Unverified50% confidenceFactExact time
SLSA 框架和 Sigstore 项目旨在为软件制品提供端到端的来源证明和签名验证，谷歌是 SLSA 框架的主要推动者
1
Sources
50%
Confidence
Long-term
Relevance
8/21/2026
First Seen
Sources
Related Claims
UnverifiedSLSA框架由Google于2021年提出，现已移交至OpenSSF治理，将软件供应链安全能力划分为四个等级（L1至L4）74% similarUnverifiedSLSA（Supply-chain Levels for Software Artifacts）框架由 Google 主导提出，将软件供应链安全能力划分为四个等级72% similarUnverified谷歌通过 Google Drive 分发源码的做法与自身倡导的 SLSA 安全理念形成矛盾63% similarUnverifiedMeta的LLaMA、Google的Gemma等开源模型均通过HuggingFace平台分发60% similarUnverifiedGoogle Research与Google Cloud联合发布企业级Agentic RAG框架，采用多智能体架构60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/782429API
curl https://kongchang.com/api/v1/knowledge/claims/782429MCP
get_claim(id=782429)