Room: Meritage Ballroom Only secure, verified, compliant software should reach production. Full stop. With increasing pressure on modern development teams to deliver across security and compliance requirements, a fully-secured, attestable pipeline demands complete visibility and control across the entire release lifecycle in a single solution. In this can’t-miss swampUP keynote session, we’ll look at new innovations across JFrog security and platform teams, as well as industry advancements that enable a not just connected, but fully-integrated and robust software supply chain security solution that meets the modern needs of a security-focused, EveryOps reality. Join us for an exclusive look at how this tectonic security shift reshapes what you thought you knew about application security and governance, helping you unlock new levels of confidence in every release.

Room: Salon J In this session, we’ll show you how GitHub and JFrog seamlessly integrate to attest and strengthen build processes, with a holistic, end-to-end software lifecycle approach. Leveraging tools such as GitHub Artifact Attestations, JFrog Evidence Collection, and GitHub Dependabot, we’ll demonstrate how to manage the lifecycle of an attestation across the SDLC from code commit to deployment, helping establish build provenance for GRC and Security workstreams. We’ll also show how the two platforms streamline and integrate DevOps and security workflows for improved developer experience.