{"id":755,"date":"2026-03-24T08:44:10","date_gmt":"2026-03-24T07:44:10","guid":{"rendered":"https:\/\/secure-pipelines.com\/ci-cd-security\/software-supply-chain-security-comprehensive-guide-2\/"},"modified":"2026-03-25T09:17:19","modified_gmt":"2026-03-25T08:17:19","slug":"software-supply-chain-security-comprehensive-guide","status":"publish","type":"post","link":"https:\/\/secure-pipelines.com\/ar\/software-supply-chain\/software-supply-chain-security-comprehensive-guide\/","title":{"rendered":"\u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a: \u062f\u0644\u064a\u0644 \u0634\u0627\u0645\u0644 \u0644\u0641\u0631\u0642 \u0627\u0644\u0647\u0646\u062f\u0633\u0629"},"content":{"rendered":"<h2>\u0645\u0642\u062f\u0645\u0629: \u0644\u0645\u0627\u0630\u0627 \u064a\u064f\u0639\u062f\u0651 \u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0645\u0647\u0645\u064b\u0627<\/h2>\n<p>\u0641\u064a \u062f\u064a\u0633\u0645\u0628\u0631 2020\u060c \u0627\u0643\u062a\u0634\u0641 \u0627\u0644\u0639\u0627\u0644\u0645 \u0623\u0646 <strong>SolarWinds<\/strong> \u2014 \u0648\u0647\u064a \u0645\u0646\u0635\u0629 \u0625\u062f\u0627\u0631\u0629 \u062a\u0642\u0646\u064a\u0629 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0645\u0648\u062b\u0648\u0642\u0629 \u0639\u0644\u0649 \u0646\u0637\u0627\u0642 \u0648\u0627\u0633\u0639 \u2014 \u0642\u062f \u062a\u0639\u0631\u0636\u062a \u0644\u0644\u0627\u062e\u062a\u0631\u0627\u0642. \u0642\u0627\u0645 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0628\u062d\u0642\u0646 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0641\u064a \u0639\u0645\u0644\u064a\u0629 build \u0644\u0628\u0631\u0646\u0627\u0645\u062c Orion\u060c \u0648\u0648\u0632\u0651\u0639\u0648\u0627 \u062a\u062d\u062f\u064a\u062b\u064b\u0627 \u0645\u0644\u0648\u062b\u064b\u0627 \u0639\u0644\u0649 \u0645\u0627 \u064a\u0642\u0627\u0631\u0628 18,000 \u0645\u0624\u0633\u0633\u0629\u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0648\u0643\u0627\u0644\u0627\u062a \u062d\u0643\u0648\u0645\u064a\u0629 \u0623\u0645\u0631\u064a\u0643\u064a\u0629 \u0648\u0634\u0631\u0643\u0627\u062a \u0645\u062f\u0631\u062c\u0629 \u0641\u064a Fortune 500. \u0644\u0645 \u064a\u0643\u0646 \u0627\u0644\u0647\u062c\u0648\u0645 \u0645\u0648\u062c\u0647\u064b\u0627 \u0636\u062f \u0645\u0633\u062a\u0648\u062f\u0639 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631\u064a \u0644\u0640 SolarWinds \u0645\u0628\u0627\u0634\u0631\u0629\u060c \u0628\u0644 \u0636\u062f <em>pipeline \u0627\u0644\u062e\u0627\u0635 \u0628\u0640 build<\/em>. \u0623\u0639\u0627\u062f \u0647\u0630\u0627 \u0627\u0644\u062d\u0627\u062f\u062b \u0627\u0644\u0641\u0631\u062f\u064a \u062a\u0639\u0631\u064a\u0641 \u0643\u064a\u0641\u064a\u0629 \u062a\u0641\u0643\u064a\u0631 \u0627\u0644\u0635\u0646\u0627\u0639\u0629 \u0641\u064a \u0623\u0645\u0627\u0646 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a.<\/p>\n<p>\u062b\u0645 \u062c\u0627\u0621 <strong>Log4Shell<\/strong> \u0641\u064a \u0623\u0648\u0627\u062e\u0631 2021. \u062b\u063a\u0631\u0629 \u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f \u062d\u0631\u062c\u0629 \u0641\u064a Apache Log4j \u2014 \u0645\u0643\u062a\u0628\u0629 \u062a\u0633\u062c\u064a\u0644 Java \u0627\u0644\u0645\u0646\u062a\u0634\u0631\u0629 \u0641\u064a \u0643\u0644 \u0645\u0643\u0627\u0646 \u2014 \u0643\u0634\u0641\u062a \u0639\u0645\u0644\u064a\u064b\u0627 \u0643\u0644 \u0645\u0624\u0633\u0633\u0629 \u0639\u0644\u0649 \u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u0643\u0628. \u062a\u0633\u0627\u0628\u0642\u062a \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0644\u062a\u062d\u062f\u064a\u062f \u0645\u0627 \u0625\u0630\u0627 \u0643\u0627\u0646\u062a <em>\u062a\u0633\u062a\u062e\u062f\u0645<\/em> Log4j \u0623\u0635\u0644\u0627\u064b\u060c \u0645\u0645\u0627 \u0643\u0634\u0641 \u0639\u0646 \u0646\u0642\u0635 \u062c\u0648\u0647\u0631\u064a \u0641\u064a \u0627\u0644\u0631\u0624\u064a\u0629 \u062a\u062c\u0627\u0647 \u062a\u0628\u0639\u064a\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a. \u0643\u0627\u0646 \u0627\u0644\u062f\u0631\u0633 \u0648\u0627\u0636\u062d\u064b\u0627: \u0644\u0627 \u064a\u0645\u0643\u0646\u0643 \u062a\u0623\u0645\u064a\u0646 \u0645\u0627 \u0644\u0627 \u064a\u0645\u0643\u0646\u0643 \u0631\u0624\u064a\u062a\u0647.<\/p>\n<p>\u0648\u0641\u064a \u0627\u0644\u0622\u0648\u0646\u0629 \u0627\u0644\u0623\u062e\u064a\u0631\u0629\u060c \u0623\u0638\u0647\u0631 <strong>\u0627\u0644\u0628\u0627\u0628 \u0627\u0644\u062e\u0644\u0641\u064a \u0641\u064a XZ Utils<\/strong> (CVE-2024-3094) \u0641\u064a \u0623\u0648\u0627\u0626\u0644 2024 \u0646\u0627\u0642\u0644 \u0647\u062c\u0648\u0645 \u0623\u0643\u062b\u0631 \u062e\u0628\u062b\u064b\u0627. \u0633\u0645\u062d\u062a \u062d\u0645\u0644\u0629 \u0647\u0646\u062f\u0633\u0629 \u0627\u062c\u062a\u0645\u0627\u0639\u064a\u0629 \u0635\u0628\u0648\u0631\u0629 \u0648\u0637\u0648\u064a\u0644\u0629 \u0627\u0644\u0623\u0645\u062f \u0644\u0645\u0633\u0627\u0647\u0645 \u062e\u0628\u064a\u062b \u0628\u0625\u062f\u0631\u0627\u062c \u0628\u0627\u0628 \u062e\u0644\u0641\u064a \u0641\u064a \u0645\u0643\u062a\u0628\u0629 \u0636\u063a\u0637 \u062d\u0631\u062c\u0629 \u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0641\u064a \u062c\u0645\u064a\u0639 \u062a\u0648\u0632\u064a\u0639\u0627\u062a Linux \u062a\u0642\u0631\u064a\u0628\u064b\u0627. \u0627\u0633\u062a\u0647\u062f\u0641 \u0627\u0644\u0647\u062c\u0648\u0645 \u0646\u0638\u0627\u0645 build \u062a\u062d\u062f\u064a\u062f\u064b\u0627\u060c \u0648\u0644\u0645 \u064a\u064f\u0641\u0639\u064e\u0651\u0644 \u0625\u0644\u0627 \u0641\u064a \u0638\u0631\u0648\u0641 build \u0645\u0639\u064a\u0646\u0629 \u2014 \u0647\u062c\u0648\u0645 \u0639\u0644\u0649 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u0628\u062a\u0639\u0642\u064a\u062f \u0627\u0633\u062a\u062b\u0646\u0627\u0626\u064a.<\/p>\n<p>\u062a\u0634\u062a\u0631\u0643 \u0647\u0630\u0647 \u0627\u0644\u062d\u0648\u0627\u062f\u062b \u0641\u064a \u062e\u064a\u0637 \u0645\u0634\u062a\u0631\u0643: <strong>\u0644\u0645 \u064a\u0639\u062f \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u064a\u0633\u062a\u0647\u062f\u0641\u0648\u0646 \u0643\u0648\u062f \u062a\u0637\u0628\u064a\u0642\u0643 \u0641\u062d\u0633\u0628 \u2014 \u0628\u0644 \u064a\u0633\u062a\u0647\u062f\u0641\u0648\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0648\u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0648\u0627\u0644\u0639\u0645\u0644\u064a\u0627\u062a \u0648\u0627\u0644\u0628\u0646\u064a\u0629 \u0627\u0644\u062a\u062d\u062a\u064a\u0629 \u0628\u0623\u0643\u0645\u0644\u0647\u0627 \u0627\u0644\u062a\u064a \u062a\u0648\u0635\u0644 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0625\u0644\u0649 \u0628\u064a\u0626\u0629 \u0627\u0644\u0625\u0646\u062a\u0627\u062c.<\/strong> \u0647\u0630\u0647 \u0647\u064a \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a\u060c \u0648\u062a\u0623\u0645\u064a\u0646\u0647\u0627 \u0623\u0635\u0628\u062d \u0623\u062d\u062f \u0623\u0647\u0645 \u0627\u0644\u062a\u062d\u062f\u064a\u0627\u062a \u0641\u064a \u0627\u0644\u0647\u0646\u062f\u0633\u0629 \u0627\u0644\u062d\u062f\u064a\u062b\u0629.<\/p>\n<p>\u064a\u063a\u0637\u064a \u0647\u0630\u0627 \u0627\u0644\u062f\u0644\u064a\u0644 \u0627\u0644\u0634\u0627\u0645\u0644 \u0643\u0644 \u0628\u064f\u0639\u062f \u0645\u0646 \u0623\u0628\u0639\u0627\u062f \u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u2014 \u0645\u0646 \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0625\u0644\u0649 \u0633\u0644\u0627\u0645\u0629 build\u060c \u0648\u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629\u060c \u0648\u0627\u0644\u0645\u0635\u062f\u0631\u060c \u0648SBOM\u060c \u0648\u0623\u0637\u0631 \u0627\u0644\u0627\u0645\u062a\u062b\u0627\u0644. \u0633\u0648\u0627\u0621 \u0643\u0646\u062a \u0645\u0647\u0646\u062f\u0633 DevOps \u0623\u0648 \u0645\u0647\u0646\u062f\u0633 \u0623\u0645\u0627\u0646 \u0623\u0648 \u0642\u0627\u0626\u062f \u0647\u0646\u062f\u0633\u064a\u060c \u064a\u0648\u0641\u0631 \u0647\u0630\u0627 \u0627\u0644\u062f\u0644\u064a\u0644 \u062e\u0627\u0631\u0637\u0629 \u0637\u0631\u064a\u0642 \u0639\u0645\u0644\u064a\u0629 \u0648\u0634\u0627\u0645\u0644\u0629 \u0644\u062a\u0642\u0648\u064a\u0629 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u0643.<\/p>\n<h2>\u0641\u0647\u0645 \u0646\u0645\u0648\u0630\u062c \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a<\/h2>\n<p>\u0642\u0628\u0644 \u0623\u0646 \u0646\u062a\u0645\u0643\u0646 \u0645\u0646 \u062a\u0623\u0645\u064a\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f\u060c \u0646\u062d\u062a\u0627\u062c \u0625\u0644\u0649 \u0641\u0647\u0645 \u0645\u0643\u0648\u0646\u0627\u062a\u0647\u0627. \u062a\u062a\u0643\u0648\u0646 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u062d\u062f\u064a\u062b\u0629 \u0645\u0646 \u062e\u0645\u0633 \u0645\u0631\u0627\u062d\u0644 \u0645\u062a\u0631\u0627\u0628\u0637\u0629:<\/p>\n<h3>1. \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631\u064a<\/h3>\n<p>\u0647\u0630\u0627 \u0647\u0648 \u0627\u0644\u0645\u0643\u0627\u0646 \u0627\u0644\u0630\u064a \u064a\u0643\u062a\u0628 \u0641\u064a\u0647 \u0627\u0644\u0645\u0637\u0648\u0631\u0648\u0646 \u0627\u0644\u0643\u0648\u062f \u0648\u064a\u0631\u0627\u062c\u0639\u0648\u0646\u0647 \u0648\u064a\u064f\u0631\u0633\u0644\u0648\u0646\u0647. \u062a\u0634\u0645\u0644 \u0645\u0631\u062d\u0644\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u062a\u062d\u0643\u0645 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a (Git)\u060c \u0648\u0639\u0645\u0644\u064a\u0627\u062a \u0645\u0631\u0627\u062c\u0639\u0629 \u0627\u0644\u0643\u0648\u062f\u060c \u0648\u0642\u0648\u0627\u0639\u062f \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0641\u0631\u0648\u0639\u060c \u0648\u062a\u0648\u0642\u064a\u0639 commits. \u062a\u0634\u0645\u0644 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0641\u064a \u0647\u0630\u0647 \u0627\u0644\u0645\u0631\u062d\u0644\u0629 \u062d\u0633\u0627\u0628\u0627\u062a \u0627\u0644\u0645\u0637\u0648\u0631\u064a\u0646 \u0627\u0644\u0645\u062e\u062a\u0631\u0642\u0629\u060c \u0648\u0627\u0644\u0640 commits \u0627\u0644\u062e\u0628\u064a\u062b\u0629\u060c \u0648\u0627\u0644\u062a\u063a\u064a\u064a\u0631\u0627\u062a \u063a\u064a\u0631 \u0627\u0644\u0645\u0635\u0631\u062d \u0628\u0647\u0627 \u0639\u0644\u0649 \u0645\u0644\u0641\u0627\u062a \u062a\u0643\u0648\u064a\u0646 CI\/CD (\u062a\u0633\u0645\u064a\u0645 \u0627\u0644\u0640 pipeline).<\/p>\n<h3>2. \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a<\/h3>\n<p>\u062a\u0639\u062a\u0645\u062f \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u062d\u062f\u064a\u062b\u0629 \u0628\u0634\u0643\u0644 \u0643\u0628\u064a\u0631 \u0639\u0644\u0649 \u0627\u0644\u0645\u0643\u062a\u0628\u0627\u062a \u0648\u0627\u0644\u062d\u0632\u0645 \u0645\u0646 \u062c\u0647\u0627\u062a \u062e\u0627\u0631\u062c\u064a\u0629. \u0642\u062f \u064a\u0633\u062d\u0628 \u062a\u0637\u0628\u064a\u0642 Node.js \u0646\u0645\u0648\u0630\u062c\u064a \u0645\u0626\u0627\u062a \u0623\u0648 \u0622\u0644\u0627\u0641 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0627\u0644\u0645\u062a\u0639\u062f\u064a\u0629. \u062a\u0634\u0645\u0644 \u0645\u0631\u062d\u0644\u0629 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0633\u062c\u0644\u0627\u062a \u0627\u0644\u062d\u0632\u0645 (npm\u060c PyPI\u060c Maven Central)\u060c \u0648\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0642\u0641\u0644\u060c \u0648\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a\u060c \u0648\u0641\u062d\u0635 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629. \u0647\u0630\u0647 \u0648\u0627\u062d\u062f\u0629 \u0645\u0646 \u0623\u0643\u062b\u0631 \u0645\u0631\u0627\u062d\u0644 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u064b\u0627.<\/p>\n<h3>3. \u0627\u0644\u0640 Build<\/h3>\n<p>\u062a\u062d\u0648\u0651\u0644 \u0645\u0631\u062d\u0644\u0629 build \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631\u064a \u0648\u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0625\u0644\u0649 \u0642\u0637\u0639 \u0628\u0631\u0645\u062c\u064a\u0629 \u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u0646\u0634\u0631. \u064a\u0634\u0645\u0644 \u0630\u0644\u0643 \u0627\u0644\u062a\u062c\u0645\u064a\u0639\u060c \u0648\u0627\u0644\u062a\u062d\u0632\u064a\u0645\u060c \u0648\u0628\u0646\u0627\u0621 \u0635\u0648\u0631 \u0627\u0644\u062d\u0627\u0648\u064a\u0627\u062a\u060c \u0648\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0627\u062e\u062a\u0628\u0627\u0631\u0627\u062a. \u0623\u0646\u0638\u0645\u0629 build \u2014 \u0633\u0648\u0627\u0621 \u0643\u0627\u0646\u062a Jenkins \u0623\u0648 GitHub Actions \u0623\u0648 GitLab CI \u0623\u0648 \u063a\u064a\u0631\u0647\u0627 \u2014 \u0647\u064a \u0623\u0647\u062f\u0627\u0641 \u0639\u0627\u0644\u064a\u0629 \u0627\u0644\u0642\u064a\u0645\u0629 \u0644\u0623\u0646 \u0627\u062e\u062a\u0631\u0627\u0642 \u0639\u0645\u0644\u064a\u0629 build \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u062d\u0642\u0646 \u0643\u0648\u062f\u064b\u0627 \u062e\u0628\u064a\u062b\u064b\u0627 \u0641\u064a \u0643\u0644 \u0642\u0637\u0639\u0629 \u0628\u0631\u0645\u062c\u064a\u0629 \u064a\u062a\u0645 \u0625\u0646\u062a\u0627\u062c\u0647\u0627.