Zero Trust - CI/CD用語集の定義
zero trustは、ネットワーク上の位置だけに基づいてアクセスを許可しないセキュリティモデルです。すべてのリクエストが継続的に認証・認可され、通常はmTLSと短命なIDで適用されます。
関連ガイド
mTLS - CI/CD Glossary DefinitionmTLS has both client and server present certificates, so each cryptographically proves its identity - the bac…
Short-Lived Credentials - CI/CD Glossary DefinitionShort-lived credentials expire minutes after issue, so a leaked CI token is useless almost immediately - the…
OIDC Federation - CI/CD Glossary DefinitionOIDC federation lets a CI system trade its own signed identity for cloud credentials by trusting its OIDC iss…