World Congress 2026 Europe • Jul 10, 2026 • Session details

Beyond SBOMs: The Future of Container Supply Chain Security

Mohammad-Ali A'râbi

Basic SBOMs can no longer stop self-propagating CI worms. Master advanced zero-trust pipelines and hardened image strategies to achieve ironclad container resilience.

Beyond SBOMs: The Future of Container Supply Chain Security thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

3:09 min

Practical mitigation strategies for modern software supply chains

Adrian Mouat

Adrian Mouat · World Congress 2026 Europe

52 sec

Securing build pipelines with Docker Hardened Images

Khushboo Verma

Khushboo Verma · World Congress 2026 North America

2:05 min

Verifying container composition and origins using software bill of materials

Ajeet Raina

Ajeet Raina · World Congress 2026 North America

6:33 min

Integrating SAST and container security into developer workflows

Mathias Tausig · LIVE

4:57 min

Identifying and analyzing container vulnerabilities with Docker Scout

Ajeet Raina

Ajeet Raina +1 · World Congress 2026 North America

2:56 min

Managing risks in CI/CD pipelines and supply chains

Christian Heilmann

Christian Heilmann +1 · World Congress 2026 North America

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan +1

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann · WeAreDevelopers

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen · NetApp

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic · adjoe

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray · Stack8s

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

DevOps for React Developers: From Code to Production

Kristiyan Velkov

Docker

Front-End Advocate | Speaker | AI & DevOps Enthusiast | Docker Captain | Tech Blogger | Book Author | 100+ IT Certifications | 30K+ Followers

Cloud Sovereignty Is an Architecture Problem: Patterns for Modern Platform Teams

Josephine Eskaline Joyce

IBM India Pvt Ltd

STSM, Chief Architect
Norton Stanley

IBM

Storage Architect

Your Agent Just Ran rm -rf: Sandboxing AI Agents from Docker to GKE Agent Sandbox

Rajani Ekunde

Identity company

Senior Software Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

What I Got Wrong Shipping an MCP Server for Live Infrastructure

Pritesh Kiri

Harness

Developer Relations Engineer

Related videos

Stop Running Mystery Meat in Production thumbnail

Stop Running Mystery Meat in Production

Jeroen van Erp · SUSE

World Congress North America · 2026

Your registry can't stop a valid login. What happens then? thumbnail

Your registry can't stop a valid login. What happens then?

Khushboo Verma · Cloudflare

World Congress North America · 2026

Open Source Secure Software Supply Chain in action thumbnail

Open Source Secure Software Supply Chain in action

Natale Vinto · Red Hat

World Congress · 2024

Supply Chain Security and the Real World: Lessons From Incidents thumbnail

Supply Chain Security and the Real World: Lessons From Incidents

Adrian Mouat · Chainguard

World Congress · 2025

Walking into the era of Supply Chain Risks thumbnail

Walking into the era of Supply Chain Risks

Vandana Verma

LIVE · Apr 2022

One Pipeline, Three Regulator - SBOM Compliance for the Developer thumbnail

One Pipeline, Three Regulator - SBOM Compliance for the Developer

Marcus Ross · Die Techniker

World Congress Europe · 2026

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Do You Trust Your Agents? Five Quick Ways to Contain Them

Do you trust your agents? Most of us use coding agents every day now. Give one a vague request, walk away, and come back to a pile of mostly working software. It’s brilliant, right up until you rem...

18 days ago

An image of a cube-shaped container with a ball of light inside of it

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

about 2 years ago

Dev Digest 138 - Are you secure about this?

AB

Andre Braun, GitLab

Now is the time for industrialized software development

Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace ...

over 1 year ago

A person developint HTML on a laptop with the sun shining on it.

From learning to earning

Jobs that call for the skills explored in this talk.

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

about 1 month ago

Cyber Defense & Incident Response

Delivery Hero SE

Zaragoza, Spain

Remote Golang Cybercrime Security Log

about 1 month ago

Cyber Defense & Incident Response

Delivery Hero SE

Santiago de Compostela, Spain

Remote Golang Cybercrime Security Log

about 1 month ago

Cyber Defense & Incident Response

Delivery Hero SE

A Coruña, Spain

Remote Golang Cybercrime Security Log