ADOPSI DEVSECOPS UNTUK MENDUKUNG METODE AGILE MENGGUNAKAN TRIVY SEBAGAI SECURITY SCANNER DOCKER IMAGE DAN DOCKERFILE

Panca Rizki Perkasa; Evangs Mailoa

doi:10.35870/jimik.v4i3.291

Vol. 4 No. 3 (2023) • Articles

Open Access

ADOPSI DEVSECOPS UNTUK MENDUKUNG METODE AGILE MENGGUNAKAN TRIVY SEBAGAI SECURITY SCANNER DOCKER IMAGE DAN DOCKERFILE

Panca Rizki Perkasa

Universitas Kristen Satya Wacana

Evangs Mailoa

Universitas Kristen Satya Wacana

DOI: https://doi.org/10.35870/jimik.v4i3.291

Published: September 10, 2023 Pages: 856-863

Original Full-Text Article

Download published version for reading and archiving

Download PDF

Abstract

Compliance with personal data protection laws requires electronic system operators to pay more attention to security in applications. Security testing which is usually done at the end of the SDLC makes Agile principles incompatible with advantages that prioritize acceleration, adaptability and responsiveness to change. DevSecOps implementation using Trivy will insert a security scanner process for applications that are deployed in containerized form. The continuous process of security scanning integrated in CI/CD will increase the awareness of developers in terms of application security, so that developers will more quickly fix these problems and avoid security problems at the end of the SDLC.

Keywords:

Agile CI/CD Security DevSecOps Container

Article Metrics & Downloads Graph

Monthly Download Trends:

Author Biographies

Panca Rizki Perkasa Universitas Kristen Satya Wacana

Program Studi Teknik Informatika, Fakultas Teknologi Informasi, Universitas Kristen Satya Wacana, Kota Salatiga, Provinsi Jawa Tengah, Indonesia

Evangs Mailoa Universitas Kristen Satya Wacana

Program Studi Teknik Informatika, Fakultas Teknologi Informasi, Universitas Kristen Satya Wacana, Kota Salatiga, Provinsi Jawa Tengah, Indonesia

How to Cite

Perkasa, P. R., & Mailoa, E. (2023). ADOPSI DEVSECOPS UNTUK MENDUKUNG METODE AGILE MENGGUNAKAN TRIVY SEBAGAI SECURITY SCANNER DOCKER IMAGE DAN DOCKERFILE. Jurnal Indonesia : Manajemen Informatika Dan Komunikasi, 4(3), 856-863. https://doi.org/10.35870/jimik.v4i3.291

License

Creative Commons Attribution 4.0 International License (CC BY 4.0)

This is an open-access article distributed under the terms of the Creative Commons Attribution 4.0 International License .

Share: You are free to copy, distribute, and transmit the work in any medium or format.
Adapt: You are free to remix, transform, and build upon the work for any purpose, even commercially.
Attribution: You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.

Copyright & Retention: Authors retain copyright without restrictions and grant this journal the right of first publication under an open-access model. The journal retains non-exclusive publishing rights for archiving, indexing, and scholarly dissemination.

