📄 中文摘要
随着人工智能应用的开发与运营进入全面推进阶段，安全威胁也随之进入新阶段。Trivy 作为一个容器扫描工具，近期遭遇了开源软件供应链的安全漏洞，导致其安全性受到质疑。谷歌和 Cloudflare 等平台提供商对此事件做出了积极响应，采取了一系列措施来增强安全防护。这一事件突显了在人工智能时代，开源软件安全性的重要性以及平台提供商在保障用户安全方面的责任。
人工智能时代的安全与开源软件：Trivy 受损事件及谷歌与 Cloudflare 的应对措施
📄 English Summary
AI Era Security and OSS: Trivy Compromise, Google and Cloudflare's Countermeasures
As AI application development and operations accelerate, security threats are evolving into a new phase. The Trivy container scanner recently experienced a compromise in the open-source software supply chain, raising concerns about its security integrity. In response, platform providers like Google and Cloudflare have implemented a series of measures to enhance security defenses. This incident highlights the critical importance of open-source software security in the AI era and the responsibility of platform providers to safeguard user security.