What is Lightwell Network?
Lightwell Network is a membership-based service that secures your open source software supply chain across both active development and live production environments without disrupting your existing workflows.
Lightwell Network provides verified, securely rebuilt versions of the latest open source libraries to support your active development pipelines. For your existing applications, it applies targeted security patches directly to the exact dependency versions you already run. As a result, you can eliminate vulnerabilities without executing risky system upgrades or altering your core application logic.
- Membership benefits
As a Lightwell Network member, you get access to a verified catalog of secure, patched open source artifacts through the Red Hat Lightwell Network. - Lightwell Network repositories
Lightwell Network provides signed, Supply Chain Levels for Software Artifacts (SLSA) Level 3-compliant repositories with verified build provenance. These repositories secure your open source dependencies using native formats for the ecosystem, with no application code modifications required. - Build tool integration benefits
Lightwell Network connects seamlessly with your existing development pipelines so that you never have to modify your application code. - Patch delivery lifecycle
Lightwell Network fully automates the open source patch delivery lifecycle. It routes, validates, and deploys patched artifacts directly through your existing build tools.