cdCon+GitOpsCon 2023

Learn New Ways of Tracking Security and DevOps Intelligence with Ortelius Teams building applications in a more modern, decoupled microservices architecture need new ways of tracking critical security and supply chain data, like SBOMs and CVEs. In a microservice architecture, this type of data is gathered for each service. But what about the application as a complete solution delivered to your end-users? In this presentation, we will explore how current CI/CD pipelines can be easily enhanced by Ortelius to collect and aggregate data up to the logical application level. We will show how Ortelius restores the application release number, application-level SBOM, and application-level CVE reports that are essential for meeting audit and security compliance. Ortelius is a CDF incubating project for gathering and aggregating security and DevOps evidence in a single location, across applications, clusters, and IT teams.