Killing CVEs at the Source: Supply Chain Security in Practice
About the event
Join us for an evening of insightful talks, valuable connections, and great company. One evening on what it actually takes to secure a software supply chain, from hardened container images through to what this looks like inside a regulated environment.
Talk 1 - Engineering for a World Where Exploits Arrive Before the Advisory Speaker: Cameron Martin (Chainguard) Most teams meet their supply chain problem downstream, as a scanner report full of criticals and a patching queue that never empties. This talk looks at the other end of the pipeline: what changes when images are built minimal and rebuilt continuously, so vulnerabilities are removed at the source rather than triaged after they land in production. We'll cover the practical patterns teams are using for container hardening, how this plays with SBOMs, signing and provenance, and where it fits alongside your existing scanning and admission controls. Plus a forward look at the Chainguard roadmap and what's coming next.
Talk 2 - Supply Chain Security in a Regulated Environment Speaker: Brad McCoy (Cuscal) The theory is one thing, running it inside an Australian financial services business is another. Brad shares what this looks like in practice at Cuscal: the platform decisions, the trade offs, and how container security and compliance requirements actually get met day to day without grinding delivery to a halt. An honest look at what worked, what didn't, and what he'd do differently.
This is a relaxed, highly interactive evening built for platform engineers, security engineers, DevSecOps leaders and architects who are actively working through supply chain risk, container hardening and compliance.
On the night: Free entry · Food & drinks · Networking · Live Q&A Seats are limited - RSVP to save your spot. See you there! 👋
