ãã©ã€ã³ãã©ãª
Ostorlab Mobile SCA + SBOM: éçã«ã³ã³ãã€ã«ãããäŸåé¢ä¿ããã£ã³ã¬ãŒããªã³ãåäžè¬çãªäŸåé¢ä¿ã¹ãã£ã³ / SBOMãã©ã¯ãã£ã¹: é »ç¹ã«èŠéãããå ¥å
Ostorlab Mobile SCA + SBOM: SBOM + 倿°ã®ããã¯ãã¡ã€ã«åœ¢åŒããµããŒãäžè¬çãªäŸåé¢ä¿ã¹ãã£ã³ / SBOMãã©ã¯ãã£ã¹: éå®çãªåœ¢åŒãµããŒã
æè¡ã¹ã¿ãã¯ãšã®ã·ãŒã ã¬ã¹ãªçµ±å
ã»ãã¥ãªãã£ãããã«ããã¯ã«ãããŸãããOstorlabã¯ãéçºããŒã ãã»ãã¥ãªãã£ããŒã ãæ¢ã«äœ¿çšããŠããããŒã«ãšçŽæ¥çµ±åããè匱æ§ç®¡çãèªååã远跡å¯èœããã€è¿ éã«è¡ããããã«ããŸãã
Jira
Linear
Jenkins
GitHub
GitLab
Bitbucket
SAML
Azure DevOpsCircleCI
GoCDTeamCity
Okta
Google Workspace
OneLogin
Azure Active DirectorySlack
VantaServiceNow
Bitrise
Harness
ããŒã ãç§ãã¡ãéžã¶çç±
ãµããŒããã¹ã±ãŒã©ããªãã£ãéææ§
ãã¹ãŠã®ã¹ãããã䌎走
ãªã³ããŒãã£ã³ã°ããææãŸã§ãå®è·µçãªã¬ã€ãã³ã¹ãšãµããŒããæäŸããã客æ§ã®ãã£ãŒãããã¯ãéããŠé²åããæ©èœãã·ãŒã ã¬ã¹ã«æŽ»çšã§ããããã«ããŸãã
ç¡å¶éã®ç¡ææåŸ
ã¢ããªã±ãŒã·ã§ã³ããšã«å¿ èŠãªæ°ã®ãããã£ãŒã«ã远å ããŠå¶çŽãªãã§ã³ã©ãã¬ãŒã·ã§ã³ããŸãããŠãŒã¶ãŒæ°ã®å¶éã远å è²»çšãªãã§ãããŒã ãã·ãŒã ã¬ã¹ã«ååã§ããŸãã
ç¶ç¶çãªã¢ãã¿ãªã³ã°
Ostorlabã«ç»é²ãããã¢ããªã¯ãã¢ããããŒããããã·ã¥ããããã³ã«èªåçã«åã¹ãã£ã³ãããŸããæåã§ã¹ãã£ã³ãããªã¬ãŒããå¿ èŠã¯ãªããæå°éã®åŽåã§ç¶ç¶çãªã»ãã¥ãªãã£æ€èšŒãä¿èšŒããŸãã
é ããè²»çšãªã
é ããã³ã¹ãã®ãªãã·ã³ãã«ã§éæãªäŸ¡æ Œèšå®ãæ¯æãã®å 容ãæç¢ºã«ãããæºè¶³ããã ããªãå Žåã¯å šé¡è¿éä¿èšŒã§è£ä»ããŠããŸãã
ææ°ã®åãçµã¿ãã玹ä»ããŸã...
