<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>供应链安全 on BvBeJ的小站</title><link>https://www.bvbej.com/tags/%E4%BE%9B%E5%BA%94%E9%93%BE%E5%AE%89%E5%85%A8/</link><description>Recent content in 供应链安全 on BvBeJ的小站</description><generator>Hugo</generator><language>zh-CN</language><lastBuildDate>Sun, 03 May 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://www.bvbej.com/tags/%E4%BE%9B%E5%BA%94%E9%93%BE%E5%AE%89%E5%85%A8/feed.xml" rel="self" type="application/rss+xml"/><item><title>Docker 供应链安全落地：从 SBOM 到 SLSA 的最小可行路径</title><link>https://www.bvbej.com/posts/docker-supply-chain-slsa-practice/</link><pubDate>Sun, 03 May 2026 00:00:00 +0000</pubDate><guid>https://www.bvbej.com/posts/docker-supply-chain-slsa-practice/</guid><description>安全不是扫描报告，而是可追溯、可验证、可阻断的发布链路。</description></item></channel></rss>