To help customers use open source components safely, Red Hat has developed a solution that enhances resilience to software supply chain vulnerabilities. With Red Hat Trusted Software Supply Chain, customers can code, build, and monitor their software using proven platforms, trusted content, and real-time security scanning and remediation.

The solution draws on Red Hat’s 30+ years of delivering high quality, reliable, and trustworthy open source software to develop applications that can withstand external threats with innovation and integrity.

Red Hat Trusted Content (Service Preview) is a cloud service that provides software composition analysis (SCA) of your applications and code base to identify critical issues before offering fixes to mitigate vulnerabilities and risk. SCA can catch code vulnerabilities early in your workflows to avoid the costly rework in production.

The service includes enterprise-ready content plus knowledge about the open-source packages in customer applications. Digitally sign and verify code from an open, immutable ledger, to ensure code has not been tampered with.

Red Hat Trusted Application Pipeline (Service Preview) is a cloud service that customizes and automates build pipelines, with tools that help your team adhere to attestations and provenance while scanning images for vulnerabilities, and deploy to a declarative state with release policies that block suspicious builds from poisoning pipeline executions.

The service also enables the integration of security guardrails for security-focused continuous integration and continuous deployment (CI/CD) workflows in minutes to ensure packaged images are protected and compliant, without slowing down releases.

Red Hat Advanced Cluster Security Cloud Service is a cloud service that visualizes security and compliance across distributed teams for hundreds of audit controls from a common dashboard. High-fidelity threat analytics pinpoint and prioritize security issues to help expedite incident response and improve security posture in the software development life cycle (SDLC).

This service will enable your team to accurately detect and act on new emerging threats to reduce alert noise and fatigue.

Cigna enhances security with Red Hat Advanced Cluster Security & GitOps

Cigna fast-tracked the deployment of Red Hat Advanced Cluster Security for Kubernetes to enhance their security posture in the wake of the Log4Shell discovery.