Chainguard is racing to fix trust in AI-built software - here's how
Briefly

Chainguard is racing to fix trust in AI-built software - here's how
"Dan Lorenc emphasized the importance of learning to use power tools safely, comparing the transition in programming from manual tools to AI-driven automation. He stated, 'It's hard to make mistakes with manual tools because you're going slower, while [AI] power tools are a lot more fun, but they're also a lot more dangerous. We lose a lot more fingers.' This analogy highlights the need for caution as the industry evolves."
"Lorenc predicted a significant shift in coding practices, stating, 'In the next 12 months, the majority of code is going to be written by something different and something new.' This statement underscores the urgency for developers to adapt to AI technologies to remain secure against evolving threats."
"Chainguard Factory 2.0 has made substantial progress in vulnerability management, having removed more than 1.5 million vulnerabilities from customer production environments, a significant increase from 270,000 the previous year. This achievement illustrates the effectiveness of their new automated approach to building and securing software."
Chainguard has launched its AI-powered Factory 2.0 to improve programming security by targeting open-core programs and GitHub Actions. The new approach aims to automate the traditional patch cycle, enhancing safety in coding practices. Chainguard Factory 2.0 has successfully removed over 1.5 million vulnerabilities from customer environments by continuously rebuilding and repatching images and packages from source. The transition to AI-driven tools is framed as a necessary evolution to keep pace with AI-accelerated threats in software development.
Read at ZDNET
Unable to calculate read time
[
|
]