New from BellSoft: a hardened builder for Paketo Buildpacks. Built on BellSoft Hardened Images, it gives teams a secure-by-design baseline with low-to-zero-CVE base images at release time, with continuous patching under SLA. No application code changes: bell-sw.com/news/bellsof...

Last week, @edelveis.dev and Mohammad-Ali A'râbi had a great conversation about Shai-Hulud, Miasma, Phantom Gyp worms - the latest wave of supply chain attacks. Missed the stream? The full recording is here: www.youtube.com/watch?v=SPly...

JEP 531 in #Java27 adds Set.ofLazy(...): define every candidate up front, then resolve membership only when contains(...) first asks for it. Each candidate is evaluated at most once and the result is reused, even with concurrent access. Preview API, run with --enable-preview.

BellSoft container images are now available on Google Cloud Marketplace. Minimized, signed, SBOM-backed images for Java and other production workloads, ready to use as a secure base on Google Cloud. Find them here: console.cloud.google.com/marketplace/...

We are live now! 🔥 @edelveis.dev and Mohammad-Ali A'râbi are getting into how supply chain worms spread through the systems teams normally trust. Join the conversation: www.youtube.com/watch?v=SPly...

Dockerfiles are fine if they are written and maintained well. Then the base image gets old, the runtime needs a bump, and every repo has its own build ritual. @edelveis.dev gets into buildpacks: shared builders, rebasing, SBOMs, and when a Dockerfile still makes sense. bell-sw.com/blog/what-ar...

Tomorrow at 6 PM CEST, Mohammad-Ali A'râbi joins @edelveis.dev for The Worms Are in Your Pipeline. Shai-Hulud, Miasma, Phantom Gyp, how they spread through developer machines, CI caches, credentials, release pipelines, and how teams can contain them. Set a reminder: www.youtube.com/watch?v=SPly...

Last week, @edelveis.dev and Johannes Bossle looked at AI-assisted development at team scale: shared specs, visual models, Git-based versioning, and keeping design and implementation aligned. If you missed it, now’s a great time to catch up: www.youtube.com/watch?v=6UqE...

You can write perfectly valid Java code and still choose the wrong data structure. @asm0dey.site goes through Big O, sorting, ArrayList growth, LinkedList trade-offs, ArrayDeque, and what happens inside HashMap. Watch here: youtu.be/hY5A7kKQTKw

A smaller image is not automatically a hardened image. @edelveis.dev breaks down slim, distroless, scratch, and hardened images, then shows the Java adoption path: multi-stage builds, SBOMs, signatures, CI/CD checks, and a practical checklist. bell-sw.com/blog/what-ar...

Early start, practical topic. ☕️️️️️️ This Thursday at 8:45, Dmitry Chuyko takes the stage at Java Forum Stuttgart with From Kitchen to Table: A Safe Software Journey with SBOMs. SBOMs, CI/CD policies, hardened container images, SPDX vs CycloneDX, registry quirks, OPA and Ratify.

Finding CVEs is usually not the hard part. The hard part is patch ownership, rebuilds, rollout timing, and the base image mess that keeps repeating. BellSoft Hardened Images are built to deal with exactly that: bell-sw.com/bellsoft-har...

We have started ⚡ @edelveis.dev and Johannes Bossle are live now with Spec driven design on team level. This stream is about what happens when AI coding moves beyond solo experimentation and a whole team has to build and maintain the same system. Join here: www.youtube.com/watch?v=6UqE...

On July 7, @asm0dey.site is hosting the next Spring User Group Berlin meetup at JetBrains. Dmitry Chuyko will speak on From Kitchen to Table: A Safe Software Journey with SBOMs. Details: www.meetup.com/spring-user-...

Teams often start testing the next JDK too late. The JDK 27 Quality Outreach heads-up is a good reminder that early testing is not bureaucracy. It is how you catch awkward changes while they are still cheap to deal with.

On July 1 at 5 PM CEST, @edelveis.dev is hosting Johannes Bossle for Spec driven design on team level. Prompts work well right up to the point where a whole team has to build and maintain the same system. This session is about what comes next. Set a reminder: www.youtube.com/watch?v=6UqE...

Still in the container security headspace after JRush? Three follow-ups to open: Docker Container Image Security: 13 Best Practices www.youtube.com/watch?v=TyNG... Hardened Container Images 101 www.youtube.com/watch?v=Co16... Your Scanner Found 200 CVEs. Now What? www.youtube.com/shorts/ESAlg...