<\/p>\n<h3>4. \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629<\/h3>\n<p>\u0645\u062e\u0631\u062c\u0627\u062a build \u2014 \u0635\u0648\u0631 \u0627\u0644\u062d\u0627\u0648\u064a\u0627\u062a \u0648\u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u062b\u0646\u0627\u0626\u064a\u0629 \u0648\u0627\u0644\u062d\u0632\u0645 \u2014 \u062a\u064f\u062e\u0632\u064e\u0651\u0646 \u0641\u064a \u0633\u062c\u0644\u0627\u062a \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 (Docker Hub\u060c Amazon ECR\u060c Artifactory\u060c \u0625\u0644\u062e). \u062a\u0634\u0645\u0644 \u0645\u0631\u062d\u0644\u0629 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0648\u0625\u0631\u0641\u0627\u0642 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0648\u0635\u0641\u064a\u0629 \u0648\u0627\u0644\u062a\u062d\u0643\u0645 \u0641\u064a \u0627\u0644\u0648\u0635\u0648\u0644. \u0628\u062f\u0648\u0646 \u0636\u0648\u0627\u0628\u0637 \u0633\u0644\u0627\u0645\u0629 \u0645\u0646\u0627\u0633\u0628\u0629\u060c \u064a\u0645\u0643\u0646 \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0628\u0639\u062f build.<\/p>\n<h3>5. \u0627\u0644\u0646\u0634\u0631<\/h3>\n<p>\u062a\u0633\u0644\u0651\u0645 \u0627\u0644\u0645\u0631\u062d\u0644\u0629 \u0627\u0644\u0623\u062e\u064a\u0631\u0629 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0625\u0644\u0649 \u0628\u064a\u0626\u0627\u062a \u0627\u0644\u0625\u0646\u062a\u0627\u062c. \u064a\u0634\u0645\u0644 deploy \u0645\u0646\u0635\u0627\u062a \u0627\u0644\u062a\u0646\u0633\u064a\u0642 (Kubernetes)\u060c \u0648\u0645\u062a\u062d\u0643\u0645\u0627\u062a \u0627\u0644\u0642\u0628\u0648\u0644\u060c \u0648\u0625\u0646\u0641\u0627\u0630 \u0627\u0644\u0633\u064a\u0627\u0633\u0627\u062a\u060c \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0623\u062b\u0646\u0627\u0621 \u0627\u0644\u062a\u0634\u063a\u064a\u0644. \u0647\u0630\u0627 \u0647\u0648 \u062e\u0637 \u0627\u0644\u062f\u0641\u0627\u0639 \u0627\u0644\u0623\u062e\u064a\u0631 \u2014 \u0627\u0644\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u064a \u062a\u062a\u062d\u0642\u0642 \u0641\u064a\u0647\u0627 \u0645\u0646 \u0623\u0646 \u0645\u0627 \u062a\u0642\u0648\u0645 \u0628\u0640 deploy \u0647\u0648 \u0628\u0627\u0644\u0636\u0628\u0637 \u0645\u0627 \u062a\u0645 build.<\/p>\n<p>\u062a\u0642\u062f\u0645 \u0643\u0644 \u0645\u0631\u062d\u0644\u0629 \u0623\u0633\u0637\u062d \u0647\u062c\u0648\u0645 \u0641\u0631\u064a\u062f\u0629 \u0648\u062a\u062a\u0637\u0644\u0628 \u0625\u062c\u0631\u0627\u0621\u0627\u062a \u062f\u0641\u0627\u0639\u064a\u0629 \u0645\u062d\u062f\u062f\u0629. \u064a\u062a\u0646\u0627\u0648\u0644 \u0627\u0644\u062c\u0632\u0621 \u0627\u0644\u0645\u062a\u0628\u0642\u064a \u0645\u0646 \u0647\u0630\u0627 \u0627\u0644\u062f\u0644\u064a\u0644 \u0643\u0644 \u0645\u0631\u062d\u0644\u0629 \u0628\u0627\u0644\u062a\u0641\u0635\u064a\u0644.<\/p>\n<h2>\u0645\u062e\u0627\u0637\u0631 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0648\u0627\u0644\u062f\u0641\u0627\u0639\u0627\u062a<\/h2>\n<p>\u062a\u064f\u0639\u062f\u0651 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0627\u0644\u0645\u0643\u0648\u0646 \u0627\u0644\u0623\u0643\u062b\u0631 \u0639\u0631\u0636\u0629 \u0644\u0644\u062e\u0637\u0631 \u0641\u064a \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a. \u062a\u064f\u0638\u0647\u0631 \u0627\u0644\u0623\u0628\u062d\u0627\u062b \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631 \u0623\u0646 \u0623\u0643\u062b\u0631 \u0645\u0646 80% \u0645\u0646 \u0627\u0644\u0643\u0648\u062f \u0641\u064a \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u062d\u062f\u064a\u062b\u0629 \u064a\u0623\u062a\u064a \u0645\u0646 \u062a\u0628\u0639\u064a\u0627\u062a \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631. \u064a\u062e\u0644\u0642 \u0647\u0630\u0627 \u0633\u0637\u062d \u0647\u062c\u0648\u0645 \u0647\u0627\u0626\u0644 \u064a\u0635\u0639\u0628 \u0645\u0631\u0627\u0642\u0628\u062a\u0647 \u0648\u0627\u0644\u062a\u062d\u0643\u0645 \u0641\u064a\u0647.<\/p>\n<h3>\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0627\u0644\u0634\u0627\u0626\u0639\u0629<\/h3>\n<p>\u064a\u0633\u062a\u063a\u0644 <strong>dependency confusion<\/strong> (\u064a\u064f\u0639\u0631\u0641 \u0623\u064a\u0636\u064b\u0627 \u0628\u0627\u0631\u062a\u0628\u0627\u0643 \u0645\u0633\u0627\u062d\u0629 \u0627\u0644\u0623\u0633\u0645\u0627\u0621) \u0627\u0644\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u062a\u064a \u062a\u062d\u0644\u0651 \u0628\u0647\u0627 \u0645\u062f\u064a\u0631\u0627\u062a \u0627\u0644\u062d\u0632\u0645 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a. \u0639\u0646\u062f\u0645\u0627 \u062a\u0633\u062a\u062e\u062f\u0645 \u0645\u0624\u0633\u0633\u0629 \u062d\u0632\u0645\u064b\u0627 \u062f\u0627\u062e\u0644\u064a\u0629 \u0628\u0623\u0633\u0645\u0627\u0621 \u063a\u064a\u0631 \u0645\u0648\u062c\u0648\u062f\u0629 \u0641\u064a \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0627\u0644\u0639\u0627\u0645\u0629\u060c \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0646\u0634\u0631 \u062d\u0632\u0645\u0629 \u062e\u0628\u064a\u062b\u0629 \u0628\u0646\u0641\u0633 \u0627\u0644\u0627\u0633\u0645 \u0639\u0644\u0649 \u0627\u0644\u0633\u062c\u0644 \u0627\u0644\u0639\u0627\u0645. \u0625\u0630\u0627 \u0643\u0627\u0646\u062a \u0645\u062f\u064a\u0631\u0629 \u0627\u0644\u062d\u0632\u0645 \u0645\u064f\u0639\u062f\u064e\u0651\u0629 \u0628\u0634\u0643\u0644 \u062e\u0627\u0637\u0626\u060c \u0641\u0642\u062f \u062a\u0633\u062d\u0628 \u062d\u0632\u0645\u0629 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062f\u0644\u0627\u064b \u0645\u0646 \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629. \u0623\u064f\u062b\u0628\u062a \u0646\u0627\u0642\u0644 \u0627\u0644\u0647\u062c\u0648\u0645 \u0647\u0630\u0627 \u0628\u0634\u0643\u0644 \u0634\u0647\u064a\u0631 \u0645\u0646 \u0642\u0628\u0644 \u0627\u0644\u0628\u0627\u062d\u062b \u0627\u0644\u0623\u0645\u0646\u064a Alex Birsan \u0641\u064a 2021\u060c \u0645\u0645\u0627 \u0623\u062b\u0631 \u0639\u0644\u0649 Apple \u0648Microsoft \u0648\u0634\u0631\u0643\u0627\u062a \u0643\u0628\u0631\u0649 \u0623\u062e\u0631\u0649.<\/p>\n<p>\u064a\u0633\u062a\u0647\u062f\u0641 <strong>typosquatting<\/strong> \u0627\u0644\u0645\u0637\u0648\u0631\u064a\u0646 \u0627\u0644\u0630\u064a\u0646 \u064a\u0631\u062a\u0643\u0628\u0648\u0646 \u0623\u062e\u0637\u0627\u0621 \u0625\u0645\u0644\u0627\u0626\u064a\u0629 \u0639\u0646\u062f \u062a\u062d\u062f\u064a\u062f \u0623\u0633\u0645\u0627\u0621 \u0627\u0644\u062d\u0632\u0645. \u064a\u0646\u0634\u0631 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u062d\u0632\u0645\u064b\u0627 \u062e\u0628\u064a\u062b\u0629 \u0628\u0623\u0633\u0645\u0627\u0621 \u062a\u0634\u0628\u0647 \u0627\u0644\u0645\u0643\u062a\u0628\u0627\u062a \u0627\u0644\u0634\u0627\u0626\u0639\u0629 \u2014 \u0639\u0644\u0649 \u0633\u0628\u064a\u0644 \u0627\u0644\u0645\u062b\u0627\u0644\u060c <code>reqeusts<\/code> \u0628\u062f\u0644\u0627\u064b \u0645\u0646 <code>requests<\/code>\u060c \u0623\u0648 <code>lodash-utils<\/code> \u062a\u0642\u0644\u064a\u062f\u064b\u0627 \u0644\u0640 <code>lodash<\/code>. \u063a\u0627\u0644\u0628\u064b\u0627 \u0645\u0627 \u062a\u062d\u062a\u0648\u064a \u0647\u0630\u0647 \u0627\u0644\u062d\u0632\u0645 \u0639\u0644\u0649 \u0643\u0648\u062f \u0644\u0633\u0631\u0642\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0623\u0648 \u062a\u0639\u062f\u064a\u0646 \u0627\u0644\u0639\u0645\u0644\u0627\u062a \u0627\u0644\u0645\u0634\u0641\u0631\u0629.<\/p>\n<p>\u062a\u0633\u0645\u062d <strong>\u062d\u0633\u0627\u0628\u0627\u062a \u0627\u0644\u0645\u0634\u0631\u0641\u064a\u0646 \u0627\u0644\u0645\u062e\u062a\u0631\u0642\u0629<\/strong> \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u062f\u0641\u0639 \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u062e\u0628\u064a\u062b\u0629 \u0625\u0644\u0649 \u062d\u0632\u0645 \u0645\u0634\u0631\u0648\u0639\u0629 \u0648\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0639\u0644\u0649 \u0646\u0637\u0627\u0642 \u0648\u0627\u0633\u0639. \u062d\u0627\u062f\u062b\u0629 <code>event-stream<\/code> \u0641\u064a 2018 \u0648\u0627\u062e\u062a\u0631\u0627\u0642 <code>ua-parser-js<\/code> \u0641\u064a 2021 \u0623\u0645\u062b\u0644\u0629 \u0628\u0627\u0631\u0632\u0629. \u0644\u0623\u0646 \u0627\u0644\u062d\u0632\u0645 \u0645\u0634\u0631\u0648\u0639\u0629 \u0648\u0645\u0648\u062b\u0648\u0642\u0629\u060c \u064a\u0646\u062a\u0634\u0631 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u062e\u0628\u064a\u062b \u0628\u0633\u0631\u0639\u0629.<\/p>\n<p>\u0644\u0644\u062a\u0639\u0645\u0642 \u0641\u064a \u0646\u0627\u0642\u0644\u0627\u062a \u0627\u0644\u0647\u062c\u0648\u0645 \u0647\u0630\u0647 \u0648\u0627\u0644\u062f\u0641\u0627\u0639\u0627\u062a \u0627\u0644\u0639\u0645\u0644\u064a\u0629\u060c \u0627\u0646\u0638\u0631 \u062f\u0644\u064a\u0644\u0646\u0627 \u0627\u0644\u0645\u0641\u0635\u0644: <a href=\"https:\/\/secure-pipelines.com\/ar\/ci-cd-security\/dependency-confusion-artifact-poisoning-attacks-defenses\/\">Dependency Confusion \u0648\u062a\u0633\u0645\u064a\u0645 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629: \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0648\u0627\u0644\u062f\u0641\u0627\u0639\u0627\u062a<\/a>.<\/p>\n<h3>\u0627\u0633\u062a\u0631\u0627\u062a\u064a\u062c\u064a\u0627\u062a \u0627\u0644\u062f\u0641\u0627\u0639<\/h3>\n<p><strong>\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0642\u0641\u0644 \u0648\u062a\u062b\u0628\u064a\u062a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a:<\/strong> \u0642\u0645 \u062f\u0627\u0626\u0645\u064b\u0627 \u0628\u0625\u0631\u0633\u0627\u0644 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0642\u0641\u0644 (<code>package-lock.json<\/code>\u060c <code>Pipfile.lock<\/code>\u060c <code>go.sum<\/code>\u060c <code>Cargo.lock<\/code>) \u0625\u0644\u0649 \u0646\u0638\u0627\u0645 \u0627\u0644\u062a\u062d\u0643\u0645 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a. \u062a\u0633\u062c\u0651\u0644 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0642\u0641\u0644 \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u062f\u0642\u064a\u0642\u0629 \u0648\u062a\u062c\u0632\u0626\u0627\u062a \u0627\u0644\u0633\u0644\u0627\u0645\u0629 \u0644\u0643\u0644 \u062a\u0628\u0639\u064a\u0629\u060c \u0645\u0645\u0627 \u064a\u0636\u0645\u0646 \u0639\u0645\u0644\u064a\u0627\u062a \u062a\u062b\u0628\u064a\u062a \u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u0643\u0631\u0627\u0631. \u062b\u0628\u0651\u062a \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0639\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u062f\u0642\u064a\u0642\u0629 \u0628\u062f\u0644\u0627\u064b \u0645\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0646\u0637\u0627\u0642\u0627\u062a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0644\u0645\u0646\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u063a\u064a\u0631 \u0627\u0644\u0645\u062a\u0648\u0642\u0639\u0629.<\/p>\n<p><strong>\u062a\u0643\u0648\u064a\u0646 \u0627\u0644\u0633\u062c\u0644 \u0627\u0644\u062e\u0627\u0635:<\/strong> \u0642\u0645 \u0628\u062a\u0643\u0648\u064a\u0646 \u0645\u062f\u064a\u0631\u0627\u062a \u0627\u0644\u062d\u0632\u0645 \u0644\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062d\u0632\u0645 \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629 \u062d\u0635\u0631\u064a\u064b\u0627 \u0645\u0646 \u0633\u062c\u0644\u0643 \u0627\u0644\u062e\u0627\u0635. \u0627\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u062d\u0632\u0645 \u0630\u0627\u062a \u0627\u0644\u0646\u0637\u0627\u0642 (\u0645\u062b\u0644 <code>@yourcompany\/package-name<\/code>) \u0648\u0642\u0645 \u0628\u062a\u0643\u0648\u064a\u0646 \u062a\u0639\u064a\u064a\u0646\u0627\u062a \u0627\u0644\u0633\u062c\u0644 \u0644\u0645\u0646\u0639 \u0647\u062c\u0645\u0627\u062a dependency confusion. \u064a\u0645\u0643\u0646 \u0644\u0623\u062f\u0648\u0627\u062a \u0645\u062b\u0644 Artifactory \u0648Nexus \u0623\u0646 \u062a\u0639\u0645\u0644 \u0643\u0648\u0643\u064a\u0644 \u0644\u0644\u0633\u062c\u0644\u0627\u062a \u0627\u0644\u0639\u0627\u0645\u0629 \u0645\u0639 \u062a\u0648\u0641\u064a\u0631 \u0637\u0628\u0642\u0629 \u0625\u0636\u0627\u0641\u064a\u0629 \u0645\u0646 \u0627\u0644\u0641\u062d\u0635 \u0648\u0627\u0644\u062a\u062d\u0643\u0645.<\/p>\n<p><strong>\u0641\u062d\u0635 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629:<\/strong> \u0642\u0645 \u0628\u062f\u0645\u062c \u0623\u062f\u0648\u0627\u062a \u062a\u062d\u0644\u064a\u0644 \u062a\u0631\u0643\u064a\u0628 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a (SCA) \u0641\u064a pipeline \u0627\u0644\u0640 CI\/CD \u0627\u0644\u062e\u0627\u0635 \u0628\u0643. \u062a\u0641\u062d\u0635 \u0623\u062f\u0648\u0627\u062a \u0645\u062b\u0644 <code>Trivy<\/code> \u0648<code>Grype<\/code> \u0648<code>Snyk<\/code> \u0648<code>Dependabot<\/code> \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0645\u0642\u0627\u0628\u0644 \u0642\u0648\u0627\u0639\u062f \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062b\u063a\u0631\u0627\u062a (NVD\u060c OSV\u060c GitHub Advisory Database) \u0648\u064a\u0645\u0643\u0646\u0647\u0627 \u062d\u0638\u0631 \u0639\u0645\u0644\u064a\u0627\u062a build \u0627\u0644\u062a\u064a \u062a\u064f\u062f\u062e\u0644 \u062b\u063a\u0631\u0627\u062a \u0645\u0639\u0631\u0648\u0641\u0629. \u0644\u0645\u0642\u0627\u0631\u0646\u0629 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0641\u062d\u0635 \u0627\u0644\u0645\u062a\u0627\u062d\u0629\u060c \u0627\u0646\u0638\u0631 <a href=\"\/ar\/ci-cd-security\/\">\u0623\u062f\u0644\u0629 \u0645\u0642\u0627\u0631\u0646\u0629 \u0623\u062f\u0648\u0627\u062a \u0623\u0645\u0627\u0646 CI\/CD<\/a>.<\/p>\n<p><strong>\u0645\u0631\u0627\u062c\u0639\u0629 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0648\u0642\u0648\u0627\u0626\u0645 \u0627\u0644\u0633\u0645\u0627\u062d:<\/strong> \u0623\u0646\u0634\u0626 \u0639\u0645\u0644\u064a\u0629 \u0645\u0631\u0627\u062c\u0639\u0629 \u0644\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0627\u0644\u062c\u062f\u064a\u062f\u0629. \u0642\u064a\u0651\u0645 \u0627\u0644\u062d\u0632\u0645 \u0628\u0646\u0627\u0621\u064b \u0639\u0644\u0649 \u0646\u0634\u0627\u0637 \u0627\u0644\u0635\u064a\u0627\u0646\u0629 \u0648\u0639\u062f\u062f \u0627\u0644\u0645\u0633\u0627\u0647\u0645\u064a\u0646 \u0648\u0625\u062d\u0635\u0627\u0626\u064a\u0627\u062a \u0627\u0644\u062a\u0646\u0632\u064a\u0644 \u0648\u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629. \u062a\u062d\u062a\u0641\u0638 \u0628\u0639\u0636 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0628\u0642\u0627\u0626\u0645\u0629 \u0633\u0645\u0627\u062d \u0644\u0644\u062d\u0632\u0645 \u0627\u0644\u0645\u0639\u062a\u0645\u062f\u0629 \u0648\u062a\u062a\u0637\u0644\u0628 \u0645\u0631\u0627\u062c\u0639\u0629 \u0623\u0645\u0646\u064a\u0629 \u0642\u0628\u0644 \u0625\u0636\u0627\u0641\u0629 \u062d\u0632\u0645 \u062c\u062f\u064a\u062f\u0629.