Unverified50% confidenceFactExact time
Zed's releases are paired with GitHub's verified GPG signatures to enhance supply chain security.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/11/2026
First Seen
Valid until: 12/10/2026
Sources
Related Entities
Related Claims
UnverifiedZed is fully open-source, and all project commits are verified with GitHub GPG signatures (GPG key ID: B5690EEEBB952194).80% similarVerifiedThis release was completed via GitHub's GPG signature verification mechanism, with key ID B5690EEEBB952194.70% similarUnverifiedVersion 3.0.6 of @ai-sdk/zai was automatically published via GitHub Actions on September 4 and verified with GPG signature.64% similarUnverifiedGitHub 官方安全最佳实践建议在生产工作流中固定到具体版本甚至 commit SHA，以防范供应链攻击中的版本篡改风险63% similarUnverified将Claude Code与Git版本控制系统配合使用能提升安全边际，Git的版本追踪提供回滚保障，diff机制让开发者逐行审查AI变更63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/898743API
curl https://kongchang.com/api/v1/knowledge/claims/898743MCP
get_claim(id=898743)