Missed JRush yesterday? Two links worth opening: Recording: www.youtube.com/live/AsGmInC... Container security checklist: jrush.bell-sw.com/container-se...

We are live now 😎 JRush Episode 7 is on. Signed pipelines, buildpacks, hardened images, SBOMs, provenance, and a CVE workflow your team can actually use. Join here: www.youtube.com/live/AsGmInC...

JRush is today, and @edelveis.dev summed it up in under a minute: what you will get, who is speaking, and why this episode is worth catching live. Register here: jrush.bell-sw.com/episode7

JRush is tomorrow. Last chance to grab your spot. ⚡️️️️️️ Signed pipelines, attestations, reproducible Java image builds, buildpacks, hardened images, SBOMs, and a CVE remediation workflow your team can use. June 23, 6pm CEST / 9am PT. Register: jrush.bell-sw.com/episode7

What's the right way to reduce CVEs in your container images? Distroless or Alpine? Hardened image or build your own? Ask 10 engineers, get 10 answers. Three practitioners answering this live at JRush Ep.7. Q&A included. Free. June 23. jrush.bell-sw.com/episode7 #Java #DevSecOps

Yesterday: @devoxxpl.bsky.social Poland in Kraków. Today: @lu.voxxeddays.com in Luxembourg. @asm0dey.site is on a roll. 🛫 #VoxxedDaysLuxembourg #Java #JavaCommunity

Talk 3 of 3 at JRush Ep.7. 150 CVEs in the scan report. Most aren't exploitable in your runtime. @edelveis.dev covers this weekly on CyberJAR Youtube Channel. At JRush Ep.7 she builds the full triage-to-signed-image workflow live. Free. June 23. jrush.bell-sw.com/episode7 #Java #DevSecOps

CVE fatigue is real. Three scanners, three different numbers. Chase everything or ignore it all. If that sounds familiar, this one's for you. @edelveis.dev covering it live at JRush Ep.7. Free. June 23. jrush.bell-sw.com/episode7 #Java #DevSecOps #ContainerSecurity

Talk 2 of 3 at JRush Ep.7. @anthony.dahanne.net maintains #Paketo Buildpacks. At JRush Ep.7 he demos how eliminating the Dockerfile eliminates a whole class of container vulnerabilities. Free. June 23. jrush.bell-sw.com/episode7 #Java #DevSecOps

First time at @devoxxpl.bsky.social and straight to the stage. 🎤 @asm0dey.site is about to start his talk "CRaCing Java Snapshots" in room 4A. Head over if you're around! #DevoxxPoland #Java #CRaCa

Most #Dockerfile vulnerabilities aren't mistakes. They're defaults. @anthony.dahanne.net shows you how to eliminate them entirely. Live at JRush Ep.7. Free. June 23. Sign up now 👉 jrush.bell-sw.com/episode7 #Java #DevSecOps #ContainerSecurity #security

🎬 NEW VIDEO ON THE CHANNEL Java 27 changes JVM defaults, GC behavior, memory footprint, TLS security, whether you upgrade intentionally or not. 9 JEPs explained by @edelveis.dev. Watch: youtu.be/VxN-jrjF_GA #Java #Java27 #JVM

Talk 1 of 3 at JRush Ep.7. @aerabi.bsky.social, Docker Captain, author of "Docker and Kubernetes Security", on how to build a pipeline the breach can't get through. Free. June 23. jrush.bell-sw.com/episode7 #Java #DevSecOps

@polishjug.bsky.social — first time, and it won't be the last. @asm0dey.site loved the room, the crowd, and apparently the pierogi. Some things you just can't argue with. Tomorrow he's heading to @devoxxpl.bsky.social. If you're there, go say hi. #Java #KrakówJUG #DevoxxPoland #JavaCommunity

This is how supply chain attacks get through. @aerabi.bsky.social covering this live at JRush Ep.7. Free. June 23. jrush.bell-sw.com/episode7 #Java #DevSecOps

Picking a Java framework? @edelveis.dev compares Spring, Quarkus, Jooby, and Vert.x to help you decide which one fits your project best. foojay.io/today/spring... #Java #Framework

