Case Study: Mercari achieves stronger software supply chain security with StepSecurity

Mercari hardens 100% of workflows with StepSecurity

Mercari, an ecommerce and financial services company based in Tokyo, faced the challenge of hardening the network access within its GitHub Actions build environment to further secure its software supply chain. While they had implemented several security tools, building an in-house solution for network egress controls using Kubernetes components seemed like a significant undertaking with a long lead time. This led them to evaluate StepSecurity.

StepSecurity provided a solution that was deployed across 100% of Mercari's workflows without requiring any changes to individual workflow files, ensuring minimal developer impact. Using StepSecurity's Terraform provider, Mercari configured policies as code from a single location, enabling developer self-service for network allowlist changes. The result was that StepSecurity replaced several internally developed tools, allowing the security team to focus on more unique enterprise concerns and providing additional monitoring, isolation, and governance capabilities that further increased their supply chain confidence.

Mercari