{"id":100532,"date":"2021-06-17T22:23:06","date_gmt":"2021-06-17T20:23:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki"},"modified":"2021-06-17T22:23:06","modified_gmt":"2021-06-17T20:23:08","slug":"google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","title":{"rendered":"Google ofroi SLSA p\u00ebr mbrojtjen nga ndryshimet e d\u00ebmshme n\u00eb procesin e zhvillimit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Kompania Google prezantoi korniz\u00ebn SLSA (Supply-chain Levels for Software Artifacts), e cila p\u00ebrmbledh p\u00ebrvoj\u00ebn ekzistuese p\u00ebr mbrojtjen e infrastruktur\u00ebs s\u00eb zhvillimit nga sulmet q\u00eb ndodhin gjat\u00eb fazave t\u00eb shkruarjes s\u00eb kodit, testimit, nd\u00ebrtimit dhe shp\u00ebrndarjes s\u00eb produktit.     <\/p>\n<p>Proceset e zhvillimit po b\u00ebhen gjithnj\u00eb e m\u00eb t\u00eb nd\u00ebrlikuara dhe t\u00eb varen nga mjete t\u00eb jashtme, duke krijuar kushte t\u00eb favorshme p\u00ebr p\u00ebrparimin e sulmeve q\u00eb lidhen jo me identifikimin dhe shfryt\u00ebzimin e dob\u00ebsive n\u00eb produktin p\u00ebrfundimtar, por me komprometimin e vet\u00eb procesit t\u00eb zhvillimit (sulmet &#171;supply chain&#187;, zakonisht t\u00eb orientuara drejt futjes s\u00eb ndryshimeve t\u00eb d\u00ebmshme n\u00eb procesin e shkruajtjes s\u00eb kodit, z\u00ebvend\u00ebsimin e komponent\u00ebve dhe var\u00ebsive t\u00eb shp\u00ebrndara).       <\/p>\n<p>Korniza merr parasysh 8 lloje sulmesh q\u00eb lidhen me k\u00ebrc\u00ebnimet e inkorporimit t\u00eb ndryshimeve t\u00eb d\u00ebmshme gjat\u00eb faz\u00ebs s\u00eb zhvillimit t\u00eb kodit, nd\u00ebrtimit, testimit dhe shp\u00ebrndarjes s\u00eb produktit.      <center><img decoding=\"async\" alt=\"Google ofroi SLSA p\u00ebr mbrojtjen nga ndryshimet e d\u00ebmshme n\u00eb procesin e zhvillimit\" src=\"\/wp-content\/uploads\/2021\/06\/d99f0d7ebc6009bcecf21f65f77dcf65.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<ul>\n<li class=\"l\"> A. Inkorporeimi n\u00eb kodin burimor t\u00eb ndryshimeve q\u00eb p\u00ebrmbajn\u00eb backdoor ose gabime t\u00eb fshehura q\u00eb \u00e7ojn\u00eb n\u00eb dob\u00ebsi.\n<p>Shembulli i sulmit: &#171;Hypocrite Commits&#187; &#8212; nj\u00eb p\u00ebrpjekje p\u00ebr t\u00eb futur n\u00eb b\u00ebrtham\u00ebn e Linux patch-e me dob\u00ebsi.   <\/p>\n<p>Metoda e ofruar p\u00ebr mbrojtje: rishikimi i pavarur i \u00e7do ndryshimi nga dy zhvillues.    <\/p>\n<li class=\"l\"> B. Komprometimi i platform\u00ebs s\u00eb menaxhimit t\u00eb kodit burimor.\n<p>Shembulli i sulmit: inkorporimi i komitimeve t\u00eb d\u00ebmshme me backdoor n\u00eb depozit\u00ebn Git t\u00eb projektit PHP pas rrjedhjes s\u00eb fjal\u00ebkalimeve t\u00eb zhvilluesve.  <\/p>\n<p>Metoda e ofruar p\u00ebr mbrojtje: Rritja e siguris\u00eb s\u00eb platform\u00ebs s\u00eb menaxhimit t\u00eb kodit (n\u00eb rastin e PHP, sulmi u realizua p\u00ebrmes nj\u00eb nd\u00ebrfaqe HTTPS t\u00eb pak\u00ebt, q\u00eb lejonte d\u00ebrgimin e ndryshimeve me fjal\u00ebkalim pa verifikimin e \u00e7el\u00ebsit SSH, duke p\u00ebrdorur nj\u00eb algorit\u00ebm t\u00eb dob\u00ebt si MD5 p\u00ebr t\u00eb hash-fjal\u00ebkalimet).    <\/p>\n<li class=\"l\">C. Inkorporimi i ndryshimeve gjat\u00eb kalimit t\u00eb kodit n\u00eb sistemin e nd\u00ebrtimit ose integrimit t\u00eb vazhduesh\u00ebm (nd\u00ebrtimi i kodit q\u00eb nuk p\u00ebrputhet me kodin nga depozita).