<\/p>\n<h2>\u0633\u0644\u0627\u0645\u0629 \u0627\u0644\u0640 Build: \u0639\u0645\u0644\u064a\u0627\u062a Build \u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u0643\u0631\u0627\u0631 \u0648\u0645\u062d\u0643\u0645\u0629 \u0627\u0644\u0625\u063a\u0644\u0627\u0642<\/h2>\n<p>\u0645\u0631\u062d\u0644\u0629 build \u0647\u064a \u062d\u064a\u062b \u064a\u062a\u0645 \u062a\u062d\u0648\u064a\u0644 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631\u064a \u0648\u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0625\u0644\u0649 \u0642\u0637\u0639 \u0628\u0631\u0645\u062c\u064a\u0629 \u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u0646\u0634\u0631. \u0625\u0630\u0627 \u062a\u0645\u0643\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0645\u0646 \u0627\u062e\u062a\u0631\u0627\u0642 \u0639\u0645\u0644\u064a\u0629 build\u060c \u064a\u0645\u0643\u0646\u0647 \u062d\u0642\u0646 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0641\u064a \u0627\u0644\u0645\u062e\u0631\u062c\u0627\u062a \u062f\u0648\u0646 \u062a\u0639\u062f\u064a\u0644 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631\u064a \u2014 \u062a\u0645\u0627\u0645\u064b\u0627 \u0643\u0645\u0627 \u062d\u062f\u062b \u0641\u064a \u0647\u062c\u0648\u0645 SolarWinds. \u062a\u0636\u0645\u0646 \u0633\u0644\u0627\u0645\u0629 build \u0623\u0646 \u0639\u0645\u0644\u064a\u0629 build \u0646\u0641\u0633\u0647\u0627 \u062c\u062f\u064a\u0631\u0629 \u0628\u0627\u0644\u062b\u0642\u0629.<\/p>\n<h3>\u0639\u0645\u0644\u064a\u0627\u062a Build \u0627\u0644\u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u0643\u0631\u0627\u0631<\/h3>\n<p><strong>\u0627\u0644\u0640 build \u0627\u0644\u0642\u0627\u0628\u0644 \u0644\u0644\u062a\u0643\u0631\u0627\u0631<\/strong> \u0647\u0648 \u0627\u0644\u0630\u064a \u064a\u0646\u062a\u062c \u0645\u062e\u0631\u062c\u0627\u062a \u0645\u062a\u0637\u0627\u0628\u0642\u0629 \u0639\u0646\u062f \u0625\u0639\u0637\u0627\u0626\u0647 \u0646\u0641\u0633 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631\u064a \u0648\u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0648\u0628\u064a\u0626\u0629 build \u0648\u062a\u0639\u0644\u064a\u0645\u0627\u062a build. \u062a\u064f\u0639\u062f\u0651 \u0627\u0644\u0642\u0627\u0628\u0644\u064a\u0629 \u0644\u0644\u062a\u0643\u0631\u0627\u0631 \u062e\u0627\u0635\u064a\u0629 \u0623\u0645\u0646\u064a\u0629 \u0642\u0648\u064a\u0629 \u0644\u0623\u0646\u0647\u0627 \u062a\u062a\u064a\u062d \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0633\u062a\u0642\u0644: \u064a\u0645\u0643\u0646 \u0644\u0623\u064a \u0634\u062e\u0635 \u0625\u0639\u0627\u062f\u0629 build \u0645\u0646 \u0646\u0641\u0633 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a \u0648\u0627\u0644\u062a\u0623\u0643\u062f \u0645\u0646 \u062a\u0637\u0627\u0628\u0642 \u0627\u0644\u0645\u062e\u0631\u062c\u0627\u062a. \u0625\u0630\u0627 \u0627\u062e\u062a\u0644\u0641\u062a \u0627\u0644\u0645\u062e\u0631\u062c\u0627\u062a\u060c \u0641\u0647\u0630\u0627 \u064a\u0634\u064a\u0631 \u0625\u0644\u0649 \u0627\u0644\u062a\u0644\u0627\u0639\u0628.<\/p>\n<p>\u064a\u062a\u0637\u0644\u0628 \u062a\u062d\u0642\u064a\u0642 \u0639\u0645\u0644\u064a\u0627\u062a build \u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u0643\u0631\u0627\u0631 \u0627\u0644\u0642\u0636\u0627\u0621 \u0639\u0644\u0649 \u0645\u0635\u0627\u062f\u0631 \u0639\u062f\u0645 \u0627\u0644\u062d\u062a\u0645\u064a\u0629:<\/p>\n<ul>\n<li><strong>\u0627\u0644\u0637\u0648\u0627\u0628\u0639 \u0627\u0644\u0632\u0645\u0646\u064a\u0629:<\/strong> \u062a\u062a\u0633\u0628\u0628 \u0627\u0644\u0637\u0648\u0627\u0628\u0639 \u0627\u0644\u0632\u0645\u0646\u064a\u0629 \u0627\u0644\u0645\u0636\u0645\u0646\u0629 \u0641\u064a \u0627\u062e\u062a\u0644\u0627\u0641 \u0645\u062e\u0631\u062c\u0627\u062a build \u0628\u064a\u0646 \u0627\u0644\u062a\u0634\u063a\u064a\u0644\u0627\u062a. \u0627\u0633\u062a\u062e\u062f\u0645 <code>SOURCE_DATE_EPOCH<\/code> \u0644\u062a\u0637\u0628\u064a\u0639 \u0627\u0644\u0637\u0648\u0627\u0628\u0639 \u0627\u0644\u0632\u0645\u0646\u064a\u0629.<\/li>\n<li><strong>\u062a\u0631\u062a\u064a\u0628 \u0627\u0644\u0645\u0644\u0641\u0627\u062a:<\/strong> \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u062e\u062a\u0644\u0641 \u062a\u0631\u062a\u064a\u0628 \u062a\u0639\u062f\u0627\u062f \u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0644\u0641\u0627\u062a. \u062a\u0623\u0643\u062f \u0645\u0646 \u062a\u0631\u062a\u064a\u0628 \u062d\u062a\u0645\u064a \u0644\u0644\u0645\u0644\u0641\u0627\u062a \u0641\u064a \u0627\u0644\u0623\u0631\u0634\u064a\u0641\u0627\u062a \u0648\u0637\u0628\u0642\u0627\u062a \u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0644\u0641\u0627\u062a.<\/li>\n<li><strong>\u0627\u0644\u0639\u0634\u0648\u0627\u0626\u064a\u0629:<\/strong> \u062a\u0636\u0645\u0651\u0646 \u0628\u0639\u0636 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0642\u064a\u0645\u064b\u0627 \u0639\u0634\u0648\u0627\u0626\u064a\u0629 (UUIDs\u060c nonces) \u0641\u064a \u0627\u0644\u0645\u062e\u0631\u062c\u0627\u062a. \u0627\u0633\u062a\u062e\u062f\u0645 \u0628\u0630\u0648\u0631\u064b\u0627 \u062d\u062a\u0645\u064a\u0629 \u0623\u0648 \u0623\u0632\u0644 \u0627\u0644\u0639\u0646\u0627\u0635\u0631 \u0627\u0644\u0639\u0634\u0648\u0627\u0626\u064a\u0629.<\/li>\n<li><strong>\u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0627\u0644\u0639\u0627\u0626\u0645\u0629:<\/strong> \u062a\u0623\u0643\u062f \u0645\u0646 \u062a\u062b\u0628\u064a\u062a \u062c\u0645\u064a\u0639 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0639\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u062f\u0642\u064a\u0642\u0629 \u0645\u0639 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u062a\u062c\u0632\u0626\u0627\u062a \u0627\u0644\u0633\u0644\u0627\u0645\u0629 \u0623\u062b\u0646\u0627\u0621 \u0627\u0644\u062a\u062b\u0628\u064a\u062a.<\/li>\n<\/ul>\n<h3>\u0639\u0645\u0644\u064a\u0627\u062a Build \u0645\u062d\u0643\u0645\u0629 \u0627\u0644\u0625\u063a\u0644\u0627\u0642<\/h3>\n<p><strong>\u0627\u0644\u0640 build \u0645\u062d\u0643\u0645 \u0627\u0644\u0625\u063a\u0644\u0627\u0642<\/strong> \u0645\u0639\u0632\u0648\u0644 \u0639\u0646 \u0628\u064a\u0626\u0629 \u0627\u0644\u0645\u0636\u064a\u0641 \u0648\u0627\u0644\u0634\u0628\u0643\u0629. \u0644\u0627 \u064a\u0645\u0643\u0646\u0647 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0627 \u0625\u0644\u0649 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u064f\u0639\u0644\u064e\u0646 \u0639\u0646\u0647\u0627 \u0635\u0631\u0627\u062d\u0629 \u2014 \u0644\u0627 \u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0634\u0628\u0643\u064a\u0629\u060c \u0648\u0644\u0627 \u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0645\u0633\u0627\u0631\u0627\u062a \u0646\u0638\u0627\u0645 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0645\u0636\u064a\u0641 \u062e\u0627\u0631\u062c \u0635\u0646\u062f\u0648\u0642 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u062e\u0627\u0635 \u0628\u0627\u0644\u0640 build\u060c \u0648\u0644\u0627 \u0627\u0639\u062a\u0645\u0627\u062f \u0639\u0644\u0649 \u0623\u062f\u0648\u0627\u062a \u0645\u064f\u062b\u0628\u062a\u0629 \u0645\u0633\u0628\u0642\u064b\u0627. \u062a\u0636\u0645\u0646 \u0639\u0645\u0644\u064a\u0627\u062a build \u0645\u062d\u0643\u0645\u0629 \u0627\u0644\u0625\u063a\u0644\u0627\u0642 \u0623\u0646 \u0645\u062e\u0631\u062c\u0627\u062a build \u062a\u0639\u062a\u0645\u062f \u0641\u0642\u0637 \u0639\u0644\u0649 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u064f\u0639\u0644\u064e\u0646\u0629\u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644 \u0645\u0646 \u0627\u0644\u0645\u0633\u062a\u062d\u064a\u0644 \u0639\u0644\u0649 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u062d\u0642\u0646 \u062a\u0628\u0639\u064a\u0627\u062a \u0623\u0648 \u0623\u062f\u0648\u0627\u062a \u0625\u0636\u0627\u0641\u064a\u0629 \u0623\u062b\u0646\u0627\u0621 \u0639\u0645\u0644\u064a\u0629 build.<\/p>\n<p>\u0635\u064f\u0645\u0645\u062a \u0623\u0646\u0638\u0645\u0629 build \u0645\u062b\u0644 <strong>Bazel<\/strong> \u0648<strong>Buck2<\/strong> \u0648<strong>Pants<\/strong> \u0644\u0639\u0645\u0644\u064a\u0627\u062a build \u0645\u062d\u0643\u0645\u0629 \u0627\u0644\u0625\u063a\u0644\u0627\u0642 \u0645\u0646 \u0627\u0644\u0623\u0633\u0627\u0633. \u0644\u0639\u0645\u0644\u064a\u0627\u062a build \u0627\u0644\u062d\u0627\u0648\u064a\u0627\u062a\u060c \u062a\u0648\u0641\u0631 \u0623\u062f\u0648\u0627\u062a \u0645\u062b\u0644 <strong>BuildKit<\/strong> \u0645\u0639 \u0639\u0632\u0644 \u0627\u0644\u0634\u0628\u0643\u0629 \u0648<strong>ko<\/strong> \u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a Go \u0625\u0645\u0643\u0627\u0646\u064a\u0627\u062a build \u0645\u062d\u0643\u0645\u0629 \u0627\u0644\u0625\u063a\u0644\u0627\u0642.<\/p>\n<p>\u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0634\u0631\u062d \u0643\u0627\u0645\u0644 \u0644\u062a\u0637\u0628\u064a\u0642 \u0639\u0645\u0644\u064a\u0627\u062a build \u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u0643\u0631\u0627\u0631 \u0648\u0645\u062d\u0643\u0645\u0629 \u0627\u0644\u0625\u063a\u0644\u0627\u0642 \u0641\u064a pipeline \u0627\u0644\u0640 CI\/CD \u0627\u0644\u062e\u0627\u0635 \u0628\u0643\u060c \u0627\u0646\u0638\u0631: <a href=\"https:\/\/secure-pipelines.com\/ar\/ci-cd-security\/build-integrity-reproducible-builds-ci-cd\/\">\u0633\u0644\u0627\u0645\u0629 \u0627\u0644\u0640 Build: \u0639\u0645\u0644\u064a\u0627\u062a Build \u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u0643\u0631\u0627\u0631 \u0641\u064a CI\/CD<\/a>.<\/p>\n<h3>\u0623\u0645\u0627\u0646 \u0645\u0646\u0635\u0629 \u0627\u0644\u0640 Build<\/h3>\n<p>\u0628\u0639\u064a\u062f\u064b\u0627 \u0639\u0646 \u0639\u0645\u0644\u064a\u0629 build \u0646\u0641\u0633\u0647\u0627\u060c \u062a\u062a\u0637\u0644\u0628 \u0645\u0646\u0635\u0629 build \u0627\u0644\u062a\u0642\u0648\u064a\u0629:<\/p>\n<ul>\n<li><strong>\u0628\u064a\u0626\u0627\u062a build \u0645\u0624\u0642\u062a\u0629:<\/strong> \u0627\u0633\u062a\u062e\u062f\u0645 runners \u062c\u062f\u064a\u062f\u0629 \u0648\u0645\u0624\u0642\u062a\u0629 \u0644\u0643\u0644 \u0639\u0645\u0644\u064a\u0629 build \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0639\u0644\u0649 \u0627\u0644\u0627\u0633\u062a\u0645\u0631\u0627\u0631\u064a\u0629. \u0644\u0627 \u062a\u064f\u0639\u062f \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u064a\u0626\u0627\u062a build \u0628\u064a\u0646 \u0627\u0644\u0645\u0647\u0627\u0645.<\/li>\n<li><strong>\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0627\u0644\u062d\u062f \u0627\u0644\u0623\u062f\u0646\u0649 \u0645\u0646 \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a:<\/strong> \u064a\u062c\u0628 \u0623\u0646 \u062a\u0645\u062a\u0644\u0643 \u0645\u0647\u0627\u0645 build \u0627\u0644\u062d\u062f \u0627\u0644\u0623\u062f\u0646\u0649 \u0645\u0646 \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0627\u0644\u0645\u0637\u0644\u0648\u0628\u0629 \u0641\u0642\u0637. \u0627\u0633\u062a\u062e\u062f\u0645 \u0631\u0645\u0648\u0632\u064b\u0627 \u0645\u0624\u0642\u062a\u0629 \u0648\u0645\u062d\u062f\u062f\u0629 \u0627\u0644\u0646\u0637\u0627\u0642 \u0628\u062f\u0644\u0627\u064b \u0645\u0646 \u0627\u0644\u0623\u0633\u0631\u0627\u0631 \u0637\u0648\u064a\u0644\u0629 \u0627\u0644\u0623\u0645\u062f.<\/li>\n<li><strong>\u062d\u0645\u0627\u064a\u0629 Pipeline-as-code:<\/strong> \u064a\u062c\u0628 \u062d\u0645\u0627\u064a\u0629 \u0645\u0644\u0641\u0627\u062a \u062a\u0643\u0648\u064a\u0646 CI\/CD (<code>.github\/workflows\/<\/code>\u060c <code>.gitlab-ci.yml<\/code>\u060c <code>Jenkinsfile<\/code>) \u0628\u0642\u0648\u0627\u0639\u062f \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0641\u0631\u0648\u0639 \u0648\u062a\u062a\u0637\u0644\u0628 \u0645\u0631\u0627\u062c\u0639\u0629 \u0627\u0644\u0643\u0648\u062f \u0644\u0644\u062a\u063a\u064a\u064a\u0631\u0627\u062a.<\/li>\n<li><strong>\u062a\u062f\u0642\u064a\u0642 \u0633\u062c\u0644\u0627\u062a Build:<\/strong> \u0627\u062d\u062a\u0641\u0638 \u0628\u0633\u062c\u0644\u0627\u062a build \u063a\u064a\u0631 \u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u063a\u064a\u064a\u0631 \u062a\u0644\u062a\u0642\u0637 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a \u0648\u0627\u0644\u0645\u062e\u0631\u062c\u0627\u062a \u0648\u062a\u0641\u0627\u0635\u064a\u0644 \u0627\u0644\u0628\u064a\u0626\u0629 \u0644\u0644\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062c\u0646\u0627\u0626\u064a.<\/li>\n<\/ul>\n<h2>\u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646\u0647\u0627 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 Sigstore \u0648Cosign<\/h2>\n<p>\u0628\u0645\u062c\u0631\u062f \u0623\u0646 \u064a\u0646\u062a\u062c build \u0642\u0637\u0639\u0629 \u0628\u0631\u0645\u062c\u064a\u0629 \u2014 \u0635\u0648\u0631\u0629 \u062d\u0627\u0648\u064a\u0629 \u0623\u0648 \u0645\u0644\u0641 \u062b\u0646\u0627\u0626\u064a \u0623\u0648 \u062d\u0632\u0645\u0629 \u2014 \u0643\u064a\u0641 \u062a\u0636\u0645\u0646 \u0623\u0646\u0647\u0627 \u0644\u0645 \u062a\u064f\u0639\u0628\u062b \u0628\u0647\u0627 \u0642\u0628\u0644 deploy\u061f \u064a\u0648\u0641\u0631 <strong>\u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629<\/strong> \u0625\u062b\u0628\u0627\u062a\u064b\u0627 \u062a\u0634\u0641\u064a\u0631\u064a\u064b\u0627 \u0628\u0623\u0646 \u0627\u0644\u0642\u0637\u0639\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0623\u064f\u0646\u062a\u062c\u062a \u0628\u0648\u0627\u0633\u0637\u0629 \u0639\u0645\u0644\u064a\u0629 build \u0645\u0648\u062b\u0648\u0642\u0629 \u0648\u0644\u0645 \u062a\u064f\u0639\u062f\u064e\u0651\u0644 \u0645\u0646\u0630 \u0630\u0644\u0643 \u0627\u0644\u062d\u064a\u0646.<\/p>\n<h3>\u062a\u062d\u062f\u064a \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u062a\u0642\u0644\u064a\u062f\u064a<\/h3>\n<p>\u064a\u0639\u062a\u0645\u062f \u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u062a\u0642\u0644\u064a\u062f\u064a \u0639\u0644\u0649 \u0645\u0641\u0627\u062a\u064a\u062d \u062a\u0634\u0641\u064a\u0631 \u0637\u0648\u064a\u0644\u0629 \u0627\u0644\u0623\u0645\u062f. \u064a\u062e\u0644\u0642 \u0647\u0630\u0627 \u062a\u062d\u062f\u064a\u0627\u062a \u062a\u0634\u063a\u064a\u0644\u064a\u0629 \u0643\u0628\u064a\u0631\u0629: \u0625\u0646\u0634\u0627\u0621 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d\u060c \u0648\u0627\u0644\u062a\u062e\u0632\u064a\u0646 \u0627\u0644\u0622\u0645\u0646\u060c \u0648\u0627\u0644\u062a\u062f\u0648\u064a\u0631\u060c \u0648\u0627\u0644\u0625\u0644\u063a\u0627\u0621\u060c \u0648\u0627\u0644\u062a\u0648\u0632\u064a\u0639. \u0625\u0630\u0627 \u062a\u0645 \u0627\u062e\u062a\u0631\u0627\u0642 \u0645\u0641\u062a\u0627\u062d \u062a\u0648\u0642\u064a\u0639\u060c \u0641\u0643\u0644 \u0642\u0637\u0639\u0629 \u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u064f\u0642\u0650\u0651\u0639\u062a \u0628\u0647\u0630\u0627 \u0627\u0644\u0645\u0641\u062a\u0627\u062d \u062a\u0635\u0628\u062d \u0645\u0634\u0628\u0648\u0647\u0629. \u0643\u0627\u0646\u062a \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u062a\u0627\u0631\u064a\u062e\u064a\u064b\u0627 \u0645\u0631\u0647\u0642\u0629 \u0644\u062f\u0631\u062c\u0629 \u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0641\u0631\u0642 \u062a\u062a\u062e\u0637\u0649 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u062a\u0645\u0627\u0645\u064b\u0627.<\/p>\n<h3>Sigstore: \u062a\u0648\u0642\u064a\u0639 \u0628\u062f\u0648\u0646 \u0645\u0641\u0627\u062a\u064a\u062d \u0644\u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a<\/h3>\n<p><strong>Sigstore<\/strong> \u0647\u0648 \u0645\u0634\u0631\u0648\u0639 \u0645\u0641\u062a\u0648\u062d \u0627\u0644\u0645\u0635\u062f\u0631 \u064a\u064f\u0628\u0633\u0651\u0637 \u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u062c\u0630\u0631\u064a\u064b\u0627 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0625\u0644\u063a\u0627\u0621 \u0627\u0644\u062d\u0627\u062c\u0629 \u0625\u0644\u0649 \u0645\u0641\u0627\u062a\u064a\u062d \u0637\u0648\u064a\u0644\u0629 \u0627\u0644\u0623\u0645\u062f. \u064a\u062a\u0643\u0648\u0646 Sigstore \u0645\u0646 \u0639\u062f\u0629 \u0645\u0643\u0648\u0646\u0627\u062a:<\/p>\n<ul>\n<li><strong>Cosign:<\/strong> \u0623\u062f\u0627\u0629 \u0644\u062a\u0648\u0642\u064a\u0639 \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u0648\u0631 \u0627\u0644\u062d\u0627\u0648\u064a\u0627\u062a \u0648\u0642\u0637\u0639 OCI \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0627\u0644\u0623\u062e\u0631\u0649. \u064a\u062f\u0639\u0645 Cosign \u0643\u0644\u0627\u064b \u0645\u0646 \u0633\u064a\u0631 \u0639\u0645\u0644 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u0642\u0627\u0626\u0645 \u0639\u0644\u0649 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0628\u062f\u0648\u0646 \u0645\u0641\u0627\u062a\u064a\u062d.<\/li>\n<li><strong>Fulcio:<\/strong> \u0633\u0644\u0637\u0629 \u0634\u0647\u0627\u062f\u0627\u062a \u062a\u0635\u062f\u0631 \u0634\u0647\u0627\u062f\u0627\u062a \u062a\u0648\u0642\u064a\u0639 \u0642\u0635\u064a\u0631\u0629 \u0627\u0644\u0623\u0645\u062f \u0628\u0646\u0627\u0621\u064b \u0639\u0644\u0649 \u0631\u0645\u0648\u0632 \u0647\u0648\u064a\u0629 OpenID Connect (OIDC). \u0628\u062f\u0644\u0627\u064b \u0645\u0646 \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d\u060c \u062a\u0642\u0648\u0645 \u0628\u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0645\u0639 \u0645\u0632\u0648\u062f \u0627\u0644\u0647\u0648\u064a\u0629 \u0627\u0644\u062e\u0627\u0635 \u0628\u0643 (GitHub\u060c Google\u060c \u0625\u0644\u062e) \u0648\u062a\u062a\u0644\u0642\u0649 \u0634\u0647\u0627\u062f\u0629 \u0645\u0624\u0642\u062a\u0629.<\/li>\n<li><strong>Rekor:<\/strong> \u0633\u062c\u0644 \u0634\u0641\u0627\u0641\u064a\u0629 \u0645\u0642\u0627\u0648\u0645 \u0644\u0644\u062a\u0644\u0627\u0639\u0628 \u064a\u0633\u062c\u0644 \u062c\u0645\u064a\u0639 \u0623\u062d\u062f\u0627\u062b \u0627\u0644\u062a\u0648\u0642\u064a\u0639. \u064a\u0648\u0641\u0631 Rekor \u0633\u062c\u0644\u0627\u064b \u062f\u0627\u0626\u0645\u064b\u0627 \u0648\u0642\u0627\u0628\u0644\u0627\u064b \u0644\u0644\u062a\u062f\u0642\u064a\u0642 \u0644\u0643\u0644 \u062a\u0648\u0642\u064a\u0639 \u0642\u0637\u0639\u0629 \u0628\u0631\u0645\u062c\u064a\u0629\u060c \u0645\u0645\u0627 \u064a\u062a\u064a\u062d \u0627\u0644\u062a\u062d\u0642\u0642 \u062d\u062a\u0649 \u0628\u0639\u062f \u0627\u0646\u062a\u0647\u0627\u0621 \u0635\u0644\u0627\u062d\u064a\u0629 \u0627\u0644\u0634\u0647\u0627\u062f\u0629 \u0642\u0635\u064a\u0631\u0629 \u0627\u0644\u0623\u0645\u062f.<\/li>\n<\/ul>\n<h3>\u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0628\u062f\u0648\u0646 \u0645\u0641\u0627\u062a\u064a\u062d \u0641\u064a CI\/CD<\/h3>\n<p>\u0641\u064a pipeline \u0627\u0644\u0640 CI\/CD\u060c \u064a\u0639\u0645\u0644 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0628\u062f\u0648\u0646 \u0645\u0641\u0627\u062a\u064a\u062d \u0645\u0639 Sigstore \u0643\u0627\u0644\u062a\u0627\u0644\u064a:<\/p>\n<ol>\n<li>\u064a\u0643\u062a\u0645\u0644 \u0646\u0638\u0627\u0645 build \u0648\u064a\u0646\u062a\u062c \u0642\u0637\u0639\u0629 \u0628\u0631\u0645\u062c\u064a\u0629 (\u0645\u062b\u0644 \u0635\u0648\u0631\u0629 \u062d\u0627\u0648\u064a\u0629).<\/li>\n<li>\u064a\u0637\u0644\u0628 Cosign \u0634\u0647\u0627\u062f\u0629 \u062a\u0648\u0642\u064a\u0639 \u0645\u0646 Fulcio\u060c \u0645\u0639 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0631\u0645\u0632 OIDC \u0627\u0644\u062e\u0627\u0635 \u0628\u0645\u0646\u0635\u0629 CI\/CD (\u0645\u062b\u0644 \u0631\u0645\u0632 OIDC \u0627\u0644\u062e\u0627\u0635 \u0628\u0640 GitHub Actions).<\/li>\n<li>\u064a\u062a\u062d\u0642\u0642 Fulcio \u0645\u0646 \u0627\u0644\u0647\u0648\u064a\u0629 \u0648\u064a\u0635\u062f\u0631 \u0634\u0647\u0627\u062f\u0629 \u0642\u0635\u064a\u0631\u0629 \u0627\u0644\u0623\u0645\u062f \u062a\u0636\u0645\u0651\u0646 \u0627\u062f\u0639\u0627\u0621\u0627\u062a \u0627\u0644\u0647\u0648\u064a\u0629 (\u0627\u0644\u0645\u0633\u062a\u0648\u062f\u0639\u060c \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644\u060c commit SHA).<\/li>\n<li>\u064a\u0648\u0642\u0651\u0639 Cosign \u0627\u0644\u0642\u0637\u0639\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0628\u0627\u0644\u0645\u0641\u062a\u0627\u062d \u0627\u0644\u0645\u0624\u0642\u062a \u0648\u064a\u0633\u062c\u0644 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0641\u064a Rekor.<\/li>\n<li>\u064a\u064f\u062a\u062e\u0644\u064e\u0651\u0635 \u0645\u0646 \u0627\u0644\u0645\u0641\u062a\u0627\u062d \u0627\u0644\u0645\u0624\u0642\u062a \u2014 \u0644\u0627 \u0623\u0633\u0631\u0627\u0631 \u0637\u0648\u064a\u0644\u0629 \u0627\u0644\u0623\u0645\u062f \u0644\u0625\u062f\u0627\u0631\u062a\u0647\u0627.<\/li>\n<\/ol>\n<p>\u0641\u064a \u0648\u0642\u062a deploy\u060c \u062a\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0641\u062d\u0635 \u0633\u062c\u0644 \u0634\u0641\u0627\u0641\u064a\u0629 Rekor \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0623\u0646 \u0647\u0648\u064a\u0629 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u062a\u062a\u0637\u0627\u0628\u0642 \u0645\u0639 \u0633\u064a\u0631 \u0639\u0645\u0644 CI\/CD \u0627\u0644\u0645\u062a\u0648\u0642\u0639.<\/p>\n<p>\u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u062f\u0644\u064a\u0644 \u0639\u0645\u0644\u064a \u062d\u0648\u0644 \u062a\u0637\u0628\u064a\u0642 Sigstore \u0648Cosign \u0641\u064a pipeline \u0627\u0644\u062e\u0627\u0635 \u0628\u0643\u060c \u0627\u0646\u0638\u0631: <a href=\"https:\/\/secure-pipelines.com\/ar\/ci-cd-security\/signing-verifying-container-images-sigstore-cosign\/\">\u062a\u0648\u0642\u064a\u0639 \u0635\u0648\u0631 \u0627\u0644\u062d\u0627\u0648\u064a\u0627\u062a \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646\u0647\u0627 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 Sigstore \u0648Cosign<\/a>.<\/p>\n<h2>\u0627\u0644\u0645\u0635\u062f\u0631 \u0648\u0627\u0644\u062a\u0635\u062f\u064a\u0642\u0627\u062a: SLSA \u0648in-toto<\/h2>\n<p>\u064a\u062e\u0628\u0631\u0643 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 <em>\u0628\u0645\u0646<\/em> \u0623\u0646\u062a\u062c \u0627\u0644\u0642\u0637\u0639\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629\u060c \u0644\u0643\u0646\u0647 \u0644\u0627 \u064a\u062e\u0628\u0631\u0643 <em>\u0628\u0643\u064a\u0641\u064a\u0629<\/em> \u0625\u0646\u062a\u0627\u062c\u0647\u0627. \u064a\u062c\u064a\u0628 <strong>\u0627\u0644\u0645\u0635\u062f\u0631 (Provenance)<\/strong> \u0639\u0644\u0649 \u0627\u0644\u0623\u0633\u0626\u0644\u0629 \u0627\u0644\u062d\u0631\u062c\u0629: \u0645\u0627 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631\u064a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u061f \u0645\u0627 \u0639\u0645\u0644\u064a\u0629 build \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0634\u063a\u064a\u0644\u0647\u0627\u061f \u0645\u0627 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0627\u0644\u0645\u0636\u0645\u0646\u0629\u061f \u0645\u0627 \u0627\u0644\u0640 builder \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u061f \u064a\u0648\u0641\u0631 \u0627\u0644\u0645\u0635\u062f\u0631 \u0633\u062c\u0644\u0627\u064b \u0642\u0627\u0628\u0644\u0627\u064b \u0644\u0644\u062a\u062d\u0642\u0642 \u0644\u0623\u0635\u0644 \u0627\u0644\u0642\u0637\u0639\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u0639\u0645\u0644\u064a\u0629 build \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u0647\u0627.<\/p>\n<h3>\u0645\u0635\u062f\u0631 SLSA<\/h3>\n<p><strong>SLSA<\/strong> (Supply-chain Levels for Software Artifacts\u060c \u062a\u064f\u0646\u0637\u0642 &#8220;\u0633\u0627\u0644\u0633\u0627&#8221;) \u0647\u0648 \u0625\u0637\u0627\u0631 \u0639\u0645\u0644 \u0637\u0648\u0651\u0631\u062a\u0647 Google \u0648OpenSSF \u064a\u062d\u062f\u062f \u0645\u0633\u062a\u0648\u064a\u0627\u062a \u0645\u062a\u0632\u0627\u064a\u062f\u0629 \u0645\u0646 \u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f. \u0641\u064a \u062c\u0648\u0647\u0631\u0647\u060c \u064a\u062d\u062f\u062f SLSA \u062a\u0646\u0633\u064a\u0642\u064b\u0627 \u0642\u064a\u0627\u0633\u064a\u064b\u0627 \u0644\u0644\u0645\u0635\u062f\u0631 \u064a\u0644\u062a\u0642\u0637:<\/p>\n<ul>\n<li><strong>\u0647\u0648\u064a\u0629 \u0627\u0644\u0640 Builder:<\/strong> \u0623\u064a \u0645\u0646\u0635\u0629 build \u0623\u0646\u062a\u062c\u062a \u0627\u0644\u0642\u0637\u0639\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629.<\/li>\n<li><strong>\u0645\u0631\u062c\u0639 \u0627\u0644\u0645\u0635\u062f\u0631:<\/strong> \u0627\u0644\u0645\u0633\u062a\u0648\u062f\u0639 \u0627\u0644\u062f\u0642\u064a\u0642 \u0648\u0627\u0644\u0641\u0631\u0639 \u0648\u0627\u0644\u0640 commit.<\/li>\n<li><strong>\u0648\u0635\u0641\u0629 \u0627\u0644\u0640 Build:<\/strong> \u062a\u0643\u0648\u064a\u0646 \u0627\u0644\u0640 build (\u0645\u0644\u0641 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644\u060c \u0623\u0645\u0631 build).<\/li>\n<li><strong>\u0627\u0644\u0645\u0648\u0627\u062f:<\/strong> \u062c\u0645\u064a\u0639 \u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0640 build (\u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a\u060c \u0627\u0644\u0635\u0648\u0631 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629).<\/li>\n<li><strong>\u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0648\u0635\u0641\u064a\u0629:<\/strong> \u0627\u0644\u0637\u0648\u0627\u0628\u0639 \u0627\u0644\u0632\u0645\u0646\u064a\u0629 \u0648\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0642\u0627\u0628\u0644\u064a\u0629 \u0644\u0644\u062a\u0643\u0631\u0627\u0631 \u0648\u0625\u0635\u062f\u0627\u0631 \u0627\u0644\u0640 builder.<\/li>\n<\/ul>\n<p>\u064a\u062a\u0645 \u0625\u0646\u0634\u0627\u0621 \u0645\u0635\u062f\u0631 SLSA \u0628\u0648\u0627\u0633\u0637\u0629 \u0645\u0646\u0635\u0629 build (\u0648\u0644\u064a\u0633 \u0633\u0643\u0631\u0628\u062a \u0627\u0644\u0640 build)\u060c \u0648\u0647\u0630\u0627 \u0623\u0645\u0631 \u062d\u0627\u0633\u0645 \u2014 \u064a\u0639\u0646\u064a \u0623\u0646 \u0633\u0643\u0631\u0628\u062a build \u0645\u062e\u062a\u0631\u0642 \u0644\u0627 \u064a\u0645\u0643\u0646\u0647 \u062a\u0632\u0648\u064a\u0631 \u0645\u0635\u062f\u0631\u0647 \u0627\u0644\u062e\u0627\u0635. \u062a\u0645\u062a\u0644\u0643 \u0645\u0646\u0635\u0627\u062a \u0645\u062b\u0644 GitHub Actions \u0648Google Cloud Build \u0645\u0648\u0644\u0651\u062f\u0627\u062a \u0645\u0635\u062f\u0631 SLSA \u0623\u0635\u0644\u064a\u0629.<\/p>\n<h3>\u062a\u0635\u062f\u064a\u0642\u0627\u062a in-toto<\/h3>\n<p><strong>in-toto<\/strong> \u0647\u0648 \u0625\u0637\u0627\u0631 \u0639\u0645\u0644 \u0644\u062a\u0623\u0645\u064a\u0646 \u0633\u0644\u0627\u0645\u0629 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0628\u0623\u0643\u0645\u0644\u0647\u0627. \u0628\u064a\u0646\u0645\u0627 \u064a\u0631\u0643\u0632 SLSA \u0628\u0634\u0643\u0644 \u0623\u0633\u0627\u0633\u064a \u0639\u0644\u0649 \u0645\u0635\u062f\u0631 \u0627\u0644\u0640 build\u060c \u064a\u0648\u0641\u0631 in-toto \u0625\u0637\u0627\u0631 \u062a\u0635\u062f\u064a\u0642 \u0623\u0643\u062b\u0631 \u0639\u0645\u0648\u0645\u064a\u0629 \u064a\u0645\u0643\u0646\u0647 \u0627\u0644\u062a\u0642\u0627\u0637 \u0623\u064a \u062e\u0637\u0648\u0629 \u0641\u064a \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u2014 \u0645\u0631\u0627\u062c\u0639\u0629 \u0627\u0644\u0643\u0648\u062f\u060c \u0648\u0627\u0644\u0627\u062e\u062a\u0628\u0627\u0631\u060c \u0648\u0627\u0644\u0641\u062d\u0635\u060c \u0648\u0627\u0644\u0645\u0648\u0627\u0641\u0642\u0629\u060c \u0648deploy.