Broadcom Introduces TrueSource by Broadcom for Spring, Trusted Artifacts, and Data Services

Source Decision Insights Signals Published August 31, 2026 Mentions 5 companies

Broadcom Inc. introduced TrueSource by Broadcom, a portfolio of commercially supported, verifiably built open source software described as intended for enterprise use. The company said the update focused on secure supply-chain practices and supported remediation through engineering verification.

TrueSource brings together multiple offerings, including Spring Enterprise, TrueSource Trusted Artifacts, and TrueSource Data Services. Broadcom also described shared principles across the portfolio, including curated selection against a reference architecture and remediation supported by community maintainers.

For Spring Enterprise, Broadcom said it provides secure, curated releases of Spring and extends coverage across managed dependencies. The offering includes proactive scanning and human-verified patches, simultaneous patches across supported release lines, and full dependency-tree coverage with more than 5,000 verified Java libraries. Broadcom said security fixes arrive as full point releases, rather than CVE-only patches.

TrueSource Trusted Artifacts was described as providing secure clean-room SLSA Build Level 3 builds across the Java ecosystem, Python, and Node.js, plus a Bitnami Secure Images catalog of hardened container images. TrueSource Data Services was described as extending the same promise to PostgreSQL, RabbitMQ, MySQL, and Valkey, including validated distributions with critical extensions, Operators and Helm Charts, deployment automation, and visibility into security and operational posture. “Open source security is a human discipline,” said Purnima Padmanabhan, vice president and general manager, Tanzu Division, Broadcom. “AI is a phenomenal accelerant for the engineers who maintain this software, not a replacement for them. Maintainers understand the intent behind the code, and that is what separates a real fix from one that just looks like it. TrueSource puts that human expertise at the center of the open source supply chain, at commercial scale.”

Press release, provided by Globe Newswire on behalf of Broadcom. Read the original.

Graph Connections

5 companies named across 8 categories, one of 96 sources referencing Broadcom. Previous coverage: Announcing FTAS v3.6: Elevating Automation Coverage, Scale, and Platform Reliability (August).

Sublime Security adds integration with CrowdStrike Falcon Next-Gen SIEM

Decision Insights Signals · August 31, 2026

Sublime Security added an integration that sends email security signals into CrowdStrike Falcon Next-Gen SIEM for investigation and response workflows.

SailPoint Announces Integration with CrowdStrike Falcon Next-Gen SIEM

Decision Insights Signals · August 31, 2026

SailPoint announced an expanded partnership with CrowdStrike to integrate SailPoint SecOps Identity Intelligence into CrowdStrike Falcon Next-Gen SIEM. The integration is intended to bring identity governance, access, and risk context into existing SOC workflows so analysts can correlate identity data with security telemetry and speed investigation and response.

Aviz Network Copilot outlines natural-language, query-time correlation

Decision Insights Coverage · August 27, 2026

Aviz Network Copilot uses query-time correlation and natural-language automation to integrate network, security, observability, and ITSM tools without rip-and-replace.