Learning Labs on

Build Safely with AI

Thu, 28 May 2026 12:00:00 +0000

The May 2026 Learning Lab with Erika Heidi explores AI-native threat models and how to mitigate risks involved with AI-assisted coding, leveraging Cursor and Chainguard for a secure AI SLDC.

Sections

0:00 Introduction and agenda
3:35 “This Changes Everything”
4:19 How the threat model changed with AI
8:17 Your local dev environment at risk
9:49 AI-native attack vectors
12:30 Closing the trust gap
14:14 Two principles for a safe SLDC with AI assistance
23:06 Vibecoding with trusted sources
27:26 The Chainguard plugin for Cursor
29:03 Demo - building an SBOM visualizer
31:27 The initial prompt
33:50 The resulting vibecoded app
34:20 Migrating to Chainguard Libraries
36:43 Verifying coverage
38:26 Recap of what we neutralized
40:15 Other Chainguard skills to try out on Cursor
48:45 Wrapping Up

Resources

Securing CI/CD with Chainguard

Thu, 30 Apr 2026 12:00:00 +0000

The April 2026 Learning Lab with Erika Heidi goes through how attackers exploit vulnerable GitHub Actions workflows, and how Chainguard can protect your CI/CD pipelines from these threats.

Sections

0:00 Introduction and agenda
5:31 Timeline of CI/CD software supply chain incidents
11:25 Open Source and CI/CD as the new target
12:47 2026: the year of AI-assisted attacks
15:16 Unpacking the Trivy Compromise
19:57 Secret exfiltration live demo
36:17 What could unfold from here
39:04 Strategies to mitigate risks
39:24 Repository inspection for insecure defaults
44:03 Minimize attack surface
48:48 Pull from trusted sources
52:21 Pin by digest
54:28 Use short lived tokens (ban PATs)
55:32 Use Chainguard Actions
58:55 Closing notes

Resources

Software supply chain attacks and Chainguard Libraries

Mon, 30 Mar 2026 12:00:00 +0000

The March 2026 Learning Lab with Manfred Moser focuses on the history, trends, and future developments around software supply chain attacks. Manfred talks about the role libraries for application developers and demonstrates numerous new features and use cases for Chainguard Libraries.

Sections

0:00 Introduction and agenda
1:45 Software supply chain overview
7:25 History of attacks and overview of different methods
17:59 Future threads and trends
21:37 Statistics about intensifying attacks
22:54 Incidents and fire drills
25:05 Impact from Minecraft and log4j on Maven Central
26:42 Chainguard Libraries overview
32:21 Chainguard Libraries for Python, Java, and JavaScript
35:17 Demo - Browsing libraries in the console UI
40:38 Demo - Pull token creation in console UI and with chainctl
42:13 Demo - Browsing Python simple index
45:50 Demo - Browsing Java repository
49:25 Demo - Example projects for JavaScript and Python
56:35 Demo - Verification with chainctl
58:47 Chainguard Repository
1:01:16 Upcoming events

Resources

Shipping Safer Container Runtimes in 2026

Wed, 17 Dec 2025 17:00:00 +0000

The December 2025 Learning Lab with Erika Heidi focuses on strategies to improve the security of your software supply chain and ship safer container runtimes in 2026.

Sections

00:00 Intro
02:52 Why Devs need to care
04:48 XZ Utils incident
09:43 tj-actions/changed-files incident
12:42 Sha1-Hulud Second Coming
17:11 Trending threat models
32:42 Mitigating risks
45:02 Concrete Dev actions this sprint
50:47 Chainguard Containers: CVE Comparisons

Resources

Chainguard OS on Raspberry Pi

Fri, 21 Nov 2025 17:00:00 +0000

The November 2025 Learning Lab with Erika Heidi covers the release of Chainguard OS for the Raspberry Pi, showing how Chainguard OS has evolved to power new environments.

