{"version":"1.0","provider_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","provider_url":"https:\/\/fatihsoysal.com\/blog","author_name":"Fatih Soysal","author_url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/","title":"Infrastructure as Code G\u00fcvenli\u011fi: Checkov ile SAST Yakla\u015f\u0131m\u0131","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"WbmSNxYhbW\"><a href=\"https:\/\/fatihsoysal.com\/blog\/infrastructure-as-code-guvenligi-checkov-ile-sast-yaklasimi\/\">Infrastructure as Code G\u00fcvenli\u011fi: Checkov ile SAST Yakla\u015f\u0131m\u0131<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/fatihsoysal.com\/blog\/infrastructure-as-code-guvenligi-checkov-ile-sast-yaklasimi\/embed\/#?secret=WbmSNxYhbW\" width=\"600\" height=\"338\" title=\"&#8220;Infrastructure as Code G\u00fcvenli\u011fi: Checkov ile SAST Yakla\u015f\u0131m\u0131&#8221; &#8212; Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" data-secret=\"WbmSNxYhbW\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n<\/script>\n","description":"Modern bulut altyap\u0131lar\u0131n\u0131n y\u00f6netimi, giderek artan karma\u015f\u0131kl\u0131k ve h\u0131z gereksinimleriyle d\u00f6n\u00fc\u015f\u00fcyor. Bu d\u00f6n\u00fc\u015f\u00fcm\u00fcn merkezinde yer alan Infrastructure as Code (IaC), altyap\u0131y\u0131 kod olarak tan\u0131mlayarak otomasyon, \u00f6l\u00e7eklenebilirlik ve tutarl\u0131l\u0131k sa\u011fl\u0131yor. Ancak, IaC'nin sundu\u011fu bu avantajlar, beraberinde yeni g\u00fcvenlik zorluklar\u0131n\u0131 da getiriyor. Peki, milyonlarca dolar de\u011ferindeki altyap\u0131n\u0131z\u0131 tek bir kod sat\u0131r\u0131yla riske atmadan, g\u00fcvenli\u011fi geli\u015ftirme s\u00fcrecine nas\u0131l dahil edebilirsiniz? Bu makale, IaC g\u00fcvenli\u011finde Statik Uygulama G\u00fcvenlik Testi (SAST) yakla\u015f\u0131m\u0131n\u0131n pratik bir uygulamas\u0131 olan Checkov arac\u0131n\u0131 kullanarak, altyap\u0131 kodunuzdaki zafiyetleri nas\u0131l proaktif bir \u015fekilde tespit edip giderebilece\u011finizi ad\u0131m ad\u0131m a\u00e7\u0131kl\u0131yor."}