Pioneering Container Security at Google

26min Snip

00:00

Play full episode

Summary

Transcript

Episode notes

This chapter explores the early development of container technology at Google, detailing the shift towards cloud-centric strategies and the creation of the container registry. It addresses challenges in container vulnerabilities and the initiatives taken to enhance security, including the introduction of Chain Guard images and the Wolfie Linux distribution. The discussion highlights the evolution of supply chain security and the proactive measures being implemented to manage vulnerabilities within the software development landscape.

Software supply chain attacks exploit interdependencies within software ecosystems. Security in the supply chain is a growing issue, and is particularly important for companies that rely on large numbers of open source dependencies.

Chainguard was founded in 2021 and offers tools and secure container images to improve the security of the software supply chain.

Matt Moore is the Founder and CTO of Chainguard. He started his career in compiler optimization at Microsoft and worked at Google before starting Chainguard. He joins the show with Gregor Vand to talk about container security.

Gregor Vand is a security-focused technologist, and is the founder and CTO of Mailpass. Previously, Gregor was a CTO across cybersecurity, cyber insurance and general software engineering companies. He has been based in Asia Pacific for almost a decade and can be found via his profile at vand.hk.