 Software is essential to daily business operations. To keep your business running smoothly, it's crucial to protect the software supply chain from potential vulnerabilities. Red Hat Trusted Software Supply Chain is a family of cloud services that helps organizations add security guardrails to their software development lifecycle. So, as you progress through the code, build, and monitor stages of software development, you'll be able to identify, prevent, and remediate security issues that may appear early in your codebase. Here's how it works. Red Hat can help you recognize open-source dependencies in your code and intercept critical vulnerabilities at the point of entry. When a developer inserts a library into a codebase, they're able to identify vulnerabilities inside their IDE and receive recommendations for appropriate actions to take. In the build phase, developers bring code into a continuous integration continuous delivery pipeline, all the way through to a target Kubernetes environment. Import code by simply pasting the URL from the Git repository directly into a trusted application pipeline from Red Hat. From there, you can configure the details, including selecting a runtime option, using defaults, or adjusting other variables as needed before creating the application. Within a few clicks, the application has been onboarded into Red Hat's next-generation CICD productization pipeline. Here, you can see the default pipeline get triggered running within a Kubernetes cluster in a Red Hat OpenShift environment. You can see cloned repositories and prefetched dependencies for network-isolated builds, as well as packaged container images with software bill of materials that are pushed to a repository. With just a few simple steps, you can customize and automate the build pipeline as code. Install the GitHub application first before sending a pull request to merge code into the main branch. This will bring a default SLSA level 3 pipeline into your Git repository. Make pull requests to this pipeline as code source file. You can now see this executing in Red Hat's ready-to-use Tecton chain application pipeline, pre-built for software supply chain resiliency. When we look at the pipeline run details, we can see that image inspection and label checking has been made with a scan of the container layer for vulnerabilities. This includes looking for CVEs, as well as policy enforcement points. For the trusted content recommendations shown earlier, drill down on vulnerabilities found. Copy and run the SBOM link from the command line using the Cosign tool to show how the SBOM has been signed and attested. Before promoting builds into production, make sure that attestations and provenance placed in the pipeline are adhered to and in accordance with the supply chain levels for software artifacts framework. Make use of enterprise contracts as approval gates using a clearly defined set of release policy as code that blocks suspicious build activity. To keep up with emerging threats each day, deploy your application into the environment and public cloud of your choice. With Red Hat, you can easily monitor and respond to misconfigurations, non-compliance, or runtime threats. Track policy violations and images at risk and drill down on details such as which deployments are most at risk. View compliance across your applications against industry standards like HIPAA, PCI, DSS, CIS, or custom policies. Using a combination of policies and runtime baselines, identify known good application behavior to isolate and prioritize risks by severity. And with real-time visualization of network topology by clusters and nodes, continuously improve security posture by reducing your attack surface and blast radius. Red Hat has over 30 years of experience providing trusted open-source software to the enterprise, drawing on integrated security guardrails from our own internal software supply chain. And now, this next-generation productization pipeline is available to customers with Red Hat Trusted Software Supply Chain, giving organizations the tools they need to improve software resiliency, reduce development times, and automate continuous deployment in a security-focused way. Red Hat Trusted Software Supply Chain is in service preview today. Find out more.