https://plumephp.com/tags/%E4%BE%9B%E5%BA%94%E9%93%BE/Recent content in 供应链 on PlumePHPHugozh-CNSun, 27 Sep 2026 12:00:00 +0800https://plumephp.com/kubernetes-image-build-security/Sun, 27 Sep 2026 12:00:00 +0800https://plumephp.com/kubernetes-image-build-security/<p>镜像既是应用的分发载体，也是<strong>攻击面与信任边界</strong>。镜像小了、安全了、可验证了，部署才谈得上可靠；镜像里藏着漏洞、悬空的基础镜像、无签名来源，等于把后门和风险一起交付。本指南从<strong>构建</strong>到<strong>扫描</strong>再到<strong>签名与供应链信任</strong>，建立一条「构建得快、镜像得小、来源可验、内容可信」的镜像产线。</p>https://plumephp.com/docker-image-supply-chain/Sun, 27 Sep 2026 10:00:00 +0800https://plumephp.com/docker-image-supply-chain/Docker 镜像供应链安全指南：镜像攻击面分析、Trivy/Snyk 漏洞扫描与门禁、SBOM 清单生成、Cosign/Notation 镜像签名与验证、SLSA 供应链等级、最小镜像与多阶段构建、Registry 准入与镜像可信执行。