<\/p>\n<p>\u064a\u062a\u0628\u0639 \u062a\u0635\u062f\u064a\u0642 in-toto \u062a\u0646\u0633\u064a\u0642 <strong>DSSE (Dead Simple Signing Envelope)<\/strong> \u0648\u064a\u062a\u0643\u0648\u0646 \u0645\u0646:<\/p>\n<ul>\n<li><strong>\u0627\u0644\u0645\u0648\u0636\u0648\u0639:<\/strong> \u0627\u0644\u0642\u0637\u0639\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 (\u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629) \u0627\u0644\u062a\u064a \u064a\u0634\u064a\u0631 \u0625\u0644\u064a\u0647\u0627 \u0627\u0644\u062a\u0635\u062f\u064a\u0642 (\u0645\u062d\u062f\u062f\u0629 \u0628\u0627\u0644\u062a\u062c\u0632\u0626\u0629).<\/li>\n<li><strong>\u0646\u0648\u0639 \u0627\u0644\u0645\u0633\u0646\u062f:<\/strong> \u0646\u0648\u0639 \u0627\u0644\u062a\u0635\u062f\u064a\u0642 (\u0645\u0635\u062f\u0631 SLSA\u060c \u0646\u062a\u064a\u062c\u0629 \u0641\u062d\u0635 \u0627\u0644\u062b\u063a\u0631\u0627\u062a\u060c SBOM\u060c \u0625\u0644\u062e).<\/li>\n<li><strong>\u0627\u0644\u0645\u0633\u0646\u062f:<\/strong> \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062a\u0635\u062f\u064a\u0642 \u0627\u0644\u0641\u0639\u0644\u064a\u0629.<\/li>\n<\/ul>\n<p>\u064a\u0645\u0643\u0646 \u0625\u0631\u0641\u0627\u0642 \u062a\u0635\u062f\u064a\u0642\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0628\u0642\u0637\u0639\u0629 \u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u0627\u062d\u062f\u0629\u060c \u0645\u0645\u0627 \u064a\u062e\u0644\u0642 \u0645\u062c\u0645\u0648\u0639\u0629 \u063a\u0646\u064a\u0629 \u0645\u0646 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0648\u0635\u0641\u064a\u0629 \u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0644\u0645\u062d\u0631\u0643\u0627\u062a \u0627\u0644\u0633\u064a\u0627\u0633\u0627\u062a \u062a\u0642\u064a\u064a\u0645\u0647\u0627 \u0641\u064a \u0648\u0642\u062a deploy.<\/p>\n<p>\u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u062f\u0644\u064a\u0644 \u0645\u0641\u0635\u0644 \u062d\u0648\u0644 \u0625\u0646\u0634\u0627\u0621 \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0645\u0635\u062f\u0631 \u0648\u0627\u0644\u062a\u0635\u062f\u064a\u0642\u0627\u062a\u060c \u0627\u0646\u0638\u0631: <a href=\"https:\/\/secure-pipelines.com\/ar\/ci-cd-security\/artifact-provenance-attestations-slsa-in-toto\/\">\u0645\u0635\u062f\u0631 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u0627\u0644\u062a\u0635\u062f\u064a\u0642\u0627\u062a: SLSA \u0648in-toto<\/a>.<\/p>\n<h2>\u0642\u0648\u0627\u0626\u0645 \u0645\u0643\u0648\u0646\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a (SBOM)<\/h2>\n<p><strong>SBOM<\/strong> (\u0642\u0627\u0626\u0645\u0629 \u0645\u0643\u0648\u0646\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a) \u0647\u064a \u062c\u0631\u062f \u0634\u0627\u0645\u0644 \u0644\u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0643\u0648\u0646\u0627\u062a \u0648\u0627\u0644\u0645\u0643\u062a\u0628\u0627\u062a \u0648\u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0641\u064a \u0642\u0637\u0639\u0629 \u0628\u0631\u0645\u062c\u064a\u0629. \u0641\u0643\u0651\u0631 \u0641\u064a\u0647\u0627 \u0643\u0645\u0644\u0635\u0642 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u063a\u0630\u0627\u0626\u064a\u0629 \u0644\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u2014 \u062a\u062e\u0628\u0631 \u0627\u0644\u0645\u0633\u062a\u0647\u0644\u0643\u064a\u0646 \u0628\u0627\u0644\u0636\u0628\u0637 \u0645\u0627 \u0628\u062f\u0627\u062e\u0644\u0647\u0627. \u0623\u0635\u0628\u062d\u062a SBOM \u0645\u062a\u0637\u0644\u0628\u064b\u0627 \u062a\u0646\u0638\u064a\u0645\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0633\u064a\u0627\u0642\u0627\u062a \u0648\u0647\u064a \u0636\u0631\u0648\u0631\u064a\u0629 \u0644\u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0648\u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0644\u0644\u062d\u0648\u0627\u062f\u062b.<\/p>\n<h3>\u0644\u0645\u0627\u0630\u0627 \u062a\u064f\u0639\u062f\u0651 SBOM \u0645\u0647\u0645\u0629<\/h3>\n<p>\u0639\u0646\u062f\u0645\u0627 \u0636\u0631\u0628 Log4Shell \u0641\u064a \u062f\u064a\u0633\u0645\u0628\u0631 2021\u060c \u062a\u0645\u0643\u0646\u062a \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u062a\u064a \u0627\u0633\u062a\u0637\u0627\u0639\u062a \u062a\u062d\u062f\u064a\u062f \u0645\u0627 \u0625\u0630\u0627 \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 Log4j \u0628\u0633\u0631\u0639\u0629 \u2014 \u0648\u0623\u064a\u0646 \u2014 \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0641\u064a \u0633\u0627\u0639\u0627\u062a. \u0627\u0633\u062a\u063a\u0631\u0642\u062a \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u062a\u064a \u0644\u0627 \u062a\u0645\u062a\u0644\u0643 \u0647\u0630\u0647 \u0627\u0644\u0631\u0624\u064a\u0629 \u0623\u0633\u0627\u0628\u064a\u0639 \u0623\u0648 \u0623\u0634\u0647\u0631\u064b\u0627. \u062a\u0648\u0641\u0631 SBOM \u0647\u0630\u0647 \u0627\u0644\u0631\u0624\u064a\u0629 \u0628\u0634\u0643\u0644 \u0627\u0633\u062a\u0628\u0627\u0642\u064a\u060c \u0642\u0628\u0644 \u0648\u0642\u0648\u0639 \u0627\u0644\u062d\u0627\u062f\u062b.<\/p>\n<p>\u062a\u062e\u062f\u0645 SBOM \u0623\u063a\u0631\u0627\u0636\u064b\u0627 \u0645\u062a\u0639\u062f\u062f\u0629:<\/p>\n<ul>\n<li><strong>\u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u062b\u063a\u0631\u0627\u062a:<\/strong> \u0645\u0631\u0627\u0642\u0628\u0629 \u0627\u0644\u0645\u0643\u0648\u0646\u0627\u062a \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631 \u0645\u0642\u0627\u0628\u0644 \u0642\u0648\u0627\u0639\u062f \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062b\u063a\u0631\u0627\u062a. \u0639\u0646\u062f \u0646\u0634\u0631 CVE \u062c\u062f\u064a\u062f\u060c \u062d\u062f\u0651\u062f \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0627\u0644\u0645\u062a\u0623\u062b\u0631\u0629 \u0641\u0648\u0631\u064b\u0627.<\/li>\n<li><strong>\u0627\u0644\u0627\u0645\u062a\u062b\u0627\u0644 \u0644\u0644\u062a\u0631\u0627\u062e\u064a\u0635:<\/strong> \u062a\u062a\u0628\u0639 \u062a\u0631\u0627\u062e\u064a\u0635 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0643\u0648\u0646\u0627\u062a \u0627\u0644\u0645\u0636\u0645\u0646\u0629 \u0644\u0636\u0645\u0627\u0646 \u0627\u0644\u0627\u0645\u062a\u062b\u0627\u0644 \u0644\u0633\u064a\u0627\u0633\u0627\u062a \u0627\u0644\u0645\u0624\u0633\u0633\u0629 \u0648\u0627\u0644\u0645\u062a\u0637\u0644\u0628\u0627\u062a \u0627\u0644\u0642\u0627\u0646\u0648\u0646\u064a\u0629.<\/li>\n<li><strong>\u0627\u0644\u0627\u0645\u062a\u062b\u0627\u0644 \u0627\u0644\u062a\u0646\u0638\u064a\u0645\u064a:<\/strong> \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0623\u0645\u0631 \u0627\u0644\u062a\u0646\u0641\u064a\u0630\u064a 14028 \u0648\u0644\u0648\u0627\u0626\u062d \u0635\u0646\u0627\u0639\u064a\u0629 \u0645\u062e\u062a\u0644\u0641\u0629 \u0627\u0644\u0622\u0646 SBOM \u0644\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u0645\u0628\u0627\u0639\u0629 \u0644\u0644\u062d\u0643\u0648\u0645\u0629 \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u0629.<\/li>\n<li><strong>\u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0644\u0644\u062d\u0648\u0627\u062f\u062b:<\/strong> \u062a\u062d\u062f\u064a\u062f \u0646\u0637\u0627\u0642 \u062a\u0623\u062b\u064a\u0631 \u062b\u063a\u0631\u0629 \u0645\u0643\u062a\u0634\u0641\u0629 \u062d\u062f\u064a\u062b\u064b\u0627 \u0628\u0633\u0631\u0639\u0629 \u0639\u0628\u0631 \u0645\u062d\u0641\u0638\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0628\u0623\u0643\u0645\u0644\u0647\u0627.<\/li>\n<\/ul>\n<h3>\u062a\u0646\u0633\u064a\u0642\u0627\u062a SBOM<\/h3>\n<p>\u064a\u0647\u064a\u0645\u0646 \u062a\u0646\u0633\u064a\u0642\u0627\u0646 \u0631\u0626\u064a\u0633\u064a\u0627\u0646 \u0644\u0640 SBOM \u0639\u0644\u0649 \u0627\u0644\u0635\u0646\u0627\u0639\u0629:<\/p>\n<ul>\n<li><strong>SPDX (Software Package Data Exchange):<\/strong> \u0645\u0639\u064a\u0627\u0631 ISO\/IEC (ISO\/IEC 5962:2021) \u062a\u062d\u062a\u0641\u0638 \u0628\u0647 \u0645\u0624\u0633\u0633\u0629 Linux. \u064a\u062f\u0639\u0645 SPDX \u062a\u0646\u0633\u064a\u0642\u0627\u062a \u062a\u0633\u0644\u0633\u0644 \u0645\u062a\u0639\u062f\u062f\u0629 (JSON\u060c RDF\u060c tag-value\u060c YAML) \u0648\u064a\u064f\u0633\u062a\u062e\u062f\u0645 \u0639\u0644\u0649 \u0646\u0637\u0627\u0642 \u0648\u0627\u0633\u0639 \u0644\u0627\u0645\u062a\u062b\u0627\u0644 \u0627\u0644\u062a\u0631\u0627\u062e\u064a\u0635.<\/li>\n<li><strong>CycloneDX:<\/strong> \u0645\u0634\u0631\u0648\u0639 OWASP \u0645\u0635\u0645\u0645 \u062e\u0635\u064a\u0635\u064b\u0627 \u0644\u062d\u0627\u0644\u0627\u062a \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0623\u0645\u0646\u064a\u0629. \u064a\u062f\u0639\u0645 CycloneDX \u062c\u0631\u062f \u0627\u0644\u0645\u0643\u0648\u0646\u0627\u062a \u0648\u0645\u0631\u0627\u062c\u0639 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0648\u062a\u0639\u0631\u064a\u0641\u0627\u062a \u0627\u0644\u062e\u062f\u0645\u0627\u062a \u0648\u0639\u0644\u0627\u0642\u0627\u062a \u0627\u0644\u062a\u0643\u0648\u064a\u0646. \u0645\u062a\u0648\u0641\u0631 \u0628\u062a\u0646\u0633\u064a\u0642\u0627\u062a JSON \u0648XML.<\/li>\n<\/ul>\n<h3>\u0625\u0646\u0634\u0627\u0621 SBOM<\/h3>\n<p>\u064a\u062c\u0628 \u0625\u0646\u0634\u0627\u0621 SBOM \u0643\u062c\u0632\u0621 \u0645\u0646 pipeline \u0627\u0644\u0640 CI\/CD\u060c \u0641\u064a \u0623\u0642\u0631\u0628 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0645\u0646 \u062e\u0637\u0648\u0629 build. \u062a\u0634\u0645\u0644 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0634\u0627\u0626\u0639\u0629 \u0644\u0625\u0646\u0634\u0627\u0621 SBOM:<\/p>\n<ul>\n<li><strong>Syft:<\/strong> \u0623\u062f\u0627\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0645\u0646 Anchore \u062a\u0646\u0634\u0626 SBOM \u0645\u0646 \u0635\u0648\u0631 \u0627\u0644\u062d\u0627\u0648\u064a\u0627\u062a \u0648\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0648\u0627\u0644\u0623\u0631\u0634\u064a\u0641\u0627\u062a. \u062a\u062f\u0639\u0645 \u062a\u0646\u0633\u064a\u0642\u064a SPDX \u0648CycloneDX.<\/li>\n<li><strong>Trivy:<\/strong> \u0645\u0627\u0633\u062d Aqua Security \u0627\u0644\u0634\u0627\u0645\u0644 \u064a\u0645\u0643\u0646\u0647 \u0625\u0646\u0634\u0627\u0621 SBOM \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u0641\u062d\u0635 \u0627\u0644\u062b\u063a\u0631\u0627\u062a\u060c \u0645\u0645\u0627 \u064a\u0648\u0641\u0631 \u0623\u062f\u0627\u0629 \u0645\u0648\u062d\u062f\u0629 \u0644\u0643\u0644\u062a\u0627 \u0627\u0644\u0648\u0638\u064a\u0641\u062a\u064a\u0646.<\/li>\n<li><strong>cdxgen:<\/strong> \u0645\u0648\u0644\u0651\u062f CycloneDX \u064a\u062f\u0639\u0645 \u0645\u062c\u0645\u0648\u0639\u0629 \u0648\u0627\u0633\u0639\u0629 \u0645\u0646 \u0627\u0644\u0644\u063a\u0627\u062a \u0648\u0645\u062f\u064a\u0631\u0627\u062a \u0627\u0644\u062d\u0632\u0645.<\/li>\n<\/ul>\n<h3>\u062a\u0635\u062f\u064a\u0642 SBOM<\/h3>\n<p>\u0625\u0646\u0634\u0627\u0621 SBOM \u0647\u0648 \u0627\u0644\u062e\u0637\u0648\u0629 \u0627\u0644\u0623\u0648\u0644\u0649 \u0641\u0642\u0637. \u0644\u062c\u0639\u0644 SBOM \u062c\u062f\u064a\u0631\u0629 \u0628\u0627\u0644\u062b\u0642\u0629\u060c \u064a\u062c\u0628 \u062a\u0648\u0642\u064a\u0639\u0647\u0627 \u0648\u0625\u0631\u0641\u0627\u0642\u0647\u0627 \u0628\u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0643\u062a\u0635\u062f\u064a\u0642\u0627\u062a. \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 Cosign\u060c \u064a\u0645\u0643\u0646\u0643 \u062a\u0635\u062f\u064a\u0642 SBOM \u0644\u0635\u0648\u0631\u0629 \u062d\u0627\u0648\u064a\u0629:<\/p>\n<pre><code>cosign attest --predicate sbom.spdx.json --type spdxjson &lt;image&gt;<\/code><\/pre>\n<p>\u064a\u0646\u0634\u0626 \u0647\u0630\u0627 \u062a\u0635\u062f\u064a\u0642\u064b\u0627 \u0645\u0648\u0642\u0651\u0639\u064b\u0627 \u064a\u0631\u0628\u0637 SBOM \u0628\u062a\u062c\u0632\u0626\u0629 \u0642\u0637\u0639\u0629 \u0628\u0631\u0645\u062c\u064a\u0629 \u0645\u062d\u062f\u062f\u0629\u060c \u0645\u0645\u0627 \u064a\u0636\u0645\u0646 \u0639\u062f\u0645 \u0625\u0645\u0643\u0627\u0646\u064a\u0629 \u0641\u0635\u0644 SBOM \u0623\u0648 \u062a\u0632\u0648\u064a\u0631\u0647\u0627 \u0644\u0644\u0642\u0637\u0639\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0627\u0644\u062a\u064a \u062a\u0635\u0641\u0647\u0627. \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0633\u062a\u0647\u0644\u0643\u064a\u0646 \u0628\u0639\u062f \u0630\u0644\u0643 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u0642\u0637\u0639\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u062a\u0635\u062f\u064a\u0642 SBOM \u0642\u0628\u0644 deploy.<\/p>\n<p>\u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0645\u062e\u062a\u0628\u0631 \u0639\u0645\u0644\u064a \u062d\u0648\u0644 \u0625\u0646\u0634\u0627\u0621 SBOM \u0648\u0641\u062d\u0635\u0647\u0627 \u0648\u062a\u0635\u062f\u064a\u0642\u0647\u0627\u060c \u0627\u0646\u0638\u0631 <a href=\"\/ar\/ci-cd-security\/\">\u0645\u062e\u062a\u0628\u0631 SBOM \u0641\u064a \u0633\u0644\u0633\u0644\u0629 \u0623\u0645\u0627\u0646 CI\/CD<\/a>.