Red Hat and IBM Launch $5 Billion Project Lightwell for Open Source Supply Chain Security (redhat.com)

• $5 billion investment from IBM and Red Hat.
• 20,000 engineers dedicated to open source security.
• AI-assisted vulnerability triage and patch development.
• Enterprise clearinghouse extends beyond Red Hat products.
• One-line configuration change to access secure registry.
• Patches upstreamed alongside customer delivery.

"Red Hat and IBM announced Project Lightwell, a $5 billion, 20,000-engineer initiative using AI-powered vulnerability discovery to secure the open source software supply chain. The project establishes an enterprise clearinghouse for open source components, providing commercial subscriptions for patched artifacts while upstreaming fixes. Early adopters are already testing the system."