{"id":3028,"date":"2023-04-15T10:25:57","date_gmt":"2023-04-15T02:25:57","guid":{"rendered":"https:\/\/www.juejinka.com\/?p=3028"},"modified":"2023-04-15T10:26:02","modified_gmt":"2023-04-15T02:26:02","slug":"google%e5%8f%91%e5%b8%83-deps-dev-api%e4%b8%8eassured-oss%e6%9c%8d%e5%8a%a1%ef%bc%8c%e5%bc%ba%e5%8c%96%e5%bc%80%e6%ba%90%e4%bb%a3%e7%a0%81%e4%bd%bf%e7%94%a8%e5%ae%89%e5%85%a8","status":"publish","type":"post","link":"https:\/\/www.juejinka.com\/y\/3028.html","title":{"rendered":"Google\u53d1\u5e03 deps.dev API\u4e0eAssured OSS\u670d\u52a1\uff0c\u5f3a\u5316\u5f00\u6e90\u4ee3\u7801\u4f7f\u7528\u5b89\u5168"},"content":{"rendered":"\n<p>\u8c37\u6b4c\u63a8\u51fa\u4e24\u6b3e\u4fdd\u62a4\u5f00\u6e90\u8f6f\u4ef6\u4f9b\u5e94\u94fe\u5b89\u5168\u7684\u5de5\u5177\uff0c\u5176\u4e00\u662f\u53d1\u5e03\u00a0deps.dev API\uff0c\u4f9b\u5f00\u53d1\u8005\u514d\u8d39\u8bbf\u95ee deps.dev \u6570\u636e\u96c6\uff0c\u8be5\u6570\u636e\u96c6\u542b\u6709\u8d85\u8fc75\uff0c000\u4e07\u4e2a\u5f00\u6e90\u8f6f\u4ef6\u5957\u4ef6\u7248\u672c\u7684\u5b89\u5168\u540e\u8bbe\u8d44\u6599\uff0c\u53e6\u5916\uff0c\u8c37\u6b4c\u4e91\u7aef\u7684Assured OSS\u670d\u52a1\u4e5f\u6b63\u5f0f\u5f00\u653e\uff0c \u7528\u6237\u53ef\u4ee5\u65b9\u4fbf\u53d6\u7528\u7ecf\u8c37\u6b4c\u5b89\u5168\u9a8c\u8bc1\u8fc7\u7684\u5f00\u6e90\u5957\u4ef6\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"960\" height=\"420\" src=\"https:\/\/www.juejinka.com\/news\/wp-content\/uploads\/2023\/04\/2023041502255619.png\" alt=\"\" class=\"wp-image-3031\"\/><\/figure>\n\n\n\n<p>\u5982\u4eca\uff0c\u8f6f\u4ef6\u5f00\u53d1\u9ad8\u5ea6\u4ef0\u8d56\u5f00\u6e90\u9879\u76ee\uff0c\u56e0\u6b64\u4e00\u65e6\u5f00\u6e90\u8f6f\u4ef6\u5b58\u5728\u6f0f\u6d1e\uff0c\u4fbf\u53ef\u80fd\u5bfc\u81f4\u8bf8\u5982Log4j\u3001Codecov\u548c3CX\u7b49\u653b\u51fb\u4e8b\u4ef6\uff0c\u5f00\u53d1\u8005\u5982\u80fd\u53d6\u5f97\u66f4\u591a\u5f00\u6e90\u9879\u76ee\u7684\u4fe1\u606f\uff0c\u5305\u62ec\u76f8\u4f9d\u9879\u76ee\u3001\u6388\u6743\u548c\u5404\u79cd\u5b89\u5168\u8baf\u53f7\u6570\u636e\uff0c\u6709\u6548\u638c\u63e1\u5e76\u4fee\u590d\u6240\u4f7f\u7528\u5957\u4ef6\u7684\u6f0f\u6d1e\uff0c\u540c\u65f6\u4f7f\u7528\u7ecf\u8fc7\u9a8c\u8bc1\u7684\u53ef\u4fe1\u8d56\u5957\u4ef6\uff0c\u5c06\u6709\u52a9\u5927\u5e45\u51cf\u5c11\u8f6f\u4ef6\u4f9b\u5e94\u94fe\u653b\u51fb\u6240\u5e26\u6765\u7684\u5b89\u5168\u98ce\u9669\u3002<\/p>\n\n\n\n<p>\u8c37\u6b4c\u7684 deps.dev \u6570\u636e\u96c6\u4fbf\u662f\u6536\u96c6\uff0c\u6765\u81eaGo\u3001Maven\u3001PyPI\u3001npm\u548cCargo\u7b495\u5927\u8f6f\u4ef6\u6253\u5305\u751f\u6001\u7cfb\u7684\u5957\u4ef6\u540e\u8bbe\u6570\u636e\uff0c\u6db5\u76d65\uff0c000\u4e07\u4e2a\u5957\u4ef6\u7248\u672c\uff0c\u5e76\u4e14\u4ece\u5957\u4ef6\u6ce8\u518c\u8868\u3001\u5f00\u6e90\u6f0f\u6d1e\u7ba1\u7406\u6570\u636e\u5e93\u3001\u4ee3\u7801\u6258\u7ba1\u670d\u52a1\u548c\u8f6f\u4ef6\u6784\u4ef6\u672c\u8eab\u7b49\u6765\u6e90\u66f4\u65b0\u76f8\u5173\u8d44\u6599\u96c6\u5185\u5bb9\u3002<\/p>\n\n\n\n<p>\u8c37\u6b4c\u6536\u96c6\u5e76\u4e14\u6c47\u603b\u8fd9\u4e9b\u6570\u636e\uff0c\u4ea7\u751f\u9012\u79fb\u76f8\u5173\u5173\u7cfb\u56fe\u3001\u5b89\u5168\u54a8\u8be2\u62a5\u544a\u3001OpenSSF\u5b89\u5168\u8bb0\u5206\u5361\u7b49\u4fe1\u606f\uff0c\u7528\u6237\u4e0d\u4ec5\u53ef\u4ee5\u76f4\u63a5\u4ece deps.dev \u7f51\u7ad9\u4eba\u5de5\u67e5\u8be2\uff0c\u6216\u662f\u4ee5\u4e91\u7aef\u6570\u636e\u4ed3\u50a8\u670d\u52a1BigQuery\u8fdb\u884c\u5927\u89c4\u6a21\u6279\u6b21\u5206\u6790\uff0c\u73b0\u5728\u8fd8\u53ef\u4ee5\u4f7f\u7528\u65b0\u63a8\u51fa\u7684API\uff0c\u4ee5\u7f16\u7a0b\u5f00\u53d1\u65b9\u6cd5\u5b9e\u65f6\u8bbf\u95ee\u6570\u636e\u96c6\uff0c\u5e76\u5728\u81ea\u5bb6\u5de5\u5177\u3001\u5de5\u4f5c\u6d41\u7a0b\u548c\u5206\u6790\u4e2d\u4f7f\u7528\u8fd9\u4e9b\u5b89\u5168\u6027\u6570\u636e\u3002<\/p>\n\n\n\n<p>\u900f\u8fc7\u91ca\u51fa deps.dev API\uff0c\u53ef\u8ba9\u4f01\u4e1a\u5728\u66f4\u591a\u5c42\u9762\u628a\u5173\u8f6f\u4f53\u5b89\u5168\u6027\uff0c\u50cf\u662f\u5f00\u53d1IDE\u6269\u5145\u5957\u4ef6\u3001\u6574\u5408\u81f3CI\/CD\uff0c\u4e5f\u80fd\u591f\u5728\u5efa\u7f6e\u5de5\u5177\u6216\u662f\u653f\u7b56\u5f15\u64ce\u6574\u5408 deps.dev API\uff0c\u786e\u4fdd\u8f6f\u4ef6\u7b26\u5408\u6cd5\u9075\u8981\u6c42\uff0c\u751a\u81f3\u662f\u7ed8\u5236\u51fa\u76f8\u5173\u7cfb\u56fe\uff0c\u4ee5\u53ef\u89c6\u5316\u7684\u65b9\u5f0f\u5448\u73b0\u7cfb\u7edf\u76f8\u4f9d\u6027\u3002 \u8c37\u6b4c\u57282022\u5e74\u6240\u5f00\u6e90\u7684\u8f6f\u4ef6\u5b89\u5168\u6027\u8bc4\u4f30\u5de5\u5177GUAC\u4fbf\u662f\u4f7f\u7528\u8be5API\uff0c\u4ee5 deps.dev \u6570\u636e\u8865\u5145SBOM\uff08Software Bill of Materials\uff09\u3002<\/p>\n\n\n\n<p>API\u63d0\u4f9b deps.dev \u7f51\u7ad9\u6240\u6ca1\u6709\u7684\u4e24\u4e2a\u91cd\u8981\u529f\u80fd\uff0c\u9996\u5148 deps.dev API\u652f\u6301\u54c8\u5e0c\u67e5\u8be2\uff0c\u901a\u8fc7\u67e5\u8be2\u6863\u6848\u5185\u5bb9\u7684\u54c8\u5e0c\uff0c\u53ef\u4ee5\u627e\u5230\u6240\u6709\u5305\u542b\u8be5\u6863\u6848\u7684\u5957\u4ef6\u7248\u672c\uff0c\u8be5\u529f\u80fd\u53ef\u4ee5\u534f\u52a9\u7528\u6237\u5728\u5373\u4fbf\u6ca1\u6709\u5176\u4ed6\u5efa\u7f6e\u540e\u8bbe\u8d44\u6599\u7684\u60c5\u51b5\u4e0b\uff0c\u627e\u5230\u6b63\u5728\u4f7f\u7528\u7684\u5957\u4ef6\u7248\u672c\uff0c\u8fd9\u5bf9\u4e8e\u8f6f\u4f53\u4f9b\u5e94\u94fe\u5b89\u5168\u3001\u5bb9\u5668\u5206\u6790\u3001\u4e8b\u4ef6\u54cd\u5e94\u548c\u6570\u5b57\u9274\u8bc6\u4e0a\u90fd\u975e\u5e38\u6709\u7528\u3002<\/p>\n\n\n\n<p>\u53e6\u4e00\u4e2a deps.dev API\u91cd\u8981\u529f\u80fd\uff0c\u4fbf\u662f\u63d0\u4f9b\u5b8c\u6574\u7684\u76f8\u4f9d\u56fe\uff0c\u8c37\u6b4c\u63d0\u5230\uff0cdeps.dev \u7684\u76f8\u5173\u8d44\u6599\u4e0d\u4ec5\u662f\u91c7\u7528\u5957\u4ef6\u7684\u5ba3\u544a\u8d44\u6599\uff0c\u4e5f\u7528\u548c\u5957\u4ef6\u5de5\u5177\u76f8\u540c\u7684\u7b97\u6cd5\u8ba1\u7b97\u76f8\u5173\u5173\u7cfb\uff0c\u56e0\u6b64 deps.dev API\u80fd\u591f\u63d0\u4f9b\u4e00\u7ec4\u5b8c\u6574\u4e14\u771f\u5b9e\u7684\u76f8\u4f9d\u9879\u76ee\u56fe\uff0c\u76f8\u5f53\u4e8e\u5f00\u53d1\u8005\u5b9e\u9645\u5b89\u88c5\u8f6f\u4ef6\u5957\u4ef6\u65f6\u5f97\u5230\u7684\u7ed3\u679c\uff0c\u900f\u8fc7 deps.dev API\u5f00\u53d1\u8005\u5c31\u53ef\u4ee5\u8bc4\u4f30\u3001 \u76d1\u63a7\u548c\u53ef\u89c6\u5316\u9884\u671f\u7684\u76f8\u5173\u5173\u7cfb\u3002<\/p>\n\n\n\n<p>\u8c37\u6b4c\u53e6\u4e00\u4e2a\u63d0\u9ad8\u5f00\u6e90\u8f6f\u4ef6\u5b89\u5168\u6027\u7684\u4f5c\u4e3a\uff0c\u4fbf\u662f\u6b63\u5f0f\u63a8\u51faAssured OSS\u670d\u52a1\uff0c\u8be5\u670d\u52a1\u76ee\u524d\u514d\u8d39\uff0c\u53ef\u534f\u52a9\u4f01\u4e1a\u83b7\u53d6\u901a\u8fc7\u8c37\u6b4c\u5b89\u5168\u68c0\u9a8c\u7684\u5957\u4ef6\uff0c\u8fdb\u800c\u964d\u4f4e\u8f6f\u4ef6\u4f9b\u5e94\u94fe\u653b\u51fb\u7684\u98ce\u9669\u3002 \u8c37\u6b4c\u4f1a\u5b9a\u671f\u626b\u63cf\u548c\u4fee\u590dAssured OSS\u8f6f\u4ef6\u5e93\u4e2d\u5b58\u5728\u6f0f\u6d1e\u7684\u5957\u4ef6\uff0c\u5e76\u4e14\u4ee5\u884c\u4e1a\u6807\u51c6\u63d0\u4f9bSBOM\uff0c\u4f7f\u7528\u6237\u80fd\u591f\u66f4\u597d\u5730\u638c\u63e1\u6240\u4f7f\u7528\u7684\u5957\u4ef6\u7ec4\u6210\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u8c37\u6b4c\u63a8\u51fa\u4e24\u6b3e\u4fdd\u62a4\u5f00\u6e90\u8f6f\u4ef6\u4f9b\u5e94\u94fe\u5b89\u5168\u7684\u5de5\u5177\uff0c\u5176\u4e00\u662f\u53d1\u5e03\u00a0deps.dev API\uff0c\u4f9b\u5f00\u53d1\u8005\u514d\u8d39\u8bbf\u95ee deps.dev \u6570\u636e\u96c6\uff0c\u8be5\u6570\u636e\u96c6\u542b\u6709\u8d85\u8fc75\uff0c000\u4e07\u4e2a\u5f00\u6e90\u8f6f\u4ef6\u5957\u4ef6\u7248\u672c\u7684\u5b89\u5168\u540e\u8bbe&#8230;<\/p>\n","protected":false},"author":2,"featured_media":3031,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[15],"tags":[],"special":[],"_links":{"self":[{"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/posts\/3028"}],"collection":[{"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/comments?post=3028"}],"version-history":[{"count":1,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/posts\/3028\/revisions"}],"predecessor-version":[{"id":3032,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/posts\/3028\/revisions\/3032"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/media\/3031"}],"wp:attachment":[{"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/media?parent=3028"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/categories?post=3028"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/tags?post=3028"},{"taxonomy":"special","embeddable":true,"href":"https:\/\/www.juejinka.com\/news\/wp-json\/wp\/v2\/special?post=3028"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}