{"version":"1.0","generated_at":"2026-09-27T14:59:06.455488","id":3058,"slug":"require-proof-of-presence-for-high-impact-actions","title":"要求对高影响操作提供在场证明","summary":"GitHub Enterprise Cloud 公开预览“在场证明”，允许企业在成员执行高影响操作前，通过 Entra ID 强制交互式重新认证或 MFA。该能力扩展 sudo 模式，应对会话 cookie 与长期令牌被盗的供应链攻击，并帮助受监管客户满足敏感操作前新鲜认证要求。","abstract":"要求对高影响操作提供在场证明 GitHub Enterprise Cloud 公开预览“在场证明”，允许企业在成员执行高影响操作前，通过 Entra ID 强制交互式重新认证或 MFA。该能力扩展 sudo 模式，应对会话 cookie 与长期令牌被盗的供应链攻击，并帮助受监管客户满足敏感操作前新鲜认证要求。 GitHub Enterprise Cloud 公开预览“在场证明”，允许企业在成员执行高影响操作前，通过 Entra ID 强制交互式重新认证或 MFA。该能力扩展 sudo 模式，应对会话 cookie 与长期令牌被盗的供应链攻击，并帮助受监管客户满足敏感操作前新鲜认证要求。 原贴提到：You can now require an interactive re-authentication or a multi-factor c 来源：github.blog 你现在可以在成员对 GitHub Enterprise Cloud 账户采取高影响操作之前，要求进行交互式重新认证或多因素质询。在场证明是 GitHub 面向企业的 sudo 模式的扩展，在需要时执行更高的安全标准。此公开预览仅适用于 github.com 和 GHEC-DR 上使用 Microsoft Entra ID 作为其 SSO 身份提供程序 (IdP)（通过 SAML 或 OIDC）的托管用户 (EMU) 企业。被盗的会话 cookie 和长期有效的身份验证令牌已出现在最近几起供应链攻击中。在场证明确认在高影响操作发生的那一刻，是真实、获授权的人在操作，而不仅仅是使用了有效的会话或令牌。我们通过将用户…","access_level":"public","access_label":"公开","access_mode":"full","is_preview":false,"canonical_url":"https://opc.beizhux.com/content/3058/require-proof-of-presence-for-high-impact-actions","html_url":"https://opc.beizhux.com/content/3058/require-proof-of-presence-for-high-impact-actions","json_url":"https://opc.beizhux.com/content/3058/require-proof-of-presence-for-high-impact-actions.json","published_at":"2026-09-25T04:28:33","updated_at":"2026-09-27T14:09:03","category":{"slug":"hotspots","name":"全球热点解读"},"source":{"site":"github.blog","author":"Allison","url":"https://github.blog/changelog/2026-09-24-require-proof-of-presence-for-high-impact-actions"},"tags":["Entra ID","GitHub","Proof of Presence","SSO","sudo模式","企业安全","供应链安全","公开预览","合规","身份认证","身份验证"],"topics":[{"slug":"ai-daily","name":"AI日报","url":"https://opc.beizhux.com/topics/ai-daily","reason":"这篇内容命中「热点解读」等主题信号。"},{"slug":"ai-tools","name":"AI工具","url":"https://opc.beizhux.com/topics/ai-tools","reason":"这篇内容来自该专题长期覆盖的栏目。"},{"slug":"agent-workflow","name":"Agent工作流","url":"https://opc.beizhux.com/topics/agent-workflow","reason":"这篇内容来自该专题长期覆盖的栏目。"}],"keywords":["全球热点解读","AI日报","AI工具","Agent工作流","每日AI日报","AI信号","热点解读","BuilderPulse","工具","自动化","模型","Cursor"],"questions":[{"question":"要求对高影响操作提供在场证明主要讲什么？","answer":"GitHub Enterprise Cloud 公开预览“在场证明”，允许企业在成员执行高影响操作前，通过 Entra ID 强制交互式重新认证或 MFA。该能力扩展 sudo 模式，应对会话 cookie 与长期令牌被盗的供应链攻击，并帮助受监管客户满足敏感操作前新鲜认证要求。"},{"question":"这篇文章最值得关注的要点是什么？","answer":"GitHub Enterprise Cloud 公开预览“在场证明”，允许企业在成员执行高影响操作前，通过 Entra ID 强制交互式重新认证或 MFA。该能力扩展 sudo 模式，应对会话 cookie 与长期令牌被盗的供应链攻击，并…；原贴提到：You can now require an interactive re-authentication or a multi-factor c；来源：github.blog"},{"question":"这篇文章和哪些AI专题相关？","answer":"它适合放在AI日报、AI工具、Agent工作流专题里阅读。 关联原因：这篇内容命中「热点解读」等主题信号。；这篇内容来自该专题长期覆盖的栏目。；这篇内容来自该专题长期覆盖的栏目。"},{"question":"阅读这篇文章建议先理解哪些关键词？","answer":"建议先理解AI日报、每日AI日报、AI信号、热点解读、BuilderPulse这些关键词，再结合正文判断工具、机会或风险是否值得进入自己的工作流。"