World Congress 2026 North America • Sep 23, 2026 • Session details

Supply Chain Security When Agents Write the Code

Unrestricted AI coding agents expose API keys and introduce critical vulnerabilities. Learn how to safely harness autonomous workflows using micro-VM sandboxing, AI BOMs, and strict pipeline gating.

Supply Chain Security When Agents Write the Code thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

4:08 min

Enforcing secure supply chain practices for AI agents

Isaac Evans

Isaac Evans · World Congress 2026 North America

2:18 min

Managing security risks introduced by autonomous AI agents

Christian Heilmann

Christian Heilmann · World Congress 2025

6:25 min

Coding hazards and software supply chain vulnerabilities

Isaac Evans

Isaac Evans · World Congress 2026 North America

5:54 min

Mitigating operational risks through robust agent sandboxing

Isaac Evans

Isaac Evans · World Congress 2026 North America

3:56 min

Security risks of autonomous AI coding agents

Chris Heilmann

Chris Heilmann +2 · LIVE

1:53 min

Introduction to securing open source AI agent infrastructure

Abdel Fane

Abdel Fane · World Congress 2026 North America

More from World Congress 2026 North America

2026 in LLMs (so far) thumbnail

2026 in LLMs (so far)

Simon Willison

Running Operations Without Humans in the Loop thumbnail

Running Operations Without Humans in the Loop

Edward Aryee, Ryan Ries, Yaron Schneider, Chris Hallenbeck, Floriane Gramlich

Beyond the Code: Human-AI Synergies in Product Development thumbnail

Beyond the Code: Human-AI Synergies in Product Development

Ajita Kanchivakam Ananth

Honey, look! I vibe-coded an OS! thumbnail

Honey, look! I vibe-coded an OS!

Ian Smith

The Productivity Illusion: What AI Really Changed for Developers thumbnail

The Productivity Illusion: What AI Really Changed for Developers

Fatih Kadir Akın

Your Evals Passed. Your Agent Just Emptied a Database. thumbnail

Your Evals Passed. Your Agent Just Emptied a Database.

Tejas Pravinbhai Patel

Upcoming sessions on this topic

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Speed or Security? Why Not Both for Your Coding Agents

Ajeet Raina

Docker

Developer Advocate

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Teaching AI Coding Agents to Build It Right the First Time

Sajeetharan Sinnathurai

Microsoft

Principal Product Manager

Autopsy of an Autonomous Incident: When the Agent Made It Worse

Navin Pai

StackGen

Director of Engineering

Beyond File Dumps: Context Engineering for Coding Agents

Animesh Dutta

Arm

Senior Software Engineer

Related videos

One Boundary for the Agentic Era thumbnail

World Congress 2026 North America • 21 days ago

One Boundary for the Agentic Era

Mark Lechner

Give the Agent Its Own Machine thumbnail

World Congress 2026 North America • 23 days ago

Give the Agent Its Own Machine

Dan Ndombe

Tools, Sandboxes, and the Plumbing of Agentic Development thumbnail

World Congress 2026 North America • 23 days ago

Tools, Sandboxes, and the Plumbing of Agentic Development

Oleg Šelajev

Manufacturing trust: speed and safety in the age of agents thumbnail

World Congress 2026 North America • 22 days ago

Manufacturing trust: speed and safety in the age of agents

Mark Cavage, Michael Irwin, Hervé Bizira

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This) thumbnail

World Congress 2026 North America • 21 days ago

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

Rishab Kumar

Making “Works on All Machines” Work for Agent Environments thumbnail

World Congress 2026 North America • 23 days ago

Making “Works on All Machines” Work for Agent Environments

Michael Irwin

Related articles

DC

Daniel Cranney

What is Agentic Programming and Why Should Developers Care?

Since the release of tools like ChatGPT and GitHub Copilot, the way developers work has shifted dramatically. What began as simple autocomplete in the early versions of Copilot has quickly evolved ...

about 1 year ago

Agents collaboratively programming

IK

Igor Khokhriakov

CH

Chris Heilmann

I Gave a Video Editor More Autonomy Than a Trading Bot. On Purpose.

This is a guest post by Igor Khokhriakov. If you asked me which of two systems should get more AI autonomy, an algorithmic trading platform or a hobby video editor, the obvious answer would probabl...

15 days ago

Illustration of different connected systems

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

about 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

CH

Chris Heilmann

The Overflow: AI and Agentic Coding

In this week’s Overflow - where we shared links we just couldn’t fit in the Dev Digest but were too good to ignore - we’re looking at what’s been happening in the world of AI, coding agents and aut...

7 months ago

Two monitors with red skulls on, and 'agent offline' underneath, on a brightly lit desk

From learning to earning

Jobs that call for the skills explored in this talk.

about 2 months ago

Senior Software Engineer, Sandboxes (Eu Or East Coast Preferred)

€94k–155k Remote Docker Adobe InDesign Virtual Agents

Principal Solutions Architect, Professional Services

€119k–170k Okta Docker OpenID

Principal Solutions Architect, Professional Services

Cantabria, Spain

€119k–170k Okta Docker OpenID

Principal Solutions Architect, Professional Services

Valladolid, Spain

€119k–170k Okta Docker OpenID

about 2 months ago • Verified

Senior Supply Chain Security Engineer

Expert Remote Linux Kubernetes

about 2 months ago

Senior Software Engineer, Sandboxes (Eu Or East Coast Preferred)

Barcelona, Spain

€94k–155k Remote Linux Docker Code Review