News Events Research
Industry Insights
Opinion Podcasts MeriTV
Securing Open Source at Machine Speed
Securing Open Source at Machine Speed
Securing Open Source at Machine Speed

Open source software is foundational to modern application development and deeply embedded across federal systems. That ubiquity brings enormous flexibility and speed, along with a growing security challenge for the systems integrators that design, build, and support federal technology environments. They must help agencies understand, manage, and reduce risk across a constantly changing software supply chain. Frontier artificial intelligence (AI) models are intensifying that challenge by accelerating vulnerability discovery and exploitation, compressing response timelines, and increasing pressure on organizations to embed security more deeply throughout the development lifecycle process.

The program will explore how federal systems integrators can respond to the evolving threat landscape by helping agencies build a more trusted software foundation while addressing executive orders, security mandates, and compliance requirements (including classified enclaves and air-gapped environments). It will examine ways to improve transparency, attestation, SBOMs, and provenance across the software supply chain.

The core challenge has shifted from software visibility to agility and resilience. Today’s priorities are helping teams quickly adapt code, providing developers with secure enterprise environments, and making architectural decisions that can support federal programs for years. These stronger foundations can help federal teams reduce engineering toil and vulnerability-management burden, support compliance and assurance requirements, and spend more time delivering mission capability.

WATCH:
OS Security for FSIs

Open source software is essential to modern federal systems, but AI is accelerating vulnerability discovery and exploitation, creating new challenges for systems integrators. In this video, John Sapp, field chief information security officer at Chainguard, explores why securing the software supply chain at machine speed is critical to reducing risk, minimizing disruptions, and keeping federal missions moving. Learn how trusted software components and continuous security practices can help organizations strengthen security without sacrificing speed or performance.

LISTEN:
Securing the Software Supply Chain in the Age of AI

In this podcast, John Sapp, Chainguard’s field chief information security officer, will explore what the changing open source security landscape means for teams designing and delivering federal systems. The discussion will examine how AI is affecting software risk, why open source security is a now a required architectural consideration, and how integrators can balance security, developer productivity, compliance, and mission speed as they make decisions for the next generation of federal programs.

READ:
Building Federal Software on a Foundation of Trust

In this Q&A, John Sapp, Chainguard’s field chief information security officer, will take a closer look at the engineering practices and architectural choices that can help integrators create more secure software development environments for federal programs. The discussion will explore how teams can assess the trustworthiness of open source components, strengthen software provenance, automate vulnerability remediation, and incorporate security evidence into development workflows. It will also examine how these practices can be applied across containers, libraries, and other elements of the development environment to help agencies reduce risk, support compliance, and accelerate mission delivery.

Get Your Copy

Please provide the information below. All fields are required.

  • By registering for this resource and providing my contact information, I consent that MeriTalk and its partners may contact me. Any information I supply is subject to MeriTalk's privacy policy.

Sponsor(s)