智能体
blog.jetbrains.com ·
@Katherine Druckman
JetBrains 加入开源安全基金会 OpenSSF
JetBrains 宣布以 general member 身份加入 Linux 基金会旗下的 Open Source Security Foundation（OpenSSF）。OpenSSF 托管 Sigstore、SLSA 等项目，其 AI/ML Security Working Group 发布关于机器学习模型签名和 AI 代码助手安全指令的指南。JetBrains 表示，随着编码 agent 承担更多开发工作，代码生产成本下降但验证成本上升，其中很大部分是安全验证工作，因此需要让开发者理解并验证 agent 产出的代码，其内部产品 JetBrains Air 正围绕这一问题展开。
AI推荐理由 JetBrains 官方博客宣布以 general member 身份加入 OpenSSF，并明确提到其 AI/ML Security Working Group 在模型签名与 AI 代码助手安全指令方面的指南，以及 JetBrains Air 用于帮助开发者理解和验证 agent 产出。这是可核实的官方一手信息，对 AI 代码生成的安全验证与供应链信任有实际参考价值；但内容以表态和方向为主，缺少具体技术细节或落地数据。
72
正文
JetBrains has joined the Open Source Security Foundation (OpenSSF) as a general member. OpenSSF is a cross-industry initiative of the Linux Foundation that works to secure the software supply chain on which the industry depends. The foundation announced our membership today, together with other new members, at OpenSSF Community Day Europe in Prague, co-located with Open Source Summit Europe. OpenSSF is home to projects that many teams already rely on, including Sigstore for signing and verifying software and SLSA for supply chain integrity. Its AI/ML Security Working Group publishes guidance on signing machine learning models and on writing safe instructions for AI code assistants. Why we are joining As coding agents take on more development work, code becomes cheaper to produce but more expensive to verify, and much of that verification is security work. Developers need to know where their code and dependencies come from, and AI adds new questions about how to trust the models and assistants that help write it. JetBrains Air is how we are working on these questions in our own products, helping developers understand and verify what agents produce. OpenSSF is where we can work on the same questions out in the open, with the wider industry. “Software development is at an inflection point. AI is changing how software is built and creating new security challenges, making it more important than ever that developers can understand, verify, and trust the software they produce. JetBrains has supported professional software development for more than two decades, and we believe staying ahead of these challenges is best done collaboratively and in the open. OpenSSF brings together some of the strongest expertise in the industry, and we are glad to join the community and help shape the future of secure software development.” – Katherine Druckman, Head of Community and Partnership Engagement, JetBrains We want to stay ahead of the security questions AI raises, and help guide how the industry answers them. OpenSSF is the right place to do both. Looking ahead Developers trust JetBrains tools with their code every day. We take that trust seriously, and supporting the community working to make software more secure is part of how we aim to keep earning it. We look forward to working alongside the rest of the OpenSSF community.