World Congress 2026 North America • Sep 24, 2026 • Session details

Stop Running Mystery Meat in Production

Are you blindly deploying vulnerable mystery meat base images like node:latest? Stop the endless patching cycle by enforcing cryptographic attestation and strict Kubernetes admission policies.

Stop Running Mystery Meat in Production thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

1:55 min

Addressing base image vulnerabilities in application containers

Reinhard Kugler · LIVE

1:19 min

Securing Kubernetes workloads and containerized image layers

Aleksandr Kalikov · LIVE

6:33 min

Integrating SAST and container security into developer workflows

Mathias Tausig · LIVE

2:23 min

Securing container images in the build process

Rico Komenda

Rico Komenda · World Congress 2025

1:31 min

Four key security questions for container image verification

Khushboo Verma

Khushboo Verma · World Congress 2026 North America

1:34 min

Leveraging automated toolsets for hardened basic cluster configurations

Marc Nimmerrichter · World Congress 2022

More from World Congress 2026 North America

2026 in LLMs (so far) thumbnail

2026 in LLMs (so far)

Simon Willison

Running Operations Without Humans in the Loop thumbnail

Running Operations Without Humans in the Loop

Edward Aryee, Ryan Ries, Yaron Schneider, Chris Hallenbeck, Floriane Gramlich

Beyond the Code: Human-AI Synergies in Product Development thumbnail

Beyond the Code: Human-AI Synergies in Product Development

Ajita Kanchivakam Ananth

Honey, look! I vibe-coded an OS! thumbnail

Honey, look! I vibe-coded an OS!

Ian Smith

The Productivity Illusion: What AI Really Changed for Developers thumbnail

The Productivity Illusion: What AI Really Changed for Developers

Fatih Kadir Akın

Your Evals Passed. Your Agent Just Emptied a Database. thumbnail

Your Evals Passed. Your Agent Just Emptied a Database.

Tejas Pravinbhai Patel

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

What I Got Wrong Shipping an MCP Server for Live Infrastructure

Pritesh Kiri

Harness

Developer Relations Engineer

How We Cut Our API's p99 Latency from Minutes to Under a Second

Deepak Agrawal

Atlassian

Principal Software Engineer

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

Hadar Geva

Myop

CTO & Co-founder

Speed or Security? Why Not Both for Your Coding Agents

Ajeet Raina

Docker

Developer Advocate

Related videos

Beyond SBOMs: The Future of Container Supply Chain Security thumbnail

World Congress 2026 Europe • 3 months ago

Beyond SBOMs: The Future of Container Supply Chain Security

Mohammad-Ali A'râbi

Your registry can't stop a valid login. What happens then? thumbnail

World Congress 2026 North America • 21 days ago

Your registry can't stop a valid login. What happens then?

Khushboo Verma

Kubernetes Security Best Practices thumbnail

World Congress 2025 • about 1 year ago

Kubernetes Security Best Practices

Rico Komenda

From Build to Breach: Hacking Kubernetes Through the Supply Chain thumbnail

World Congress 2026 Europe • 3 months ago

From Build to Breach: Hacking Kubernetes Through the Supply Chain

Ali Alp

Kubernetes Security - Challenge and Opportunity thumbnail

World Congress 2022 • over 4 years ago

Kubernetes Security - Challenge and Opportunity

Marc Nimmerrichter

A practical guide to writing secure Dockerfiles thumbnail

LIVE • over 5 years ago

A practical guide to writing secure Dockerfiles

Madhu Akula

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

about 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.

Everyone thinks CISOs make the final call on security tools. But in modern software organisations, adoption starts long before the boardroom, inside CI/CD pipelines, developer workflows, and pull r...

8 months ago

A room full of people at a tech conference

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

almost 2 years ago

Dev Digest 138 - Are you secure about this?

AB

Andre Braun, GitLab

Now is the time for industrialized software development

Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace ...

over 1 year ago

A person developint HTML on a laptop with the sun shining on it.

From learning to earning

Jobs that call for the skills explored in this talk.

about 2 months ago • Verified

Principal Software Engineer, Docker Hardened Images

Expert Remote Kubernetes

about 2 months ago • Verified

Senior Supply Chain Security Engineer

Expert Remote Linux Kubernetes

about 2 months ago • Verified

Senior Security Engineer, Docker Desktop

Expert Remote Go

about 2 months ago • Verified

Senior Principal Software Engineer, Docker and Ecosystem

Seattle, United States

Expert Remote Cloud (AWS/Google/Azure)

about 2 months ago • Verified

Senior Software Engineer, Secure Build

Expert Remote Go

about 2 months ago • Verified

Manager, Engineering, Secure Build and SCS Services

Expert Remote Team Leadership