Room: Salon H Maintaining compliance is no longer optional — it’s essential. This workshop guides you through the complexities of compliance regulations while ensuring the security and integrity of your software supply chain. Attendees will explore how JFrog tools, including JFrog Artifactory and JFrog Xray, enable organizations to not only meet regulatory requirements but also establish a culture of compliance excellence. Through hands-on experience, you’ll learn best practices for implementing compliance frameworks within your DevSecOps processes, automate compliance checks, and ensure rigorous security standards are met across the SDLC. Key Skills Learned: • Understand the key compliance requirements relevant to software development and deployment, including: NIST, SLSA, DORA, SOX and more • Use JFrog Artifactory and JFrog Xray to manage open-source and proprietary artifacts while ensuring compliance. • Automate compliance processes with JFrog CLI, REST APIs, and AQL to streamline workflows and reduce human errors. • Implement proactive compliance strategies and integrate security measures early in the SDLC. • Foster a culture of compliance excellence and improve collaboration across security, compliance, and development teams. • Monitor and report compliance status using JFrog tools for ongoing compliance verification. Don’t miss out on learning how JFrog can elevate your compliance strategy.

Room: Salon A In this session, we’ll explore why compliance remains one of the most elusive challenges in modern software supply chains and what’s finally evolving. You’ll learn the most common compliance requirements, why tracking them across fast-moving DevSecOps environments is so complex, and why legacy approaches often fall short. We’ll share practical strategies from SBOM generation to automated evidence collection that help meet compliance goals without slowing down innovation. We’ll also look ahead to what's next: continuous compliance posture monitoring, integrated trust signals, and how embedding security into the SDLC can eliminate the need for reactive patching to help you build secure, compliant software from the start.