Kim Lewandowski (@kimsterv) header
Kim Lewandowski (@kimsterv) profile picture

Kim Lewandowski

@kimsterv

🥷 🐙 ⛓ Founder/Product at Chainguard. Previously at Google, and a smattering of other startups. Co-creator of SLSA, Security Scorecards and Tekton.

 California, USA
chainguard.dev
Joined March 2008
  • Tweets5.2K
  • Following737
  • Followers2.6K
201Media
Photo by Kim Lewandowski (@kimsterv)Photo by Kim Lewandowski (@kimsterv)Photo by Kim Lewandowski (@kimsterv)Photo by Kim Lewandowski (@kimsterv)Photo by Kim Lewandowski (@kimsterv)Photo by Kim Lewandowski (@kimsterv)Photo by Kim Lewandowski (@kimsterv)Photo by Kim Lewandowski (@kimsterv)Photo by Kim Lewandowski (@kimsterv)
If you're bored and want some @chainguard_dev swag install grype, run `sudo grype -o table=/dev/null /` on your cluster nodes and DM me the results.
4
1
15
1,137
I don’t remember adding this to my playlist. #spotify, fix your family accounts 😂
Image from Kim Lewandowski (@kimsterv)
2
551
Last week, we released our brand new "Securing the AI/ML Supply Chain" course, which includes: 🥇 Breakdowns of AI/ML supply chain components 🥈 Types of cyberattacks and cyberattackers targeting the space 🥉 Hands-on demonstrations And more! Dive in: courses.chainguard.dev/secur…
Chainguard's logo. Text reads, "Chainguard course. Securing the AI/ML Supply Chain."

ALT Chainguard's logo. Text reads, "Chainguard course. Securing the AI/ML Supply Chain."

2
8
899
🎉 Chainguard AI Images are finally here! 🎉 🤖 Get started today with our new PyTorch, Conda & Kafka Images, which are GPU and CPU enabled container images that are hardened, minimal, and optimized for efficient software development. Learn more: go.chainguard.dev/ai-images
1
4
1
9
1,628
We heard AI is a thing so no excuse not to start building more secure AI workloads from the start: chainguard.dev/unchained/cha…
Securing the foundations of AI applications with Chainguard Images

Securing the foundations of AI applications with Chainguard Images

Learn how Chainguard's AI Images secure the foundations of AI applications by providing hardened, minimal container images for PyTorch, Conda, Kafka, and more.

chainguard.dev
1
2
13
951
Kim Lewandowski retweeted
Kaylin Trychon (@KaylinTrychon) profile picture
Kaylin Trychon@KaylinTrychon18 Jul 2024
TODAY: @Chainguard joins the Coalition for Secure AI (coSAI) as a founding member with @OpenAI, @Google, @Anthropic, @nvidia, @wiz_io and more. chainguard.dev/unchained/cha…
1
1
7
493
Another week, another new batch of Chainguard Images! ⭐ We're happy to announce the release of our new Laravel and Wordpress container images! 🌐 This is another contribution toward a more secure World Wide Web! Dive into the details: chainguard.dev/unchained/cha…
The image is a two-panel comic strip format with scenes from the movie "Back to the Future," featuring characters Marty McFly and his siblings at the dinner table, humorously altered to include modern tech logos like WordPress and Laravel.

ALT The image is a two-panel comic strip format with scenes from the movie "Back to the Future," featuring characters Marty McFly and his siblings at the dinner table, humorously altered to include modern tech logos like WordPress and Laravel.

5
8
1,474
We’re hiring a Technical Writer @chainguard_dev 📝 Come secure the software supply chain and play with minimal container images with us 😎 boards.greenhouse.io/chaingu…
Chainguard

Chainguard

job-boards.greenhouse.io
3
11
1
32
4,578
Am I doing it right?
Image from Kim Lewandowski (@kimsterv)
1
1
36
1,456
Achieve PCI DSS v4.0 compliance with Chainguard Images: chainguard.dev/unchained/ach…
Achieve PCI DSS v4.0 compliance with Chainguard Images

Achieve PCI DSS v4.0 compliance with Chainguard Images

Navigating PCI DSS v4.0 compliance? Chainguard Images simplifies the process with secure, compliant container images for your payment applications.