<\/p>\n<h2>\u0627\u0644\u0623\u0637\u0631 \u0648\u0627\u0644\u0645\u0639\u0627\u064a\u064a\u0631<\/h2>\n<p>\u062a\u0648\u0641\u0631 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0623\u0637\u0631 \u0648\u0627\u0644\u0645\u0639\u0627\u064a\u064a\u0631 \u0645\u0646\u0627\u0647\u062c \u0645\u0646\u0638\u0645\u0629 \u0644\u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f. \u064a\u0633\u0627\u0639\u062f \u0641\u0647\u0645 \u0647\u0630\u0647 \u0627\u0644\u0623\u0637\u0631 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0639\u0644\u0649 \u062a\u062d\u062f\u064a\u062f \u0623\u0648\u0644\u0648\u064a\u0627\u062a \u0627\u0644\u0627\u0633\u062a\u062b\u0645\u0627\u0631\u0627\u062a \u0648\u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0627\u0645\u062a\u062b\u0627\u0644.<\/p>\n<h3>SLSA (Supply-chain Levels for Software Artifacts)<\/h3>\n<p>\u064a\u062d\u062f\u062f SLSA \u0623\u0631\u0628\u0639\u0629 \u0645\u0633\u062a\u0648\u064a\u0627\u062a \u0645\u0646 \u0646\u0636\u062c \u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0645\u062a\u0632\u0627\u064a\u062f:<\/p>\n<ul>\n<li><strong>SLSA \u0627\u0644\u0645\u0633\u062a\u0648\u0649 1 \u2014 \u0648\u062c\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631:<\/strong> \u062a\u0646\u0634\u0626 \u0639\u0645\u0644\u064a\u0629 build \u0645\u0635\u062f\u0631\u064b\u0627 \u064a\u0635\u0641 \u0643\u064a\u0641\u064a\u0629 \u0628\u0646\u0627\u0621 \u0627\u0644\u0642\u0637\u0639\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629. \u0647\u0630\u0627 \u0647\u0648 \u0627\u0644\u0623\u0633\u0627\u0633 \u2014 \u0645\u062c\u0631\u062f \u0648\u062c\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631 \u064a\u064f\u0639\u062f\u0651 \u062a\u062d\u0633\u064a\u0646\u064b\u0627 \u0643\u0628\u064a\u0631\u064b\u0627 \u0645\u0642\u0627\u0631\u0646\u0629 \u0628\u0639\u062f\u0645 \u0648\u062c\u0648\u062f\u0647.<\/li>\n<li><strong>SLSA \u0627\u0644\u0645\u0633\u062a\u0648\u0649 2 \u2014 build \u0645\u0633\u062a\u0636\u0627\u0641\u060c \u0645\u0635\u062f\u0631 \u0645\u0648\u0642\u0651\u0639:<\/strong> \u064a\u0639\u0645\u0644 build \u0639\u0644\u0649 \u062e\u062f\u0645\u0629 build \u0645\u0633\u062a\u0636\u0627\u0641\u0629\u060c \u0648\u0627\u0644\u0645\u0635\u062f\u0631 \u0645\u0648\u0642\u0651\u0639 \u0645\u0646 \u0642\u0628\u0644 \u0645\u0646\u0635\u0629 build. \u064a\u0645\u0646\u0639 \u0647\u0630\u0627 \u0627\u0644\u0645\u0637\u0648\u0631\u064a\u0646 \u0645\u0646 \u062a\u0632\u0648\u064a\u0631 \u0627\u0644\u0645\u0635\u062f\u0631 \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u062a\u0647\u0645 \u0627\u0644\u0645\u062d\u0644\u064a\u0629.<\/li>\n<li><strong>SLSA \u0627\u0644\u0645\u0633\u062a\u0648\u0649 3 \u2014 \u0639\u0645\u0644\u064a\u0627\u062a build \u0645\u064f\u0642\u0648\u064e\u0651\u0627\u0629:<\/strong> \u062a\u0648\u0641\u0631 \u0645\u0646\u0635\u0629 build \u0639\u0632\u0644\u0627\u064b \u0642\u0648\u064a\u064b\u0627 \u0628\u064a\u0646 \u0645\u0647\u0627\u0645 build\u060c \u0648\u0628\u064a\u0626\u0627\u062a \u0645\u0624\u0642\u062a\u0629\u060c \u0648\u0625\u0646\u0634\u0627\u0621 \u0645\u0635\u062f\u0631 \u0645\u0642\u0627\u0648\u0645 \u0644\u0644\u062a\u0644\u0627\u0639\u0628. \u0647\u0630\u0627 \u0647\u0648 \u0627\u0644\u0645\u0633\u062a\u0648\u0649 \u0627\u0644\u0630\u064a \u064a\u0645\u0646\u0639 \u0645\u0639\u0638\u0645 \u0647\u062c\u0645\u0627\u062a \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0639\u0645\u0644\u064a\u0629.<\/li>\n<li><strong>SLSA \u0627\u0644\u0645\u0633\u062a\u0648\u0649 4 \u2014 \u0645\u062d\u0643\u0645 \u0648\u0642\u0627\u0628\u0644 \u0644\u0644\u062a\u0643\u0631\u0627\u0631:<\/strong> \u064a\u0643\u0648\u0646 build \u0645\u062d\u0643\u0645 \u0627\u0644\u0625\u063a\u0644\u0627\u0642 \u0628\u0627\u0644\u0643\u0627\u0645\u0644 (\u0628\u062f\u0648\u0646 \u0648\u0635\u0648\u0644 \u0644\u0644\u0634\u0628\u0643\u0629\u060c \u0628\u062f\u0648\u0646 \u0645\u062f\u062e\u0644\u0627\u062a \u063a\u064a\u0631 \u0645\u0639\u0644\u0646\u0629) \u0648\u0645\u062b\u0627\u0644\u064a\u064b\u0627 \u0642\u0627\u0628\u0644 \u0644\u0644\u062a\u0643\u0631\u0627\u0631. \u0647\u0630\u0627 \u0647\u0648 \u0627\u0644\u0645\u0639\u064a\u0627\u0631 \u0627\u0644\u0630\u0647\u0628\u064a\u060c \u064a\u0648\u0641\u0631 \u0623\u0639\u0644\u0649 \u0645\u0633\u062a\u0648\u0649 \u0645\u0646 \u0627\u0644\u0636\u0645\u0627\u0646.<\/li>\n<\/ul>\n<p>\u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0642\u0627\u0626\u0645\u0629 \u062a\u062d\u0642\u0642 \u0627\u0645\u062a\u062b\u0627\u0644 \u0639\u0645\u0644\u064a\u0629 \u0648\u0625\u0631\u0634\u0627\u062f\u0627\u062a \u062a\u0637\u0628\u064a\u0642 \u0644\u0643\u0644 \u0645\u0633\u062a\u0648\u0649 SLSA\u060c \u0627\u0646\u0638\u0631: <a href=\"https:\/\/secure-pipelines.com\/ci-cd-security\/slsa-levels-explained-practical-compliance-checklist\/\">\u0634\u0631\u062d \u0645\u0633\u062a\u0648\u064a\u0627\u062a SLSA: \u0642\u0627\u0626\u0645\u0629 \u062a\u062d\u0642\u0642 \u0627\u0645\u062a\u062b\u0627\u0644 \u0639\u0645\u0644\u064a\u0629<\/a>.<\/p>\n<h3>NIST SSDF (\u0625\u0637\u0627\u0631 \u062a\u0637\u0648\u064a\u0631 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u0622\u0645\u0646)<\/h3>\n<p>\u064a\u0648\u0641\u0631 <strong>SSDF<\/strong> (SP 800-218) \u0645\u062c\u0645\u0648\u0639\u0629 \u0645\u0646 \u0627\u0644\u0645\u0645\u0627\u0631\u0633\u0627\u062a \u0639\u0627\u0644\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u0648\u0649 \u0648\u0627\u0644\u0645\u062d\u0627\u064a\u062f\u0629 \u062a\u0642\u0646\u064a\u064b\u0627 \u0644\u062a\u0637\u0648\u064a\u0631 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u0622\u0645\u0646. \u064a\u062a\u0645 \u062a\u0646\u0638\u064a\u0645\u0647 \u0641\u064a \u0623\u0631\u0628\u0639 \u0645\u062c\u0645\u0648\u0639\u0627\u062a:<\/p>\n<ul>\n<li><strong>\u0625\u0639\u062f\u0627\u062f \u0627\u0644\u0645\u0624\u0633\u0633\u0629 (PO):<\/strong> \u0648\u0636\u0639 \u0633\u064a\u0627\u0633\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0648\u0627\u0644\u0623\u062f\u0648\u0627\u0631 \u0648\u0627\u0644\u062a\u062f\u0631\u064a\u0628.<\/li>\n<li><strong>\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a (PS):<\/strong> \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631\u064a \u0648\u0628\u064a\u0626\u0627\u062a build \u0648\u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0645\u0646 \u0627\u0644\u0648\u0635\u0648\u0644 \u063a\u064a\u0631 \u0627\u0644\u0645\u0635\u0631\u062d \u0628\u0647 \u0648\u0627\u0644\u062a\u0644\u0627\u0639\u0628.<\/li>\n<li><strong>\u0625\u0646\u062a\u0627\u062c \u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0622\u0645\u0646\u0629 (PW):<\/strong> \u062a\u0635\u0645\u064a\u0645 \u0648\u062a\u0637\u0628\u064a\u0642 \u0648\u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0645\u0639 \u0645\u0631\u0627\u0639\u0627\u0629 \u0627\u0644\u0623\u0645\u0627\u0646.<\/li>\n<li><strong>\u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0644\u0644\u062b\u063a\u0631\u0627\u062a (RV):<\/strong> \u062a\u062d\u062f\u064a\u062f \u0648\u062a\u062d\u0644\u064a\u0644 \u0648\u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u0645\u064f\u0635\u062f\u064e\u0631\u0629.<\/li>\n<\/ul>\n<p>\u064a\u064f\u0639\u062f\u0651 SSDF \u0630\u0627 \u0635\u0644\u0629 \u062e\u0627\u0635\u0629 \u0628\u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0648\u0641\u0631 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0644\u0644\u062d\u0643\u0648\u0645\u0629 \u0627\u0644\u0641\u064a\u062f\u0631\u0627\u0644\u064a\u0629 \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u0629\u060c \u062d\u064a\u062b \u064a\u064f\u0634\u0627\u0631 \u0625\u0644\u064a\u0647 \u0641\u064a \u0627\u0644\u0623\u0645\u0631 \u0627\u0644\u062a\u0646\u0641\u064a\u0630\u064a 14028 \u0648\u0645\u0630\u0643\u0631\u0627\u062a OMB \u0630\u0627\u062a \u0627\u0644\u0635\u0644\u0629.<\/p>\n<h3>OWASP SCVS (\u0645\u0639\u064a\u0627\u0631 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0645\u0643\u0648\u0646\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a)<\/h3>\n<p>\u064a\u0648\u0641\u0631 <strong>OWASP SCVS<\/strong> \u0625\u0637\u0627\u0631 \u0639\u0645\u0644 \u064a\u0631\u0643\u0632 \u062a\u062d\u062f\u064a\u062f\u064b\u0627 \u0639\u0644\u0649 \u062a\u062d\u0644\u064a\u0644 \u0645\u0643\u0648\u0646\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0648\u0625\u062f\u0627\u0631\u0629 \u0645\u062e\u0627\u0637\u0631 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f. \u064a\u062d\u062f\u062f \u0645\u062a\u0637\u0644\u0628\u0627\u062a \u0627\u0644\u062a\u062d\u0642\u0642 \u0639\u0628\u0631 \u0633\u062a \u0641\u0626\u0627\u062a: BOM\u060c \u0647\u0648\u064a\u0629 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a\u060c \u0627\u0644\u0645\u0635\u062f\u0631\u060c \u0633\u0644\u0627\u0645\u0629 \u0627\u0644\u062d\u0632\u0645\u060c \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0645\u0643\u0648\u0646\u0627\u062a\u060c \u0648\u0627\u0644\u0646\u0633\u0628. \u064a\u064f\u0639\u062f\u0651 SCVS \u0645\u0641\u064a\u062f\u064b\u0627 \u0643\u0642\u0627\u0626\u0645\u0629 \u062a\u062d\u0642\u0642 \u0645\u0641\u0635\u0644\u0629 \u0644\u062a\u0642\u064a\u064a\u0645 \u0645\u0645\u0627\u0631\u0633\u0627\u062a \u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u0641\u064a \u0645\u0624\u0633\u0633\u062a\u0643.<\/p>\n<h3>OpenSSF Scorecard<\/h3>\n<p>\u064a\u0642\u064a\u0651\u0645 \u0645\u0634\u0631\u0648\u0639 <strong>OpenSSF Scorecard<\/strong> \u062a\u0644\u0642\u0627\u0626\u064a\u064b\u0627 \u0627\u0644\u0645\u0634\u0627\u0631\u064a\u0639 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0645\u0642\u0627\u0628\u0644 \u0645\u062c\u0645\u0648\u0639\u0629 \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062f\u0644\u0627\u0644\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u2014 \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0641\u0631\u0648\u0639\u060c \u0648\u062a\u062b\u0628\u064a\u062a \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a\u060c \u0648\u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0645\u0648\u0642\u0651\u0639\u0629\u060c \u0648\u0627\u062e\u062a\u0628\u0627\u0631\u0627\u062a CI\u060c \u0648\u0627\u0644\u0645\u0632\u064a\u062f. \u062a\u0634\u063a\u064a\u0644 Scorecard \u0639\u0644\u0649 \u062a\u0628\u0639\u064a\u0627\u062a\u0643 \u064a\u0633\u0627\u0639\u062f\u0643 \u0641\u064a \u062a\u0642\u064a\u064a\u0645 \u0648\u0636\u0639\u0647\u0627 \u0627\u0644\u0623\u0645\u0646\u064a \u0648\u062a\u062d\u062f\u064a\u062f \u0627\u0644\u0645\u062e\u0627\u0637\u0631. \u062f\u0645\u062c Scorecard \u0641\u064a \u0639\u0645\u0644\u064a\u0629 \u0645\u0631\u0627\u062c\u0639\u0629 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u064a\u0636\u064a\u0641 \u0637\u0628\u0642\u0629 \u062f\u0641\u0627\u0639 \u0625\u0636\u0627\u0641\u064a\u0629.<\/p>\n<h2>\u062e\u0627\u0631\u0637\u0629 \u0637\u0631\u064a\u0642 \u0627\u0644\u062a\u0637\u0628\u064a\u0642<\/h2>\n<p>\u062a\u0623\u0645\u064a\u0646 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0647\u0648 \u0631\u062d\u0644\u0629 \u0648\u0644\u064a\u0633 \u0645\u0634\u0631\u0648\u0639\u064b\u0627 \u0648\u0627\u062d\u062f\u064b\u0627. \u062a\u0648\u0641\u0631 \u062e\u0627\u0631\u0637\u0629 \u0627\u0644\u0637\u0631\u064a\u0642 \u0627\u0644\u0645\u0631\u062d\u0644\u064a\u0629 \u0627\u0644\u062a\u0627\u0644\u064a\u0629 \u0645\u0633\u0627\u0631\u064b\u0627 \u0639\u0645\u0644\u064a\u064b\u0627 \u0645\u0646 \u0627\u0644\u0646\u0638\u0627\u0641\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u0625\u0644\u0649 \u0627\u0644\u0645\u0648\u0627\u0642\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u0645\u062a\u0642\u062f\u0645\u0629.<\/p>\n<h3>\u0627\u0644\u0645\u0631\u062d\u0644\u0629 1: \u0627\u0644\u0623\u0633\u0627\u0633 (\u0627\u0644\u0623\u0633\u0627\u0628\u064a\u0639 1-4)<\/h3>\n<p>\u0627\u0644\u062a\u0631\u0643\u064a\u0632 \u0639\u0644\u0649 \u0627\u0644\u0631\u0624\u064a\u0629 \u0648\u0627\u0644\u0636\u0648\u0627\u0628\u0637 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629:<\/p>\n<ul>\n<li><strong>\u062c\u0631\u062f \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f:<\/strong> \u0627\u0631\u0633\u0645 \u062e\u0631\u064a\u0637\u0629 \u0644\u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0633\u062a\u0648\u062f\u0639\u0627\u062a \u0648\u0623\u0646\u0638\u0645\u0629 build \u0648\u0633\u062c\u0644\u0627\u062a \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u0623\u0647\u062f\u0627\u0641 deploy. \u062d\u062f\u062f \u062c\u0645\u064a\u0639 \u062a\u0628\u0639\u064a\u0627\u062a \u0627\u0644\u062c\u0647\u0627\u062a \u0627\u0644\u062e\u0627\u0631\u062c\u064a\u0629 \u0639\u0628\u0631 \u0645\u0634\u0627\u0631\u064a\u0639\u0643.<\/li>\n<li><strong>\u062a\u0645\u0643\u064a\u0646 \u0641\u062d\u0635 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a:<\/strong> \u0627\u062f\u0645\u062c Trivy \u0623\u0648 Grype \u0623\u0648 Dependabot \u0641\u064a \u062c\u0645\u064a\u0639 pipelines \u0627\u0644\u0640 CI\/CD. \u0642\u0645 \u0628\u062a\u0643\u0648\u064a\u0646 \u0627\u0644\u062a\u0646\u0628\u064a\u0647\u0627\u062a \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0644\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u062d\u0631\u062c\u0629 \u0648\u0639\u0627\u0644\u064a\u0629 \u0627\u0644\u062e\u0637\u0648\u0631\u0629.<\/li>\n<li><strong>\u0625\u0631\u0633\u0627\u0644 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0642\u0641\u0644:<\/strong> \u062a\u0623\u0643\u062f \u0645\u0646 \u0623\u0646 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0634\u0627\u0631\u064a\u0639 \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u062a\u064f\u0631\u0633\u0644 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0642\u0641\u0644. \u062b\u0628\u0651\u062a \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0639\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u062f\u0642\u064a\u0642\u0629.