The document discusses the importance of managing open source components in software development, emphasizing that 80% to 90% of modern applications consist of these parts. It highlights the need for automated governance to ensure the integrity of these components throughout the software supply chain. The integration of tools like Sonatype Nexus Lifecycle is presented as a solution for reducing vulnerabilities, security breaches, and technical debt.

1. Open Source Management at the Speed of CI/CD
CloudBees + Sonatype – Reston, VA, Jan 2017
Dan Pacious – Director of Sales, Mid Atlantic
Ravi Lachhman – Sales Engineer

2. Utilizing billions
of parts from
open source
communities... 80% to 90% of modern apps
consist of assembled components.

3. Unfortunately,
not all parts are
equal...
Some are healthy, some are not…
…and all go bad over time (like milk, not like wine).

4. The Software Factory
Introduction to your Software Supply Chain

5. The
Software
Factory

6. A Busy
Butler

7. I Wish My
Butler Did
This…

8. Automated OSS Governance
Yes, your Butler can do that!

9. DevOps-native
teams automate
and manufacture
software from gold
standard parts…

10. BUILDMANAGE RUNCONSUME
Integrated with Your Favorite Tools

11. Sonatype
Nexus
Lifecycle
• Avoid defective, outdated components across SDLC
• Discover & remediate vulnerabilities faster
• Reduce security breaches, license risk, and technical
debt
• Continuous component intelligence
• Native Jenkins Plug-in

12. Thanks!
For a copy of the presentation or additional
perspective please visit:
www.sonatype.com