\n<p>Shembulli i sulmit: inkorporimi i nj\u00eb backdoor n\u00eb Webmin p\u00ebrmes ndryshimeve n\u00eb infrastruktur\u00ebn e nd\u00ebrtimit q\u00eb \u00e7uan n\u00eb p\u00ebrdorimin e skedar\u00ebve me kod q\u00eb ndryshojn\u00eb nga skedar\u00ebt n\u00eb depozit\u00eb.     <\/p>\n<p>Metoda e ofruar p\u00ebr mbrojtje: Kontrolli i integritetit dhe identifikimi i burimit t\u00eb kodit n\u00eb nd\u00ebrtim. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-dronten\/\"   title=\"serveri\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2636\">serveri<\/a>.      <\/p>\n<li class=\"l\"> D. Komprometimi i platform\u00ebs s\u00eb nd\u00ebrtimit.\n<p>Shembulli i sulmit: sulmi SolarWinds, gjat\u00eb t\u00eb cilit n\u00eb faz\u00ebn e nd\u00ebrtimit u siguruar inkorporimi i nj\u00eb backdoor n\u00eb produktin SolarWinds Orion.  <\/p>\n<p>Metoda e ofruar p\u00ebr mbrojtje: inkorporimi i masave t\u00eb avancuara p\u00ebr sigurimin e platform\u00ebs s\u00eb nd\u00ebrtimit.    <\/p>\n<li class=\"l\"> E. Avancimi i kodit t\u00eb d\u00ebmsh\u00ebm p\u00ebrmes var\u00ebsive t\u00eb dob\u00ebta.\n<p>Shembulli i sulmit: inkorporimi i nj\u00eb backdoor n\u00eb bibliotek\u00ebn popullore event-stream, p\u00ebrmes shtimit t\u00eb nj\u00eb var\u00ebsie t\u00eb pad\u00ebmshme dhe m\u00eb pas p\u00ebrfshirja e kodit t\u00eb d\u00ebmsh\u00ebm n\u00eb nj\u00ebrin nga azhurnimet e k\u00ebsaj var\u00ebsie (ndryshimi i d\u00ebmsh\u00ebm nuk u reflektua n\u00eb depozit\u00ebn Git, por ishte i pranish\u00ebm vet\u00ebm n\u00eb paket\u00ebn e p\u00ebrfunduar MNP).    <\/p>\n<p>Metoda e ofruar p\u00ebr mbrojtje: aplikimi rekurziv i k\u00ebrkesave SLSA ndaj t\u00eb gjitha var\u00ebsive (n\u00eb rastin e event-stream, verifikimi do t\u00eb kishte zbuluar nd\u00ebrtimin e kodit q\u00eb nuk p\u00ebrputhet me p\u00ebrmbajtjen e depozit\u00ebs kryesore Git).    \t  <\/p>\n<li class=\"l\"> F. Ngarkimi i artefakteve q\u00eb nuk jan\u00eb krijuar n\u00eb sistemin CI\/CD.\n<p>Shembulli i sulmit: shtimi i kodit t\u00eb d\u00ebmsh\u00ebm n\u00eb skenarin CodeCov, duke lejuar kthimin e informacionit t\u00eb ruajtur n\u00eb ambientet e sistemeve t\u00eb integrimit t\u00eb vazhduesh\u00ebm t\u00eb klient\u00ebve.    <\/p>\n<p>Metoda e ofruar p\u00ebr mbrojtje: kontrolli i burimit dhe integritetit t\u00eb artefakteve (n\u00eb rastin e CodeCov, mund t\u00eb ishte zbuluar se skenari Bash Uploader q\u00eb ofrohej nga faqja codecov.io nuk p\u00ebrputhet me kodin nga depozita e projektit).    <\/p>\n<li class=\"l\"> G. Komprometimi i depozit\u00ebs s\u00eb paketave.\n<p>Shembulli i sulmit: studjuesit arrit\u00ebn t\u00eb krijojn\u00eb pasqyra t\u00eb disa depozitave popullore t\u00eb paketave me q\u00ebllim t\u00eb shp\u00ebrndarjes s\u00eb paketave t\u00eb d\u00ebmshme p\u00ebrmes tyre.    <\/p>\n<p>Metoda e ofruar p\u00ebr mbrojtje: Kontrolli q\u00eb artefaktet e shp\u00ebrndara t\u00eb jen\u00eb nd\u00ebrtuar nga tekstet e deklaruara burimore.    <\/p>\n<li class=\"l\"> H. Klithja e p\u00ebrdoruesit p\u00ebr t\u00eb instaluar paket\u00ebn e gabuar.\n<p>Shembulli i sulmit: p\u00ebrdorimi i typesquatting (NPM, RubyGems, PyPI) p\u00ebr t\u00eb vendosur n\u00eb depozitat e pakove emra q\u00eb ndjeben si aplikacione t\u00eb njohura (p.sh., coffe-script n\u00eb vend t\u00eb coffee-script).      <\/ul>\n<p>P\u00ebr t\u00eb bllokuar k\u00ebto k\u00ebrc\u00ebnime, SLSA ofron nj\u00eb grup rekomandimesh dhe instrumentesh p\u00ebr automatizimin e krijimit t\u00eb metadatat p\u00ebr auditimin. SLSA p\u00ebrmbledh metodat tipike t\u00eb sulmit dhe prezanton konceptin e niveleve t\u00eb mbrojtjes. \u00c7do nivel paraqet k\u00ebrkesa t\u00eb caktuara p\u00ebr infrastruktur\u00ebn, q\u00eb sigurojn\u00eb integritetin e artefakteve t\u00eb p\u00ebrdorura n\u00eb zhvillim. Sa m\u00eb i lart\u00eb t\u00eb jet\u00eb niveli i mb\u00ebshtetur SLSA, aq m\u00eb shum\u00eb masa mbrojt\u00ebse jan\u00eb inkorporuar dhe aq m\u00eb mir\u00eb \u00ebsht\u00eb mbrojtur infrastruktura nga sulmet tipike.     <\/p>\n<ul>\n<li class=\"l\"> SLSA 1 &#8212; k\u00ebrkon q\u00eb procesi i nd\u00ebrtimit t\u00eb jet\u00eb plot\u00ebsisht i automatizuar dhe t\u00eb gjeneroj\u00eb metadata (&#171;provenance&#187;) n\u00eb lidhje me m\u00ebnyr\u00ebn se si jan\u00eb nd\u00ebrtuar artefaktet, duke p\u00ebrfshir\u00eb informacionin mbi kodin burimor, var\u00ebsit\u00eb dhe procesin e nd\u00ebrtimit (p\u00ebr GitHub Actions, \u00ebsht\u00eb propozuar nj\u00eb shembull gjeneratori metadata p\u00ebr auditet). SLSA 1 nuk p\u00ebrfshin elemente mbrojtjeje ndaj futjes s\u00eb ndryshimeve t\u00eb d\u00ebmshme, por thjesht identifikon kodin dhe ofron metadata p\u00ebr menaxhimin e dob\u00ebsive dhe analiz\u00ebn e rreziqeve.\n<li class=\"l\"> SLSA 2 &#8212; zgjeron nivelin e par\u00eb me k\u00ebrkes\u00ebn p\u00ebr p\u00ebrdorimin e nj\u00eb sistemi t\u00eb menaxhimit t\u00eb versioneve dhe sh\u00ebrbimeve t\u00eb nd\u00ebrtimit q\u00eb gjenerojn\u00eb metadata t\u00eb autentikuara. P\u00ebrdorimi i SLSA 2 lejon gjurmimin e origjin\u00ebs s\u00eb kodit dhe parandalon futjen e ndryshimeve t\u00eb paautorizuara n\u00eb kod, n\u00eb rastin e p\u00ebrdorimit t\u00eb sh\u00ebrbimeve t\u00eb nd\u00ebrtimit q\u00eb kan\u00eb besueshm\u00ebri.\n<li class=\"l\"> SLSA 3  &#8212; konfirmon se kodet burimore dhe platforma e nd\u00ebrtimit plot\u00ebsojn\u00eb k\u00ebrkesat e standardeve q\u00eb garantojn\u00eb mund\u00ebsin\u00eb e kryerjes s\u00eb auditit t\u00eb kodit dhe sigurimin e integritetit t\u00eb metadata-s s\u00eb ofruar. Supozohet se auditor\u00ebt mund t\u00eb certifikojn\u00eb platformat p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb me k\u00ebrkesat e standardeve.\n<li class=\"l\"> SLSA 4 &#8212; niveli m\u00eb i lart\u00eb, i cili plot\u00ebson nivelet e m\u00ebparshme me k\u00ebrkesat e m\u00ebposhtme:\n<ul>\n<li class=\"l\"> Rishikimi i detyruesh\u00ebm i t\u00eb gjitha ndryshimeve nga dy zhvillues t\u00eb ndrysh\u00ebm.\n<li class=\"l\"> T\u00eb gjitha hapat e nd\u00ebrtimit, kodi dhe var\u00ebsit\u00eb duhet t\u00eb deklarohen plot\u00ebsisht, t\u00eb gjitha var\u00ebsit\u00eb duhet t\u00eb nxirren dhe kontrollohen ve\u00e7mas, dhe procesi i nd\u00ebrtimit duhet t\u00eb kryhet pa qasje n\u00eb rrjet.\n<li class=\"l\"> P\u00ebrdorimi i procesit t\u00eb nd\u00ebrtimit p\u00ebrs\u00ebrit\u00ebs  &#8212; mund\u00ebsia p\u00ebr t\u00eb p\u00ebrs\u00ebritur procesin e nd\u00ebrtimit n\u00eb m\u00ebnyr\u00eb t\u00eb vetme dhe t\u00eb siguroheni q\u00eb skedari ekzekutiv \u00ebsht\u00eb nd\u00ebrtuar nga kodet burimore t\u00eb ofruara.        <\/ul>\n<p>      <center><img decoding=\"async\" alt=\"Google ofroi SLSA p\u00ebr mbrojtjen nga ndryshimet e d\u00ebmshme n\u00eb procesin e zhvillimit\" src=\"\/wp-content\/uploads\/2021\/06\/3f0bdd24afeec562582d8410b490e705.png\" style=\"display:block;margin: 0 auto;\" \/><\/center><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55345\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u041f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u0438 \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0438\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043d\u0435 \u0441 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100533,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100532","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u041f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u0438 \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0438\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043d\u0435 \u0441 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b SLSA \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u041f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u0438 \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0438\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043d\u0435 \u0441 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-17T20:23:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-17T20:23:08+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google propozon SLSA p\u00ebr mbrojtjen nga ndryshimet e d\u00ebmshme n\u00eb procesin e zhvillimit | ProHoster","description":"Kompania Google paraqiti kuadrin SLSA (Supply-chain Levels for Software Artifacts), n\u00eb t\u00eb cilin \u00ebsht\u00eb p\u00ebrmbledhur p\u00ebrvoja ekzistuese p\u00ebr mbrojtjen e infrastruktur\u00ebs s\u00eb zhvillimit nga sulmet q\u00eb realizohen n\u00eb fazat e shkruarjes s\u00eb kodit, testimit, nd\u00ebrtimit dhe shp\u00ebrndarjes s\u00eb produktit. Proceset e zhvillimit po b\u00ebhen gjithnj\u00eb e m\u00eb komplekse dhe varen nga mjete t\u00eb pal\u00ebve t\u00eb treta, \u00e7ka krijon kushte t\u00eb favorshme p\u00ebr p\u00ebrparimin e sulmeve, t\u00eb lidhura jo me zbuluarjen dhe shfryt\u00ebzimin.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b SLSA \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u041f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u0438 \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0438\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043d\u0435 \u0441 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-17T20:23:08+00:00","article:modified_time":"2021-06-17T20:23:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100532","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-17 20:37:49","updated":"2026-02-09 21:38:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100532","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=100532"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100532\/revisions"}],"predecessor-version":[{"id":159918,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100532\/revisions\/159918"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/100533"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=100532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=100532"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=100532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}