{"meta":{"title":"为项目建立出处和完整性","intro":"保护并审核你的版本和工件。","product":"安全性和代码质量","breadcrumbs":[{"href":"/zh/code-security","title":"安全性和代码质量"},{"href":"/zh/code-security/how-tos","title":"How-tos"},{"href":"/zh/code-security/how-tos/secure-your-supply-chain","title":"保护供应链"},{"href":"/zh/code-security/how-tos/secure-your-supply-chain/establish-provenance-and-integrity","title":"建立来源追溯和完整性"}],"documentType":"subcategory"},"body":"# 为项目建立出处和完整性\n\n保护并审核你的版本和工件。\n\n## Links\n\n* [阻止对版本进行更改](/zh/code-security/how-tos/secure-your-supply-chain/establish-provenance-and-integrity/prevent-release-changes)\n\n  你可以为仓库或组织强制实施不可变版本，以阻止潜在漏洞。\n\n* [导出存储库的软件物料清单](/zh/code-security/how-tos/secure-your-supply-chain/establish-provenance-and-integrity/export-dependencies-as-sbom)\n\n  可以从依赖项关系图导出存储库的软件物料清单 (SBOM)。 SBOM 允许透明化开放源代码使用情况，并帮助暴露供应链漏洞，降低供应链风险。\n\n* [将存储和部署数据上传到 linked artifacts page](/zh/code-security/how-tos/secure-your-supply-chain/establish-provenance-and-integrity/upload-linked-artifacts)\n\n  将组织中的包和构建与存储和部署数据相关联。\n\n* [审核组织在 linked artifacts page 上的构建](/zh/code-security/how-tos/secure-your-supply-chain/establish-provenance-and-integrity/view-linked-artifacts)\n\n  查看或导出构建运行记录、存储详细信息和部署上下文的元数据。\n\n* [从 linked artifacts page 中删除工件](/zh/code-security/how-tos/secure-your-supply-chain/establish-provenance-and-integrity/remove-linked-artifacts)\n\n  设置制品的存储和部署状态，以反映它们已不再使用。"}