Sections

0:46 Presentation Starts
2:55 How We Got Here: Wolfi and Chainguard OS
5:47 Presenting Chainguard OS for the Raspberry Pi
8:42 How to Set Up your Raspberry Pi with Chainguard OS
11:23 Grype scan on the Raspberry images
14:47 Demo Overview: Guardcraft Pi
18:10 Grype scan on the Guardcraft image
20:59 Live Demo: Minecraft server on the Raspberry Pi
24:14 Demo Overview: Open Source LLM server
30:51 Grype scan on the wolfi-llama image
32:35 Live Demo: Open Source Llama.cpp Server
35:03 Live image description with Qwen3-VL and Llama.cpp
39:18 Live Demo: ALT description CLI tool using Llama.cpp server API
41:24 What’s Next
42:22 New Compliance Features for Chainguard VMs
44:20 Chainguard VMs Roadmap
45:40 Announcing the next Learning Labs

Quickstart

To get started with Chainguard OS on the Raspberry Pi, and to be able to run the demos in this presentation, you’ll need:

Chainguard Libraries for JavaScript and CVE remediation for Python libraries

Thu, 30 Oct 2025 12:00:00 +0000

The October 2025 Learning Lab with Manfred Moser covers Chainguard Libraries for JavaScript and CVE remediation with Chainguard Libraries for Python. It starts with an overview about libraries and the JavaScript ecosystem and moves on to a demo with npm and pnpm. In the second section Manfred explains the approach for CVE remediation and shows an example project with remediation and scanning with grype.

Sections

0:00 Introduction
1:55 Agenda
2:54 Secure container and the role of libraries
5:20 Software supply chain for libraries and security
6:51 Chainguard Libraries and the JavaScript ecosystem
14:33 Malware in the npm ecosystem
18:39 Chainguard Libraries for JavaScript
25:57 Demoes with npm and pnpm
33:50 Troubleshooting results and additional demos
41:34 Chainguard Libraries for Python
43:39 CVE remediation process and examples
52:03 Demoes with uv and grype
56:25 Further resources
57:35 Next up
58:18 Questions
1:06:00 Wrapping up

JavaScript demo

The demonstration of Chainguard Libraries for JavaScript walks through the minimal example for pnpm with direct access to the registry and with access to a local repository manager, and shows an equivalent project with npm as well.

Static Chainguard Container Images

Sun, 28 Sep 2025 21:00:00 +0000

The September 2025 Learning Lab, led by Adrian Moat, focuses on minimizing the attack surface of container images by adopting Chainguard’s static and minimal images, which boast zero known CVEs. Adrian demonstrated a container build for a Go-based application and explains more complex use cases.

Sections

00:01 Welcome and introductions
03:34 Talk outline and prerequisites
04:34 Understanding CVEs
07:34 Introducing Chainguard Containers
08:58 Vulnerability and size comparison
10:14 Why Chainguard images are more secure
11:46 Practical demo: Migrating a Go container image
15:01 Initial build
17:59 Migration to Chainguard base image
20:45 Multi-stage build and static image optimization
27:39 Static vs. dynamic binaries
30:16 Chainguard Container variants
32:34 Distroless Containers and dev images
33:30 Debugging Distroless containers demonstration
44:57 Key takeaways and wrap-up
46:44 Next Learning Lab announcement
47:50 Resources for further learning

Resources

Slide deck

Getting Started with Chainguard's Dockerfile Converter

Thu, 28 Aug 2025 17:00:00 +0000

The August 2025 Learning Lab with Erika Heidi covers DFC, or Dockerfile Converter, an open source tool created by the Chainguard team to facilitate migration to Chainguard Containers. In this session, learn how to install and use DFC to effectively convert your Dockerfiles to use minimal container images from Chainguard. Erika demonstrates how to use various flags to customize DFC’s output and also how to connect the DFC MCP server to your AI assistant to have DFC functionality integrated within your current AI workflow.

AI with Hardened Container Images

Thu, 24 Jul 2025 17:00:00 +0000

The July 2025 Learning Lab with Patrick Smyth covers AI with Hardened Container Images. In this session, learn how to secure AI workloads by reducing vulnerabilities in container images by over 90%. Patrick demonstrates hands-on techniques for training an animal detection model using PyTorch with hardened container images, creating minimal and secure deployments, and running AI frameworks with zero CVEs.

