Presentation with CHAINS Project

[Adam Kaplan]

Today I was pleased to share Konflux with the CHAINS project, a research group based out of the KTH Royal Institute of Technology in Sweden [1]. We introduced the team to Konflux's approach to secure software supply chain, and how their maven-lockfile plugin [2] can provide the necessary inputs for hermetic builds with Maven [3].

We had a lively conversion on hermetic builds, reproducible builds, and other secure supply chain topics. My slides are linked below in PDF format [4].

Cheers,

Adam

[1] https://chains.proj.kth.se/

[2] https://github.com/chains-project/maven-lockfile

[3] https://github.com/hermetoproject/hermeto/pull/1046

[4] https://drive.google.com/file/d/1mzbVse8GUr51OzQ4xDE5ol80nqg8HTHK/view?usp=sharing

--

Adam Kaplan

He/Him

Senior Principal Software Engineer

Red Hat

100 E. Davie Street

adam....@redhat.com