Unverified50% confidenceOpinionExact time
谷歌通过 Google Drive 分发源码的做法与自身倡导的 SLSA 安全理念形成矛盾
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
8/21/2026
First Seen
Valid until: 11/19/2026
Sources
Related Claims
UnverifiedFor certain source code projects, Google has replaced the traditional Git tag release mechanism with distribution via Google Drive.70% similarUnverified如果关键源码仅存在于 Google Drive 链接背后，将逃逸出 Software Heritage 等保存网络的覆盖范围67% similarUnverifiedThe SLSA (Supply-chain Levels for Software Artifacts) framework, led by Google, divides software supply chain security capabilities into four levels.67% similarUnverified谷歌位置历史迁移变化源于多年来监管压力和用户隐私诉讼的推动，此前曾有报道揭示即使用户关闭位置历史功能谷歌仍通过其他途径收集位置数据66% similarUnverifiedThe SLSA framework was proposed by Google in 2021 and has since been transferred to OpenSSF for governance, dividing software supply chain security capabilities into four levels (L1 to L4).65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/782430API
curl https://kongchang.com/api/v1/knowledge/claims/782430MCP
get_claim(id=782430)