Matt Moore
speaker
1,477 appearances
3 recordings
2 series
first heard Jan 2026
last heard 14 Aug
Matt Moore’s voice in public audio — every appearance, attributed to the second.
Trend
recordings per month · last 12 monthsRecordings per month over the last 12 months — 3 in all, peaking in Aug 2026 with 1.
Appearances
Like investing in cryptographic saying some folks obviously appreciate this stuff.
But can we do more things to protect our customers, to make them more secure, to deepen the layers of security that we are using to protect their supply chain?
And I think that we're already at a point where you we've we are doing more things than the vast majority of companies are doing.
But the more companies we do it for, the more we can invest in taking that even further.
Um, no, uh, I mean, honestly, it took us a few iterations.
When we first started, uh, you know, supply chain's a huge thing.
So we had to sort of start somewhere.
And we started from a standpoint of like, how can we help folks secure their supply chain?
What we realized was even if we helped them through the scope of what they control to secure all those things, there was so much stuff coming in from the outside that they couldn't verify that but you know, their developers weren't right.
The base images, the application images, the language libraries, the GitHub actions, the agent skills, right?
There's so many ways folks are consuming open source that they don't have strong provenance for how they get it and whatnot.
Even if we helped folks secure their part of the supply chain, there were so many things sort of feeding into that that they had no way of verifying that it was a huge hole.
We were starting in parallel to build out.
out an images product, you know, trying to do what we did for distrolless, but for real at scale.
And that was the beginnings of a secure supply chain.
We didn't, you know, fully appreciate it yet, but we were building everything from source.
We were building minimal hardened images.
We knew we wanted to do these things.
And I think what we backed into was if we actually are building everything from source, we can make sure all of the patches are applied.
We can
Showing 221–240 of 1,477 · page 12 of 74
← Previous
Next →