Kompania Google njoftoi formimin e deg\u00ebve t\u00eb para t\u00eb q\u00ebndrueshme t\u00eb komponenteve q\u00eb p\u00ebrb\u00ebjn\u00eb projektin Sigstore, i cili shpallet i p\u00ebrshtatsh\u00ebm p\u00ebr krijimin e implementimeve funksionale. Sigstore zhvillon mjete dhe sh\u00ebrbime p\u00ebr verifikimin e softuerit p\u00ebrmes n\u00ebnshkrimeve digjitale dhe mbajtjes s\u00eb nj\u00eb regjistri publik q\u00eb konfirmon autenticitetin e ndryshimeve (transparency log). Projekti po zhvillohet n\u00ebn p\u00ebrkujdesjen e organizat\u00ebs jo fitimprur\u00ebse Linux Foundation nga kompanit\u00eb Google, Red Hat, Cisco, vmWare, GitHub dhe HP Enterprise, me pjes\u00ebmarrjen e organizat\u00ebs OpenSSF (Open Source Security Foundation) dhe universitetit Purdue. <\/p>\n
Sigstore mund t\u00eb shikohet si nj\u00eb alternativ\u00eb p\u00ebr Let’s Encrypt p\u00ebr kodin, duke ofruar certifikata p\u00ebr v\u00ebrtetimin e kodit me n\u00ebnshkrime digjitale dhe nj\u00eb mjete p\u00ebr automatizimin e verifikimit. Me ndihm\u00ebn e Sigstore, zhvilluesit do t\u00eb jen\u00eb n\u00eb gjendje t\u00eb krijojn\u00eb n\u00ebnshkrime digjitale p\u00ebr artefaktet e lidhura me aplikacionin, si skedar\u00ebt e l\u00ebshimeve, imazhet e kontejner\u00ebve, manifestet dhe skedar\u00ebt ekzekutiv\u00eb. Materiali i p\u00ebrdorur p\u00ebr n\u00ebnshkrim pasqyrohet n\u00eb nj\u00eb regjist\u00ebr publik t\u00eb mbrojtur nga modifikimet, i cili mund t\u00eb p\u00ebrdoret p\u00ebr verifikim dhe auditim. <\/p>\n
N\u00eb vend t\u00eb \u00e7el\u00ebsave t\u00eb p\u00ebrhersh\u00ebm, n\u00eb Sigstore p\u00ebrdoren \u00e7el\u00ebsa efemer\u00eb me jet\u00ebshkurt\u00ebr, t\u00eb cil\u00ebt gjenerohen mbi baz\u00ebn e autorizimeve t\u00eb konfirmuara nga ofruesit e OpenID Connect (n\u00eb momentin e gjenerimit t\u00eb \u00e7el\u00ebsave t\u00eb nevojsh\u00ebm p\u00ebr krijimin e n\u00ebnshkrimit digjital, zhvilluesi identifikohet p\u00ebrmes ofruesit OpenID me lidhje n\u00eb email). Autenticiteti i \u00e7el\u00ebsave konfirmohet p\u00ebrmes nj\u00eb regjistri publik t\u00eb centralizuar, q\u00eb lejon sigurimin se autori i n\u00ebnshkrimit \u00ebsht\u00eb v\u00ebrtet ai q\u00eb thot\u00eb se \u00ebsht\u00eb dhe n\u00ebnshkrimi \u00ebsht\u00eb krijuar nga i nj\u00ebjti pjes\u00ebmarr\u00ebs q\u00eb ka qen\u00eb p\u00ebrgjegj\u00ebs p\u00ebr l\u00ebshimet e m\u00ebparshme. <\/p>\n
Gatishm\u00ebria e Sigstore p\u00ebr zbatim \u00ebsht\u00eb e lidhur me formimin e l\u00ebshimeve t\u00eb dy komponent\u00ebve ky\u00e7 - Rekor 1.0 dhe Fulcio 1.0, nd\u00ebrfaqet e programit t\u00eb t\u00eb cil\u00ebve jan\u00eb shpallur si t\u00eb q\u00ebndrueshme dhe do t\u00eb ruajn\u00eb p\u00ebrputhshm\u00ebrin\u00eb prapa. Komponent\u00ebt e sh\u00ebrbimit jan\u00eb shkruar n\u00eb gjuh\u00ebn Go dhe shp\u00ebrndahen n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n
