Security
Posts in the Security category.
Workload identity in Apache Camel with SPIFFE and SPIRE
Camel 4.23 adds camel-spiffe. Routes can fetch and validate SPIFFE identity documents from the local Workload API, and an SSLContextParameters backed by SPIFFE gives rotating mutual TLS to the components that already support TLS. There is an example in camel-examples that runs the whole thing with Docker Compose.
Built to Patch Fast: Apache Camel's Security Response in 2026
Camel 4.21.0 shipped with 32 security fixes, and both LTS lines were patched within four days. Here is how the release process makes that possible, why so many advisories landed at once, and what you need to upgrade to.
SBOMs Are Becoming a Requirement — Apache Camel Already Ships and Supports Them
With the EU Cyber Resilience Act and US Executive Order 14028 making SBOMs a hard requirement, Apache Camel already has you covered: signed CycloneDX SBOMs ship with every release, and the Camel CLI can generate one for your own application in a single command.