References

Total: 16 References

Permana, A. Y., & Romadlon, P., (2019). Perancangan Sistem Informasi Penjualan Perumahan Mengunakan Metode SDLC Pada PT. Mandiri Land Proseperous Berbasis Mobile. Jurnal Teknologi Pelita Bangsa, 84(10), pp. 1511–1518. DOI: https://doi.org/10.1134/s0320972519100129
Murdiani, D., Yudhana, A., & Sunardi, S., (2020). Implementasi Agile Method dalam Pengembangan Jurnal Elektronik di Lembaga Penelitian Non Pemerintahan (NGO). Jurnal Teknologi Informasi Dan Ilmu Komputer, 7(4), pp. 709. DOI: https://doi.org/10.25126/jtiik.2020741839
Sunardi, S., & Fadli, S., (2018). IDENTIFIKASI MASALAH PENERAPAN METODE AGILE (SCRUM) PADA PENGEMBANGAN PERANGKAT LUNAK DI PERGURUAN TINGGI (Studi Kasus Universitas Nahdlatul Ulama Nusa Tenggara Barat). Jurnal Manajemen Informatika Dan Sistem Informasi, 1(2), pp. 14. DOI: https://doi.org/10.36595/misi.v1i2.37
Hemon, A., Lyonnet, B., Rowe, F., & Fitzgerald, B., (2020). From Agile to DevOps: Smart Skills and Collaborations. Information Systems Frontiers, 22(4), pp. 927–945. DOI: https://doi.org/10.1007/s10796-019-09905-1
Tohirin, T., Utami, S. F., Widianto, S. R., & Mauludyansah, W. Al., (2020). Implementasi DevOps Pada Pengembangan Aplikasi e-Skrining Covid-19. Multinetics, 6(1), pp. 15–20. DOI: https://doi.org/10.32722/multinetics.v6i1.2764
Melgar, A. S., & Osores, J. J. V., (2021). DevOps as a culture of interaction and deployment in an insurance company. Turkish Journal of Computer and Mathematics Education (TURCOMAT), 12(4), pp. 1701–1708. DOI: https://doi.org/10.17762/turcomat.v12i4.1429
Saputra, M. H. K., & Nabil, L. M., (2021). Penerapan Arsitektur Microservice Pada Sistem Tata Kelola Matakuliah Proyek Politeknik Pos Indonesia. Teknik Informatika, 13(3), pp. 22–28.
Khalyly, B. El, Belangour, A., Erraissi, A., & Banane, M., (2020). Devops and Microservices Based Internet of Things Meta-Model. International Journal of Emerging Trends in Engineering Research, 8(9), pp. 6254–6266. DOI: https://doi.org/10.30534/ijeter/2020/217892020
Putra, R. A., (2018). Analisa Implementasi Arsitektur Microservoces Berbasis Kontainer Pada Komunitas Pengembang Perangkat Lunak Sumber Terbuka ( OpenDayLight DevOps Community ). Jurnal Sistem Infomasi Teknologi Informasi Dan Komputer (Just It) Universitas Bina Nusantara Magister Manajemen Sistem Informasi Jakarta, pp. 150–162.
Ariadi, F., Iswahyudi, C., Nurnawati, E., Informatika, J., & Akprind, I., (2020). Penerapan Docker Container Sebagai Teknologi Ramah Skalabilitas Dibanding Teknik Virtualisasi Untuk Membangun Website Di Ubuntu 18.04.4 Lts. Jurnal JARKOM, 8(2), pp. 47–57.
Hanifah, F., Budiyono, A., & Widjajarto, A., (2021). Analisa Kerentanan Pada Vulnerable Docker Menggunakan Alienvault Dan Docker Bench For Security Dengan Acuan Framework CIS Control. E-Proceeding of Engineering, 8(5), pp. 8879–8885. DOI: https://openlibrarypublications.telkomuniversity.ac.id/index.php/engineering/article/view/15914
Palinggi, S., Palelleng, S., & Allolinggi, L. R., (2020). Peningkatan Rasio Kejahatan Cyber Dengan Pola Interaksi Sosio Engineering Pada Periode Akhir Era Society 4.0 Di Indonesia. Jurnal Ilmiah Dinamika Sosial, 4(1), pp. 145. DOI: https://doi.org/10.38043/jids.v4i1.2314
Elis, E., & Hamimah, S., (2022). Urgensi Undang-Undang Perlindungan Data Pribadi Dalam Menjamin Keamanan Data Pribadi Sebagai Pemenuhan Hak Atas Privasi Masyarakat Indonesia. Jurnal Rechten : Riset Hukum Dan Hak Asasi Manusia, 3(2), pp. 1–6. DOI: https://doi.org/10.52005/rechten.v3i2.34
Edy Listartha, I. M., Premana Mitha, I. M. A., Aditya Arta, M. W., & Yuda Arimika, I. K. W., (2022). Analisis Kerentanan Website SMA Negeri 2 Amlapura Menggunakan Metode OWASP (Open Web Application Security Project). Simkom, 7(1), pp. 23–27. DOI: https://doi.org/10.51717/simkom.v7i1.63
Shama, A. M., & W. Chandra, D., (2021). Implementasi Static Application Security Testing Menggunakan Jenkins Ci/Cd Berbasis Docker Container Pada Pt. Emporia Digital Raya. Jurnal Ilmiah Informatika, 9(02), pp. 95–99. DOI: https://doi.org/10.33884/jif.v9i02.3769
Ramadhan, R. S., Widjajarto, A., & Almaarif, A., (2022). Vulnerability Management Pada Vulnerable Docker Menggunakan Clair Scanner Dan Joomscan Berdasarkan Standar GSA CIO-IT Security -17-80. 4(1), pp. 85–93. DOI: https://doi.org/10.30865/json.v4i1.4789.