Skip to content

Commit

Permalink
Add description and video to README file
Browse files Browse the repository at this point in the history
  • Loading branch information
ThomasVitale committed Nov 19, 2023
1 parent f0549b8 commit aaacdce
Showing 1 changed file with 14 additions and 0 deletions.
14 changes: 14 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,19 @@
# Supply Chain Security Java

Samples showing how to secure the supply chain for Java applications, including:

* SBOMs with CycloneDX and SPDX
* Dependency Management with Gradle and Maven
* Cryptographic signatures, policies, and SLSA

## Pre-requisites

* Java 21

## Devoxx Belgium 2023

[![Watch the video](https://img.youtube.com/vi/ftPFxK8JPNM/hqdefault.jpg)](https://www.youtube.com/embed/ftPFxK8JPNM)

Software supply chain security has never been more critical, and protecting our systems from bad actors and vulnerabilities is a constant challenge.

Do you know whether your Git commits are being manipulated without your knowledge? Are you confident that you have complete visibility of all the libraries and dependencies in your application JARs and container images? Can you trust the results of your vulnerability scanner? And how can you verify the integrity of your applications in production?
Expand Down

0 comments on commit aaacdce

Please sign in to comment.