Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

swampUP 2026 Preview: The Trust Layer for the Agentic Software Supply Chain

jfrog.com | blog | #ai-security | #supply-chain | #agentic-ai | #jfrog | #governance | #software-supply-chain | #swampup | #trust-layer

Summary

JFrog previews swampUP 2026, where it will unveil its Trust Layer for the agentic software supply chain — immunization, self-healing, governance — amid 7.4x growth of malicious packages and AI assets.
Published
Collected

original ↗

Related coverage

blog · jfrog.com
The Agenda is Live for swampUP 2024!
The excitement is building. JFrog is pleased to announce the awesome agenda we have assembled for swampUP 2024 at the Omni Barton Creek Resort & Spa in Austin. Join us Sep 9-11 for one of the premier DevOps conferences of the year, focusing on the latest trends in software development platforms, supply chain security, OSS…
blog · jfrog.com
The basics of securing GenAI and LLM development
With the rapid adoption of AI-enabled services into production applications, it’s important that organizations are able to secure the AI/ML components coming into their software supply chain. The good news is that even if you don’t have a tool specifically for scanning models themselves, you can still apply the same DevSecOps best practices to securing…
blog · jfrog.com
Extending the Single Source of Truth to the Agentic Software Supply Chain
JFrog extends its single source of truth for OSS to the agentic supply chain, verifying every artifact and AI asset, and answering SBOM/AIBOM questions about what agents touched a release.
blog · jfrog.com
Live From the Show Floor: swampUP 2026
Live coverage of JFrog swampUP 2026: keynotes and panels on rebuilding supply chain trust amid frontier cyber models that chain known vulnerabilities at machine speed and compress exploit windows.
blog · jfrog.com
The Evolution of JFrog AI Catalog: Your AI Control Plane for Agentic Development
JFrog AI Catalog evolves into an AI control plane for the Agentic Development Lifecycle: models, skills, plugins, and MCP servers become native artifacts, so agents consume only approved AI assets.
blog · jfrog.com
DevGovOps: How the AI Era Dictates That Governance Lives inside the Pipeline
AI coding agents broke human-in-the-loop governance, so compliance must live inside the pipeline: DevGovOps makes governance a continuous output of development operations, not an audit-time scramble.
back