Unverified50% confidenceOpinionExact time
Hansel 的分类标签中包含 GitHub,暗示其可能采用开源或部分开源方式发布,符合安全领域'Don't trust, verify'原则
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
8/22/2026
First Seen
Valid until: 11/20/2026
Sources
Related Entities
Related Claims
UnverifiedDify adopts an open-source-first strategy, with its core code hosted on GitHub and supporting private enterprise deployment.68% similarVerifiedPlatforms such as GitHub have built-in Secret Scanning functionality that can automatically detect API keys accidentally committed in code and issue warnings.67% similarUnverifiedGitHub 官方安全最佳实践建议在生产工作流中固定到具体版本甚至 commit SHA,以防范供应链攻击中的版本篡改风险66% similarUnverifiedThere is an open-source project on GitHub called awesome-agent-skills, maintained by developer JackyST0.66% similarUnverifiedGitHub 的 Dependabot、Google 的 OSS-Fuzz 以及 OpenSSF 的 Scorecard 是供应链安全领域的重要实践工具66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/788483API
curl https://kongchang.com/api/v1/knowledge/claims/788483MCP
get_claim(id=788483)