News
News tagged with "Security"
Follow the latest updates from the Eclipse Adoptium Project
External audit of Temurin build and distribution processes
·Adoptium PMC

External audit of Temurin build and distribution processes

Last year, the Eclipse Foundation engaged the Open Source Technology Improvement Fund to perform an independent audit of the build and distribution processes for Eclipse Temurin.

SLSA build level 3 compliance on Linux and macOS for Eclipse Temurin
·Stewart X Addison

SLSA build level 3 compliance on Linux and macOS for Eclipse Temurin

Eclipse Temurin by Adoptium is compliant with build level 3 of the SLSA 1.0 secure development framework on Linux and macOS.

Reproducible Comparison Builds
·Sophia Guo

Reproducible Comparison Builds

What are reproducible comparison builds addressed and how are they implemented in Adoptium.

Secure Software Development Framework (SSDF) at Adoptium
·Stewart X Addison

Secure Software Development Framework (SSDF) at Adoptium

An overview of the SSDF framework and what we are doing to work towards implementing it

SLSA level 2 compliance for Eclipse Temurin
·Stewart X Addison

SLSA level 2 compliance for Eclipse Temurin

Eclipse Temurin by Adoptium is compliant with level 2 of the SLSA secure development framework.

Verifying GPG signatures for Temurin downloads
·Stewart X Addison

Verifying GPG signatures for Temurin downloads

How to verify GPG signatures of the Temurin artifacts using the Eclipse public key