<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>漏洞扫描 on PlumePHP</title><link>https://plumephp.com/tags/%E6%BC%8F%E6%B4%9E%E6%89%AB%E6%8F%8F/</link><description>Recent content in 漏洞扫描 on PlumePHP</description><generator>Hugo</generator><language>zh-CN</language><lastBuildDate>Sun, 27 Sep 2026 10:00:00 +0800</lastBuildDate><atom:link href="https://plumephp.com/tags/%E6%BC%8F%E6%B4%9E%E6%89%AB%E6%8F%8F/index.xml" rel="self" type="application/rss+xml"/><item><title>Docker 镜像供应链安全：SBOM、签名、扫描与 SLSA 合规</title><link>https://plumephp.com/docker-image-supply-chain/</link><pubDate>Sun, 27 Sep 2026 10:00:00 +0800</pubDate><guid>https://plumephp.com/docker-image-supply-chain/</guid><description>Docker 镜像供应链安全指南：镜像攻击面分析、Trivy/Snyk 漏洞扫描与门禁、SBOM 清单生成、Cosign/Notation 镜像签名与验证、SLSA 供应链等级、最小镜像与多阶段构建、Registry 准入与镜像可信执行。</description></item></channel></rss>