{"id":100532,"date":"2021-06-17T22:23:06","date_gmt":"2021-06-17T20:23:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki"},"modified":"2021-06-17T22:23:06","modified_gmt":"2021-06-17T20:23:08","slug":"google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","title":{"rendered":"Google propozoi SLSA p\u00ebr mbrojtje nga ndryshimet keqdash\u00ebse n\u00eb procesin e zhvillimit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Kompania Google prezantoi korniz\u00ebn SLSA (Nivelet e supply-chain p\u00ebr Artifaktet e Softuerit), e cila p\u00ebrmbledh p\u00ebrvoj\u00ebn ekzistuese n\u00eb mbrojtjen e infrastruktur\u00ebs s\u00eb zhvillimit nga sulmet q\u00eb ndodhin gjat\u00eb fazave t\u00eb shkrimit t\u00eb kodit, testimit, nd\u00ebrtimit dhe shp\u00ebrndarjes s\u00eb produktit.     <\/p>\n<p>Proceset e zhvillimit po b\u00ebhen gjithnj\u00eb e m\u00eb t\u00eb komplikuara dhe t\u00eb varura nga mjete t\u00eb jashtme, gj\u00eb q\u00eb krijon kushte t\u00eb favorshme p\u00ebr avancimin e sulmeve, t\u00eb cilat nuk p\u00ebrqendrohen n\u00eb identifikimin dhe shfryt\u00ebzimin e dob\u00ebsive n\u00eb produktin e fundit, por n\u00eb komprometimin e procesit t\u00eb zhvillimit vet\u00eb (sulmet 'supply chain', zakonisht t\u00eb orientuara n\u00eb futjen e ndryshimeve t\u00eb d\u00ebmshme gjat\u00eb shkruarjes s\u00eb kodit, z\u00ebvend\u00ebsimin e komponenteve dhe var\u00ebsive q\u00eb shp\u00ebrndahen).       <\/p>\n<p>Korniza merr parasysh 8 lloje sulmesh q\u00eb lidhen me k\u00ebrc\u00ebnimet e inkorporimit t\u00eb ndryshimeve t\u00eb d\u00ebmshme n\u00eb faz\u00ebn e zhvillimit t\u00eb kodit, nd\u00ebrtimit, testimit dhe shp\u00ebrndarjes s\u00eb produktit.      <center><img decoding=\"async\" alt=\"Google propozoi SLSA p\u00ebr mbrojtje nga ndryshimet keqdash\u00ebse n\u00eb procesin e zhvillimit\" src=\"\/wp-content\/uploads\/2021\/06\/d99f0d7ebc6009bcecf21f65f77dcf65.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<ul>\n<li class=\"l\"> A. Inkorpore n\u00eb kodin burimor ndryshime q\u00eb p\u00ebrmbajn\u00eb backdoor ose gabime t\u00eb fshehura q\u00eb \u00e7ojn\u00eb n\u00eb dob\u00ebsi.\n<p>Shembulli i sulmit: 'Hypocrite Commits' \u2014 nj\u00eb p\u00ebrpjekje p\u00ebr t\u00eb avancuar n\u00eb kernelin Linux patch-e me dob\u00ebsi.   <\/p>\n<p>Metoda e propozuar e mbrojtjes: rishikimi i pavarur i secil\u00ebs ndryshim nga dy zhvillues.    <\/p>\n<li class=\"l\"> B. Komprometimi i platform\u00ebs p\u00ebr menaxhimin e kodit burimor.\n<p>Shembulli i sulmit: inkorporimi i komiteteve t\u00eb d\u00ebmshme me backdoor n\u00eb Git-repozitorin e projektit PHP pas rrjedhjes s\u00eb fjal\u00ebkalimeve t\u00eb zhvilluesve.  <\/p>\n<p>Metoda e propozuar e mbrojtjes: Rritja e mbrojtjes s\u00eb platform\u00ebs p\u00ebr menaxhimin e kodit (n\u00eb rastin e PHP, sulmi u krye p\u00ebrmes nj\u00eb nd\u00ebrfaqeje HTTPS t\u00eb pak p\u00ebrdorur, q\u00eb lejonte d\u00ebrgimin e ndryshimeve me hyrje me fjal\u00ebkalim pa verifikimin e \u00e7el\u00ebsit SSH, nd\u00ebrsa p\u00ebr hashing-un e fjal\u00ebkalimeve ishte p\u00ebrdorur MD5, q\u00eb n\u00eb vetvete \u00ebsht\u00eb i pasigurt).    <\/p>\n<li class=\"l\">C. B\u00ebrja e ndryshimeve gjat\u00eb faz\u00ebs s\u00eb transferimit t\u00eb kodit n\u00eb sistemin e nd\u00ebrtimit ose integrimin e vazhduesh\u00ebm (kodit i nd\u00ebrtuar nuk i p\u00ebrputhet kodit nga repozitorija).\n<p>Shembulli i sulmit: inkorporimi i backdoor n\u00eb Webmin p\u00ebrmes ndryshimeve n\u00eb infrastruktur\u00ebn e nd\u00ebrtimit, q\u00eb \u00e7oi n\u00eb p\u00ebrdorimin e skedar\u00ebve me kod, t\u00eb cil\u00ebt dallohet nga skedar\u00ebt n\u00eb repozitorin.     <\/p>\n<p>Metoda e propozuar e mbrojtjes: Kontrolli i integritetit dhe identifikimi i burimit t\u00eb ardhjes s\u00eb kodit n\u00eb nd\u00ebrtim. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-dronten\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2636\">server<\/a>.      <\/p>\n<li class=\"l\"> D. Komprometimi i platform\u00ebs s\u00eb nd\u00ebrtimit.\n<p>Shembulli i sulmit: sulmi SolarWinds, ku gjat\u00eb faz\u00ebs s\u00eb nd\u00ebrtimit u siguruar inkorporimi i nj\u00eb backdoor n\u00eb produktin SolarWinds Orion.  <\/p>\n<p>Metoda e propozuar p\u00ebr mbrojtje: implementimi i masave t\u00eb avancuara p\u00ebr sigurin\u00eb e platform\u00ebs s\u00eb nd\u00ebrtimit.    <\/p>\n<li class=\"l\"> E. P\u00ebrhapja e kodit t\u00eb d\u00ebmsh\u00ebm p\u00ebrmes var\u00ebsive t\u00eb dob\u00ebta.\n<p>Shembulli i nj\u00eb sulmi: implementimi i nj\u00eb backdoor n\u00eb bibliotek\u00ebn popullore event-stream, p\u00ebrmes shtimit t\u00eb nj\u00eb var\u00ebsie t\u00eb pafajshme me p\u00ebrfshirjen e kodit t\u00eb d\u00ebmsh\u00ebm n\u00eb nj\u00eb nga p\u00ebrdit\u00ebsimet e k\u00ebsaj var\u00ebsie (ndryshimi i d\u00ebmsh\u00ebm nuk u shfaq n\u00eb git-repozitor, por ishte prezent vet\u00ebm n\u00eb paket\u00ebn p\u00ebrfundimtare MNP).    <\/p>\n<p>Metoda e propozuar p\u00ebr mbrojtje: aplikimi recursiv i k\u00ebrkesave SLSA p\u00ebr t\u00eb gjitha var\u00ebsit\u00eb (n\u00eb rastin e event-stream, verifikimi do t\u00eb zbulonte nd\u00ebrtimin e kodit q\u00eb nuk p\u00ebrputhej me p\u00ebrmbajtjen e Git-repozitorit kryesor).    \t  <\/p>\n<li class=\"l\"> F. Ngarkimi i artefakteve q\u00eb nuk jan\u00eb krijuar n\u00eb sistemin CI\/CD.\n<p>Shembulli i nj\u00eb sulmi: shtimi i kodit t\u00eb d\u00ebmsh\u00ebm n\u00eb skriptin CodeCov, duke lejuar sulmuesit t\u00eb nxjerrin informacione t\u00eb ruajtura n\u00eb mjediset e sistemeve t\u00eb integrimit t\u00eb vazhduesh\u00ebm t\u00eb klient\u00ebve.    <\/p>\n<p>Metoda e propozuar p\u00ebr mbrojtje: kontrolli i burimit dhe integritetit t\u00eb artefakteve (n\u00eb rastin e CodeCov, do t\u00eb kishte qen\u00eb e mundur t\u00eb zbulohej se skripti Bash Uploader q\u00eb ofrohej nga faqja codecov.io nuk p\u00ebrputhej me kodin nga repozitori i projektit).    <\/p>\n<li class=\"l\"> G. Kompromitimi i repozitor\u00ebve t\u00eb paketave.\n<p>Shembulli i nj\u00eb sulmi: hulumtuesit arrit\u00ebn t\u00eb shpalosnin pasqyra t\u00eb disa repozitor\u00ebve t\u00eb njohur t\u00eb paketa me q\u00ebllim p\u00ebrhapjen e paketave t\u00eb d\u00ebmshme p\u00ebrmes tyre.    <\/p>\n<p>Metoda e propozuar p\u00ebr mbrojtje: kontrollimi q\u00eb artefaktet e shp\u00ebrndara t\u00eb jen\u00eb nd\u00ebrtuar nga burimet e deklaruara.    <\/p>\n<li class=\"l\"> H. Shtimi i konfuzionit te p\u00ebrdoruesi p\u00ebr t\u00eb instaluar paket\u00ebn e gabuar.\n<p>Shembulli i nj\u00eb sulmi: p\u00ebrdorimi i typosquatting (NPM, RubyGems, PyPI) p\u00ebr t\u00eb vendosur n\u00eb repozitor\u00ebt e paketave, paketat q\u00eb duken t\u00eb ngjashme me aplikacione popullore (p.sh., coffe-script n\u00eb vend t\u00eb coffee-script).      <\/ul>\n<p>P\u00ebr t\u00eb bllokuar k\u00ebto k\u00ebrc\u00ebnime, SLSA ofron nj\u00eb set rekomandimesh, si dhe mjete p\u00ebr automatizimin e krijimit t\u00eb metadatan\u00ebve p\u00ebr auditim. SLSA p\u00ebrmbledh metodat standarde t\u00eb sulmeve dhe prezanton konceptin e niveleve t\u00eb mbrojtjes. \u00c7do nivel paraqet k\u00ebrkesa t\u00eb caktuara p\u00ebr infrastruktur\u00ebn, duke garantuar integritetin e artefakteve q\u00eb p\u00ebrdoren gjat\u00eb zhvillimit. Sa m\u00eb i lart\u00eb t\u00eb jet\u00eb niveli mb\u00ebshtetur SLSA, aq m\u00eb shum\u00eb mjete mbrojt\u00ebse jan\u00eb implementuar dhe aq m\u00eb mir\u00eb mbrojtja e infrastruktur\u00ebs nga sulmet standarde.     <\/p>\n<ul>\n<li class=\"l\"> SLSA 1 \u2014 k\u00ebrkon q\u00eb procesi i nd\u00ebrtimit t\u00eb jet\u00eb plot\u00ebsisht i automatizuar dhe t\u00eb gjeneroj\u00eb metadata ('provenance') mbi se si artefaktet jan\u00eb nd\u00ebrtuar, duke p\u00ebrfshir\u00eb informacion mbi kodin burimor, var\u00ebsit\u00eb dhe procesin e nd\u00ebrtimit (p\u00ebr GitHub Actions \u00ebsht\u00eb propozuar nj\u00eb shembuj i gjeneratorit t\u00eb metadatas p\u00ebr auditim). SLSA 1 nuk p\u00ebrfshin elemente mbrojt\u00ebse ndaj futjes s\u00eb ndryshimeve t\u00eb d\u00ebmshme, por vet\u00ebm identifikon kodin n\u00eb m\u00ebnyr\u00eb t\u00eb thjesht\u00eb dhe ofron metadata p\u00ebr menaxhimin e dob\u00ebsive dhe analiz\u00ebn e rreziqeve.\n<li class=\"l\"> SLSA 2 \u2014 zgjeron nivelin e par\u00eb duke k\u00ebrkuar p\u00ebrdorimin e nj\u00eb sistemi t\u00eb menaxhimit t\u00eb versioneve dhe sh\u00ebrbimeve t\u00eb nd\u00ebrtimit q\u00eb gjenerojn\u00eb metadata t\u00eb autentikuara. P\u00ebrdorimi i SLSA 2 lejon ndjekjen e origjin\u00ebs s\u00eb kodit dhe parandalon futjen e ndryshimeve t\u00eb paautorizuara n\u00eb kod, n\u00eb rast se p\u00ebrdoren sh\u00ebrbime nd\u00ebrtimi t\u00eb besueshme.\n<li class=\"l\"> SLSA 3 \u2014 konfirmon se kodet burimore dhe platforma e nd\u00ebrtimit p\u00ebrmbushin k\u00ebrkesat e standardeve, duke garantuar mund\u00ebsin\u00eb e auditimit t\u00eb kodit dhe sigurin\u00eb e integritetit t\u00eb metadatas s\u00eb ofruar. Supozohet se auditor\u00ebt mund t\u00eb certifikojn\u00eb platformat p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb me k\u00ebrkesat e standardeve.\n<li class=\"l\"> SLSA 4 \u2014 niveli m\u00eb i lart\u00eb, plot\u00ebson nivelet e m\u00ebparshme me k\u00ebrkesa t\u00eb m\u00ebposhtme:\n<ul>\n<li class=\"l\"> Rishikimi i detyruesh\u00ebm i t\u00eb gjitha ndryshimeve nga dy zhvillues t\u00eb ndrysh\u00ebm.\n<li class=\"l\"> T\u00eb gjitha hapat e nd\u00ebrtimit, kodi dhe var\u00ebsit\u00eb duhet t\u00eb deklarohen plot\u00ebsisht, t\u00eb gjitha var\u00ebsit\u00eb duhet t\u00eb nxiren ve\u00e7mas dhe t\u00eb verifikohen, dhe procesi i nd\u00ebrtimit duhet t\u00eb kryhet pa akses n\u00eb internet.