https://www.youngju.dev/blog 천천히 올바르게. AI Researcher & DevOps Engineer Youngju's tech blog. GPU/CUDA, LLM, MLOps, Kubernetes AI workloads, distributed training, and data engineering. ko fjvbn2003@gmail.com (Youngju Kim) fjvbn2003@gmail.com (Youngju Kim) Sat, 16 May 2026 00:00:00 GMT https://www.youngju.dev/blog/culture/2026-05-16-cloud-security-zero-trust-sbom-slsa-cspm-wiz-falco-sigstore-vault-2026-deep-dive.en https://www.youngju.dev/blog/culture/2026-05-16-cloud-security-zero-trust-sbom-slsa-cspm-wiz-falco-sigstore-vault-2026-deep-dive.en A complete look at the cloud security stack as of May 2026. Zero Trust (Cloudflare, Tailscale, Zscaler, Netskope), CSPM/CNAPP (Wiz, Orca, Lacework, Prisma Cloud, Sysdig, Aqua), SBOM/SLSA supply chain (Sigstore cosign, CycloneDX/SPDX, Trivy, Syft, Grype, Dependency-Track, GUAC), runtime security (Falco, Tetragon, KubeArmor), secrets/IGA (Vault, CyberArk, Doppler, Infisical), and IaC/policy (Checkov, OPA, Kyverno) — all in one place. Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) cloud-securityzero-trustsbomslsacspmcnappwizfalcosigstorevaulttailscalecloudflare-zero-trustsupply-chain-securitydevsecops https://www.youngju.dev/blog/culture/2026-05-16-cloud-security-zero-trust-sbom-slsa-cspm-wiz-falco-sigstore-vault-2026-deep-dive.ja https://www.youngju.dev/blog/culture/2026-05-16-cloud-security-zero-trust-sbom-slsa-cspm-wiz-falco-sigstore-vault-2026-deep-dive.ja 2026年5月時点のクラウドセキュリティスタックを一気に整理する。Zero Trust(Cloudflare、Tailscale、Zscaler、Netskope)、CSPM/CNAPP(Wiz、Orca、Lacework、Prisma Cloud、Sysdig、Aqua)、SBOM/SLSAサプライチェーン(Sigstore cosign、CycloneDX/SPDX、Trivy、Syft、Grype、Dependency-Track、GUAC)、ランタイムセキュリティ(Falco、Tetragon、KubeArmor)、シークレット/IGA(Vault、CyberArk、Doppler、Infisical)、そしてIaC/ポリシー(Checkov、OPA、Kyverno)まで一本でまとめる。 Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) cloud-securityzero-trustsbomslsacspmcnappwizfalcosigstorevaulttailscalecloudflare-zero-trustsupply-chain-securitydevsecops https://www.youngju.dev/blog/culture/2026-05-16-cloud-security-zero-trust-sbom-slsa-cspm-wiz-falco-sigstore-vault-2026-deep-dive https://www.youngju.dev/blog/culture/2026-05-16-cloud-security-zero-trust-sbom-slsa-cspm-wiz-falco-sigstore-vault-2026-deep-dive 2026년 5월 기준 클라우드 보안 스택을 끝까지 본다. Zero Trust(Cloudflare, Tailscale, Zscaler, Netskope), CSPM/CNAPP(Wiz, Orca, Lacework, Prisma Cloud, Sysdig, Aqua), SBOM/SLSA 공급망(Sigstore cosign, CycloneDX/SPDX, Trivy, Syft, Grype, Dependency-Track, GUAC), 런타임 보안(Falco, Tetragon, KubeArmor), 시크릿/IGA(Vault, CyberArk, Doppler, Infisical), IaC/정책(Checkov, OPA, Kyverno)까지 한 글에서 깊이 정리한다. Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) cloud-securityzero-trustsbomslsacspmcnappwizfalcosigstorevaulttailscalecloudflare-zero-trustsupply-chain-securitydevsecops