Room: Salon A Effective Release Lifecycle Management is key to ensuring secure, traceable, and efficient software delivery. Join us for this workshop with hand-on practice to learn how JFrog’s platform can help you automate workflows, improve collaboration, and ensure security and compliance throughout your software supply chain. Key Skills you can Expect to Learn: • Tracking and managing software artifacts throughout the lifecycle • Automating release processes with CI/CD pipeline integration • Implementing immutable releases and ensuring security compliance • Enhancing team collaboration for smoother software delivery • Exclusive Preview of JFrog’s upcoming product features Who Should Attend? • DevOps & Software Engineers • Release Managers & QA Professionals • Security Engineers & CISOs • Technology Leaders (CTOs, CIOs) Don’t miss out on transforming your software delivery process. Sign up today!

Room: Salon J In this session, we’ll show you how GitHub and JFrog seamlessly integrate to attest and strengthen build processes, with a holistic, end-to-end software lifecycle approach. Leveraging tools such as GitHub Artifact Attestations, JFrog Evidence Collection, and GitHub Dependabot, we’ll demonstrate how to manage the lifecycle of an attestation across the SDLC from code commit to deployment, helping establish build provenance for GRC and Security workstreams. We’ll also show how the two platforms streamline and integrate DevOps and security workflows for improved developer experience.

Room: Salon A In our discussions with customers, we identified a critical challenge in the Software Development Lifecycle (SDLC): package signing often occurs after the package build, altering the package’s SHA in the middle of the process. While organizations aim to ensure that artifacts pushed to production have a fully signed and verifiable provenance from development to deployment, this intermediate modification disrupts the integrity of the build step and beyond. Customers recognize the value of immutable release bundles and a robust provenance posture. However, transitioning away from a process that modifies artifacts mid-SDLC for signing to an immutable workflow remains challenging. This talk will explore how organizations can adopt a step-by-step approach to ensure consistency and predictability across SDLC maturity stages, while enabling the addition of trusted and signed evidence at every stage; a way to enable security, traceability, and compliance without compromising integrity.