> Markdown version of [/events/world-congress-2026-europe/sessions/1337-dockerize-java](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1337-dockerize-java). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Dockerize Java Securely: SBOMs + Attestations + Bake


- **Date:** Thursday, Jul 9, 2026
- **Time:** 15:30–17:30 (120 min)
- **Room:** Room M5 (18 Seats)
- **Event:** World Congress 2026 Europe

## Description

Containerizing Java applications is easy. Containerizing them securely is not.

In this session, we'll explore how to strengthen your Java Docker builds with Software Bill of Materials (SBOMs) and registry attestations. Instead of generating a single SBOM at the end, you'll see how to extract SBOMs at every stage of a multi-stage build, catching vulnerabilities that would otherwise slip through.

We'll cover:
- Why SBOMs are critical for modern Java applications
- How to integrate SBOM generation directly into Docker builds
- Use Docker Bake to make it delicious
- How to decrease the number of CVEs using Docker Hardened Images
- Pushing SBOMs as attestations to your registry for supply-chain visibility
- Asking Johnny Cage to sign the images and their SBOM attestations

Live demo: Containerizing a Spring Boot app with security built in

## Speaker

### [Mohammad-Ali A'râbi](https://www.wearedevelopers.com/@mohammad-ali-a-rabi)

Senior Software Engineer at JobRad


## Related talks at this congress

- [Beyond SBOMs: The Future of Container Supply Chain Security](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1266-beyond-sboms-the) — Mohammad-Ali A'râbi
- [Building a Better Tomorrow: Tips and Tricks for Docker Builds](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1000-building-a-better) — Daniel Bodky
- [Defending the Modern Supply Chain: Hands-On Vulnerability Remediation](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/995-defending-the-modern) — Boy Baukema, Patrick Feige
- [AI Sandboxes:  Running Coding Agents Safely in Production-Grade Environments](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1236-ai-sandboxes-running) — Kristiyan Velkov, Shivay Lamba