Sections

0:00 Introduction and updates
2:02 Preparation: Docker pull instructions for demo
3:39 Chainguard! Who are we?
4:34 CVE system fundamentals
6:48 “Boss assigned me to fix Ubuntu” problem
7:41 Introduction to Chainguard Containers
8:54 Zero CVE containers: Real results and comparisons
11:10 How we achieve zero CVEs: Minimal, Fresh, Advisory, Patch
13:24 AI container challenges: Size and complexity
14:59 PyTorch container analysis: CVEs, packages, and executables
16:21 Demo introduction: Image classification with PyTorch
17:59 Demo walkthrough and repository overview
19:28 Demo: Running the training command
22:01 Demo: Downloading test image and running inference
23:20 Recent developments in Chainguard AI containers
25:09 Other AI containers: TensorFlow, KServe, Triton backends
26:46 Q&A
35:18 Chainguard AI course and additional resources

Demo

In the demo, Patrick trains and runs inference on an image classification model using PyTorch and Chainguard’s hardened container image. The model classifies images of octopuses, whales, and penguins, demonstrating how to work with AI workloads securely.

Chainguard Libraries for Python

Sun, 22 Jun 2025 17:00:00 +0000

The June 2025 Learning Lab with Patrick Smyth covers Chainguard Libraries for Python. Open source libraries help you move fast, but pulling in external dependencies can introduce supply chain risk. This session covers fundamental concepts of Chainguard Libraries, package managers and dependencies, PyPI and build tools, configuring repository managers, and running example application builds.

Sections

0:00 Introduction and welcome
0:54 Patrick Smyth introduction and background
1:47 Chainguard! Who are we?
2:47 Chainguard Containers and the “boss assigned me to fix Ubuntu” problem
4:12 Introduction to Chainguard Libraries for Python
5:04 Python libraries fundamentals - modules, packages, and libraries
6:34 The dependency graph problem and modern ecosystem challenges
8:57 PyPI (Python Package Index) overview and infrastructure
10:53 Supply chain attacks on the rise and threats to the Python ecosystem
11:39 Supply chain meme calendar - an attack every month this year
13:54 Anatomy of supply chain attacks and attack vectors
17:43 Chainguard Libraries!
19:34 Chainguard Factory overview and operational security
21:33 Case study: Ultralytics YOLO December 2024 attack
23:22 Technical caveats and requirements for Chainguard Libraries
25:06 Demo introduction and Flask project overview
27:48 Accessing demo materials on Chainguard Academy
29:00 Demo: Cloning and setting up the Flask project
31:17 Demo: Creating virtual environment and installing from PyPI
33:06 Demo: Running Flask application and testing with libCheck tool
34:28 Demo: Configuring pip for Chainguard Libraries via repository manager
36:19 Demo: Installing dependencies from Chainguard Libraries
37:02 Demo: Verification with libCheck
38:22 Demo: Containerizing the demo application
40:25 Demo: Building and running containerized Flask application
41:41 Additional configuration options and documentation resources
42:19 Q&A: Repository manager setup and configuration
43:26 Q&A: Architecture support and glibc requirements
44:34 Q&A: libCheck tool open source plans and detailed output
46:05 Q&A: CVE scanning with Grype and vulnerability management

Demo

In the demo, Patrick switches a Flask application to use Chainguard Libraries for Python, sourcing dependencies from a repository manager (Artifactory) set up to pull first from the Chainguard Libraries for Python index with a fallback to the Python Package Index (PyPI).

Chainguard Libraries for Java

Wed, 18 Jun 2025 21:00:00 +0000

The May 2025 Learning Lab with Manfred Moser covers Chainguard Libraries for Java. It starts with an overview about libraries and the Java ecosystem and progresses to a demo with Apache Maven and Sonatype Nexus.

Sections

0:00 Introduction and agenda
2:38 Chainguard and containers
3:47 Chainguard Factory
4:57 Concepts - from containers to libraries
9:00 Java and Java libraries
12:45 Software supply chain of libraries and attacks
19:27 Dependency supply in Java
20:30 Repository concept and Maven Central
24:32 Chainguard Libraries for Java and repository manager intro
28:17 Developer tools
29:21 Demo start and setup with chainctl
32:55 Sonatype Nexus configuration
37:30 Maven configuration
40:41 Example project setup, build, and results
44:57 Dependency list and tree
47:00 Results and verification
49:37 Summary
50:43 Up next
52:55 Questions

Demo

Following are some of the commands used in the demo. More information can be found in the slide deck, the linked resources, and the video.

Learning Labs

Wed, 18 Jun 2025 21:00:00 +0000

Learning Labs are regularly run, virtual events from Chainguard that provide educational and training material about Chainguard products, software supply chain security, and related topics.

Lab Notes

The lab notes often include demo projects, a slide presentation, sample commands, links to specific sections in the video, and pointers to more resources: