Anthony Dahanne

Software Developer for 15+ years, my favorite topics are containerization (Docker and Kubernetes), building tools, Continuous Integration and, of course, core Java development.
Having recently joined HeroDevs, I work on patching and releasing EOL OSS Java and Spring projects.
I'm also a maintainer of the Paketo Java buildpacks.
In my spare time, I work on various open source projects : from Mastodon bots written in NodeJS or Go, to Android apps!

Montreal 2027 sessions

Cloud Native Buildpacks: Graduated, Distroless, and Secure

English session - Intermediate

Buildpacks just reached CNCF Graduation!
We'll explore how they continue to replace Dockerfiles with smarter builds.
We’ll dive into the new distroless builders, Spring Boot 4.2’s switch to Ubuntu Resolute by default, the jvm-vendors buildpack to easily swap JVMs via variables, and upcoming security stack warnings and more!
Join me to learn how to build smaller, faster, and more secure container images!

Sécurité Java : l'impact des LLMs sur le cycle des CVE

French session - Intermediate

Cette session explore le cycle de vie des vulnérabilités du point de vue d'un mainteneur open source.
Suivez le triage d'une faille trouvée par l'IA, sa reproduction avec la CI, puis l'utilisation de l'IA pour créer et valider un correctif.
Nous publierons le fix et suivrons sa divulgation dans GHSA, CVE et OSV.
Découvrez comment ces données alimentent les scanners (Snyk, Dependabot) et comment automatiser la protection de vos dépendances.