Komponenti Rekor p\u00ebrmban nj\u00eb implementim t\u00eb regjistrit p\u00ebr ruajtjen e metadata-ve t\u00eb v\u00ebrtetuara me n\u00ebnshkrime digjitale, t\u00eb cilat pasqyrojn\u00eb informacionin mbi projektet. P\u00ebr t\u00eb siguruar integritetin dhe mbrojtjen kund\u00ebr deformimit t\u00eb t\u00eb dh\u00ebnave retroaktive, p\u00ebrdoret nj\u00eb strukture e drurit \"Merkle Tree\", ku \u00e7do deg\u00eb verifikon t\u00eb gjitha deg\u00ebt dhe nyjet m\u00eb posht\u00eb fal\u00eb hashimit t\u00eb p\u00ebrbashk\u00ebt (p\u00ebrmes drurit). Duke pasur nj\u00eb hash t\u00eb p\u00ebrfunduar, p\u00ebrdoruesi mund t\u00eb verifikoj\u00eb sakt\u00ebsin\u00eb e gjith\u00eb historis\u00eb s\u00eb operacioneve, si dhe t\u00eb kaluarat e sakt\u00eb t\u00eb gjendjeve t\u00eb DB-s\u00eb (hashi i kontrollit t\u00eb rr\u00ebnj\u00ebs s\u00eb gjendjes s\u00eb re t\u00eb baz\u00ebs llogaritet duke marr\u00eb parasysh gjendjen e kaluar). P\u00ebr verifikimin dhe shtimin e t\u00eb dh\u00ebnave t\u00eb reja, ofrohet nj\u00eb API RESTful, si dhe nj\u00eb nd\u00ebrfaqe t\u00eb komand\u00ebs. <\/p>\n
Komponenti Fulcio (SigStore WebPKI) p\u00ebrfshin nj\u00eb sistem p\u00ebr krijimin e autoriteteve t\u00eb certifikimit (root CA), q\u00eb l\u00ebshojn\u00eb certifikata me jet\u00ebgjat\u00ebsi t\u00eb shkurt\u00ebr n\u00eb baz\u00eb t\u00eb email-it, t\u00eb autentikuar p\u00ebrmes OpenID Connect. Koh\u00ebzgjatja e certifikat\u00ebs \u00ebsht\u00eb 20 minuta, gjat\u00eb s\u00eb cil\u00ebs zhvilluesi duhet t\u00eb formoj\u00eb n\u00ebnshkrimin digjital (n\u00ebse m\u00eb pas certifikata kalon n\u00eb duar t\u00eb t\u00eb hajdut\u00ebve, ajo do t\u00eb jet\u00eb tashm\u00eb e skaduar). S\u00eb tep\u00ebrmi, projekti zhvillon nj\u00eb mjet t\u00eb quajtur Cosign (Container Signing), i destinuar p\u00ebr formimin e n\u00ebnshkrimeve p\u00ebr kontejner\u00ebt, verifikimin e n\u00ebnshkrimeve dhe vendosjen e kontejner\u00ebve t\u00eb n\u00ebnshkruar n\u00eb depozit\u00eb t\u00eb p\u00ebrputhshme me OCI (Open Container Initiative). <\/p>\n
Shp\u00ebrndarja e Sigstore ofron mund\u00ebsi p\u00ebr t\u00eb rritur sigurin\u00eb e kanaleve t\u00eb shp\u00ebrndarjes s\u00eb softuerit dhe p\u00ebr t'u mbrojtur nga sulmet q\u00eb jan\u00eb t\u00eb synuara p\u00ebr t\u00eb z\u00ebvend\u00ebsuar bibliotekat dhe var\u00ebsit\u00eb (supply chain). Nj\u00eb nga problemet kryesore t\u00eb siguris\u00eb n\u00eb softuerin e hapur \u00ebsht\u00eb v\u00ebshtir\u00ebsia e verifikimit t\u00eb burimit t\u00eb marrjes s\u00eb programit dhe verifikimit t\u00eb procesit t\u00eb nd\u00ebrtimit. P\u00ebr shembull, p\u00ebr t\u00eb verifikuar integritetin e publikimeve, shumica e projekteve p\u00ebrdorin hash-e, por shpesh informacioni i nevojsh\u00ebm p\u00ebr verifikimin e origjinalitetit ruhet n\u00eb sisteme t\u00eb pasigurta dhe depo t\u00eb zakonshme me kod, si rezultat i komprometimit t\u00eb t\u00eb cilave sulmuesit mund t\u00eb z\u00ebvend\u00ebsojn\u00eb skedar\u00ebt e nevojsh\u00ebm p\u00ebr verifikim dhe, pa shkaktuar dyshime, t\u00eb integrojn\u00eb ndryshime t\u00eb d\u00ebmshme. <\/p>\n
