November 5, 20261-minute read

Modern enterprise development runs on open source. With this reliance, securing the open source software supply chain has reached a critical inflection point, especially as AI-assisted vulnerability discovery accelerates the speed and volume of CVE disclosures. Enterprise teams now face an urgent challenge: the remediation gap.

Software teams often pin dependencies to exact versions to safeguard production stability, certification, and test baselines. When a security vulnerability is identified, traditional recommendations usually require an upstream version upgrade, which can risk breaking a production application or requiring costly refactoring.

EnterLightwell, a joint enterprise initiative from Red Hat and IBM designed to deliver exact-version, surgically backported vulnerability fixes without forcing breaking framework upgrades.

To help decision-makers and technical practitioners put these capabilities into practice immediately, Red Hat is thrilled to announce two new lessons on Lightwell, now available to customers through the Red Hat Learning Subscription Premium, Standard and Trial:

1. Reduce Open-Source Remediation Burden with Lightwell

Pinning application dependencies preserves critical system stability, but it can leave teams in an impossible bind when severe vulnerabilities emerge.

What you’ll learn: This lesson explains the remediation challenge and how Lightwell assists enterprises in addressing vulnerable open-source application dependencies when standard upgrades are blocked, high-risk, or operationally disruptive.
Who it’s for: Chief Information Security Officers (CISOs), vice presidents of infrastructure, directors of DevOps/platform engineering and risk and compliance officers

2. Implementing End-to-End Software Supply Chain Security with Remediated Open Source Dependencies

Once you understand the strategic need for surgical remediation, how do you operationalize it across your CI/CD delivery pipelines?

What you’ll learn: This deep dive equips technical practitioners with the architectural blueprints, mechanics, and operational strategies needed to integrate Lightwell into their software supply chain workflows—delivering validated, attested, exact-version dependency fixes directly into existing build environments.
Who it’s for: DevOps engineers, DevSecOps practitioners, and security architects building resilient pipeline defenses.

Get started today

Both lessons are available now at no additional cost for active Red Hat Learning Subscription

Start learning: Log into theRed Hat Learning Subscription portal and search for Reduce open-source Remediation Burden with Lightwell (AD0023L) and Implementing End-to-end Software Supply Chain Security with Remediated Open Source Dependencies (AD0024L).
Learn more about the technology: Visitredhat.com/en/lightwell to explore how Red Hat and IBM are reimagining open source software supply chain security.

Enter keywords here to search blogs

UI_Icon-Red_Hat-Close-A-Black-RGB

More like this

Blog post

Original podcast

Browse by channel

Automation

The latest on IT automation for tech, teams, and environments

Security

The latest on how we reduce risks across environments and technologies

Edge computing

Updates on the platforms that simplify operations at the edge

Infrastructure

The latest on the world’s leading enterprise Linux platform

Applications

Inside our solutions to the toughest application challenges

Virtualization

The future of enterprise virtualization for your workloads on-premise or across clouds