🌒 Eclipse Foundation Community Newsletter - May

This month, we're taking a look at software supply chain security in the open source community. [View this email in your browser]( Enhancing Open Source Supply Chain Security Software supply chain security is becoming increasingly more critical. Exposed vulnerabilities in widely-used open source software like Log4j have shined a bright light on the need to implement supply chain security best practices. At the Eclipse Foundation, we're prioritizing supply chain security in a number of ways. Many projects like[Eclipse Temurin]( already SLSA compliant]( or working towards compliance. And, be sure to stay tuned for the upcoming launch of a security-focused working group! This month's newsletter takes a closer look at this important issue, including a review of our vulnerability reporting process and an analysis of existing security practices. Enjoy the read, Clark Roundy Director of Product Marketing Spotlight Reporting and Managing Security Issues in Eclipse Projects Marta Rybczynska looks at the Eclipse Foundation's vulnerability reporting process, including what committers need to know if a vulnerability is reported in a project they contribute to. [Read More]( SLSA Survey Results Are Encouraging, But Opinions Are Still Forming John Speed Meyers looks at the findings of the recent SLSA++ survey, including how existing security practices are perceived, which practices are being adopted, and what this means for the future. [Read More]( Committer Profile Hendrik Ebbers Get to know Hendrik, founder of Open Elements, and a project lead on Eclipse AQAvit and Eclipse Temurin. [Read More]( Community Updates EclipseCon Early-Bird Submission Deadline Is June 2 Proposals that meet the [early-bird deadline]( are eligible to be approved earlier, and benefit from extra publicity. [Read More->]( Save the Date for the 2023 JakartaOne Livestream The Jakarta EE community’s [biggest virtual event of the year]( is set for December 5, 2023. [Read More->]( Register for the Eclipse IDE Hackathon Everyone from newcomers to experienced contributors are [welcome to attend]( to get to know the Eclipse IDE community. [Read More->]( SDV Community Days Showcase Open Source Automotive Innovation These [events]( give the community a chance to meet and work towards building an SDV distribution entirely consisting of open source projects. [Read More->]( Relive Virtual IoT & Edge Days 2023 You can watch recordings from both days of the conference on the Eclipse Foundation’s [YouTube channel](. [Read More->]( New Projects [Eclipse Ankaios]( manages multiple nodes and virtual machines with a single unique API in order to start, stop, configure, and update containers and workloads. [Read More ->]( --------------------------------------------------------------- [Eclipse Dataspace TCK]( will consist of a modular test harness that can be extended to verify multiple Dataspace protocols and standards. [Read More ->]( --------------------------------------------------------------- [Eclipse uProtocol]( aims to provide a transport agnostic, layered communication protocol that builds on top of existing automotive and Internet standards, from the mechatronic layer up to the Cloud. [Read More ->]( --------------------------------------------------------------- [VIEW ALL PROJECT PROPOSALS]( New Releases - [Eclipse Jersey 3.1.2]( - [Eclipse LSP4J 0.21.0]( - [Eclipse OpenJ9 0.38.0]( - [Eclipse Velocitas 0.1.0]( - [Eclipse Kura 5.2.2]( - [Eclipse Wild Web Developer 1.1.0]( - [Eclipse Mylyn Project 3.26.0]( - [Eclipse GlassFish 7.0.4]( - [Eclipse Tractus-X 3.0]( - [Eclipse Kuksa 0.3.1]( - [View all releases]( Upcoming Events [RT-Thread Global Tech Conference]( June 1-3, 2023 [ICT4S 2023]( June 5-9, 2023 [RISC-V Europe Summit]( June 5-9, 2023 [Automotive Open Source Summit]( June 6, 2023 [Embedded World China 2023]( June 14-16, 2023 [Embedded Open Source Summit]( June 27-30, 2023 [The Hitchhiker's Guide to Eclipse IoT]( July 4, 2023 [Eclipse IDE Hackathon]( July 5, 2023 [View the full list of events]( and submit your event to [newsroom.eclipse.org](. [Website]( [Email](mailto:newsletter@eclipse.org) [Twitter]( [Facebook]( [YouTube]( [LinkedIn]( This email was sent to {EMAIL} You can [update your preferences]( or [unsubscribe from this list](. Eclipse Foundation · 2934 Baseline Road, Suite 202 · Ottawa, ON K2H 1B2 · Canada