> Markdown version of [/videos/100531-supply-chain-security-when-agents-write-the-code?t=832](https://www.wearedevelopers.com/videos/100531-supply-chain-security-when-agents-write-the-code?t=832). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Supply Chain Security When Agents Write the Code

Unrestricted AI coding agents expose API keys and introduce critical vulnerabilities. Learn how to safely harness autonomous workflows using micro-VM sandboxing, AI BOMs, and strict pipeline gating.

- **Speakers:** [Ajeet Raina](https://www.wearedevelopers.com/@ajeet-raina)
- **Event:** World Congress 2026 North America
- **Published:** September 23, 2026
- **Duration:** 27:08
- **URL:** https://www.wearedevelopers.com/videos/100531-supply-chain-security-when-agents-write-the-code
- **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/15456c08c4faa7740383b9805aedb561/thumbnails/thumbnail.jpg?time=157069ms

## Access

Playback and chapters for this video are available with a Free account.

## Related Moments

- [Enforcing secure supply chain practices for AI agents](https://www.wearedevelopers.com/videos/100448-don-t-kill-my-vibes-simple-steps-to-stay-secure-when-vibe-coding) (from "Don’t kill my Vibes - Simple Steps to Stay Secure when Vibe Coding")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/24488ef1e000cfbf47226082fd7c1ab5/thumbnails/thumbnail.jpg?time=97581ms
- [Managing security risks introduced by autonomous AI agents](https://www.wearedevelopers.com/videos/1403-five-things-in-tech-that-matter-and-we-have-to-make-work) (from "Five things in tech that matter and we have to make work")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/e470d60cbabcf13b052d72bd4d89a9fb/thumbnails/thumbnail.jpg?time=360505ms
- [Coding hazards and software supply chain vulnerabilities](https://www.wearedevelopers.com/videos/100448-don-t-kill-my-vibes-simple-steps-to-stay-secure-when-vibe-coding) (from "Don’t kill my Vibes - Simple Steps to Stay Secure when Vibe Coding")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/24488ef1e000cfbf47226082fd7c1ab5/thumbnails/thumbnail.jpg?time=97581ms
- [Mitigating operational risks through robust agent sandboxing](https://www.wearedevelopers.com/videos/100448-don-t-kill-my-vibes-simple-steps-to-stay-secure-when-vibe-coding) (from "Don’t kill my Vibes - Simple Steps to Stay Secure when Vibe Coding")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/24488ef1e000cfbf47226082fd7c1ab5/thumbnails/thumbnail.jpg?time=97581ms
- [Security risks of autonomous AI coding agents](https://www.wearedevelopers.com/videos/2164-wearedevelopers-live-project-chopin-make-your-team-and-agents-play-along) (from "WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/067549cd65fe0291052fa8da133fe339/thumbnails/thumbnail.jpg?time=30000ms
- [Introduction to securing open source AI agent infrastructure](https://www.wearedevelopers.com/videos/100438-securing-ai-agent-infrastructure-identity-attestation-and-trust-at-scale) (from "Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/60679119458e1547bacbd3c007a0b280/thumbnails/thumbnail.jpg?time=117235ms

## Related Articles

- [Do You Trust Your Agents? Five Quick Ways to Contain Them](https://www.wearedevelopers.com/magazine/787-do-you-trust-your-agents-five-quick-ways-to-contain-them)
- [Building an Agentic Software Factory](https://www.wearedevelopers.com/magazine/796-building-an-agentic-software-factory)
- [What is Agentic Programming and Why Should Developers Care?](https://www.wearedevelopers.com/magazine/625-what-is-agentic-programming-and-why-should-developers-care)
- [ I Gave a Video Editor More Autonomy Than a Trading Bot. On Purpose.](https://www.wearedevelopers.com/magazine/773-i-gave-a-video-editor-more-autonomy-than-a-trading-bot-on-purpose)

## Related Jobs

- [Staff Developer Advocate, GitHub Security Lab](https://www.wearedevelopers.com/jobs/ext/3929243-staff-developer-advocate-github-security-lab) at **GitHub**
- [Senior Product Security Architect](https://www.wearedevelopers.com/jobs/48532-senior-product-security-architect) at **Expedia**
- [Staff Security Data Engineer](https://www.wearedevelopers.com/jobs/ext/4469379-staff-security-data-engineer) at **GitHub**
- [Senior Software Engineer - Semantic Data Lake (Open)SDE3](https://www.wearedevelopers.com/jobs/48597-senior-software-engineer-semantic-data-lake-open-sde3) at **WEX**
- [Staff Enterprise Security Engineer, AI Security](https://www.wearedevelopers.com/jobs/ext/3785135-staff-enterprise-security-engineer-ai-security) at **Twilio**
- [Principal Software Engineer, Copilot Code Review](https://www.wearedevelopers.com/jobs/ext/3926064-principal-software-engineer-copilot-code-review) at **GitHub**