P\u00ebrdorimi i n\u00ebnshkrimeve digjitale p\u00ebr verifikimin e \u00e7lirimeve ende nuk ka marr\u00eb p\u00ebrhapje t\u00eb gjer\u00eb p\u00ebr shkak t\u00eb v\u00ebshtir\u00ebsive n\u00eb menaxhimin e \u00e7el\u00ebsave, shp\u00ebrndarjen e \u00e7el\u00ebsave publik\u00eb dhe t\u00ebrheqjen e \u00e7el\u00ebsave t\u00eb komprometuar. P\u00ebr t\u00eb pasur kuptim verifikimi, k\u00ebrkohet gjithashtu t\u00eb organizohet nj\u00eb proces i besuesh\u00ebm dhe t\u00eb sigurt p\u00ebr shp\u00ebrndarjen e \u00e7el\u00ebsave publik\u00eb dhe kontrollsumave. Edhe kur ka nj\u00eb n\u00ebnshkrim digjital, shum\u00eb p\u00ebrdorues e injorojn\u00eb verifikimin, pasi duhet t\u00eb kalojn\u00eb koh\u00eb p\u00ebr t\u00eb studiuar procesin e verifikimit dhe t\u00eb kuptojn\u00eb se cili \u00e7el\u00ebs meriton besimin. Projekti Sigstore p\u00ebrpiqet t\u00eb thjeshtoj\u00eb dhe automatizoj\u00eb k\u00ebto procese, duke ofruar nj\u00eb zgjidhje t\u00eb p\u00ebrgatitur dhe t\u00eb verifikuar. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0435\u043a\u0442 Sigstore, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043f\u0440\u0438\u0433\u043e\u0434\u043d\u044b\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0439. Sigstore \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0434\u043b\u044f \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u0438 \u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u043b\u043e\u0433\u0430, \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 (transparency log). \u041f\u0440\u043e\u0435\u043a\u0442 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u044d\u0433\u0438\u0434\u043e\u0439 \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Foundation \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Google, Red Hat, Cisco, vmWare, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105382","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Njoftohet p\u00ebr gatishm\u00ebrin\u00eb e sistemit t\u00eb verifikimit kriptografik t\u00eb kodit Sigstore | ProHoster","description":"Kompania Google njoftoi p\u00ebr formimin e versioneve t\u00eb para stabile t\u00eb komponenteve q\u00eb p\u00ebrb\u00ebjn\u00eb projektin Sigstore, i cili \u00ebsht\u00eb shpallur i p\u00ebrshtatsh\u00ebm p\u00ebr krijimin e implementimeve funksionale.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/obyavleno-o-gotovnosti-sistemy-kriptograficheskoj-verifikaczii-koda-sigstore","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u043e \u043e \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 Sigstore | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0435\u043a\u0442 Sigstore, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043f\u0440\u0438\u0433\u043e\u0434\u043d\u044b\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0439.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/obyavleno-o-gotovnosti-sistemy-kriptograficheskoj-verifikaczii-koda-sigstore","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-25T19:36:48+00:00","article:modified_time":"2022-10-25T19:36:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105382","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=105382"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105382\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=105382"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=105382"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=105382"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"