Are you aware of all your open source software (OSS) dependencies, the vulnerabilities present in them, and the potential risks you stand to face from them?
#Tanzu Open Source Software Health Assessment tool can help you answer these questions!
tanzu.vmware.com/oss-health-ass…

We are thrilled to work with Google Cloud on the next ARM-based CPU to deliver significantly improved performance, attractive price performance, and better sustainability for our users.

cloud.google.com/blog/products/…

#GoogleCloudNext #GoogleCloudNext 24

🎉 Exciting news! Fresh major versions have been unleashed! Get ready to experience the latest RabbitMQ 3.13 and Fluent Bit 3.0 containers and Helm charts.

Looking for more? Explore distros, VEX, SBOM, SLSA3, customizations, CVE scan results and more at tanzu.vmware.com/application-ca…

So happy to finally open for business the #tanzu OSS Assessment. We've been working hard these past months to bring #bitnami good practices building production-ready #helm charts and secure containers into actionable insights for everyone.

A small thread with examples...

Tip. If you use Bitnami Helm charts, all those MITRE, NSA, SOC2 bar thingies skyrocket 📈🚀

Crazy work from Carlos Rodríguez Hernández and team on improving the security of Bitnami Helm charts 👉 github.com/bitnami/charts…

Check out the all new Tanzu OSS Health Assessment tool! 🚀You can instantly get a comprehensive view of your OSS dependencies, potential risks from misconfigurations and vulnerabilities using our tool.
Visit tanzu.vmware.com/oss-health-ass…

The new WordPress version, 6.5 'Regina', was released yesterday and is already available in our catalog!

If you're looking for more distros, VEX, SBOM, SLSA3, customizations, CVE scan results, etc you need to take a look at tanzu.vmware.com/application-ca…

Bitnami images are *not* affected by the XZ security issue CVE-2024-3094. They do not include a vulnerable version of the library nvd.nist.gov/vuln/detail/CV…

We're starting to see VEX in real world! This helps Aqua Trivy to reduce the noise of irrelevant vulnerabilities so you can focus on what's important. Thanks to Bitnami for the collaboration! look forward to future improvements that will simplify the experience around this

The new Java version, 22, just came out of the oven and it is already available in our catalog! See github.com/bitnami/contai…

If you're looking for more distros, VEX, SBOM, SLSA3, customizations, CVE scan results, etc you need to take a look at tanzu.vmware.com/application-ca…

0 CVEs with Aqua Trivy , OASIS Open's CSAF VEX standard, and VMware Tanzu Application Catalog's fully-featured container images.

Easy. On your command line, CLI, anywhere.

More ℹ️ at: tanzu.vmware.com/content/blog/r…

Dina Truxius and Jose Antonia speak about VEXinating your container images the European way, LIVE at #kubecon + #cloud nativecon Europe 🇫🇷🇫🇷🇫🇷

View the schedule: kccnceu2024.sched.com
#cloud #kubernetes

Happening this afternoon!

Join this KubeCon + CloudNativeCon session on Vulnerability Exploitability eXchange today

15:25 - 16:00 CET | Pavilion 7 | Level 7.1 | Room D

sched.co/1YePI
#KubeCon #KubeCon EU #KubeCon 2024

We're happy to announce that Aqua Trivy can now scan VEX & SPDX SBoMs from the Tanzu Application Catalog (Bitnami's enterprise edition) to filter out false positives and provide a precise and accurate CVE report.
Read more in this blog
tanzu.vmware.com/content/blog/r…

Are you at Kubecon_ + CNCF Europe 2024? Join our expert José Antonio Carmona, and Dina Truxius from the Federal Office for Information Security (BSI) as they deep dive into Vulnerability Exploitability eXchange.

📅 Mar 21 🕞 3:25 PM CET
via.vmw.com/HJU3We

We are happy to announce that Bitnami-packaged open source software container images and Helm charts available in DockerHub are now signed by Notation (Notary Project)

notaryproject.dev/blog/2024/bitn…

🚀 We've just added a new page to the Tanzu Application Catalog documentation detailing the various security frameworks and best practices applied within TAC.

On this page, you'll find information about frameworks like CIS, DISA, VEX, STIG, SLSA, etc

docs.vmware.com/en/VMware-Tanz…

join me, and this guy, at #kubecon #cloudnativecon next week in Paris! We want to talk about #platformengineering #appmodernization and croissants with you! Come by the #vmware booth.

vmblog.com/archive/2024/0…

Spring Boot 3.3.0-M2 comes with support for Bitnami-packaged container images. If you are a developer and are looking to understand what this means to you, check out this blog by Agustín Ventura

blog.bitnami.com/2024/03/spring…

📚Learn how to integrate Sealed Secrets with Bitnami-packaged Helm charts, how to make the best use of popular Bitnami-packaged AI/ML applications - MLflow, Milvus, OpenSearchProj, and more in our quarterly round-up blog blog.bitnami.com/2024/02/whats-…