From Code to Trusted Release
summary
Enterprises stitch GitHub and JFrog into a single pipeline that claims end-to-end provenance, policy gates, and an artifact system of record so teams can trace every dependency back to source. Real customers show the scale: 25,000 developers, 100+ terabytes of artifacts, scans that cause 3–5x package consumption slowdowns. AI agents accelerate both speed and risk, producing many more dependencies and vulnerabilities; integrated gates, curated allowed packages, and attestation hooks prove effective at restoring traceability and cutting remediation time.
AI-written summary · about
chapters (9)
- 0:00Introduction and pipeline challenges
- 2:15GitHub’s role in developer experience
- 7:54JFrog’s integration with GitHub
- 14:13Security responsibility beyond code
- 18:02AI’s impact on trust and speed
- 22:10Provenance and reviewability in releases
- 25:42Customer success with visibility
- 28:09People, processes, and culture in SDLC
- 31:17Summary and trust-first development
related talks
32mReimagining Trust in Software Releases: A New Approach to Supply Chain Integrity (Part 2)
20mReimagining Trust in Software Releases: A New Approach to Supply Chain Integrity (Part 1)
01h 13mAddressing the Software Explosion
18mGlobal security at maximum velocity: Multi-Region and hybrid DevSecOps
36mJFrog Platform Innovation: Reloading Development Teams
36mElevating Innovation: GitHub & JFrog Paving the Way Forward
07mJFrog Sponsored Session - Narasimha Pai, JFrog
01mThe JFrog Enterprise+ Early Adopters Panel