Maven Software Supply Chain Talks at Open Source Summit NA!

[Adam Kaplan]

Hi folks,

I'm pleased to announce that I will be presenting at Open Source Summit NA and OpenSSF Community Day next week! Both of my sessions are related to improving the supply chain security of the Maven ecosystem:

1. "Is Maven Safe for Production?" - Manfred Moser (from Chainguard) and I will discuss the supply chain security features of Maven and areas of further improvement. [1]

2. "Making a Lockfile for Maven" - This lightning talk will summarize the recently published article, "The Design Space of Lockfiles", and the work being done in the Maven Lockfile Plugin to put these findings into practice. [2]

If you are in Minneapolis, MN next week, please come check them out! Otherwise the talks will be published on YouTube at a later date.

Cheers,

Adam

[1] https://osselcna2026.sched.com/event/2JQxY/is-maven-safe-for-production-adam-kaplan-red-hat-manfred-moser-chainguard?iframe=no

[2] https://openssfcdna2026.sched.com/event/2I45N/making-a-lockfile-for-maven-adam-kaplan-red-hat?iframe=yes&w=100%&sidebar=yes&bg=no

--

Adam Kaplan

He/Him

Senior Principal Software Engineer

Red Hat

100 E. Davie Street

adam....@redhat.com