ThomasVitale/supply-chain-security-java

Samples showing how to secure the supply chain for Java applications.

Supply Chain Security Java

Samples showing how to secure the supply chain for Java applications, including:

• SBOMs with CycloneDX and SPDX
• Dependency Management with Gradle and Maven
• Cryptographic signatures, policies, and SLSA
• Containerization with Cloud Native Builpacks

Articles

• Supply Chain Security: SBOMs for Java Applications

Conference Presentations

Devoxx UK 2024

Voxxed Days Zurich 2024

Devoxx Belgium 2023