äžçäžã®ã»ãã¥ãªãã£ããŒã ããä¿¡é ŒãããŠããŸã
æ¥çã®å°éå®¶ãç§ãã¡ã®ãã©ãããã©ãŒã ã奜ãã§äœ¿çšããçç±ãã芧ãã ãã
éåžžã«å¹ççãªããŒã ã§ããµããŒããšã³ãžãã¢ã¯éåžžã«åªç§ã§ç¥èãè±å¯ã§ãã補åã¯åžžã«é²åããŠããã圌ãã¯ã客æ§ã®æèŠãéåžžã«çå£ã«åãæ¢ããŠããŸãã
ç¬èªã®æ©èœãšããŒãœãã©ã€ãºãããã¢ãããŒããåããä¿¡é Œã§ãã補åã§ãã
ãã®ãã©ãããã©ãŒã ã«ããã瀟å ã®ã¢ãã€ã«ã¢ããªã±ãŒã·ã§ã³ãç°¡åãã€å¹ççã«è©äŸ¡ã§ããŸããããªã³ããŒãã£ã³ã°ã¯ã¹ã ãŒãºã§ãUIã®åçèªååã¯çŽ æŽãããã§ãã
補åã¯ç§ãã¡ã®ããŒãºãå®ç§ã«æºãããŠãããã»ããã¢ãããšäœ¿çšãç°¡åã§ããããŒã ã®å¯Ÿå¿ãéåžžã«è¿ éã§ãã
éåžžã«å°éçã§æè¡çã§ããäºã€æãçŽ æŽãããææã§ãã
ç§ãã¡ã¯ã¢ãã€ã«ã¢ããªã±ãŒã·ã§ã³ããã³ãŠã§ãã®è匱æ§ã¹ãã£ã³ãæäŸããå¯äžã®ããŒãããŒãšããŠOstorlabãéžã³ãŸãããéåžžã«è¯ãããŒãããŒã·ãããç¯ããŠããŸãã
圌ãã®ã«ã¹ã¿ããŒãµãŒãã¹ã¯ãããã¯ã©ã¹ã§ããã補åã¯ç¶ç¶çã«æ¹åãããŠããŸãã
䜿ãããããæ°ããã¢ããããŒãã§ããã«è¯ããªã£ãŠããŸãããŸãã察å¿ãæ©ãéåžžã«å¹ççã§ãã
çŽ æŽããã補åã§ãã«ã¹ã¿ããŒãµãŒãã¹ãçŽ æŽããããéåžžã«æçšã§æ£ç¢ºãã€ç°¡åã«äœ¿çšã§ããŸãã
è¿ éãªãµããŒããšããŒãœãã©ã€ãºãããæ©èœã匷調ãããŠããŸãã
MASTãœãªã¥ãŒã·ã§ã³ãšããŠOstorlabã§éåžžã«çŽ æŽãããçµéšãããŸããã
éåžžã«å¹ççãªããŒã ã§ããµããŒããšã³ãžãã¢ã¯éåžžã«åªç§ã§ç¥èãè±å¯ã§ãã補åã¯åžžã«é²åããŠããã圌ãã¯ã客æ§ã®æèŠãéåžžã«çå£ã«åãæ¢ããŠããŸãã
ç¬èªã®æ©èœãšããŒãœãã©ã€ãºãããã¢ãããŒããåããä¿¡é Œã§ãã補åã§ãã
ãã®ãã©ãããã©ãŒã ã«ããã瀟å ã®ã¢ãã€ã«ã¢ããªã±ãŒã·ã§ã³ãç°¡åãã€å¹ççã«è©äŸ¡ã§ããŸããããªã³ããŒãã£ã³ã°ã¯ã¹ã ãŒãºã§ãUIã®åçèªååã¯çŽ æŽãããã§ãã
補åã¯ç§ãã¡ã®ããŒãºãå®ç§ã«æºãããŠãããã»ããã¢ãããšäœ¿çšãç°¡åã§ããããŒã ã®å¯Ÿå¿ãéåžžã«è¿ éã§ãã
éåžžã«å°éçã§æè¡çã§ããäºã€æãçŽ æŽãããææã§ãã
ç§ãã¡ã¯ã¢ãã€ã«ã¢ããªã±ãŒã·ã§ã³ããã³ãŠã§ãã®è匱æ§ã¹ãã£ã³ãæäŸããå¯äžã®ããŒãããŒãšããŠOstorlabãéžã³ãŸãããéåžžã«è¯ãããŒãããŒã·ãããç¯ããŠããŸãã
