{"id":100532,"date":"2021-06-17T22:23:06","date_gmt":"2021-06-17T20:23:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki"},"modified":"2021-06-17T22:23:06","modified_gmt":"2021-06-17T20:23:08","slug":"google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","title":{"rendered":"Google navrhol SLSA na ochranu pred \u0161kodliv\u00fdmi zmenami v procese v\u00fdvoja","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Spolo\u010dnos\u0165 Google predstavila r\u00e1mec SLSA (Supply-chain Levels for Software Artifacts), ktor\u00fd sumarizuje existuj\u00face sk\u00fasenosti v oblasti ochrany v\u00fdvojovej infra\u0161trukt\u00fary pred \u00fatokmi realizovan\u00fdmi po\u010das p\u00edsania k\u00f3du, testovania, zostavovania a distrib\u00facie produktu.     <\/p>\n<p>V\u00fdvojov\u00e9 procesy sa st\u00e1vaj\u00fa \u010doraz zlo\u017eitej\u0161\u00edmi a z\u00e1visl\u00fdmi od extern\u00fdch n\u00e1strojov, \u010do vytv\u00e1ra priazniv\u00e9 podmienky pre rozvoj \u00fatokov, ktor\u00e9 nes\u00favisia s identifik\u00e1ciou a vyu\u017e\u00edvan\u00edm zranite\u013enost\u00ed kone\u010dn\u00e9ho produktu, ale so komprim\u00e1ciou samotn\u00e9ho procesu v\u00fdvoja (\u00fatoky \u201esupply chain\u201c, ktor\u00e9 s\u00fa zvy\u010dajne zameran\u00e9 na zav\u00e1dzanie \u0161kodliv\u00fdch zmien do procesu p\u00edsania k\u00f3du, v\u00fdmenu distribuovan\u00fdch komponentov a z\u00e1vislost\u00ed).       <\/p>\n<p>R\u00e1mec zoh\u013ead\u0148uje 8 typov \u00fatokov spojen\u00fdch s hrozbami na zavedenie \u0161kodliv\u00fdch zmien v etape v\u00fdvoja k\u00f3du, zostavovania, testovania a distrib\u00facie produktu.      <center><img decoding=\"async\" alt=\"Google navrhol SLSA na ochranu pred \u0161kodliv\u00fdmi zmenami v procese v\u00fdvoja\" src=\"\/wp-content\/uploads\/2021\/06\/d99f0d7ebc6009bcecf21f65f77dcf65.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<ul>\n<li class=\"l\"> A. Zaradenie zmien do zdrojov\u00e9ho k\u00f3du, ktor\u00e9 obsahuj\u00fa backdoory alebo skryt\u00e9 chyby ved\u00face k zranite\u013enostiam.\n<p>Pr\u00edklad \u00fatoku: \u201eHypocrite Commits\u201c \u2014 pokus o zavedenie patchov so zranite\u013enos\u0165ami do jadra Linuxu.   <\/p>\n<p>Navrhovan\u00e1 met\u00f3da ochrany: nez\u00e1visl\u00e9 recenzovanie ka\u017edej zmeny dvoma v\u00fdvoj\u00e1rmi.    <\/p>\n<li class=\"l\"> B. Kompromit\u00e1cia platformy na spr\u00e1vu zdrojov\u00e9ho k\u00f3du.\n<p>Pr\u00edklad \u00fatoku: zavedenie \u0161kodliv\u00fdch commitov s backdoorom do Git-repozit\u00e1ra projektu PHP po \u00faniku hesiel v\u00fdvoj\u00e1rov.  <\/p>\n<p>Navrhovan\u00e1 met\u00f3da ochrany: zv\u00fd\u0161enie ochrany platformy na spr\u00e1vu k\u00f3du (v pr\u00edpade PHP bola \u00fatok vykonan\u00fd cez m\u00e1lo pou\u017e\u00edvan\u00e9 HTTPS rozhranie, ktor\u00e9 umo\u017enilo zaslanie zmien pri prihl\u00e1sen\u00ed pomocou hesla bez overenia SSH k\u013e\u00fa\u010da, pri\u010dom sa na hashovanie hesiel pou\u017e\u00edval nespo\u013eahliv\u00fd MD5).    <\/p>\n<li class=\"l\">C. Vykon\u00e1vanie zmien pri prenose k\u00f3du do syst\u00e9mu zostavovania alebo kontinu\u00e1lnej integr\u00e1cie (k\u00f3d zostaven\u00fd, ktor\u00fd neodpoved\u00e1 k\u00f3du z repozit\u00e1ra).\n<p>Pr\u00edklad \u00fatoku: zavedenie backdoora do Webminu \u00fapravou zostavovacej infra\u0161trukt\u00fary, ktor\u00e1 viedla k pou\u017eitiu s\u00faborov s k\u00f3dom odli\u0161n\u00fdch od s\u00faborov v repozit\u00e1ri.     <\/p>\n<p>Navrhovan\u00e1 met\u00f3da ochrany: kontrola integrity a identifik\u00e1cia zdroja k\u00f3du na zostavovac\u00edch syst\u00e9moch. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/server\/dts-dronten\/\"   title=\"serveri\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2636\">serveri<\/a>.      <\/p>\n<li class=\"l\"> D. Kompromit\u00e1cia zostavovacej platformy.\n<p>Pr\u00edklad \u00fatoku: \u00fatok SolarWinds, pri ktorom sa po\u010das zostavovania zabezpe\u010dilo zavedenie backdoora do produktu SolarWinds Orion.  <\/p>\n<p>Navrhovan\u00e1 metoda ochrany: zaveden\u00ed roz\u0161\u00ed\u0159en\u00fdch bezpe\u010dnostn\u00edch opat\u0159en\u00ed pro platformu sestavov\u00e1n\u00ed.    <\/p>\n<li class=\"l\"> E. \u0160\u00ed\u0159en\u00ed \u0161kodliv\u00e9ho k\u00f3du prost\u0159ednictv\u00edm nekvalitn\u00edch z\u00e1vislost\u00ed.\n<p>P\u0159\u00edklad \u00fatoku: zaveden\u00ed backdooru do popul\u00e1rn\u00ed knihovny event-stream p\u0159id\u00e1n\u00edm ne\u0161kodn\u00e9 z\u00e1vislosti a n\u00e1sledn\u00fdm za\u010dlen\u011bn\u00edm \u0161kodliv\u00e9ho k\u00f3du v jednom z aktualizac\u00ed t\u00e9to z\u00e1vislosti (\u0161kodliv\u00e1 zm\u011bna nebyla zaznamen\u00e1na v git repozit\u00e1\u0159i, ale byla p\u0159\u00edtomna pouze v p\u0159ipraven\u00e9m MNP bal\u00ed\u010dku).    <\/p>\n<p>Navrhovan\u00e1 metoda ochrany: rekurzivn\u00ed aplikace po\u017eadavk\u016f SLSA na v\u0161echny z\u00e1vislosti (v p\u0159\u00edpad\u011b event-stream by kontrola odhalila sestaven\u00ed k\u00f3du, kter\u00e9 neodpov\u00edd\u00e1 obsahu hlavn\u00edho Git repozit\u00e1\u0159e).    \t  <\/p>\n<li class=\"l\"> F. Stahov\u00e1n\u00ed artefakt\u016f, kter\u00e9 nebyly vytvo\u0159eny v syst\u00e9mu CI\/CD.\n<p>P\u0159\u00edklad \u00fatoku: p\u0159id\u00e1n\u00ed \u0161kodliv\u00e9ho k\u00f3du do skriptu CodeCov, kter\u00fd umo\u017enil \u00fato\u010dn\u00edk\u016fm z\u00edsk\u00e1vat informace ulo\u017een\u00e9 v prost\u0159ed\u00edch syst\u00e9m\u016f kontinu\u00e1ln\u00ed integrace klient\u016f.    <\/p>\n<p>Navrhovan\u00e1 metoda ochrany: sledov\u00e1n\u00ed zdroje a integrity artefakt\u016f (v p\u0159\u00edpad\u011b CodeCov by bylo mo\u017en\u00e9 zjistit, \u017ee skript Bash Uploader stahovan\u00fd z webu codecov.io neodpov\u00edd\u00e1 k\u00f3du z repozit\u00e1\u0159e projektu).    <\/p>\n<li class=\"l\"> G. Kompromitace repozit\u00e1\u0159e bal\u00ed\u010dk\u016f.\n<p>P\u0159\u00edklad \u00fatoku: v\u00fdzkumn\u00edk\u016fm se poda\u0159ilo rozm\u00edstit zrcadla n\u011bkter\u00fdch popul\u00e1rn\u00edch repozit\u00e1\u0159\u016f bal\u00ed\u010dk\u016f s c\u00edlem \u0161\u00ed\u0159it skrze n\u011b \u0161kodliv\u00e9 bal\u00ed\u010dky.    <\/p>\n<p>Navrhovan\u00e1 metoda ochrany: Kontrola, \u017ee distribuovan\u00e9 artefakty byly sestaveny z deklarovan\u00fdch zdrojov\u00fdch text\u016f.    <\/p>\n<li class=\"l\"> H. Zmatek u\u017eivatele p\u0159i instalaci nespr\u00e1vn\u00e9ho bal\u00ed\u010dku.\n<p>P\u0159\u00edklad \u00fatoku: pou\u017e\u00edv\u00e1n\u00ed typov\u00e9ho sklov\u00e1n\u00ed (NPM, RubyGems, PyPI) k um\u00edst\u011bn\u00ed v repozit\u00e1\u0159\u00edch bal\u00ed\u010dk\u016f, kter\u00e9 se p\u00edsemn\u011b podobaj\u00ed popul\u00e1rn\u00edm aplikac\u00edm (nap\u0159\u00edklad coffe-script m\u00edsto coffee-script).      <\/ul>\n<p>Pro blokov\u00e1n\u00ed uveden\u00fdch hrozeb SLSA navrhuje soubor doporu\u010den\u00ed a tak\u00e9 n\u00e1stroj\u016f pro automatizaci vytv\u00e1\u0159en\u00ed metadat pro audit. SLSA shrnuje typov\u00e9 metody \u00fatok\u016f a zav\u00e1d\u00ed pojem \u00farovn\u00ed ochrany. Ka\u017ed\u00e1 \u00farove\u0148 klade ur\u010dit\u00e9 po\u017eadavky na infrastrukturu, kter\u00e9 zaru\u010duj\u00ed integritu artefakt\u016f pou\u017e\u00edvan\u00fdch p\u0159i v\u00fdvoji. \u010c\u00edm vy\u0161\u0161\u00ed \u00farove\u0148 SLSA je podporov\u00e1na, t\u00edm v\u00edce ochrann\u00fdch prost\u0159edk\u016f je zaveden\u00fdch a t\u00edm l\u00e9pe je infrastruktura chr\u00e1n\u011bna p\u0159ed b\u011b\u017en\u00fdmi \u00fatoky.     <\/p>\n<ul>\n<li class=\"l\"> SLSA 1 \u2014 vy\u017eaduje, aby bol proces zostavovania plne automatizovan\u00fd a generoval metad\u00e1ta (\u201eprovenance\u201c) o tom, ako s\u00fa artefakty zostavovan\u00e9, vr\u00e1tane \u00fadajov o zdrojov\u00fdch k\u00f3doch, z\u00e1vislostiach a procese zostavenia (pre GitHub Actions bol navrhnut\u00fd pr\u00edklad gener\u00e1tora metad\u00e1t na audit). SLSA 1 nezah\u0155\u0148a prvky ochrany proti zav\u00e1dzaniu \u0161kodliv\u00fdch zmien, ale len najjednoduch\u0161\u00edm sp\u00f4sobom identifikuje k\u00f3d a poskytuje metad\u00e1ta na riadenie zranite\u013enost\u00ed a anal\u00fdzu riz\u00edk.\n<li class=\"l\"> SLSA 2 \u2014 roz\u0161iruje prv\u00fa \u00farove\u0148 po\u017eiadavkou na pou\u017e\u00edvanie syst\u00e9mu spr\u00e1vy verz\u00ed a zostavovac\u00edch slu\u017eieb, ktor\u00e9 generuj\u00fa autentifikovan\u00e9 metad\u00e1ta. Pou\u017eitie SLSA 2 umo\u017e\u0148uje sledovanie p\u00f4vodu k\u00f3du a zabra\u0148uje zav\u00e1dzaniu neopr\u00e1vnen\u00fdch zmien do k\u00f3du, ak s\u00fa pou\u017eit\u00e9 d\u00f4veryhodn\u00e9 zostavovacie slu\u017eby.\n<li class=\"l\"> SLSA 3 \u2014 potvrdzuje, \u017ee zdrojov\u00e9 k\u00f3dy a zostavovacia platforma sp\u013a\u0148aj\u00fa po\u017eiadavky noriem, garantuj\u00facich mo\u017enos\u0165 vykonania auditu k\u00f3du a zabezpe\u010denie integrity poskytnut\u00fdch metad\u00e1t. Predpoklad\u00e1 sa, \u017ee aud\u00edtori m\u00f4\u017eu certifikova\u0165 platformy z poh\u013eadu s\u00faladu s po\u017eiadavkami noriem.