{"version":"1.0","generated_at":"2026-10-04T15:55:11.220334","id":1701,"slug":"innersource-security-advisories-are-generally-available","title":"内部源安全公告现已全面可用","summary":"GitHub Advanced Security 企业客户可发布内部安全公告，类似开源公告但仅限企业内可见，通过新API管理漏洞，Dependabot自动通知并升级依赖。","abstract":"内部源安全公告现已全面可用 GitHub Advanced Security 企业客户可发布内部安全公告，类似开源公告但仅限企业内可见，通过新API管理漏洞，Dependabot自动通知并升级依赖。 GitHub Advanced Security 企业客户可发布内部安全公告，类似开源公告但仅限企业内可见，通过新API管理漏洞，Dependabot自动通知并升级依赖。 原贴提到：GitHub Advanced Security enterprise customers can now publish internal s 来源：github.blog GitHub Advanced Security 企业客户现在可以发布内部安全公告。内部源公告与 GitHub 的开源公告类似，但其可见性仅限于企业拥有的仓库。有一个新的 REST API 端点用于管理内部源漏洞，包括创建、更新或撤销漏洞的操作。一旦你使用 API 为某个组件创建公告，GitHub 会使用 Dependabot 通知企业内部使用该组件的仓库。通知可以包括安全警报和版本更新。当需要版本升级时，Dependabot 会打开一个拉取请求，将有漏洞的组件版本升级到带有修复的版本。 这是什么信号？ GitHub 正式推出内部源安全公告功能，标志着企业级安全协作从“事后通报”向“自动防御”迈进。这是 GitHub 继私有仓库安全告警后，进一步将开源社区的安全公告机制内化为企业私有的解决方案。 为什么重要？ 多数企业依赖内部专有组件，这些组件的漏洞管理过去依赖手动流程或第三方工具。GitHub 通过 Dependabot 将通…","access_level":"member","access_label":"免费阅读","access_mode":"full","is_preview":false,"canonical_url":"https://opc.beizhux.com/content/1701/innersource-security-advisories-are-generally-available","html_url":"https://opc.beizhux.com/content/1701/innersource-security-advisories-are-generally-available","json_url":"https://opc.beizhux.com/content/1701/innersource-security-advisories-are-generally-available.json","published_at":"2026-07-09T05:30:35","updated_at":"2026-10-04T15:22:19","category":{"slug":"ai-business","name":"AI小生意项目库"},"source":{"site":"github.blog","author":"Allison","url":"https://github.blog/changelog/2026-07-08-innersource-security-advisories-are-generally-available"},"tags":["AI","API","Dependabot","GitHub","GitHub Changelog","Innersource","REST API","企业安全","供应链安全","内源","内源安全","内部安全"],"topics":[{"slug":"ai-side-business","name":"AI副业","url":"https://opc.beizhux.com/topics/ai-side-business","reason":"这篇内容命中「项目、小生意、变现」等主题信号。"}],"keywords":["AI小生意项目库","AI副业","工具","自动化","工作流","副业","创业","项目","小生意","变现","交付","内容"],"questions":[{"question":"内部源安全公告现已全面可用主要讲什么？","answer":"GitHub Advanced Security 企业客户可发布内部安全公告，类似开源公告但仅限企业内可见，通过新API管理漏洞，Dependabot自动通知并升级依赖。"},{"question":"这篇文章最值得关注的要点是什么？","answer":"GitHub Advanced Security 企业客户可发布内部安全公告，类似开源公告但仅限企业内可见，通过新API管理漏洞，Dependabot自动通知并升级依赖。；原贴提到：GitHub Advanced Security enterprise customers can now publish internal s；来源：github.blog"},{"question":"这篇文章和哪些AI专题相关？","answer":"它适合放在AI副业专题里阅读。 关联原因：这篇内容命中「项目、小生意、变现」等主题信号。"},{"question":"阅读这篇文章建议先理解哪些关键词？","answer":"建议先理解工具、自动化、工作流、副业、创业这些关键词，再结合正文判断工具、机会或风险是否值得进入自己的工作流。"}],"terms":[{"slug":"tools","name":"工具","definition":"在AI觉醒星球里，「工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/tools","path":"/glossary/tools","json_url":"https://opc.beizhux.com/glossary/tools.json"},{"slug":"automation","name":"自动化","definition":"在AI觉醒星球里，「自动化」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/automation","path":"/glossary/automation","json_url":"https://opc.beizhux.com/glossary/automation.json"},{"slug":"workflow","name":"工作流","definition":"在AI觉醒星球里，「工作流」属于「Agent工作流」方向。聚合Agent、AI编程、Claude Code、Cursor、工作流自动化等内容，帮助你把智能体能力落到真实任务链路。 把智能体当成任务系统，而不是聊天窗口。","topic_slug":"agent-workflow","topic_name":"Agent工作流","topic_title":"Agent工作流：智能体、AI编程与自动化协作","topic_url":"https://opc.beizhux.com/topics/agent-workflow","topic_path":"/topics/agent-workflow","url":"https://opc.beizhux.com/glossary/workflow","path":"/glossary/workflow","json_url":"https://opc.beizhux.com/glossary/workflow.json"},{"slug":"side-business","name":"副业","definition":"在AI觉醒星球里，「副业」属于「AI副业」方向。