\n<li class=\"l\"> P\u00ebrdorimi i procesit t\u00eb nd\u00ebrtimit t\u00eb rip\u00ebrs\u00ebritur \u2014 mund\u00ebsia p\u00ebr t\u00eb rip\u00ebrs\u00ebritur procesin e nd\u00ebrtimit me forcat e tua dhe p\u00ebr t\u00eb verifikuar q\u00eb skedari i ekzekutuesh\u00ebm \u00ebsht\u00eb nd\u00ebrtuar nga kodet burimore t\u00eb ofruara.        <\/ul>\n<p>      <center><img decoding=\"async\" alt=\"Google propozoi SLSA p\u00ebr mbrojtje nga ndryshimet keqdash\u00ebse n\u00eb procesin e zhvillimit\" src=\"\/wp-content\/uploads\/2021\/06\/3f0bdd24afeec562582d8410b490e705.png\" style=\"display:block;margin: 0 auto;\" \/><\/center><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55345\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u041f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438 \u0438 \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0438\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043d\u0435 \u0441 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100533,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100532","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b SLSA \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-17T20:23:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-17T20:23:08+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google ofroi SLSA p\u00ebr mbrojtje nga ndryshimet e d\u00ebmshme gjat\u00eb zhvillimit | ProHoster","description":"Kompania Google prezantoi korniz\u00ebn SLSA (Nivelet e Furnizimit p\u00ebr Artefaktet e Softuerit), n\u00eb t\u00eb cil\u00ebn p\u00ebrmbledhet p\u00ebrvoja ekzistuese p\u00ebr mbrojtjen e infrastruktur\u00ebs s\u00eb zhvillimit nga sulmet q\u00eb kryhen n\u00eb faz\u00ebn e shkrimit t\u00eb kodit.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b SLSA \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a SLSA (Supply-chain Levels for Software Artifacts), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u043e\u0431\u0449\u0451\u043d \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u043f\u044b\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442 \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-predlozhil-slsa-dlya-zashhity-ot-vredonosnyh-izmenenij-v-proczesse-razrabotki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-17T20:23:08+00:00","article:modified_time":"2021-06-17T20:23:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100532","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-17 20:37:49","updated":"2026-02-09 21:38:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100532","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=100532"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100532\/revisions"}],"predecessor-version":[{"id":159918,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100532\/revisions\/159918"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/100533"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=100532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=100532"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=100532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}