Software supply chain security is no longer optional, it is a necessity. To achieve true trust, enterprise systems require network-isolated, hermetic container builds that generate precise Software Bills of Materials (SBOMs).

In this talk, I will share my journey as an intern on the Konflux Build Team, where I contributed to Hermeto, the core open-source CLI powering Red Hat's next-generation secure software factory. You will learn how we modernized Hermeto's codebase to support the Lightwell initiative, successfully scaling its performance by transitioning the Bundler backend to high-performance, asynchronous HTTP downloads.