Secure Open Source Without Slowing Your Teams Down with Project Lightwell

Finding vulnerabilities in your software is no longer the hard part about security operations. Getting the fix into production is. Because a security patch in the open source library ecosystem usually arrives welded to a version upgrade, app team rework, and change control, the industry average to implement a fix into production stretches from 45 to 90 days.

This session covers Project Lightwell, Red Hat’s approach to hardened Maven/PyPI/npm dependencies, and how it fits into a broader trusted software supply chain built on RHEL, OpenShift, and Ansible Automation Platform. We will walk the end-to-end flow from hardened dependencies through application build and deploy, map the five secure software phases to the Red Hat components that deliver them, and close with the training paths that enable your teams to operate it.

Bring your questions about where Lightwell fits alongside RHADS, ACS, and your existing pipeline!