FILES on Tony Baihttps://tonybai.com/tags/files/Recent content in FILES on Tony BaiHugozh-cn2004-2026 Tony Bai. 版权所有.Fri, 02 Jan 2026 00:00:00 +0800从“源码审计”到“能力审计”：Go 生态应对供应链攻击的范式转移https://tonybai.com/2026/01/02/go-supply-chain-attack-source-code-to-capability-auditing-paradigm-shift/Fri, 02 Jan 2026 00:00:00 +0800https://tonybai.com/2026/01/02/go-supply-chain-attack-source-code-to-capability-auditing-paradigm-shift/本文永久链接 – https://tonybai.com/2026/01/02/go-supply-chain-attack-source-code-to-capability-auditing-paradigm-shift 大家好，我是Tony Bai。 在软件供应链安全的传统认知中，我们默认遵循一个假设：“代码即真理”。如果你审查了 GitHub 上的源码，确认它是安全的，那么你部署的服务就应...