圌ãã®ã«ã¹ã¿ããŒãµãŒãã¹ã¯ãããã¯ã©ã¹ã§ããã補åã¯ç¶ç¶çã«æ¹åãããŠããŸãã
䜿ãããããæ°ããã¢ããããŒãã§ããã«è¯ããªã£ãŠããŸãããŸãã察å¿ãæ©ãéåžžã«å¹ççã§ãã
çŽ æŽããã補åã§ãã«ã¹ã¿ããŒãµãŒãã¹ãçŽ æŽããããéåžžã«æçšã§æ£ç¢ºãã€ç°¡åã«äœ¿çšã§ããŸãã
è¿ éãªãµããŒããšããŒãœãã©ã€ãºãããæ©èœã匷調ãããŠããŸãã
MASTãœãªã¥ãŒã·ã§ã³ãšããŠOstorlabã§éåžžã«çŽ æŽãããçµéšãããŸããã
éåžžã«å¹ççãªããŒã ã§ããµããŒããšã³ãžãã¢ã¯éåžžã«åªç§ã§ç¥èãè±å¯ã§ãã補åã¯åžžã«é²åããŠããã圌ãã¯ã客æ§ã®æèŠãéåžžã«çå£ã«åãæ¢ããŠããŸãã
ç¬èªã®æ©èœãšããŒãœãã©ã€ãºãããã¢ãããŒããåããä¿¡é Œã§ãã補åã§ãã
ãã®ãã©ãããã©ãŒã ã«ããã瀟å ã®ã¢ãã€ã«ã¢ããªã±ãŒã·ã§ã³ãç°¡åãã€å¹ççã«è©äŸ¡ã§ããŸããããªã³ããŒãã£ã³ã°ã¯ã¹ã ãŒãºã§ãUIã®åçèªååã¯çŽ æŽãããã§ãã
補åã¯ç§ãã¡ã®ããŒãºãå®ç§ã«æºãããŠãããã»ããã¢ãããšäœ¿çšãç°¡åã§ããããŒã ã®å¯Ÿå¿ãéåžžã«è¿ éã§ãã
éåžžã«å°éçã§æè¡çã§ããäºã€æãçŽ æŽãããææã§ãã
ç§ãã¡ã¯ã¢ãã€ã«ã¢ããªã±ãŒã·ã§ã³ããã³ãŠã§ãã®è匱æ§ã¹ãã£ã³ãæäŸããå¯äžã®ããŒãããŒãšããŠOstorlabãéžã³ãŸãããéåžžã«è¯ãããŒãããŒã·ãããç¯ããŠããŸãã
圌ãã®ã«ã¹ã¿ããŒãµãŒãã¹ã¯ãããã¯ã©ã¹ã§ããã補åã¯ç¶ç¶çã«æ¹åãããŠããŸãã
䜿ãããããæ°ããã¢ããããŒãã§ããã«è¯ããªã£ãŠããŸãããŸãã察å¿ãæ©ãéåžžã«å¹ççã§ãã
çŽ æŽããã補åã§ãã«ã¹ã¿ããŒãµãŒãã¹ãçŽ æŽããããéåžžã«æçšã§æ£ç¢ºãã€ç°¡åã«äœ¿çšã§ããŸãã
è¿ éãªãµããŒããšããŒãœãã©ã€ãºãããæ©èœã匷調ãããŠããŸãã
MASTãœãªã¥ãŒã·ã§ã³ãšããŠOstorlabã§éåžžã«çŽ æŽãããçµéšãããŸããã
ãããã質å
察象ç¯å²ãã»ããã¢ãããçµæãããŒã ã«å±ãä»çµã¿ã«ã€ããŠã®ççŽãªåçã§ãã
ãæ¢ãã®åçãèŠã€ãããŸãããïŒãã¢ãäºçŽãŸãã¯ãåãåãããã ããã
ã¢ãã€ã«ã¢ããªãä¿è·ãã
ã¢ããªãšããžãã¹ãå®å šã«ä¿ã€ç¶ç¶çãªã»ãã¥ãªãã£ãã¹ãã§ãæ»æãããŠã³ã¿ã€ã ãããã³ã³ã³ãã©ã€ã¢ã³ã¹ã®åé¡ãé²ããŸãã







