<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>C&#43;&#43;17 on 知识铺的博客</title>
    <link>https://index.zshipu.com/ai001/tags/C&#43;&#43;17/</link>
    <description>Recent content in C&#43;&#43;17 on 知识铺的博客</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>zh-CN</language>
    <lastBuildDate>Wed, 02 Sep 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://index.zshipu.com/ai001/tags/C++17/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>检测system()调用不难，构建可信仓库安全扫描器却极难</title>
      <link>https://index.zshipu.com/ai001/post/20260902/%E6%A3%80%E6%B5%8Bsystem%E8%B0%83%E7%94%A8%E4%B8%8D%E9%9A%BE%E6%9E%84%E5%BB%BA%E5%8F%AF%E4%BF%A1%E4%BB%93%E5%BA%93%E5%AE%89%E5%85%A8%E6%89%AB%E6%8F%8F%E5%99%A8%E5%8D%B4%E6%9E%81%E9%9A%BE/</link>
      <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
      <guid>https://index.zshipu.com/ai001/post/20260902/%E6%A3%80%E6%B5%8Bsystem%E8%B0%83%E7%94%A8%E4%B8%8D%E9%9A%BE%E6%9E%84%E5%BB%BA%E5%8F%AF%E4%BF%A1%E4%BB%93%E5%BA%93%E5%AE%89%E5%85%A8%E6%89%AB%E6%8F%8F%E5%99%A8%E5%8D%B4%E6%9E%81%E9%9A%BE/</guid>
      <description>检测system()调用不难，构建可信仓库安全扫描器却极难 检测system()调用或硬编码密钥并不难，作者用C++17无第三方运行时依赖构建仓库安全分析器时发现，真正的难点在于把多个扫描器整合成一个能理解仓库、解释风险、给出下一步建议、生成机器可读报告，并在违反安全策略时让CI管</description>
    </item>
  </channel>
</rss>
