Skip to main content

Broadcom Introduces TrueSource by Broadcom for Spring, Trusted Artifacts, and Data Services

6 companies named across 7 categories, one of 98 articles referencing Broadcom. Previous coverage: Quantum and enterprise AI deployments, SIEM and network automation updates - Week of August 31, 2026 (Aug 2026).

Companies mentioned

Best suited for

Seniority
EVP / SVP / VP / AVP
Job function
Chief Information Security Officer
Persona
Security Operations Leader
Buyer role
Decision Maker / Budget Holder
Decision stage
Which to buy
Adoption curve
Early Majority
Technology maturity
Market Correction
Industry
Information Technology / Cybersecurity / Application, Cloud & AI Security / Application Security & DevSecOps (SAST/DAST/SCA/Supply Chain)

Our classification, not the publisher's statement. Best suited for, not only for.

Broadcom Inc. introduced TrueSource by Broadcom, a portfolio of commercially supported, verifiably built open source software described as intended for enterprise use. The company said the update focused on secure supply-chain practices and supported remediation through engineering verification.

TrueSource brings together multiple offerings, including Spring Enterprise, TrueSource Trusted Artifacts, and TrueSource Data Services. Broadcom also described shared principles across the portfolio, including curated selection against a reference architecture and remediation supported by community maintainers.

For Spring Enterprise, Broadcom said it provides secure, curated releases of Spring and extends coverage across managed dependencies. The offering includes proactive scanning and human-verified patches, simultaneous patches across supported release lines, and full dependency-tree coverage with more than 5,000 verified Java libraries. Broadcom said security fixes arrive as full point releases, rather than CVE-only patches.

TrueSource Trusted Artifacts was described as providing secure clean-room SLSA Build Level 3 builds across the Java ecosystem, Python, and Node.js, plus a Bitnami Secure Images catalog of hardened container images. TrueSource Data Services was described as extending the same promise to PostgreSQL, RabbitMQ, MySQL, and Valkey, including validated distributions with critical extensions, Operators and Helm Charts, deployment automation, and visibility into security and operational posture. “Open source security is a human discipline,” said Purnima Padmanabhan, vice president and general manager, Tanzu Division, Broadcom. “AI is a phenomenal accelerant for the engineers who maintain this software, not a replacement for them. Maintainers understand the intent behind the code, and that is what separates a real fix from one that just looks like it. TrueSource puts that human expertise at the center of the open source supply chain, at commercial scale.”

Press release, provided by Globe Newswire on behalf of Broadcom. Read the original.

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/broadcom-introduces-truesource-by-broadcom-for-spring-trusted-artifacts-and-data-services/",
        "name": "Broadcom Introduces TrueSource by Broadcom for Spring, Trusted Artifacts, and Data Services",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/broadcom-introduces-truesource-by-broadcom-for-spring-trusted-artifacts-and-data-services/#blogposting",
    "@type": "NewsArticle",
    "about": {
      "@id": "https://decisioninsights.ai/registry/broadcom/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/broadcom/",
      "name": "Broadcom"
    },
    "articleSection": [
      "Cybersecurity"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Seniority",
        "audienceType": "EVP / SVP / VP / AVP"
      },
      {
        "@type": "Audience",
        "additionalType": "Job function",
        "audienceType": "Chief Information Security Officer"
      },
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Buyer role",
        "audienceType": "Decision Maker / Budget Holder"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Technology maturity",
        "audienceType": "Market Correction"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Cybersecurity / Application, Cloud & AI Security / Application Security & DevSecOps (SAST/DAST/SCA/Supply Chain)"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
      "@type": "Person",
      "name": "Decision Insights Record",
      "url": "https://decisioninsights.ai/author/decision-insights-signals/"
    },
    "dateModified": "2026-08-31T08:04:17-06:00",
    "datePublished": "2026-08-31T08:04:14-06:00",
    "description": "Broadcom introduced TrueSource by Broadcom, including Spring Enterprise, clean-room builds for Java/Python/Node.js, and data services for PostgreSQL, RabbitMQ, MySQL, and Valkey.",
    "headline": "Broadcom Introduces TrueSource by Broadcom for Spring, Trusted Artifacts, and Data Services",
    "isBasedOn": {
      "@type": "CreativeWork",
      "sourceOrganization": {
        "@type": "Organization",
        "name": "GlobeNewswire"
      },
      "url": "https://www.globenewswire.com/news-release/2026/08/31/3353357/19933/en/broadcom-strengthens-spring-security-and-adds-coverage-of-java-python-and-node-js-ecosystems-with-truesource.html"
    },
    "keywords": [
      "Enterprise",
      "Open Source",
      "Remediation",
      "Services",
      "Software",
      "Supply Chain"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/broadcom-introduces-truesource-by-broadcom-for-spring-trusted-artifacts-and-data-services/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-31",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/bitnami/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/bitnami/",
        "name": "Bitnami"
      },
      {
        "@id": "https://decisioninsights.ai/registry/broadcom/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/broadcom/",
        "name": "Broadcom"
      },
      {
        "@id": "https://decisioninsights.ai/registry/helm/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/helm/",
        "name": "Helm"
      },
      {
        "@id": "https://decisioninsights.ai/registry/the-node-foundation/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/the-node-foundation/",
        "name": "Node.js"
      },
      {
        "@id": "https://decisioninsights.ai/registry/postgresql/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/postgresql/",
        "name": "PostgreSQL"
      },
      {
        "@id": "https://decisioninsights.ai/registry/broadcom/vmware/spring/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/broadcom/vmware/spring/",
        "name": "Spring Framework"
      },
      {
        "@id": "https://decisioninsights.ai/projects/helm/#project",
        "@type": "SoftwareSourceCode",
        "mainEntityOfPage": "https://decisioninsights.ai/projects/helm/",
        "name": "Helm"
      },
      {
        "@id": "https://decisioninsights.ai/projects/mysql/#project",
        "@type": "SoftwareSourceCode",
        "mainEntityOfPage": "https://decisioninsights.ai/projects/mysql/",
        "name": "MySQL"
      },
      {
        "@type": "SoftwareSourceCode",
        "name": "Node.js"
      },
      {
        "@id": "https://decisioninsights.ai/projects/postgresql/#project",
        "@type": "SoftwareSourceCode",
        "mainEntityOfPage": "https://decisioninsights.ai/projects/postgresql/",
        "name": "PostgreSQL"
      },
      {
        "@id": "https://decisioninsights.ai/projects/python/#project",
        "@type": "SoftwareSourceCode",
        "mainEntityOfPage": "https://decisioninsights.ai/projects/python/",
        "name": "Python"
      },
      {
        "@id": "https://decisioninsights.ai/projects/rabbitmq/#project",
        "@type": "SoftwareSourceCode",
        "mainEntityOfPage": "https://decisioninsights.ai/projects/rabbitmq/",
        "name": "RabbitMQ"
      },
      {
        "@id": "https://decisioninsights.ai/projects/valkey/#project",
        "@type": "SoftwareSourceCode",
        "mainEntityOfPage": "https://decisioninsights.ai/projects/valkey/",
        "name": "Valkey"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
    "@type": "Person",
    "description": "Press releases and independent analyst research, structured into concise summaries for research and monitoring. Produced under our Standards & Methodology.",
    "name": "Decision Insights Record",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-signals/"
  }
]

Is this your company? Get structured data for your own pages