Grab your badge and swag, and enjoy a scrumptious light continental breakfast to fuel up before the sessions begin

The software governance landscape is dramatically shifting at this time. The amount of risk that can be introduced with software is incredibly apparent today and has been with many of the data breaches, cyber attacks, and ransomware incidents. Software governance is incredibly important to many businesses to not only manage the cybersecurity risk but also ensure alignment of execution to goals and objectives. Due to this increased focus for regulated industries, in many cases organizations fall back to manual subjective processes. In this talk we want to highlight that some of these governance systems that have formed, can actually increase risk to your organization. We seek to highlight when heavy processes and metrics outweigh the importance of currency, release frequency, and accuracy; the false analytics and assumptions can lead to greater issues. Perhaps a different view of solving governance thru software practices and principals can ensure a safe, fast, and hopefully a happier development experience.

Chapter 1: Ready to Fight: Jenkins Reborn.

People have relied on Jenkins for years. It's been the open-source go-to tool for continuous integration and delivery for years.  In this session, you’ll learn more about the biggest performance and scalability update for Jenkins in a decade.  Jenkins has been working out.  It’s ready to move fast and go big.  Jenkins is a new kind of hero for a new age.  It’s trained, conditioned, and ready to take on this new era of challenges without losing the Jenkins functionality you know and love.  Jenkins is ready to rumble. Are you?

Chapter 2: YES Is The Answer 

What if you could support developer autonomy and choice of tooling without compromising productivity, governance, security, and scalability?  What if you had the DevSecOps platform that let you say YES to all of it?  

CloudBees is ready to deliver that platform, so you can say YES to going fast while also staying safe.  You can say YES to creating your finest code while also keeping teams consistent. You can create the golden paths that set developers free.  

Say YES to having your cake and eating it too. Say YES.   

Meet the authors and claim your signed copy of Investment Unlimited

The engineering of Cyber-Physical Systems (CPS) requires a large set of expertise to capture the system requirements and to derive a correct solution. Model-based Engineering and DevOps aim to efficiently deliver software with increased quality. Model-based Engineering relies on models as first-class artifacts to analyze, simulate, and ultimately generate parts of a system. DevOps focuses on software engineering activities, from early development to integration, and then improvement through the monitoring of the system at run-time. In this presentation I will discuss TwinOps, an approach that combines Model-based Engineering, Digital Twins, and DevOps efficiently to improve the engineering process of CPS.

Shift Left was supposed to empower developers and speed delivery. Instead, verifying security and compliance is complex, time-consuming, and slows release velocity. Requiring developers to wade through alert storms from more tools isn’t empowering and products are certainly not getting to market faster.  Fortunately, there are better approaches.This panel will cover the following topics:

• “Shift Security Everywhere” maps better to DevOps philosophies
• How to move from checklists to risk-based decisions
• Effecting change that connects security, risk, and operations to value

Get ready to rejuvenate from the conference and brace yourself for an unmatched networking experience! Be a part of our exclusive sponsor meetup and witness their latest cutting-edge demos to revolutionize the way you work.

Over the past several years, numerous software supply chain breaches have occurred including SolarWinds, Codecov, Kaseya, PyTorch, Applied Materials, and the recent 3CX business phone system attack. The rise in attacks on the software supply chain has compelled the U.S. Federal Government to use its purchasing power to raise security standards through actions such as the May 2021 Executive Order 14028 and the March 2023 National Cybersecurity Strategy.

Consequently, every organization must be diligent to avoid being the next victim of a high-profile breach. However, the biggest hurdle in securing the software supply chain currently is recognizing and identifying all the means of exploitation. As such, to help raise awareness of software supply chain security and inform organizations about what they can be doing to protect their software supply chain, International Data Corporation (IDC) has recently published a series of reports on the topic. This talk pulls together the key insights across IDC’s industry leading software supply chain security research. Attendees will walk away with a clearer understanding of what the software supply chain is and its various dimensions that they need to be aware of so they can return to their organization with data and research that will help them examine and harden their software supply chains.

The U.S. government has set up a goal of net-zero emissions by no later than 2050. To do so, public and private companies have to make rapid decisions on which technologies to invest in and deploy in a complex system environment across multiple sectors (transportation, building, grid). High-fidelity system simulations are playing a critical role in guiding current and future investments. The need to assess a very large number of technologies, both current and future, individually and simultaneously across sectors requires a multi-disciplinary team with an integrated approach. The presentation will describe how Argonne has developed, implemented and deployed an end-to-end workflow to evaluate the potential impact of novel transportation technologies when deployed at scale.

As organizations scale Jenkins usage, pipelines proliferate and management becomes challenging. Last year, we talked about how we created reusable Jenkins pipelines and libraries to maximize reuse across teams. We consolidated pipelines so organizations can accelerate delivery while maintaining security and compliance. This time, we'll demonstrate techniques for performance tuning, including parallel execution, optimized resources usage, and failure-aware pipelines. We will talk about a few industry wide problems which need optimization to scale Jenkins architecture which can drastically improve speed and stability.

Fuel up with our selection of refreshments and head over to our topic-specific networking tables

This talk will provide a deep dive into the rapidly evolving world of artificial intelligence (AI) and machine learning (ML) in the domains of testing, code review, security testing, and DevOps. We will explore how these technologies can streamline processes, automate routine tasks, and ultimately liberate human resources for more strategic endeavors. Through illuminating use cases, we will demonstrate the tangible benefits and potential risks AI brings to the marketplace. Our gaze will extend towards the future, contemplating how the continuous evolution of AI and ML could redefine not only DevOps but also other sectors, providing a comprehensive view of the expanding AI landscape.

Many malicious attacks have led to today’s all-out barrage on the software industry - leading to significantly more vulnerabilities in production applications. In this session, we will dissect the relationship between enterprise developers and security teams. You’ll learn how you can truly make shift left happen and what this means for enabling developers to protect their software pipelines, their company and the many people depending on them for a seamless software experience.

Businesses across many industries are realizing the tremendous benefits of engaging with open source communities, not only for the advancement of technology but also for their own bottom line.

In this 30-minute talk, we will delve into the strategic business advantages of open source contribution and provide actionable insights on how organizations can identify, prioritize, and optimize their engagement with open source projects.

We will discuss effective methods for identifying suitable contribution opportunities aligned with your organization's goals, values, and expertise. We will explore the diverse avenues available for engagement, such as contributing code, documentation, or even fostering community growth and collaboration.

We will share prioritization strategies to guide your contributions for greatest business benefit.  We will highlight key practices for getting the most out of open source contributions both internally and externally. We will discuss fostering a culture of contribution within your organization, empowering employees to engage with open source, and establishing effective communication channels with external communities.

By the end of this talk, attendees will gain a comprehensive understanding of the business benefits derived from open source contribution and a practical framework for identifying, prioritizing, and optimizing their involvement.

Stay for the Happy Hour and build on the day's learnings. Engage in informative discussions with peers, enjoy mouth-watering snacks, and refreshing drinks, all while relaxing and unwinding. Don't miss out on this fantastic opportunity to network, exchange insights, and enhance your career growth!