chainguard.dev
2
9
748
Kim Lewandowski retweeted
Adrian Mouat (@adrianmouat) profile picture
Adrian Mouat@adrianmouat16 May 2024
If you're currently using @chainguard_dev's git, static or busybox images, please be aware of some upcoming changes. We're moving these images from an Alpine base to Wolfi. This *shouldn't* cause anyone issues, but please test to be sure! Full details: chainguard.dev/unchained/cha…
4
7
947
📅 A new month means a new Chainguard Learning Lab! 🐍 Join us on May 14 at 3:00 pm ET as we teach you more about Chainguard's Python Image, including how you can migrate your Python applications to use our container images. 🐍 Sign up today: crowdcast.io/c/learninglabs-…
Text reads, "C V E s = bad. Chainguard = No C V E s. Learning Labs. Chainguard's Python Image."

ALT Text reads, "C V E s = bad. Chainguard = No C V E s. Learning Labs. Chainguard's Python Image."

2
7
981
We open sourced Octo STS. Check it out and send us feedback! chainguard.dev/unchained/ope…
Open sourcing Octo STS

Open sourcing Octo STS

Open Source Octo STS Released — Chainguard's solution to eliminate long-lived GitHub credentials. Improve security, collaborate, get updates.

chainguard.dev
3
2
17
2,141
Kim Lewandowski retweeted
Kaylin Trychon (@KaylinTrychon) profile picture
Kaylin Trychon@KaylinTrychon30 Apr 2024
👀 @chainguard_dev has released its innaugural State of Hardened Container Images Landscape. Its a great in-depth analysis that compares the current "hardened" container images landscape. chainguard.dev/unchained/har… 🧵 of top takeaways
1
6
1
12
1,448
We've officially launched our beta program for CUDA optimized Images! chainguard.dev/unchained/ann…
6
1
17
2,512
Kim Lewandowski retweeted
Dan Lorenc (@lorenc_dan) profile picture
Dan Lorenc
@lorenc_dan23 Apr 2024
After learning people were using the `incert` tool for real things, I've transferred it out of my personal github repo and into chainguard-dev! github.com/chainguard-dev/in…
GitHub - chainguard-dev/incert: Add CA certificates into containers

GitHub - chainguard-dev/incert: Add CA certificates into containers

Add CA certificates into containers. Contribute to chainguard-dev/incert development by creating an account on GitHub.

github.com
2
1
23
2,221
“I was shocked that you guys managed to reduce the image down from 24GB to 7GB”
1
2
1
5
667
Unpopular opinion: now's the time for us to get serious about measuring open-source projects using SLSA, and getting everyone to Level 4 with mandatory 2-party code reviews. slsa.dev/spec/v0.1/levels

Security levels

Ladder of increasing security guarantees.

slsa.dev
Heather Adkins - Ꜻ - Spes consilium non est (@argvee) profile pictureHeather Adkins - Ꜻ - Spes consilium non est
@argvee30 Mar 2024
This week’s xz back door is a reminder that every open source author that works on code your org relies on, is a potential insider threat. You’ll never meet them and cannot vet them. We haven’t been solving for this.
15
15
2
84
26,616
"We investigate issues like this one – so you don’t have to" chainguard.dev/unchained/cha…
Chainguard’s response to CVE-2024-3094, aka the backdoor in xz library

Chainguard’s response to CVE-2024-3094, aka the backdoor in xz library

Chainguard effectively addresses CVE-2024-3094 in xz library, showcasing quick action to secure images and uphold customer trust.

chainguard.dev
5
1
17
3,951
Awesome to see this come to life!! Congrats to the Dependabot team and users! Starting the Scorecards project with Dan while we were at Google is one of my favorite highlights.
Dan Lorenc (@lorenc_dan) profile pictureDan Lorenc
@lorenc_dan20 Mar 2024
I love Dependabot! Even more secure-by-default features, like risk-awareness powered by @openssf Scorecards, vulnerability scan results, and even automatic fix suggestions: github.blog/changelog/2024-0…
OpenSSF Scorecard info is now available in the Dependency Review Action - GitHub Changelog

OpenSSF Scorecard info is now available in the Dependency Review Action - GitHub Changelog

Dependency review helps you understand dependency changes and the security impact of these changes at every pull request. We have updated the dependency review action to include information from the…

github.blog
1
11
1,087
Load more