<\/li>\n<li><strong>\u0641\u0631\u0636 \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0641\u0631\u0648\u0639:<\/strong> \u0627\u0637\u0644\u0628 \u0645\u0631\u0627\u062c\u0639\u0629 \u0627\u0644\u0643\u0648\u062f \u0648\u0641\u062d\u0648\u0635\u0627\u062a \u0627\u0644\u062d\u0627\u0644\u0629 \u0644\u062c\u0645\u064a\u0639 \u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u062f\u0645\u062c \u0641\u064a \u0627\u0644\u0641\u0631\u0648\u0639 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629. \u0627\u062d\u0645\u0650 \u0645\u0644\u0641\u0627\u062a \u062a\u0643\u0648\u064a\u0646 CI\/CD.<\/li>\n<li><strong>\u0625\u0646\u0634\u0627\u0621 SBOM:<\/strong> \u0623\u0636\u0641 \u0625\u0646\u0634\u0627\u0621 SBOM \u0625\u0644\u0649 pipelines \u0627\u0644\u0640 build \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u0643. \u062e\u0632\u0651\u0646 SBOM \u0628\u062c\u0627\u0646\u0628 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0641\u064a \u0633\u062c\u0644\u0643.<\/li>\n<\/ul>\n<h3>\u0627\u0644\u0645\u0631\u062d\u0644\u0629 2: \u0627\u0644\u0633\u0644\u0627\u0645\u0629 (\u0627\u0644\u0623\u0633\u0627\u0628\u064a\u0639 5-12)<\/h3>\n<p>\u0625\u0636\u0627\u0641\u0629 \u0636\u0648\u0627\u0628\u0637 \u0627\u0644\u0633\u0644\u0627\u0645\u0629 \u0627\u0644\u062a\u0634\u0641\u064a\u0631\u064a\u0629:<\/p>\n<ul>\n<li><strong>\u062a\u0637\u0628\u064a\u0642 \u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629:<\/strong> \u0627\u0646\u0634\u0631 Cosign \u0645\u0639 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0628\u062f\u0648\u0646 \u0645\u0641\u0627\u062a\u064a\u062d \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0647\u0648\u064a\u0629 OIDC \u0644\u0645\u0646\u0635\u0629 CI\/CD \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u0643. \u0648\u0642\u0651\u0639 \u062c\u0645\u064a\u0639 \u0635\u0648\u0631 \u0627\u0644\u062d\u0627\u0648\u064a\u0627\u062a \u0648\u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0627\u0644\u062d\u0631\u062c\u0629.<\/li>\n<li><strong>\u0625\u0646\u0634\u0627\u0621 \u0645\u0635\u062f\u0631 \u0627\u0644\u0640 build:<\/strong> \u0641\u0639\u0651\u0644 \u0625\u0646\u0634\u0627\u0621 \u0645\u0635\u062f\u0631 SLSA \u0641\u064a pipelines \u0627\u0644\u0640 build \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u0643. \u064a\u0645\u0643\u0646 \u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a GitHub Actions \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0633\u064a\u0631 \u0639\u0645\u0644 <code>slsa-github-generator<\/code> \u0627\u0644\u0642\u0627\u0628\u0644 \u0644\u0625\u0639\u0627\u062f\u0629 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645.<\/li>\n<li><strong>\u062a\u0643\u0648\u064a\u0646 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0627\u0644\u062e\u0627\u0635\u0629:<\/strong> \u0642\u0645 \u0628\u0625\u0639\u062f\u0627\u062f Artifactory \u0623\u0648 Nexus \u0643\u0648\u0643\u064a\u0644 \u0644\u0644\u0633\u062c\u0644\u0627\u062a \u0627\u0644\u0639\u0627\u0645\u0629. \u0642\u0645 \u0628\u062a\u0643\u0648\u064a\u0646 \u0645\u062f\u064a\u0631\u0627\u062a \u0627\u0644\u062d\u0632\u0645 \u0644\u0644\u062a\u062d\u0644\u064a\u0644 \u0645\u0646 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0627\u0644\u062e\u0627\u0635\u0629 \u0623\u0648\u0644\u0627\u064b \u0644\u0645\u0646\u0639 dependency confusion.<\/li>\n<li><strong>\u062a\u062d\u0642\u064a\u0642 SLSA \u0627\u0644\u0645\u0633\u062a\u0648\u0649 2:<\/strong> \u0645\u0639 \u0639\u0645\u0644\u064a\u0627\u062a build \u0627\u0644\u0645\u0633\u062a\u0636\u0627\u0641\u0629 \u0648\u0627\u0644\u0645\u0635\u062f\u0631 \u0627\u0644\u0645\u0648\u0642\u0651\u0639\u060c \u064a\u0645\u0643\u0646 \u0644\u0645\u0639\u0638\u0645 \u0627\u0644\u0641\u0631\u0642 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 SLSA \u0627\u0644\u0645\u0633\u062a\u0648\u0649 2 \u0628\u0646\u0647\u0627\u064a\u0629 \u0647\u0630\u0647 \u0627\u0644\u0645\u0631\u062d\u0644\u0629.<\/li>\n<\/ul>\n<h3>\u0627\u0644\u0645\u0631\u062d\u0644\u0629 3: \u0627\u0644\u062a\u062d\u0642\u0642 (\u0627\u0644\u0623\u0633\u0627\u0628\u064a\u0639 13-20)<\/h3>\n<p>\u0641\u0631\u0636 \u0627\u0644\u0633\u064a\u0627\u0633\u0627\u062a \u0641\u064a \u0648\u0642\u062a deploy:<\/p>\n<ul>\n<li><strong>\u0646\u0634\u0631 \u0645\u062a\u062d\u0643\u0645\u0627\u062a \u0627\u0644\u0642\u0628\u0648\u0644:<\/strong> \u0627\u0633\u062a\u062e\u062f\u0645 \u0645\u062a\u062d\u0643\u0645\u0627\u062a \u0627\u0644\u0642\u0628\u0648\u0644 \u0641\u064a Kubernetes (Kyverno\u060c OPA Gatekeeper\u060c Sigstore Policy Controller) \u0644\u0641\u0631\u0636 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0648\u0627\u0644\u0645\u0635\u062f\u0631 \u0642\u0628\u0644 deploy.<\/li>\n<li><strong>\u062a\u0635\u062f\u064a\u0642 SBOM:<\/strong> \u0648\u0642\u0651\u0639 SBOM \u0648\u0623\u0631\u0641\u0642\u0647\u0627 \u0628\u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0643\u062a\u0635\u062f\u064a\u0642\u0627\u062a in-toto. \u062a\u062d\u0642\u0642 \u0645\u0646 \u062a\u0635\u062f\u064a\u0642\u0627\u062a SBOM \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u064a\u0627\u0633\u0627\u062a deploy.<\/li>\n<li><strong>\u062a\u0642\u0648\u064a\u0629 \u0628\u064a\u0626\u0627\u062a Build:<\/strong> \u0627\u0646\u062a\u0642\u0644 \u0625\u0644\u0649 runners \u0645\u0624\u0642\u062a\u0629 \u0648\u0645\u0639\u0632\u0648\u0644\u0629 \u0644\u0644\u0640 build. \u0642\u0644\u0651\u0644 \u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0628\u064a\u0626\u0629 build. \u062d\u0642\u0642 SLSA \u0627\u0644\u0645\u0633\u062a\u0648\u0649 3.<\/li>\n<li><strong>\u0623\u062a\u0645\u062a\u0629 \u0627\u0644\u0627\u0645\u062a\u062b\u0627\u0644:<\/strong> \u0627\u0633\u062a\u062e\u062f\u0645 \u0623\u062f\u0648\u0627\u062a policy-as-code \u0644\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0633\u062a\u0645\u0631 \u0645\u0646 \u0627\u0644\u0627\u0645\u062a\u062b\u0627\u0644 \u0644\u0640 SLSA \u0648SSDF \u0648\u0633\u064a\u0627\u0633\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0645\u0624\u0633\u0633\u064a\u0629.<\/li>\n<\/ul>\n<h3>\u0627\u0644\u0645\u0631\u062d\u0644\u0629 4: \u0627\u0644\u0645\u062a\u0642\u062f\u0645 (\u0645\u0633\u062a\u0645\u0631)<\/h3>\n<p>\u0627\u0644\u0633\u0639\u064a \u0646\u062d\u0648 \u0627\u0644\u062f\u0641\u0627\u0639 \u0627\u0644\u0645\u062a\u0639\u0645\u0642 \u0648\u0627\u0644\u062a\u062d\u0633\u064a\u0646 \u0627\u0644\u0645\u0633\u062a\u0645\u0631:<\/p>\n<ul>\n<li><strong>\u0639\u0645\u0644\u064a\u0627\u062a build \u0645\u062d\u0643\u0645\u0629 \u0627\u0644\u0625\u063a\u0644\u0627\u0642:<\/strong> \u0627\u0633\u062a\u0643\u0634\u0641 Bazel \u0623\u0648 Buck2 \u0623\u0648 \u0623\u0646\u0638\u0645\u0629 build \u0623\u062e\u0631\u0649 \u062a\u062f\u0639\u0645 \u0639\u0645\u0644\u064a\u0627\u062a build \u0645\u062d\u0643\u0645\u0629 \u0627\u0644\u0625\u063a\u0644\u0627\u0642 \u0628\u0627\u0644\u0643\u0627\u0645\u0644 \u0628\u062f\u0648\u0646 \u0648\u0635\u0648\u0644 \u0644\u0644\u0634\u0628\u0643\u0629.<\/li>\n<li><strong>\u0639\u0645\u0644\u064a\u0627\u062a build \u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u0643\u0631\u0627\u0631:<\/strong> \u0627\u0639\u0645\u0644 \u0646\u062d\u0648 \u0642\u0627\u0628\u0644\u064a\u0629 \u062a\u0643\u0631\u0627\u0631 build \u0644\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0627\u0644\u062d\u0631\u062c\u0629. \u064a\u0648\u0641\u0631 \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0633\u062a\u0642\u0644 \u0645\u0646 \u0639\u0645\u0644\u064a\u0627\u062a build \u0623\u0639\u0644\u0649 \u0645\u0633\u062a\u0648\u0649 \u0645\u0646 \u0627\u0644\u0636\u0645\u0627\u0646.<\/li>\n<li><strong>\u0646\u0645\u0630\u062c\u0629 \u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f:<\/strong> \u0623\u062c\u0631\u0650 \u062a\u0645\u0627\u0631\u064a\u0646 \u0646\u0645\u0630\u062c\u0629 \u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0645\u0646\u062a\u0638\u0645\u0629 \u062a\u0631\u0643\u0632 \u062a\u062d\u062f\u064a\u062f\u064b\u0627 \u0639\u0644\u0649 \u0646\u0627\u0642\u0644\u0627\u062a \u0647\u062c\u0648\u0645 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f.<\/li>\n<li><strong>\u0627\u0644\u062a\u062e\u0637\u064a\u0637 \u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0644\u0644\u062d\u0648\u0627\u062f\u062b:<\/strong> \u0637\u0648\u0651\u0631 \u0648\u062a\u062f\u0631\u0651\u0628 \u0639\u0644\u0649 \u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0644\u0644\u062d\u0648\u0627\u062f\u062b \u0644\u0627\u062e\u062a\u0631\u0627\u0642\u0627\u062a \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f\u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0627\u062e\u062a\u0631\u0627\u0642\u0627\u062a \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0648\u062e\u0631\u0648\u0642\u0627\u062a \u0646\u0638\u0627\u0645 build \u0648\u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629.<\/li>\n<\/ul>\n<h2>\u0627\u0644\u0645\u062e\u062a\u0628\u0631\u0627\u062a \u0627\u0644\u0639\u0645\u0644\u064a\u0629<\/h2>\n<p>\u0627\u0644\u0646\u0638\u0631\u064a\u0629 \u0645\u0647\u0645\u0629\u060c \u0644\u0643\u0646 \u0627\u0644\u0645\u0645\u0627\u0631\u0633\u0629 \u0627\u0644\u0639\u0645\u0644\u064a\u0629 \u0636\u0631\u0648\u0631\u064a\u0629. \u062a\u0648\u0641\u0631 \u0627\u0644\u0645\u062e\u062a\u0628\u0631\u0627\u062a \u0627\u0644\u062a\u0627\u0644\u064a\u0629 \u062e\u0628\u0631\u0629 \u0639\u0645\u0644\u064a\u0629 \u0645\u0639 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0648\u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u0645\u063a\u0637\u0627\u0629 \u0641\u064a \u0647\u0630\u0627 \u0627\u0644\u062f\u0644\u064a\u0644:<\/p>\n<ul>\n<li><a href=\"https:\/\/secure-pipelines.com\/ar\/ci-cd-security\/dependency-confusion-artifact-poisoning-attacks-defenses\/\"><strong>\u0645\u062e\u062a\u0628\u0631: Dependency Confusion \u0648\u062a\u0633\u0645\u064a\u0645 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629<\/strong><\/a> \u2014 \u0645\u062d\u0627\u0643\u0627\u0629 \u0647\u062c\u0645\u0627\u062a dependency confusion \u0648\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u062f\u0641\u0627\u0639\u0627\u062a \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0627\u0644\u062d\u0632\u0645 \u0630\u0627\u062a \u0627\u0644\u0646\u0637\u0627\u0642 \u0648\u062a\u0643\u0648\u064a\u0646 \u0627\u0644\u0633\u062c\u0644 \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0633\u0644\u0627\u0645\u0629.<\/li>\n<li><a href=\"https:\/\/secure-pipelines.com\/ar\/ci-cd-security\/build-integrity-reproducible-builds-ci-cd\/\"><strong>\u0645\u062e\u062a\u0628\u0631: \u0633\u0644\u0627\u0645\u0629 \u0627\u0644\u0640 Build \u0648\u0639\u0645\u0644\u064a\u0627\u062a Build \u0627\u0644\u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u0643\u0631\u0627\u0631<\/strong><\/a> \u2014 \u062a\u0643\u0648\u064a\u0646 \u0639\u0645\u0644\u064a\u0627\u062a build \u062d\u0627\u0648\u064a\u0627\u062a \u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u0643\u0631\u0627\u0631\u060c \u0648\u0627\u0644\u0642\u0636\u0627\u0621 \u0639\u0644\u0649 \u0639\u062f\u0645 \u0627\u0644\u062d\u062a\u0645\u064a\u0629\u060c \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0645\u062e\u0631\u062c\u0627\u062a build \u0639\u0628\u0631 \u0627\u0644\u0628\u064a\u0626\u0627\u062a.<\/li>\n<li><a href=\"https:\/\/secure-pipelines.com\/ar\/ci-cd-security\/signing-verifying-container-images-sigstore-cosign\/\"><strong>\u0645\u062e\u062a\u0628\u0631: \u062a\u0648\u0642\u064a\u0639 \u0635\u0648\u0631 \u0627\u0644\u062d\u0627\u0648\u064a\u0627\u062a \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646\u0647\u0627 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 Sigstore<\/strong><\/a> \u2014 \u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0628\u062f\u0648\u0646 \u0645\u0641\u0627\u062a\u064a\u062d \u0645\u0639 Cosign \u0648Fulcio\u060c \u0648\u062a\u0633\u062c\u064a\u0644 \u0627\u0644\u062a\u0648\u0642\u064a\u0639\u0627\u062a \u0641\u064a Rekor\u060c \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u062a\u0648\u0642\u064a\u0639\u0627\u062a \u0641\u064a \u0648\u0642\u062a deploy.<\/li>\n<li><a href=\"https:\/\/secure-pipelines.com\/ar\/ci-cd-security\/artifact-provenance-attestations-slsa-in-toto\/\"><strong>\u0645\u062e\u062a\u0628\u0631: \u0645\u0635\u062f\u0631 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u0627\u0644\u062a\u0635\u062f\u064a\u0642\u0627\u062a<\/strong><\/a> \u2014 \u0625\u0646\u0634\u0627\u0621 \u0645\u0635\u062f\u0631 SLSA \u0645\u0639 GitHub Actions\u060c \u0648\u0625\u0646\u0634\u0627\u0621 \u062a\u0635\u062f\u064a\u0642\u0627\u062a in-toto\u060c \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0645\u0635\u062f\u0631 \u0642\u0628\u0644 deploy.<\/li>\n<li><a href=\"https:\/\/secure-pipelines.com\/ci-cd-security\/slsa-levels-explained-practical-compliance-checklist\/\"><strong>\u0645\u062e\u062a\u0628\u0631: \u0642\u0627\u0626\u0645\u0629 \u062a\u062d\u0642\u0642 \u0627\u0645\u062a\u062b\u0627\u0644 SLSA<\/strong><\/a> \u2014 \u0627\u0644\u0645\u0631\u0648\u0631 \u0639\u0628\u0631 \u0645\u062a\u0637\u0644\u0628\u0627\u062a SLSA \u0641\u064a \u0643\u0644 \u0645\u0633\u062a\u0648\u0649 \u0648\u062a\u0637\u0628\u064a\u0642\u0647\u0627 \u0641\u064a pipeline CI\/CD \u062d\u0642\u064a\u0642\u064a.<\/li>\n<li><a href=\"\/ar\/ci-cd-security\/\"><strong>\u0645\u062e\u062a\u0628\u0631: \u0625\u0646\u0634\u0627\u0621 SBOM \u0648\u0641\u062d\u0635 \u0627\u0644\u062b\u063a\u0631\u0627\u062a<\/strong><\/a> \u2014 \u0625\u0646\u0634\u0627\u0621 SBOM \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 Syft\u060c \u0648\u0641\u062d\u0635 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 Grype\u060c \u0648\u062a\u0635\u062f\u064a\u0642 SBOM \u0644\u0635\u0648\u0631 \u0627\u0644\u062d\u0627\u0648\u064a\u0627\u062a.