{"id":100532,"date":"2021-06-17T22:23:06","date_gmt":"2021-06-17T20:23:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki"},"modified":"2021-06-17T22:23:06","modified_gmt":"2021-06-17T20:23:08","slug":"google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","title":{"rendered":"Google navrhl SLSA pro ochranu p\u0159ed \u0161kodliv\u00fdmi zm\u011bnami v procesu v\u00fdvoje","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Spole\u010dnost Google p\u0159edstavila r\u00e1mec SLSA (Supply-chain Levels for Software Artifacts), kter\u00fd shrnuje dosavadn\u00ed zku\u0161enosti v ochran\u011b v\u00fdvoje p\u0159ed \u00fatoky, kter\u00e9 se vyskytuj\u00ed b\u011bhem f\u00e1ze psan\u00ed k\u00f3du, testov\u00e1n\u00ed, sestavov\u00e1n\u00ed a distribuce produktu.     <\/p>\n<p>V\u00fdvojov\u00e9 procesy se st\u00e1vaj\u00ed st\u00e1le slo\u017eit\u011bj\u0161\u00edmi a z\u00e1visl\u00fdmi na extern\u00ed n\u00e1stroj\u00edch, co\u017e vytv\u00e1\u0159\u00ed p\u0159\u00edzniv\u00e9 podm\u00ednky pro \u00fatoky, kter\u00e9 nesm\u011b\u0159uj\u00ed na odhalov\u00e1n\u00ed a zneu\u017e\u00edv\u00e1n\u00ed zranitelnost\u00ed v kone\u010dn\u00e9m produktu, ale na kompromitaci samotn\u00e9ho procesu v\u00fdvoje (\u00fatoky \u201esupply chain\u201c, typicky zam\u011b\u0159en\u00e9 na zav\u00e1d\u011bn\u00ed \u0161kodliv\u00fdch zm\u011bn b\u011bhem psan\u00ed k\u00f3du, nahrazen\u00ed distribuovan\u00fdch komponent a z\u00e1vislost\u00ed).       <\/p>\n<p>R\u00e1mec zohled\u0148uje 8 typ\u016f \u00fatok\u016f spojen\u00fdch s hrozbami na\u0159\u00edzen\u00ed \u0161kodliv\u00fdch zm\u011bn b\u011bhem f\u00e1ze v\u00fdvoje k\u00f3du, sestavov\u00e1n\u00ed, testov\u00e1n\u00ed a distribuce produktu.      <center><img decoding=\"async\" alt=\"Google navrhl SLSA pro ochranu p\u0159ed \u0161kodliv\u00fdmi zm\u011bnami v procesu v\u00fdvoje\" src=\"\/wp-content\/uploads\/2021\/06\/d99f0d7ebc6009bcecf21f65f77dcf65.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<ul>\n<li class=\"l\"> A. Vkl\u00e1d\u00e1n\u00ed zm\u011bn do zdrojov\u00e9ho k\u00f3du, kter\u00e9 obsahuj\u00ed backdoory nebo skryt\u00e9 chyby vedouc\u00ed k zranitelnostem.\n<p>P\u0159\u00edklad \u00fatoku: \u201eHypocrite Commits\u201c \u2014 pokus o zaveden\u00ed patch\u016f s zranitelnostmi do j\u00e1dra Linuxu.   <\/p>\n<p>Navrhovan\u00e1 metoda ochrany: nez\u00e1visl\u00e9 p\u0159ezkoum\u00e1n\u00ed ka\u017ed\u00e9 zm\u011bny dv\u011bma v\u00fdvoj\u00e1\u0159i.    <\/p>\n<li class=\"l\"> B. Kompromitace platformy pro spr\u00e1vu zdrojov\u00e9ho k\u00f3du.\n<p>P\u0159\u00edklad \u00fatoku: zaveden\u00ed \u0161kodliv\u00fdch commity s backdoorem do Git repozit\u00e1\u0159e projektu PHP po \u00faniku hesel v\u00fdvoj\u00e1\u0159\u016f.  <\/p>\n<p>Navrhovan\u00e1 metoda ochrany: Zv\u00fd\u0161en\u00ed ochrany platformy pro spr\u00e1vu k\u00f3du (v p\u0159\u00edpad\u011b PHP byl \u00fatok proveden prost\u0159ednictv\u00edm m\u00e1lo pou\u017e\u00edvan\u00e9ho HTTPS rozhran\u00ed, kter\u00e9 umo\u017e\u0148ovalo odes\u00edl\u00e1n\u00ed zm\u011bn po p\u0159ihl\u00e1\u0161en\u00ed heslem bez kontroly SSH kl\u00ed\u010de, p\u0159i\u010dem\u017e pro hashov\u00e1n\u00ed hesel byl pou\u017eit ned\u016fv\u011bryhodn\u00fd MD5).    <\/p>\n<li class=\"l\">C. Vkl\u00e1d\u00e1n\u00ed zm\u011bn b\u011bhem p\u0159enosu k\u00f3du do syst\u00e9mu sestavov\u00e1n\u00ed nebo kontinu\u00e1ln\u00ed integrace (sestavuje se k\u00f3d, kter\u00fd neodpov\u00edd\u00e1 k\u00f3du v repozit\u00e1\u0159i).\n<p>P\u0159\u00edklad \u00fatoku: zaveden\u00ed backdooru do Webmin prost\u0159ednictv\u00edm zm\u011bn v sestavovac\u00ed infrastruktu\u0159e, kter\u00e9 vedly k pou\u017eit\u00ed soubor\u016f s k\u00f3dem, kter\u00e9 byly odli\u0161n\u00e9 od soubor\u016f v repozit\u00e1\u0159i.     <\/p>\n<p>Navrhovan\u00e1 metoda ochrany: Kontrola integrity a identifikace zdroje p\u0159\u00edchoz\u00edho k\u00f3du do sestavovac\u00edho procesu. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-dronten\/\"   title=\"serveru\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2636\">serveru<\/a>.      <\/p>\n<li class=\"l\"> D. Kompromitace sestavovac\u00ed platformy.\n<p>P\u0159\u00edklad \u00fatoku: \u00fatok SolarWinds, b\u011bhem n\u011bho\u017e bylo b\u011bhem f\u00e1ze sestavov\u00e1n\u00ed zaji\u0161t\u011bno zaveden\u00ed backdooru do produktu SolarWinds Orion.  <\/p>\n<p>Navrhovan\u00e1 metoda ochrany: zaveden\u00ed roz\u0161\u00ed\u0159en\u00fdch opat\u0159en\u00ed pro zabezpe\u010den\u00ed sestavovac\u00ed platformy.    <\/p>\n<li class=\"l\"> E. \u0160\u00ed\u0159en\u00ed \u0161kodliv\u00e9ho k\u00f3du prost\u0159ednictv\u00edm nekvalitn\u00edch z\u00e1vislost\u00ed.\n<p>P\u0159\u00edklad \u00fatoku: zaveden\u00ed zadn\u00edho kan\u00e1lu do popul\u00e1rn\u00ed knihovny event-stream p\u0159id\u00e1n\u00edm ne\u0161kodn\u00e9 z\u00e1vislosti, kter\u00e1 se n\u00e1sledn\u011b za\u0159adila do jedn\u00e9 z aktualizac\u00ed t\u00e9to z\u00e1vislosti, obsahuj\u00edc\u00ed \u0161kodliv\u00fd k\u00f3d (\u0161kodliv\u00e1 zm\u011bna nebyla zaznamen\u00e1na v gitov\u00e9m repozit\u00e1\u0159i, ale byla p\u0159\u00edtomna pouze v hotov\u00e9m MNP bal\u00ed\u010dku).    <\/p>\n<p>Navrhovan\u00e1 metoda ochrany: rekurzivn\u00ed uplatn\u011bn\u00ed po\u017eadavk\u016f SLSA na v\u0161echny z\u00e1vislosti (v p\u0159\u00edpad\u011b event-stream by kontrola odhalila sestaven\u00ed k\u00f3du, kter\u00e9 neodpov\u00edd\u00e1 obsahu hlavn\u00edho Git repozit\u00e1\u0159e).    \t  <\/p>\n<li class=\"l\"> F. Stahov\u00e1n\u00ed artefakt\u016f, kter\u00e9 nebyly vytvo\u0159eny v syst\u00e9mu CI\/CD.\n<p>P\u0159\u00edklad \u00fatoku: p\u0159id\u00e1n\u00ed \u0161kodliv\u00e9ho k\u00f3du do skriptu CodeCov, kter\u00fd umo\u017enil \u00fato\u010dn\u00edk\u016fm z\u00edsk\u00e1vat informace ulo\u017een\u00e9 v prost\u0159ed\u00edch syst\u00e9m\u016f kontinu\u00e1ln\u00ed integrace klient\u016f.    <\/p>\n<p>Navrhovan\u00e1 metoda ochrany: kontrola zdroje a integrity artefakt\u016f (v p\u0159\u00edpad\u011b CodeCov by mohlo b\u00fdt zji\u0161t\u011bno, \u017ee skript Bash Uploader stahovan\u00fd z webu codecov.io neodpov\u00edd\u00e1 k\u00f3du z projektu).    <\/p>\n<li class=\"l\"> G. Kompromitace repozit\u00e1\u0159e bal\u00ed\u010dk\u016f.