Room: Salon A Effective Release Lifecycle Management is key to ensuring secure, traceable, and efficient software delivery. Join us for this workshop with hand-on practice to learn how JFrog’s platform can help you automate workflows, improve collaboration, and ensure security and compliance throughout your software supply chain. Key Skills you can Expect to Learn: • Tracking and managing software artifacts throughout the lifecycle • Automating release processes with CI/CD pipeline integration • Implementing immutable releases and ensuring security compliance • Enhancing team collaboration for smoother software delivery • Exclusive Preview of JFrog’s upcoming product features Who Should Attend? • DevOps & Software Engineers • Release Managers & QA Professionals • Security Engineers & CISOs • Technology Leaders (CTOs, CIOs) Don’t miss out on transforming your software delivery process. Sign up today!

Room: Salon A In our discussions with customers, we identified a critical challenge in the Software Development Lifecycle (SDLC): package signing often occurs after the package build, altering the package’s SHA in the middle of the process. While organizations aim to ensure that artifacts pushed to production have a fully signed and verifiable provenance from development to deployment, this intermediate modification disrupts the integrity of the build step and beyond. Customers recognize the value of immutable release bundles and a robust provenance posture. However, transitioning away from a process that modifies artifacts mid-SDLC for signing to an immutable workflow remains challenging. This talk will explore how organizations can adopt a step-by-step approach to ensure consistency and predictability across SDLC maturity stages, while enabling the addition of trusted and signed evidence at every stage; a way to enable security, traceability, and compliance without compromising integrity.