Software supply chain attacks and Chainguard Libraries

The March 2026 Learning Lab with Manfred Moser focuses on the history, trends, and future developments around software supply chain attacks. Manfred talks about the role libraries for application developers and demonstrates numerous new features and use cases for Chainguard Libraries.

Sections

• 0:00 Introduction and agenda
• 1:45 Software supply chain overview
• 7:25 History of attacks and overview of different methods
• 17:59 Future threads and trends
• 21:37 Statistics about intensifying attacks
• 22:54 Incidents and fire drills
• 25:05 Impact from Minecraft and log4j on Maven Central
• 26:42 Chainguard Libraries overview
• 32:21 Chainguard Libraries for Python, Java, and JavaScript
• 35:17 Demo - Browsing libraries in the console UI
• 40:38 Demo - Pull token creation in console UI and with chainctl
• 42:13 Demo - Browsing Python simple index
• 45:50 Demo - Browsing Java repository
• 49:25 Demo - Example projects for JavaScript and Python
• 56:35 Demo - Verification with chainctl
• 58:47 Chainguard Repository
• 1:01:16 Upcoming events

Resources

• Slide deck
• Chainguard Libraries documentation