JRush Episode 7. 📆June 23. No slide decks. No pitches. Practitioners showing working code live on container supply chain security. Free. Worth checking who's speaking. jrush.bell-sw.com/episode7 #Java #DevSecOps

🎬 NEW VIDEO ON THE CHANNEL Vert.x: smallest image. Fastest startup. Spring Boot: lowest lines of code. Is that the order you expected? Spring, Quarkus, Jooby, Vert.x — same demo, same baseline, 9 criteria. 👉 youtu.be/ddSSGgQMh-U #Java #SpringBoot #Quarkus

Quick update: the @asm0dey.site's livestream with @brianvermeer.nl is moving to Friday · 10am CET. Same link, same topic. youtube.com/watch?v=yxOThk_YmUA

🔴 LIVE Thursday. jqwik 1.10.0 shipped a hidden instruction for AI agents. Developers never saw it. Agents acted on it. @brianvermeer.nl (#Snyk / Java Champion) joins @asm0dey.site live to cover what this exposes, and what you can do about it. youtube.com/watch?v=yxOThk_YmUA #DevSecOps #AIAgents

Most Dockerfiles were written for a world where we trusted dependencies, pipelines, and base images. That world is gone. In this video @asm0dey.site explains how it happened. Would your Dockerfile pass a 2026 security review? 👀 Full video: 🎥 youtu.be/KKRda0H4wTE #Docker #DevSecOps #CloudNative

🎥 New video on the channel! You might be optimizing the wrong method. @edelveis.dev explains safepoint bias, how it can skew profiling results, and why Async Profiler has become a go-to tool for finding real Java performance bottlenecks. youtu.be/PcLZ6WPEcuw #Java #Async #OpenJDK #Profiling

First time at #JSpring @nljug.bsky.social 🇳🇱 Great talks, great conversations, and a warm welcome from the Java community. Thanks to everyone who joined @edelveis.dev and @asm0dey.site's session today ❤️ #JSpring #Java #DeveloperCommunity

🎥 New video on the channel from @asm0dey.site! Your Dockerfile may look clean, but is it secure? We break down 8 common Dockerfile mistakes that can increase your production attack surface. Watch now 👇 youtu.be/KKRda0H4wTE #Docker #Containers #DevSecOps #CloudNative

🚨 Hidden Pitfalls of Staying on Free Legacy Oracle JDK Versions 🧵👇

Hardened images vs Distroless containers - What’s your choice? Both aim to reduce attack surface and improve container security, but they solve different problems and come with different tradeoffs. @edelveis.dev breaks it down in this short video preview. #Containers #DevSecOps #Java

Live from @jnationconf.bsky.social and sunny Portugal 🇵🇹☀️ @asm0dey.site and @antonarhipov.bsky.social are all smiles because they just finished their talk: “The Ultimate Showdown of Database Migration Tools”, and the room was PACKED 🔥 Amazing session, amazing crowd, amazing atmosphere. #Java

Our latest research found that 42% of Spring developers have never encountered hardened container images at all. That’s a major knowledge gap as supply chain security and CVE exposure become bigger concerns in production. So we made a quick guide: www.youtube.com/watch?v=Co16... #DevOps #Security

What was it actually like to code Java in 1995? ☕ To celebrate how far Java has come over the last 30 years, our Developer Advocate @asm0dey.site took Java 23 code and rewound it all the way to Java 1. Watch the journey: www.youtube.com/playlist?lis...

We grew up with Java. Some of our engineers remember its very first years, and helped it take its first steps at Sun Microsystems. 31 years later, we’re still building Java runtimes for enterprises and developers around the world. Happy Birthday, Java ☕ #Java #Java31 #OpenJDK

🎥 NEW VIDEO on the channel from @asm0dey.site You don’t need to switch frameworks to learn something new. This time on the channel: @quarkus.io , explained for developers who already know Spring and want to broaden their Java framework knowledge. #Java #Quarkus #Learning

How secure is your Java container? Save this checklist ✅ To help teams improve their security posture, we created a practical container security checklist. How many can you answer YES to? #Java #SpringBoot #Docker #ContainerSecurity #DevSecOps #Security #SBOM #CVE

🍃 The Persistence Heavyweight Championship: JPA vs. jOOQ by @asm0dey.site/ @edelveis.dev @ Spring I/O 2026 ▶️ Video: youtu.be/yAish_3P3-I 🔗 Slides: speakerdeck.com/cat_edelveis... #springio26