{"id":15218,"date":"2025-03-15T06:17:31","date_gmt":"2025-03-15T03:17:31","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/container-pipelinelarinizi-aws-inspector-ve-github-actions-ile-guvence-altina-alin\/"},"modified":"2025-03-15T06:17:31","modified_gmt":"2025-03-15T03:17:31","slug":"container-pipelinelarinizi-aws-inspector-ve-github-actions-ile-guvence-altina-alin","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/container-pipelinelarinizi-aws-inspector-ve-github-actions-ile-guvence-altina-alin\/","title":{"rendered":"Container Pipeline’lar\u0131n\u0131z\u0131 AWS Inspector ve GitHub Actions ile G\u00fcvence Alt\u0131na Al\u0131n"},"content":{"rendered":"

<\/p>\n

Container Pipeline’lar\u0131n\u0131z\u0131 AWS Inspector ve GitHub Actions ile G\u00fcvence Alt\u0131na Al\u0131n<\/p>\n

G\u00fcn\u00fcm\u00fczde container’lar, modern yaz\u0131l\u0131m geli\u015ftirmenin temel ta\u015flar\u0131ndan biri haline geldi. Ancak, bu h\u0131zl\u0131 ve esnekli\u011fin getirdi\u011fi avantajlar\u0131n yan\u0131nda, g\u00fcvenlik riskleri de beraberinde geliyor. Bu riski azaltmak i\u00e7in otomatize g\u00fcvenlik taramalar\u0131 \u015fart. Bu makalede, AWS Inspector ve GitHub Actions’\u0131 kullanarak container pipeline’lar\u0131n\u0131z\u0131 nas\u0131l g\u00fcvenli hale getirece\u011finizi ad\u0131m ad\u0131m a\u00e7\u0131klayaca\u011f\u0131m. Bu g\u00fc\u00e7l\u00fc kombinasyon, geli\u015ftirme s\u00fcrecinize g\u00fcvenlik taramalar\u0131n\u0131 entegre etmenizi ve potansiyel g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 erken a\u015famalarda tespit etmenizi sa\u011flar.<\/p>\n

Neden AWS Inspector ve GitHub Actions?<\/h2>\n

AWS Inspector, container’lar\u0131n\u0131zdaki g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 otomatik olarak tespit eden g\u00fc\u00e7l\u00fc bir g\u00fcvenlik hizmetidir. GitHub Actions ise, kodunuzda otomatik olarak \u00e7al\u0131\u015ft\u0131r\u0131lan i\u015f ak\u0131\u015flar\u0131n\u0131 y\u00f6netmenizi sa\u011flayan bir CI\/CD platformudur. Bu ikisini birle\u015ftirerek, her yeni container imaj\u0131 olu\u015fturuldu\u011funda otomatik olarak g\u00fcvenlik taramalar\u0131 ger\u00e7ekle\u015ftirebilirsiniz. Sonu\u00e7 olarak, g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 erken a\u015famalarda tespit ederek, daha g\u00fcvenli ve daha g\u00fcvenilir bir uygulama da\u011f\u0131t\u0131m s\u00fcreci elde edersiniz.<\/p>\n

Ad\u0131m Ad\u0131m Kurulum ve Yap\u0131land\u0131rma<\/h2>\n

\u0130lk olarak, AWS hesab\u0131n\u0131zda AWS Inspector’\u0131 etkinle\u015ftirmeniz gerekiyor. Ard\u0131ndan, GitHub deponuzda bir GitHub Actions i\u015f ak\u0131\u015f\u0131 olu\u015fturmal\u0131s\u0131n\u0131z. Bu i\u015f ak\u0131\u015f\u0131, container imaj\u0131n\u0131z\u0131 olu\u015fturduktan sonra AWS Inspector’\u0131 kullanarak bir g\u00fcvenlik taramas\u0131 ba\u015flatacak. A\u015fa\u011f\u0131daki \u00f6rnek YAML kod par\u00e7as\u0131, bu i\u015flemi nas\u0131l ger\u00e7ekle\u015ftirece\u011finizi g\u00f6stermektedir:<\/p>\n

\nname: AWS Inspector Scan\n\non:\n  push:\n    branches:\n      - main\n\njobs:\n  scan:\n    runs-on: ubuntu-latest\n    steps:\n      - name: Checkout code\n        uses: actions\/checkout@v3\n      - name: Build image\n        # ... Your image building steps ...\n      - name: Run AWS Inspector scan\n        uses: actions\/aws-cli@v1\n        with:\n          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}\n          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}\n          aws-region: ${{ secrets.AWS_REGION }}\n          commands: |\n            aws inspector create-assessment-target --name my-target --resource-group-arns arn:aws:ec2:::resource-group\/my-resource-group\n            aws inspector start-assessment --assessment-template-arn arn:aws:inspector:::assessment-template\/my-template --assessment-target-arn arn:aws:inspector:::assessment-target\/my-target\n<\/code><\/pre>\n
Bu kod par\u00e7as\u0131, AWS kimlik bilgilerinizi GitHub Secrets’e kaydetmenizi gerektirir.  L\u00fctfen hassas bilgilerinizi g\u00fcvenli bir \u015fekilde y\u00f6netin. Ayr\u0131ca, my-target ve my-template yerine kendi de\u011ferlerinizi kullanman\u0131z gerekecektir. Daha fazla detay i\u00e7in AWS Inspector<\/a> dok\u00fcmanlar\u0131n\u0131 inceleyebilirsiniz.<\/p>\n
En \u0130yi Uygulamalar<\/h2>\n
G\u00fcvenlik taramalar\u0131n\u0131 otomatikle\u015ftirmek, container g\u00fcvenli\u011finin \u00f6nemli bir par\u00e7as\u0131d\u0131r. Ancak, bu sadece ba\u015flang\u0131\u00e7t\u0131r.  G\u00fcvenli\u011fi iyile\u015ftirmek i\u00e7in a\u015fa\u011f\u0131daki en iyi uygulamalar\u0131 da g\u00f6z \u00f6n\u00fcnde bulundurmal\u0131s\u0131n\u0131z: <\/p>\n