vault-para/.smart-env/multi/000-inbox_clippings_2023_03_如何通过SBOM（软件物料清单）实现安全治理_墨菲安全_md.ajson

"smart_sources:000-inbox/clippings/2023/03/如何通过SBOM（软件物料清单）实现安全治理_墨菲安全.md": {"path":"000-inbox/clippings/2023/03/如何通过SBOM（软件物料清单）实现安全治理_墨菲安全.md","last_embed":{"hash":null},"embeddings":{},"last_read":{"hash":"soncgo","at":1766986878042},"class_name":"SmartSource","last_import":{"mtime":1678152365000,"size":9679,"at":1766986878359,"hash":"soncgo"},"blocks":{"#---frontmatter---":[1,5],"#":[6,7],"##前言":[8,11],"##前言#{1}":[10,11],"##什么是SBOM":[12,35],"##什么是SBOM#{1}":[14,17],"##什么是SBOM#{2}":[18,18],"##什么是SBOM#{3}":[19,19],"##什么是SBOM#{4}":[20,21],"##什么是SBOM#{5}":[22,35],"##SBOM的用途":[36,43],"##SBOM的用途#{1}":[38,39],"##SBOM的用途#{2}":[40,40],"##SBOM的用途#{3}":[41,41],"##SBOM的用途#{4}":[42,43],"##依赖治理":[44,53],"##依赖治理#{1}":[46,53],"##漏洞管理":[54,65],"##漏洞管理#{1}":[56,65],"##开源许可证合规":[66,75],"##开源许可证合规#{1}":[68,75],"##如何生成SBOM":[76,79],"##如何生成SBOM#{1}":[78,79],"##SCA（软件成分分析）":[80,87],"##SCA（软件成分分析）#{1}":[82,87],"##知识库数据":[88,93],"##知识库数据#{1}":[90,93],"##如何发挥SBOM的作用":[94,97],"##如何发挥SBOM的作用#{1}":[96,97],"##SBOM及时更新":[98,103],"##SBOM及时更新#{1}":[100,103],"##通过知识库关联风险数据":[104,109],"##通过知识库关联风险数据#{1}":[106,109],"##构建管理平台":[110,117],"##构建管理平台#{1}":[112,117],"##要求供应商提供SBOM":[118,121],"##要求供应商提供SBOM#{1}":[120,121],"##总结":[122,125],"##总结#{1}":[124,125],"##参考链接":[126,134],"##参考链接#{1}":[128,134]},"outlinks":[{"title":"墨菲安全","target":"https://www.murphysec.com/blog/author/chenshuang","line":6},{"title":"知识普及","target":"https://www.murphysec.com/blog/category/knowledge-popularization","line":6},{"title":"![如何通过SBOM（软件物料清单）实现安全治理","target":"https://www.murphysec.com/blog/wp-content/uploads/2023/01/asynccode-89.png","line":26},{"title":"![如何通过SBOM（软件物料清单）实现安全治理","target":"https://www.murphysec.com/blog/wp-content/uploads/2023/01/asynccode-90.png","line":30},{"title":"![如何通过SBOM（软件物料清单）实现安全治理","target":"https://www.murphysec.com/blog/wp-content/uploads/2023/01/asynccode-91.png","line":48},{"title":"https://www.ntia.gov/SBOM","target":"https://www.ntia.gov/SBOM","line":128},{"title":"https://www.ntia.gov/blog/2021/ntia-releases-minimum-elements-software-bill-materials","target":"https://www.ntia.gov/blog/2021/ntia-releases-minimum-elements-software-bill-materials","line":130},{"title":"https://linuxfoundation.org/wp-content/uploads/LFResearch\\_SBOM\\_Report\\_020422.pdf","target":"https://linuxfoundation.org/wp-content/uploads/LFResearch_SBOM_Report_020422.pdf","line":132}],"metadata":{"page-title":"如何通过SBOM（软件物料清单）实现安全治理_墨菲安全","url":"https://www.murphysec.com/blog/knowledge-popularization/4218.html","date":"2023-03-07 09:26:04"},"task_lines":[],"tasks":{},"codeblock_ranges":[]},