BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.romhack.io//romhack-camp-2026//speaker//T7GUSB
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-romhack-camp-2026-3MJRSS@cfp.romhack.io
DTSTART;TZID=CET:20261003T140000
DTEND;TZID=CET:20261003T144000
DESCRIPTION:Modern software is assembled\, not just written: nearly 90% of 
 a typical application consists of third-party libraries. If a critical vul
 nerability like Log4Shell were disclosed tomorrow\, how long would it take
  your team to identify every affected microservice? While large enterprise
 s rely on expensive "Ultimate" licenses\, SMEs and independent teams often
  face a dangerous security gap.\nIn this session\, we will explore how to 
 democratize Software Supply Chain Security (SSCS) by building an automated
  defense perimeter at zero licensing cost. Through a Live Demo featuring a
  Docker-based prototype\, we will walk through a real-world architecture i
 ntegrating:\n• GitLab Community Edition for pipeline orchestration.\n•
  Trivy and cdxgen for automated SBOM (Software Bill of Materials) generati
 on in CycloneDX format.\n• OWASP Dependency-Track for continuous\, proac
 tive vulnerability monitoring.\nWe will go beyond basic scanning by demons
 trating how to leverage Artificial Intelligence for code reachability anal
 ysis\, generating VEX (Vulnerability Exploitability eXchange) files to sil
 ence false positives and focus only on actionable risks. We will also disc
 uss how this stack prepares organizations for the upcoming EU Cyber Resili
 ence Act (CRA) requirements.
DTSTAMP:20260921T190705Z
LOCATION:STAGE 2 (Ghost in the Shellcode)
SUMMARY:SBOM SBAM: Who Put This in My Code? Enterprise-Grade Supply Chain S
 ecurity on a Zero Budget - Maurizio Argoneto
URL:https://cfp.romhack.io/romhack-camp-2026/talk/3MJRSS/
END:VEVENT
END:VCALENDAR