<\/li>\n<\/ul>\n<h2>\u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0648\u0627\u0644\u0645\u0642\u0627\u0631\u0646\u0627\u062a<\/h2>\n<p>\u0627\u062e\u062a\u064a\u0627\u0631 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0645\u0646\u0627\u0633\u0628\u0629 \u0623\u0645\u0631 \u062d\u0627\u0633\u0645 \u0644\u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0641\u0639\u0627\u0644. \u062a\u0633\u0627\u0639\u062f\u0643 \u0623\u062f\u0644\u0629 \u0627\u0644\u0645\u0642\u0627\u0631\u0646\u0629 \u0627\u0644\u062a\u0627\u0644\u064a\u0629 \u0641\u064a \u062a\u0642\u064a\u064a\u0645 \u0627\u0644\u062e\u064a\u0627\u0631\u0627\u062a \u0639\u0628\u0631 \u0627\u0644\u0641\u0626\u0627\u062a \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629:<\/p>\n<table>\n<thead>\n<tr>\n<th>\u0627\u0644\u0641\u0626\u0629<\/th>\n<th>\u0627\u0644\u0623\u062f\u0648\u0627\u062a<\/th>\n<th>\u062d\u0627\u0644\u0629 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>\u0645\u0627\u0633\u062d\u0627\u062a \u0627\u0644\u062b\u063a\u0631\u0627\u062a<\/strong><\/td>\n<td>Trivy\u060c Grype\u060c Snyk\u060c Clair<\/td>\n<td>\u0641\u062d\u0635 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0648\u0635\u0648\u0631 \u0627\u0644\u062d\u0627\u0648\u064a\u0627\u062a \u0628\u062d\u062b\u064b\u0627 \u0639\u0646 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629<\/td>\n<\/tr>\n<tr>\n<td><strong>\u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629<\/strong><\/td>\n<td>Cosign\u060c Notation\u060c GPG<\/td>\n<td>\u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u062a\u0634\u0641\u064a\u0631\u064a \u0644\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0644\u0636\u0645\u0627\u0646 \u0627\u0644\u0633\u0644\u0627\u0645\u0629 \u0648\u0627\u0644\u0623\u0635\u0627\u0644\u0629<\/td>\n<\/tr>\n<tr>\n<td><strong>\u0625\u0646\u0634\u0627\u0621 SBOM<\/strong><\/td>\n<td>Syft\u060c Trivy\u060c cdxgen\u060c CycloneDX CLI<\/td>\n<td>\u0625\u0646\u0634\u0627\u0621 \u062c\u0631\u062f \u0644\u0645\u0643\u0648\u0646\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0628\u062a\u0646\u0633\u064a\u0642 SPDX \u0623\u0648 CycloneDX<\/td>\n<\/tr>\n<tr>\n<td><strong>\u0627\u0644\u0645\u0635\u062f\u0631<\/strong><\/td>\n<td>SLSA GitHub Generator\u060c Witness\u060c in-toto<\/td>\n<td>\u0625\u0646\u0634\u0627\u0621 \u0645\u0635\u062f\u0631 build \u0642\u0627\u0628\u0644 \u0644\u0644\u062a\u062d\u0642\u0642 \u0648\u062a\u0635\u062f\u064a\u0642\u0627\u062a<\/td>\n<\/tr>\n<tr>\n<td><strong>\u0625\u0646\u0641\u0627\u0630 \u0627\u0644\u0633\u064a\u0627\u0633\u0627\u062a<\/strong><\/td>\n<td>Kyverno\u060c OPA Gatekeeper\u060c Sigstore Policy Controller<\/td>\n<td>\u0625\u0646\u0641\u0627\u0630 \u0633\u064a\u0627\u0633\u0627\u062a \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u0641\u064a \u0648\u0642\u062a deploy \u0639\u0628\u0631 \u0642\u0628\u0648\u0644 Kubernetes<\/td>\n<\/tr>\n<tr>\n<td><strong>\u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a<\/strong><\/td>\n<td>Dependabot\u060c Renovate\u060c Socket.dev<\/td>\n<td>\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0648\u0627\u0644\u0645\u0631\u0627\u0642\u0628\u0629 \u0648\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062d\u0632\u0645 \u0627\u0644\u062e\u0628\u064a\u062b\u0629<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0645\u0642\u0627\u0631\u0646\u0627\u062a \u0645\u0641\u0635\u0644\u0629 \u0644\u0647\u0630\u0647 \u0627\u0644\u0623\u062f\u0648\u0627\u062a\u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0645\u0635\u0641\u0648\u0641\u0627\u062a \u0627\u0644\u0645\u064a\u0632\u0627\u062a \u0648\u0625\u0631\u0634\u0627\u062f\u0627\u062a \u0627\u0644\u062a\u0648\u0635\u064a\u0629\u060c \u0627\u0646\u0638\u0631 <a href=\"\/ar\/ci-cd-security\/\">\u0633\u0644\u0633\u0644\u0629 \u0623\u062f\u0648\u0627\u062a \u0648\u0645\u0642\u0627\u0631\u0646\u0627\u062a \u0623\u0645\u0627\u0646 CI\/CD<\/a>.<\/p>\n<h2>\u0627\u0644\u062e\u0627\u062a\u0645\u0629<\/h2>\n<p>\u0644\u0645 \u064a\u0639\u062f \u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u062e\u062a\u064a\u0627\u0631\u064a\u064b\u0627 \u2014 \u0625\u0646\u0647 \u0645\u062a\u0637\u0644\u0628 \u0623\u0633\u0627\u0633\u064a \u0644\u0623\u064a \u0645\u0624\u0633\u0633\u0629 \u062a\u0628\u0646\u064a \u0648\u062a\u0646\u0634\u0631 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a. \u0623\u0638\u0647\u0631\u062a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0636\u062f SolarWinds \u0648Log4j \u0648XZ Utils \u0623\u0646 \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u062a\u0642\u0644\u064a\u062f\u064a \u0627\u0644\u0642\u0627\u0626\u0645 \u0639\u0644\u0649 \u0627\u0644\u0645\u062d\u064a\u0637 \u063a\u064a\u0631 \u0643\u0627\u0641\u064d \u0639\u0646\u062f\u0645\u0627 \u062a\u0643\u0648\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u0646\u0641\u0633\u0647\u0627 \u0647\u064a \u0646\u0627\u0642\u0644 \u0627\u0644\u0647\u062c\u0648\u0645.<\/p>\n<p>\u0627\u0644\u062e\u0628\u0631 \u0627\u0644\u0633\u0627\u0631 \u0647\u0648 \u0623\u0646 \u0645\u0646\u0638\u0648\u0645\u0629 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0648\u0627\u0644\u0645\u0639\u0627\u064a\u064a\u0631 \u0646\u0636\u062c\u062a \u0628\u0633\u0631\u0639\u0629. \u062c\u0639\u0644 Sigstore \u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0645\u062a\u0627\u062d\u064b\u0627 \u0644\u0643\u0644 \u0641\u0631\u064a\u0642. \u064a\u0648\u0641\u0631 SLSA \u0625\u0637\u0627\u0631 \u0646\u0636\u062c \u0648\u0627\u0636\u062d \u0648\u062a\u062f\u0631\u064a\u062c\u064a. \u0623\u0635\u0628\u062d\u062a SBOM \u0645\u0645\u0627\u0631\u0633\u0629 \u0642\u064a\u0627\u0633\u064a\u0629. \u064a\u0645\u0643\u0646 \u0644\u0645\u062d\u0631\u0643\u0627\u062a \u0627\u0644\u0633\u064a\u0627\u0633\u0627\u062a \u0641\u0631\u0636 \u0645\u062a\u0637\u0644\u0628\u0627\u062a \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u062a\u0644\u0642\u0627\u0626\u064a\u064b\u0627 \u0641\u064a \u0648\u0642\u062a deploy.<\/p>\n<p>\u0627\u0644\u0645\u0628\u0627\u062f\u0626 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0627\u0644\u062a\u064a \u064a\u062c\u0628 \u062a\u0630\u0643\u0631\u0647\u0627:<\/p>\n<ul>\n<li><strong>\u062a\u062d\u0642\u0642 \u0648\u0644\u0627 \u062a\u062b\u0642:<\/strong> \u062a\u062d\u0642\u0642 \u062a\u0634\u0641\u064a\u0631\u064a\u064b\u0627 \u0645\u0646 \u0643\u0644 \u0642\u0637\u0639\u0629 \u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u062a\u0628\u0639\u064a\u0629 \u0648\u0645\u062e\u0631\u062c build. \u0627\u0641\u062a\u0631\u0636 \u0623\u0646 \u0623\u064a \u0645\u0643\u0648\u0646 \u063a\u064a\u0631 \u0645\u064f\u062a\u062d\u0642\u064e\u0651\u0642 \u0645\u0646\u0647 \u0642\u062f \u064a\u0643\u0648\u0646 \u0645\u062e\u062a\u0631\u0642\u064b\u0627.<\/li>\n<li><strong>\u0623\u062a\u0645\u062a \u0643\u0644 \u0634\u064a\u0621:<\/strong> \u064a\u062c\u0628 \u0623\u0646 \u062a\u0643\u0648\u0646 \u0636\u0648\u0627\u0628\u0637 \u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u0645\u0624\u062a\u0645\u062a\u0629 \u0648\u0645\u064f\u0646\u0641\u064e\u0651\u0630\u0629 \u0641\u064a pipeline. \u0644\u0627 \u062a\u062a\u0648\u0633\u0639 \u0627\u0644\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u064a\u062f\u0648\u064a\u0629 \u0648\u064a\u0633\u0647\u0644 \u062a\u062c\u0627\u0648\u0632\u0647\u0627.<\/li>\n<li><strong>\u0627\u0644\u062f\u0641\u0627\u0639 \u0627\u0644\u0645\u062a\u0639\u0645\u0642:<\/strong> \u0644\u0627 \u064a\u0643\u0641\u064a \u0636\u0627\u0628\u0637 \u0648\u0627\u062d\u062f. \u0637\u0628\u0651\u0642 \u0637\u0628\u0642\u0627\u062a \u0627\u0644\u062f\u0641\u0627\u0639 \u0639\u0628\u0631 \u0643\u0644 \u0645\u0631\u062d\u0644\u0629 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u2014 \u0627\u0644\u0645\u0635\u062f\u0631 \u0648\u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0648build \u0648\u0627\u0644\u0642\u0637\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0648deploy.<\/li>\n<li><strong>\u0627\u0628\u062f\u0623 \u0645\u0646 \u062d\u064a\u062b \u0623\u0646\u062a:<\/strong> \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u0625\u0644\u0649 \u062a\u062d\u0642\u064a\u0642 SLSA \u0627\u0644\u0645\u0633\u062a\u0648\u0649 4 \u0628\u064a\u0646 \u0644\u064a\u0644\u0629 \u0648\u0636\u062d\u0627\u0647\u0627. \u0627\u0628\u062f\u0623 \u0628\u0641\u062d\u0635 \u0627\u0644\u062a\u0628\u0639\u064a\u0627\u062a \u0648\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0642\u0641\u0644\u060c \u062b\u0645 \u0623\u0636\u0641 \u062a\u062f\u0631\u064a\u062c\u064a\u064b\u0627 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0648\u0627\u0644\u0645\u0635\u062f\u0631 \u0648SBOM \u0648\u0625\u0646\u0641\u0627\u0630 \u0627\u0644\u0633\u064a\u0627\u0633\u0627\u062a.<\/li>\n<li><strong>\u062d\u0627\u0641\u0638 \u0639\u0644\u0649 \u0627\u0644\u0631\u0624\u064a\u0629:<\/strong> \u0644\u0627 \u064a\u0645\u0643\u0646\u0643 \u062a\u0623\u0645\u064a\u0646 \u0645\u0627 \u0644\u0627 \u064a\u0645\u0643\u0646\u0643 \u0631\u0624\u064a\u062a\u0647. \u062a\u0648\u0641\u0631 SBOM \u0648\u0627\u0644\u0645\u0635\u062f\u0631 \u0648\u0633\u062c\u0644\u0627\u062a \u0627\u0644\u062a\u062f\u0642\u064a\u0642 \u0627\u0644\u0631\u0624\u064a\u0629 \u0627\u0644\u0644\u0627\u0632\u0645\u0629 \u0644\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0641\u0639\u0627\u0644 \u0648\u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0644\u0644\u062d\u0648\u0627\u062f\u062b.<\/li>\n<\/ul>\n<p>\u0627\u0628\u062f\u0623 \u0628\u0640 <a href=\"#implementation-roadmap\">\u062e\u0627\u0631\u0637\u0629 \u0637\u0631\u064a\u0642 \u0627\u0644\u062a\u0637\u0628\u064a\u0642<\/a> \u0623\u0639\u0644\u0627\u0647\u060c \u0648\u0627\u0639\u0645\u0644 \u0639\u0644\u0649 <a href=\"#hands-on-labs\">\u0627\u0644\u0645\u062e\u062a\u0628\u0631\u0627\u062a \u0627\u0644\u0639\u0645\u0644\u064a\u0629<\/a>\u060c \u0648\u0642\u0648\u0650\u0651 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u062a\u062f\u0631\u064a\u062c\u064a\u064b\u0627. \u0627\u0644\u0631\u062d\u0644\u0629 \u0645\u0646 \u0627\u0644\u0635\u0641\u0631 \u0625\u0644\u0649 \u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0634\u0627\u0645\u0644 \u062a\u062f\u0631\u064a\u062c\u064a\u0629 \u2014 \u0648\u0643\u0644 \u062e\u0637\u0648\u0629 \u062a\u062c\u0639\u0644 \u0628\u0631\u0645\u062c\u064a\u0627\u062a\u0643 \u0623\u0643\u062b\u0631 \u0623\u0645\u0627\u0646\u064b\u0627 \u0628\u0634\u0643\u0644 \u0645\u0644\u0645\u0648\u0633.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0645\u0642\u062f\u0645\u0629: \u0644\u0645\u0627\u0630\u0627 \u064a\u064f\u0639\u062f\u0651 \u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0645\u0647\u0645\u064b\u0627 \u0641\u064a \u062f\u064a\u0633\u0645\u0628\u0631 2020\u060c \u0627\u0643\u062a\u0634\u0641 \u0627\u0644\u0639\u0627\u0644\u0645 \u0623\u0646 SolarWinds \u2014 \u0648\u0647\u064a \u0645\u0646\u0635\u0629 \u0625\u062f\u0627\u0631\u0629 \u062a\u0642\u0646\u064a\u0629 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0645\u0648\u062b\u0648\u0642\u0629 \u0639\u0644\u0649 \u0646\u0637\u0627\u0642 \u0648\u0627\u0633\u0639 \u2014 \u0642\u062f \u062a\u0639\u0631\u0636\u062a \u0644\u0644\u0627\u062e\u062a\u0631\u0627\u0642. \u0642\u0627\u0645 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0628\u062d\u0642\u0646 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0641\u064a \u0639\u0645\u0644\u064a\u0629 build \u0644\u0628\u0631\u0646\u0627\u0645\u062c Orion\u060c \u0648\u0648\u0632\u0651\u0639\u0648\u0627 \u062a\u062d\u062f\u064a\u062b\u064b\u0627 \u0645\u0644\u0648\u062b\u064b\u0627 \u0639\u0644\u0649 \u0645\u0627 \u064a\u0642\u0627\u0631\u0628 18,000 \u0645\u0624\u0633\u0633\u0629\u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0648\u0643\u0627\u0644\u0627\u062a \u062d\u0643\u0648\u0645\u064a\u0629 \u0623\u0645\u0631\u064a\u0643\u064a\u0629 \u0648\u0634\u0631\u0643\u0627\u062a \u0645\u062f\u0631\u062c\u0629 &#8230; <a title=\"\u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a: \u062f\u0644\u064a\u0644 \u0634\u0627\u0645\u0644 \u0644\u0641\u0631\u0642 \u0627\u0644\u0647\u0646\u062f\u0633\u0629\" class=\"read-more\" href=\"https:\/\/secure-pipelines.com\/ar\/software-supply-chain\/software-supply-chain-security-comprehensive-guide\/\" aria-label=\"Read more about \u0623\u0645\u0627\u0646 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a: \u062f\u0644\u064a\u0644 \u0634\u0627\u0645\u0644 \u0644\u0641\u0631\u0642 \u0627\u0644\u0647\u0646\u062f\u0633\u0629\">\u0627\u0642\u0631\u0623 \u0627\u0644\u0645\u0632\u064a\u062f<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[],"post_folder":[],"class_list":["post-755","post","type-post","status-publish","format-standard","hentry","category-software-supply-chain"],"_links":{"self":[{"href":"https:\/\/secure-pipelines.com\/ar\/wp-json\/wp\/v2\/posts\/755","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/secure-pipelines.com\/ar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/secure-pipelines.com\/ar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/secure-pipelines.com\/ar\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/secure-pipelines.com\/ar\/wp-json\/wp\/v2\/comments?post=755"}],"version-history":[{"count":1,"href":"https:\/\/secure-pipelines.com\/ar\/wp-json\/wp\/v2\/posts\/755\/revisions"}],"predecessor-version":[{"id":757,"href":"https:\/\/secure-pipelines.com\/ar\/wp-json\/wp\/v2\/posts\/755\/revisions\/757"}],"wp:attachment":[{"href":"https:\/\/secure-pipelines.com\/ar\/wp-json\/wp\/v2\/media?parent=755"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/secure-pipelines.com\/ar\/wp-json\/wp\/v2\/categories?post=755"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/secure-pipelines.com\/ar\/wp-json\/wp\/v2\/tags?post=755"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/secure-pipelines.com\/ar\/wp-json\/wp\/v2\/post_folder?post=755"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}