筛选AI副业、AI小生意、项目认知和可收费交付案例，关注普通人可以验证、复制和沉淀的方法。 从真实痛点出发，先做能收费的小验证。","topic_slug":"ai-side-business","topic_name":"AI副业","topic_title":"AI副业：小生意、项目机会与可收费交付","topic_url":"https://opc.beizhux.com/topics/ai-side-business","topic_path":"/topics/ai-side-business","url":"https://opc.beizhux.com/glossary/side-business","path":"/glossary/side-business","json_url":"https://opc.beizhux.com/glossary/side-business.json"},{"slug":"startup","name":"创业","definition":"在AI觉醒星球里，「创业」属于「AI副业」方向。筛选AI副业、AI小生意、项目认知和可收费交付案例，关注普通人可以验证、复制和沉淀的方法。 从真实痛点出发，先做能收费的小验证。","topic_slug":"ai-side-business","topic_name":"AI副业","topic_title":"AI副业：小生意、项目机会与可收费交付","topic_url":"https://opc.beizhux.com/topics/ai-side-business","topic_path":"/topics/ai-side-business","url":"https://opc.beizhux.com/glossary/startup","path":"/glossary/startup","json_url":"https://opc.beizhux.com/glossary/startup.json"},{"slug":"project","name":"项目","definition":"在AI觉醒星球里，「项目」属于「AI副业」方向。筛选AI副业、AI小生意、项目认知和可收费交付案例，关注普通人可以验证、复制和沉淀的方法。 从真实痛点出发，先做能收费的小验证。","topic_slug":"ai-side-business","topic_name":"AI副业","topic_title":"AI副业：小生意、项目机会与可收费交付","topic_url":"https://opc.beizhux.com/topics/ai-side-business","topic_path":"/topics/ai-side-business","url":"https://opc.beizhux.com/glossary/project","path":"/glossary/project","json_url":"https://opc.beizhux.com/glossary/project.json"},{"slug":"small-business","name":"小生意","definition":"在AI觉醒星球里，「小生意」属于「AI副业」方向。筛选AI副业、AI小生意、项目认知和可收费交付案例，关注普通人可以验证、复制和沉淀的方法。 从真实痛点出发，先做能收费的小验证。","topic_slug":"ai-side-business","topic_name":"AI副业","topic_title":"AI副业：小生意、项目机会与可收费交付","topic_url":"https://opc.beizhux.com/topics/ai-side-business","topic_path":"/topics/ai-side-business","url":"https://opc.beizhux.com/glossary/small-business","path":"/glossary/small-business","json_url":"https://opc.beizhux.com/glossary/small-business.json"},{"slug":"monetization","name":"变现","definition":"在AI觉醒星球里，「变现」属于「AI副业」方向。筛选AI副业、AI小生意、项目认知和可收费交付案例，关注普通人可以验证、复制和沉淀的方法。 从真实痛点出发，先做能收费的小验证。","topic_slug":"ai-side-business","topic_name":"AI副业","topic_title":"AI副业：小生意、项目机会与可收费交付","topic_url":"https://opc.beizhux.com/topics/ai-side-business","topic_path":"/topics/ai-side-business","url":"https://opc.beizhux.com/glossary/monetization","path":"/glossary/monetization","json_url":"https://opc.beizhux.com/glossary/monetization.json"}],"preview_hidden_sections":[],"related_items":[{"id":3223,"title":"美财长贝森特批评 Anthropic、OpenAI 等风险警告：危言耸听、光喊话不拿解决方案","url":"https://opc.beizhux.com/content/3223/anthropic-openai","summary":"美国财政部长贝森特在 Axios 采访中点名批评 Anthropic CEO 阿莫代伊等人的 AI 生存性风险警告，认为只发出危言耸听的声音却拿不出解决方案不是领导力，并呼吁实验室负责人承担安全责任、安全地加速发展。","access_level":"member"},{"id":3224,"title":"BestBlogs 早报：VS Code 周更与递归语言模型等十则","url":"https://opc.beizhux.com/content/3224/bestblogs-vs-code","summary":"BestBlogs 早报汇总十则 AI 动态，涵盖 VS Code 发布节奏改为周更、Google DeepMind 的 Interactions API 上下文与沙箱复用机制，以及 DatologyAI 将预训练合成数据规模扩大到 12 万亿 token。","access_level":"member"},{"id":3226,"title":"AI 用 5 天生成《辐射：纽约》浏览器游戏，被贝塞斯达发函叫停","url":"https://opc.beizhux.com/content/3226/ai-5-2","summary":"制作者 Chrisfirst 完全依靠 Claude Opus 5.5 生成代码，用五天做出浏览器游戏《辐射：纽约》，全部内容由代码生成，采用低多边形画面，属于概念验证，任何人可直接在浏览器运行。贝塞斯达已发送停止侵权函叫停该项目；IT之家认为这类 AI 自制衍生游戏潮流可能冲击头部游戏 IP 的玩家基本盘。","access_level":"member"}],"usage_policy":{"summarizable":true,"preferred_url":"https://opc.beizhux.com/content/1701/innersource-security-advisories-are-generally-available","private_fields_excluded":true}}