Log inSign up
Image
user avatar
BellSoft
@bellsoftware
Delivering #LibericaJDK: supported, @Java standard compatible binaries. Among Top-5 @OpenJDK contributors.
San Jose, CA
bell-sw.com
Joined January 2018
377
Following
4,082
Followers
RepliesMedia
  • user avatar
    BellSoft
    @bellsoftware
    4h
    Artifact signing is one question. JRush Episode 7 goes much further: SBOMs, provenance, buildpacks, hardened images, CVE response, and the practical trade-offs between them. Plenty to take back to your pipeline. Episode: youtube.com/live/AsGmInC_6… Checklist:
    Image
    00:00
  • user avatar
    BellSoft
    @bellsoftware
    Aug 6
    JEP 538 brings the PEM API back for a third preview in #Java27. PEMEncoder encodes keys, certificates, and CRLs as PEM. PEMDecoder reads them back into typed Java objects, without manual Base64 handling, header parsing, or KeyFactory setup.
    Image
  • user avatar
    BellSoft
    @bellsoftware
    Aug 4
    September 2026 is almost here, and Oracle JDK 21 users have a decision to make. Updates released after that point are planned to move from NFTC to OTN. Your applications will keep running, but keeping them securely updated may no longer be free. 🧵
    Image
  • user avatar
    BellSoft
    @bellsoftware
    Jul 31
    Hardened images remove the package manager, curl, and other handy tools. Great for the attack surface. Less great when production breaks. JRush Episode 7 gets into that trade-off and plenty more around signing, SBOMs, provenance, buildpacks, and CVE response:
    Image
    00:00