Shipping Safer Container Runtimes in 2026

The December 2025 Learning Lab with Erika Heidi focuses on strategies to improve the security of your software supply chain and ship safer container runtimes in 2026.

Sections

• 00:00 Intro
• 02:52 Why Devs need to care
• 04:48 XZ Utils incident
• 09:43 tj-actions/changed-files incident
• 12:42 Sha1-Hulud Second Coming
• 17:11 Trending threat models
• 32:42 Mitigating risks
• 45:02 Concrete Dev actions this sprint
• 50:47 Chainguard Containers: CVE Comparisons

Resources

• Slide deck
• Chainguard Containers Overview
• Chainguard Libraries Overview
• Migrating to Chainguard Containers
• How to Use Container Image Digests to Improve Reproducibility
• Keep your Chainguard Containers Up to Date with digestabot
• Using Renovate with Chainguard Containers
• Images Directory