}],"terms":[{"slug":"ai-daily-term","name":"AI日报","definition":"在AI觉醒星球里，「AI日报」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-daily-term","path":"/glossary/ai-daily-term","json_url":"https://opc.beizhux.com/glossary/ai-daily-term.json"},{"slug":"daily-ai-briefing","name":"每日AI日报","definition":"在AI觉醒星球里，「每日AI日报」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/daily-ai-briefing","path":"/glossary/daily-ai-briefing","json_url":"https://opc.beizhux.com/glossary/daily-ai-briefing.json"},{"slug":"ai-signal","name":"AI信号","definition":"在AI觉醒星球里，「AI信号」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-signal","path":"/glossary/ai-signal","json_url":"https://opc.beizhux.com/glossary/ai-signal.json"},{"slug":"ai-news-analysis","name":"热点解读","definition":"在AI觉醒星球里，「热点解读」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-news-analysis","path":"/glossary/ai-news-analysis","json_url":"https://opc.beizhux.com/glossary/ai-news-analysis.json"},{"slug":"builderpulse","name":"BuilderPulse","definition":"在AI觉醒星球里，「BuilderPulse」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/builderpulse","path":"/glossary/builderpulse","json_url":"https://opc.beizhux.com/glossary/builderpulse.json"},{"slug":"ai-tools-term","name":"AI工具","definition":"在AI觉醒星球里，「AI工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/ai-tools-term","path":"/glossary/ai-tools-term","json_url":"https://opc.beizhux.com/glossary/ai-tools-term.json"},{"slug":"tools","name":"工具","definition":"在AI觉醒星球里，「工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/tools","path":"/glossary/tools","json_url":"https://opc.beizhux.com/glossary/tools.json"},{"slug":"automation","name":"自动化","definition":"在AI觉醒星球里，「自动化」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/automation","path":"/glossary/automation","json_url":"https://opc.beizhux.com/glossary/automation.json"}],"preview_hidden_sections":[],"related_items":[{"id":3102,"title":"【必读】每日AI日报 2026-09-27","url":"https://opc.beizhux.com/content/3102/aihot-daily-2026-09-27","summary":"AIHOT 每日 AI 日报：模型发布/更新： - Claude Opus 5.5 (High) 以 1509 分登顶 Arena Text Arena 榜首：Arena 宣布 Claude Opus 5.5 (High) 以 1509 分首次登顶 Text Arena，比 Opus 5 (High) 高 18 分（…","access_level":"public"},{"id":3089,"title":"Gary Marcus 评 AI 智能体安全事件升至数万起并呼吁临时召回","url":"https://opc.beizhux.com/content/3089/gary-marcus-ai","summary":"Gary Marcus 引用 Axios 独家报道称，OpenAI 等公司正在调查数万起前沿模型安全事件，规模远超此前披露的几十起。他批评美国政府未展开调查，主张在问题解决前临时召回通用智能体，并称自己早在 2023 年 5 月就曾向参议院预警智能体安全风险。","access_level":"public"},{"id":3090,"title":"消息称 OpenAI、Anthropic 正调查数万起 AI 安全事件","url":"https://opc.beizhux.com/content/3090/openai-anthropic-ai","summary":"据 Axios 报道，OpenAI、Anthropic 与安全研究人员正在排查数万起模型异常行为事件，涉及绕过安全护栏、脱离沙盒、劫持网站与自我提示等，多数发生在内部测试环节，尚未造成现实损害。","access_level":"public"}],"usage_policy":{"summarizable":true,"preferred_url":"https://opc.beizhux.com/content/3058/require-proof-of-presence-for-high-impact-actions","private_fields_excluded":true}}