docs: Add blog post about Conforma demo from Red Hat Summit 2026

website/content/posts/rh-summit-2026-license-policies.md

@@ -0,0 +1,25 @@
+---
+title: "Red Hat Summit 2026: From SBOM to Enforcement — Writing License Policies with Conforma"
+date: 2026-08-19T10:00:00+01:00
+author: "Luiz Carvalho"
+---
+
+We're excited to share that Conforma was featured at Red Hat Summit 2026. The talk demonstrates writing a Conforma policy rule from scratch to solve a real-world license compliance challenge.
+
+<!--more-->
+
+## The Challenge: License Compliance at Scale
+
+Your legal team mandates "no AGPL" in container images. With hundreds of packages per image, manual checking doesn't scale across multiple teams, constant updates, and the inevitable special cases where specific packages have been individually approved. Organizations need automated enforcement — not just data collection.
+
+## From First Rule to Production-Ready
+
+The demo walks through writing a license policy rule using Rego, starting with a straightforward rule and evolving it commit by commit. Violation messages become more specific. Exceptions handle approved packages. The policy extends to work with SBOMs from multiple sources. Each change is small and purposeful, showing how Conforma and Rego turn requirements into enforceable rules.
+
+## Watch the Demo
+
+Watch a license policy evolve from a simple rule to production-ready enforcement. The demo recording and presentation slides are now available on our Resources page.
+
+**[Watch "From SBOM to Enforcement: Writing License Policies with Conforma"](/resources/#from-sbom-to-enforcement-writing-license-policies-with-conforma)**
+
+While you're there, explore our collection of other conference presentations, demos, and educational content about securing software supply chains with Conforma.

website/content/resources/_index.md

@@ -6,6 +6,33 @@ Whether you're just getting started with supply chain security or looking to dee
 
 These conference presentations, demos, educational videos and articles showcase how organizations are using Conforma to secure their software supply chains.
 
+## From SBOM to Enforcement: Writing License Policies with Conforma
+
+**Speaker:** Luiz Carvalho, Red Hat  
+**Event:** Red Hat Summit 2026  
+**Format:** Presentation, demo video and git repository  
+**Link:** [Watch the demo](https://drive.google.com/file/d/19gXsZUJz7evXxuzRGuAuIkKjg5LUTVMI/view?usp=sharing)  
+**Slides:** [View presentation](https://docs.google.com/presentation/d/1I8pfAhvMKCYJRI-1zh5JCIok6QF61fLZphvT0m8xA34/edit?usp=sharing)  
+**Git:** [Open demo git repository](https://github.com/lcarva/summit-demo-2026-sbom-conforma)  
+
+{{< rawhtml >}}
+<br>
+<iframe src="https://drive.google.com/file/d/19gXsZUJz7evXxuzRGuAuIkKjg5LUTVMI/preview" width="640" height="480"></iframe>
+<br>
+{{< /rawhtml >}}
+
+This demo walks through building a Conforma policy rule for SBOM license compliance. The demo uses a git repository whose git history
+is structured as a step-by-step guide showing how the policy evolves. This demo covers:
+
+- Writing Rego policy rules to detect disallowed licenses
+- Improving violation messages
+- Adding fine-grained exclusions for specific packages
+- Validating local SBOM files with `ec validate input`
+- Validating container images with `ec validate image`
+- Supporting SBOMs from different sources
+
+*Great starting point for anyone looking to write their first Conforma policy.*
+
 ## Ask an OpenShift Expert Ep 169 | Red Hat Trusted Artifact Signer - Conforma
 
 **Speakers:** Veda Shankar, Stefano Pentassuglia & Joe Stuart, Red Hat  
@@ -155,4 +182,4 @@ This article explores how Red Hat's Konflux platform uses software provenance to
 - How Conforma validates artifacts through policy-based verification
 - Practical examples of attestation data and usage
 
-*Ideal for developers looking to understand how detailed provenance tracking enables trustworthy software supply chains.*
+*Ideal for developers looking to understand how detailed provenance tracking enables trustworthy software supply chains.*