\n<p>P\u0159\u00edklad \u00fatoku: v\u00fdzkumn\u00edci se dok\u00e1zali nasadit zrcadla n\u011bkter\u00fdch popul\u00e1rn\u00edch repozit\u00e1\u0159\u016f bal\u00ed\u010dk\u016f s c\u00edlem \u0161\u00ed\u0159it prost\u0159ednictv\u00edm nich \u0161kodliv\u00e9 bal\u00ed\u010dky.    <\/p>\n<p>Navrhovan\u00e1 metoda ochrany: Ov\u011b\u0159en\u00ed, \u017ee distribuovan\u00e9 artefakty byly sestaveny z deklarovan\u00fdch zdrojov\u00fdch text\u016f.    <\/p>\n<li class=\"l\"> H. Zmatek u\u017eivatele p\u0159i instalaci nespr\u00e1vn\u00e9ho bal\u00ed\u010dku.\n<p>P\u0159\u00edklad \u00fatoku: vyu\u017eit\u00ed type-squatting (NPM, RubyGems, PyPI) k um\u00edst\u011bn\u00ed do repozit\u00e1\u0159\u016f bal\u00ed\u010dk\u016f, kter\u00e9 se p\u00edsemn\u011b podobaj\u00ed popul\u00e1rn\u00edm aplikac\u00edm (nap\u0159\u00edklad coffe-script m\u00edsto coffee-script).      <\/ul>\n<p>Pro blokaci uveden\u00fdch hrozeb SLSA nab\u00edz\u00ed sadu doporu\u010den\u00ed a tak\u00e9 n\u00e1stroje pro automatizaci vytv\u00e1\u0159en\u00ed metadat pro audit. SLSA shrnuje typick\u00e9 metody \u00fatok\u016f a zav\u00e1d\u00ed pojem \u00farovn\u00ed ochrany. Ka\u017ed\u00e1 \u00farove\u0148 klade ur\u010dit\u00e9 po\u017eadavky na infrastrukturu, kter\u00e9 zaru\u010duj\u00ed integritu artefakt\u016f pou\u017e\u00edvan\u00fdch p\u0159i v\u00fdvoji. \u010c\u00edm vy\u0161\u0161\u00ed \u00farove\u0148 SLSA je podporov\u00e1na, t\u00edm v\u00edce ochran byla zavedena a t\u00edm l\u00e9pe je infrastruktura chr\u00e1n\u011bna proti typick\u00fdm \u00fatok\u016fm.     <\/p>\n<ul>\n<li class=\"l\"> SLSA 1 \u2014 vy\u017eaduje, aby byl proces sestaven\u00ed pln\u011b automatizov\u00e1n a generoval metadata (\u201eprovenance\u201c) o tom, jak byly artefakty sestaveny, v\u010detn\u011b informac\u00ed o zdrojov\u00fdch textech, z\u00e1vislostech a procesu sestaven\u00ed (pro GitHub Actions byl navr\u017een p\u0159\u00edklad gener\u00e1toru metadat pro audit). SLSA 1 nezahrnuje prvky ochrany proti zav\u00e1d\u011bn\u00ed \u0161kodliv\u00fdch zm\u011bn, ale pouze nejjednodu\u0161eji identifikuje k\u00f3d a poskytuje metadata pro spr\u00e1vu zranitelnost\u00ed a anal\u00fdzu rizik.\n<li class=\"l\"> SLSA 2 \u2014 roz\u0161i\u0159uje prvn\u00ed \u00farove\u0148 po\u017eadavkem na pou\u017eit\u00ed syst\u00e9mu spr\u00e1vy verz\u00ed a sestavovac\u00edch slu\u017eeb generuj\u00edc\u00edch autentizovan\u00e1 metadata. Pou\u017eit\u00ed SLSA 2 umo\u017e\u0148uje sledovat p\u016fvod k\u00f3du a zabra\u0148uje zav\u00e1d\u011bn\u00ed neopr\u00e1vn\u011bn\u00fdch zm\u011bn do k\u00f3du, v p\u0159\u00edpad\u011b pou\u017eit\u00ed d\u016fv\u011bryhodn\u00fdch sestavovac\u00edch slu\u017eeb.\n<li class=\"l\"> SLSA 3 \u2014 potvrzuje, \u017ee zdrojov\u00e9 texty a sestavovac\u00ed platforma spl\u0148uj\u00ed po\u017eadavky standard\u016f zaru\u010duj\u00edc\u00edch mo\u017enost prov\u00e1d\u011bn\u00ed auditu k\u00f3du a zaji\u0161t\u011bn\u00ed integrity poskytnut\u00fdch metadat. P\u0159edpokl\u00e1d\u00e1 se, \u017ee audito\u0159i mohou certifikovat platformy na z\u00e1klad\u011b souladu s po\u017eadavky standard\u016f.