Follow the latest updates from the Eclipse Adoptium Project
All Sources
Security
All Authors
security
External audit of Temurin build and distribution processes
17 June 2024Adoptium PMC
Last year, the Eclipse Foundation engaged the Open Source Technology Improvement Fund to perform an independent audit of the build and distribution processes for Eclipse Temurin.
SLSA build level 3 compliance on Linux and macOS for Eclipse Temurin
09 January 2024Stewart X Addison
Eclipse Temurin by Adoptium is compliant with build level 3 of the SLSA 1.0 secure development framework on Linux and macOS.
Reproducible Comparison Builds
29 September 2023Sophia Guo
What are reproducible comparison builds addressed and how are they implemented in Adoptium.
Secure Software Development Framework (SSDF) at Adoptium
28 November 2022Stewart X Addison
An overview of the SSDF framework and what we are doing to work towards implementing it
SLSA level 2 compliance for Eclipse Temurin
25 November 2022Stewart X Addison
Eclipse Temurin by Adoptium is compliant with level 2 of the SLSA secure development framework.
Verifying GPG signatures for Temurin downloads
27 July 2022Stewart X Addison
How to verify GPG signatures of the Temurin artifacts using the Eclipse public key