\n<li class=\"l\"> SLSA 4 \u2014 najvy\u0161\u0161ia \u00farove\u0148, dopl\u0148uj\u00faca predch\u00e1dzaj\u00face \u00farovne o nasleduj\u00face po\u017eiadavky:\n<ul>\n<li class=\"l\"> Povinn\u00e9 presk\u00famanie v\u0161etk\u00fdch zmien dvoma r\u00f4znymi v\u00fdvoj\u00e1rmi.\n<li class=\"l\"> V\u0161etky kroky zostavovania, k\u00f3d a z\u00e1vislosti musia by\u0165 plne deklarovan\u00e9, v\u0161etky z\u00e1vislosti musia by\u0165 osobitne vyextrahovan\u00e9 a overen\u00e9, a proces zostavovania mus\u00ed prebieha\u0165 bez pr\u00edstupu k sieti.\n<li class=\"l\"> Pou\u017eitie procesu opakovate\u013enej zostavy \u2014 mo\u017enos\u0165 zopakova\u0165 proces zostavenia vlastn\u00fdmi silami a presved\u010di\u0165 sa, \u017ee spustite\u013en\u00fd s\u00fabor bol zostaven\u00fd zo poskytnut\u00fdch zdrojov\u00fdch k\u00f3dov.        <\/ul>\n<p>      <center><img decoding=\"async\" alt=\"Google navrhol SLSA na ochranu pred \u0161kodliv\u00fdmi zmenami v procese v\u00fdvoja\" src=\"\/wp-content\/uploads\/2021\/06\/3f0bdd24afeec562582d8410b490e705.png\" style=\"display:block;margin: 0 auto;\" \/><\/center><br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55345\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u041f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u0438 \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0438\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043d\u0435 \u0441 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100533,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100532","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b SLSA \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-17T20:23:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-17T20:23:08+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google navrhuje SLSA na ochranu pred \u0161kodliv\u00fdmi zmenami po\u010das v\u00fdvoja | ProHoster","description":"Spolo\u010dnos\u0165 Google predstavila r\u00e1mec SLSA (Supply-chain Levels for Software Artifacts), v ktorom je zhrnut\u00e1 existuj\u00faca sk\u00fasenos\u0165 s ochranou infra\u0161trukt\u00fary v\u00fdvoja pred \u00fatokmi vykon\u00e1van\u00fdmi po\u010das f\u00e1zy p\u00edsania k\u00f3du.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b SLSA \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-17T20:23:08+00:00","article:modified_time":"2021-06-17T20:23:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100532","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-17 20:37:49","updated":"2026-02-09 21:38:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/100532","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=100532"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/100532\/revisions"}],"predecessor-version":[{"id":159918,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/100532\/revisions\/159918"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/100533"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=100532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=100532"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=100532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}