\n<li class=\"l\"> SLSA 4 \u2014 nejvy\u0161\u0161\u00ed \u00farove\u0148, kter\u00e1 dopl\u0148uje p\u0159edchoz\u00ed \u00farovn\u011b n\u00e1sleduj\u00edc\u00edmi po\u017eadavky:\n<ul>\n<li class=\"l\"> Povinn\u00e9 p\u0159ezkoum\u00e1n\u00ed v\u0161ech zm\u011bn dv\u011bma r\u016fzn\u00fdmi v\u00fdvoj\u00e1\u0159i.\n<li class=\"l\"> V\u0161echny kroky sestavov\u00e1n\u00ed, k\u00f3d a z\u00e1vislosti mus\u00ed b\u00fdt pln\u011b deklarov\u00e1ny, v\u0161echny z\u00e1vislosti mus\u00ed b\u00fdt odd\u011blen\u011b extrahov\u00e1ny a ov\u011b\u0159eny, a proces sest\u00e1v\u00e1n\u00ed mus\u00ed b\u00fdt prov\u00e1d\u011bn bez p\u0159\u00edstupu k s\u00edti.\n<li class=\"l\"> Pou\u017eit\u00ed procesu opakovateln\u00e9ho sestaven\u00ed \u2014 mo\u017enost opakovat proces sestaven\u00ed vlastn\u00edmi silami a ujistit se, \u017ee spustiteln\u00fd soubor byl sestaven ze poskytnut\u00fdch zdrojov\u00fdch text\u016f.        <\/ul>\n<p>      <center><img decoding=\"async\" alt=\"Google navrhl SLSA pro ochranu p\u0159ed \u0161kodliv\u00fdmi zm\u011bnami v procesu v\u00fdvoje\" src=\"\/wp-content\/uploads\/2021\/06\/3f0bdd24afeec562582d8410b490e705.png\" style=\"display:block;margin: 0 auto;\" \/><\/center><br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55345\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u041f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u0438 \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0438\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043d\u0435 \u0441 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100533,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100532","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b SLSA \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-17T20:23:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-17T20:23:08+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google navrhl SLSA pro ochranu p\u0159ed \u0161kodliv\u00fdmi zm\u011bnami v pr\u016fb\u011bhu v\u00fdvoje | ProHoster","description":"Spole\u010dnost Google p\u0159edstavila r\u00e1mec SLSA (Supply-chain Levels for Software Artifacts), kter\u00fd shrnuje existuj\u00edc\u00ed zku\u0161enosti v oblasti ochrany v\u00fdvojov\u00e9 infrastruktury p\u0159ed \u00fatoky prov\u00e1d\u011bn\u00fdmi b\u011bhem f\u00e1ze psan\u00ed k\u00f3du.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b SLSA \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-17T20:23:08+00:00","article:modified_time":"2021-06-17T20:23:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100532","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-17 20:37:49","updated":"2026-02-09 21:38:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100532","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=100532"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100532\/revisions"}],"predecessor-version":[{"id":159918,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100532\/revisions\/159918"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/100533"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=100532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=100532"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=100532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}