Hardened Images, Governed Agents: Securing Your AI Supply Chain

AI agents now read entire codebases, refactor across services, and ship pull requests, often built on base images nobAI agents are increasing the speed and volume of software entering production. 

If your team is spending too much time chasing base-image CVEs, maintaining custom images, or proving to security and compliance teams that the software entering production can be trusted, this session is for you.

You’ll see how a hardened-by-default approach can shift security work earlier in the software lifecycle, reduce recurring vulnerability management, and create a more consistent foundation for both developers and AI agents.

You’ll walk away with:

• A clearer picture of where risk enters your container supply chain and what to prioritize first
• A practical approach to reducing CVE exposure without creating more work for developers
• An understanding of how to preserve security guarantees as images are customized for real-world workloads
• A better way to think about provenance, SBOMs, and auditability as AI agents contribute more code
• Concrete ideas for moving from reactive scanning and patching toward a secure-by-default software foundation