
What we’re about
This meetup offers talks about cool software technology research. Brought to you by KTH Royal Institute of Technology.
Upcoming events
2

Konflux Secure Software Factory and Hermeto | Adam Kaplan (Red Hat)
Room 1440, Henrik Eriksson, Lindstedtsvägen 3, floor 4, Stockholm, sc, SEAdam Kaplan (Red Hat) will give a seminar titled:
"Konflux Secure Software Factory and Hermeto".
Abstract:
Konflux is an open-source continuous integration and delivery (CI/CD) application that simplifies the process of building, testing, and releasing secured software faster [1]. It provides a comprehensive platform that hardens the entire software supply chain against emerging threats, and meets the highest level of the OpenSSF’s Software Levels for Software Artifacts (SLSA) standard for build platforms [2]. Konflux goes beyond these standards by providing curated build pipelines that generate an accurate Software Bill of Materials (SBOM) and proactively scan build artifacts for vulnerabilities.
This session will introduce the core architecture behind Konflux and the components of the build pipeline. The presentation will focus on the SBOM generation process and Hermeto, a command line tool that prefetches software dependencies used in a build [3]. Maven is currently not well supported by Hermeto, and this session will describe the current design proposals that include the Maven Lockfile Plugin in its solution.
[1] https://konflux-ci.dev/docs/
[2] https://slsa.dev/
[3] https://hermetoproject.github.io/hermeto/
Speaker Bio:
Adam Kaplan (he/him/his) is a Senior Principal Software Engineer at Red Hat, a maintainer of the Shipwright and Tekton projects, and former CD Foundation Governing Board member. He currently leads efforts at Red Hat to simplify hybrid cloud application development and secure Red Hat’s software supply chain. Previously, Adam helped companies ship freight containers and generate on-demand airline schedules at a logistics-focused technology consulting firm. Adam earned a Bachelor of Arts, Cum Laude, in Physics from Amherst College in Amherst, Massachusetts USA.9 attendees
Past events
75

