Agenda

In this session, we'll go deep on the full Chainguard platform -- how the pieces connect, where teams typically leave coverage gaps, and how to get more out of what you've already deployed. From Containers and Libraries to Actions and Agent Skills, we'll cover advanced configuration patterns, integration strategies, and the architectural decisions that separate a baseline deployment from a mature supply chain security program.

Advanced tactics: multi-arch images, multistage builds, debugging. This workshop is for those looking to deepen their expertise in container security, image optimization, and advanced Docker techniques. You'll explore how Chainguard Images are built, maintained, and updated to achieve a zero-CVE goal. We’ll focus on security, reproducibility, and supply chain integrity, which are fundamental principles for Chainguard. The session will go beyond 101 basics, covering advanced image construction, container optimization strategies, and secure ways to modify distroless images for your specific requirements. Participants will gain hands-on experience with real-world tools and techniques for building scalable, production-ready containers.

The patch era is dead. AI-assisted attacks are exploiting vulnerabilities faster than any team can respond, and the AI coding tools accelerating your development are expanding your attack surface at the same rate. In this panel, security and engineering leaders discuss how the threat landscape is shifting, what secure-by-default means in an AI-native world, and how leading organizations are rethinking their security posture from the ground up.

Advanced tactics: multi-arch images, multistage builds, debugging. This workshop is for those looking to deepen their expertise in container security, image optimization, and advanced Docker techniques. You'll explore how Chainguard Images are built, maintained, and updated to achieve a zero-CVE goal. We’ll focus on security, reproducibility, and supply chain integrity, which are fundamental principles for Chainguard. The session will go beyond 101 basics, covering advanced image construction, container optimization strategies, and secure ways to modify distroless images for your specific requirements. Participants will gain hands-on experience with real-world tools and techniques for building scalable, production-ready containers.

Part I: Inside Chainguard's Agentic Factory
"Secure by default" takes real engineering and trust systems. We'll pull back the curtain on our build pipelines, verification layers, and controls.

Part II: Attacks rewritten
Most supply chain attacks don't target production—they exploit the build. We unpack how malware slips in, with real-world attacks and what could've stopped them.

Adopting Chainguard Container Images at scale isn’t just a technical shift—it’s an organizational transformation. This training will introduce teams to our Adoption Best Practices Framework, designed to help you accelerate secure image adoption across security and engineering with the right mix of leadership alignment, developer enablement, and long-term planning. You’ll learn how to drive meaningful, measurable progress using the five core principles of successful adoption, and we’ll walk through practical activities you can start using immediately.

You’ll hear about our toughest lessons, architectural changes, and trade-offs (with real failures included). If you’re building or scaling a secure infrastructure or build system, this is your chance to see what happens when the rubber meets the road—and walk away with practical inspiration (and war stories) you can adapt.

This technical session walks through recent Chainguard product and feature updates, with a focus on how to use them in practice. We’ll cover Custom Assembly and Chainguard Libraries, along with new capabilities in the Chainguard Console such as notifications, image queue, and CVE visualizations. You'll leave with examples and practical workflows to help you understand where these features fit into day-to-day operations.