{"slug": "chainguards-cto-on-why-every-build-needs-an-identity", "title": "Chainguard’s CTO on why every build needs an identity", "summary": "Chainguard co-founder and CTO Matt Moore said on a podcast that every software build needs identity controls for both human and machine credentials, arguing that reusable, long-lived credentials remain a major driver of supply chain compromises. Moore cited the SolarWinds compromise and the Shai-Hulud campaign, in which malicious npm packages scanned for developer and CI/CD credentials, and pointed to Black Duck's 2026 Open Source Security and Risk Analysis Report, which found open-source components in 98% of the 947 audited codebases. Chainguard addresses the risk by tracking upstream source, building artifacts from source, and providing evidence of how those artifacts were produced, moving trust decisions earlier in the workflow.", "body_md": "Matt Moore, co-founder and CTO of [__Chainguard__](https://www.chainguard.dev/), joined the podcast to discuss the overlap between open-source software supply chain security and identity and access controls.\n\nModern applications depend on open-source packages, base images, and tools that most teams don’t maintain internally. When one of those dependencies is vulnerable, compromised, or published using stolen credentials, the compromise can move through the build and into software that reaches production. As AI coding agents gain authority, they introduce a new layer of uncertainty to the software development lifecycle. Matt argued that before shipping, teams need to know what enters a build, who or what changed it, and which credentials the workflow can access.\n\nDeveloping with open-source projects includes [__known security risks__](https://owasp.org/www-project-open-source-software-top-10/). For teams working under time constraints, open-source projects provide packages, runtimes, tools, and the images they need to build applications and jumpstart a build, but those components also become part of the software an organization must inventory and update.\n\nAcross industries, open-source software is a critical building block of the software supply chain. Black Duck’s [__2026 Open Source Security and Risk Analysis Report__](https://www.blackduck.com/resources/analyst-reports/open-source-security-risk-analysis.html) found open-source components in 98% of the 947 audited codebases it analyzed.\n\nThe amount of software that we actually write to ship modern applications is this tiny tip of the iceberg, compared to what we’re actually running in our environments.”\n\n–Matt Moore, co-founder and CTO, Chainguard\n\nTo help developers make safe choices, many organizations create approved package lists, internal registries, dependency policies, and standard base images. These recommendations reduce the time it takes to source and review a package, but don’t make a dependency permanently safe from new vulnerabilities or guarantee it’ll be maintained and updated.\n\nFor developers, monitoring and patching vulnerabilities can feel like a distraction from other critical work. Matt shared that Chainguard’s approach addressed this by moving trust decisions earlier in the workflow, keeping security work off the developer’s task list. Chainguard tracks upstream source, builds artifacts from source, and provides evidence of how those artifacts were produced. By giving developers a more controlled and verifiable starting point, it provides more visibility into risks than an opaque artifact from a public registry.\n\nIn the builder workflow, Matt sees two distinct identity types to secure. Human identities that need controls like password managers, MFA, and SSO, and machine identities that need federation and short-lived access. In both cases, security depends on removing reusable, long-lived credentials in a workflow. Despite the availability of credential security tools and [__best practices__](https://cheatsheetseries.owasp.org/cheatsheets/Software_Supply_Chain_Security_Cheat_Sheet.html), long-lived credentials continue to play a significant role in supply chain compromises.\n\nMatt recalled how the [__SolarWinds compromise__](https://attack.mitre.org/campaigns/C0024/) showed attackers moving through a trusted software build to distribute malicious code via a legitimate update path. And again, how the [__Shai-Hulud__](https://attack.mitre.org/software/S9008/) campaign showed malicious npm packages scanning for developer and CI/CD credentials and using compromised access to distribute malicious packages.\n\n“That is why you should never put credentials on disk,” Nancy affirmed.\n\nMatt continued that short-lived credentials should be part of build security standards because many supply chain benefits rely on credentials. As he said, “Credentials let you launch the next wave of these things.”\n\nThis is one of the access problems 1Password is working to solve. [__1Password Credential Broker__](https://1password.com/blog/1password-credential-broker-public-preview) verifies a workload’s identity against policy, delivers only the approved credential at runtime, and logs which workload requested it and which policy authorized delivery. This keeps long-lived credentials out of pipeline configurations and environments and offers security teams clear documentation of machine access.\n\nAs AI-assisted development increases the number of agents and automated workflows that can initiate access, software supply chain security and identity security must expand to make every authorization and access decision visible, secure, and auditable.\n\nEvery deployed agent is part of the software supply chain it operates within.\n\nWhen securing identities, the agent and the CI pipeline have different roles; thus, they need different authority models, an idea 1Password has explored in [__agent identity architectures__](https://1password.com/blog/ai-agent-identity-architectures). A coding assistant acting for a developer has delegated authority. A CI workflow has bounded authority within a defined build process. Treating both as “agents” obscures the security questions of who authorized the action, what the agent was allowed to reach, and which workload performed it.\n\nTo Matt, right-sized access can limit an agent to the repositories, dependency manifests, and build configurations it is authorized to change. An audit trail should connect the authorization to the resulting change, the agent that made it, the workload that executed it, and the credentials issued to that workload.\n\nHe believes security starts upstream, with the software developers consume. Chainguard’s approach is to keep that upstream path current, controlled, and verifiable through source builds, supported versions, and automation.\n\nAs agents and automated workflows take on more of the path from code to production, organizations need to know not only what software they are building but also which identities can access it, what those identities can do, and when that access ends.\n\nThat is the identity problem emerging around AI-assisted development. Agents need an authority model that matches their role. By eliminating standing access and linking attribution to each access request, organizations can securely leverage the ease of open-source software and the efficiency of autonomous agents.\n\nSee how 1Password Unified Access secures identity for humans, machines, and AI agents without long-lived credentials, attributable audit records, and clear dev/production boundaries.", "url": "https://wpnews.pro/news/chainguards-cto-on-why-every-build-needs-an-identity", "canonical_source": "https://1password.com/blog/software-supply-chain-identity-security", "published_at": "2026-09-08 00:00:00+00:00", "updated_at": "2026-09-22 13:27:28.970006+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety"], "entities": ["Chainguard", "Matt Moore", "Black Duck", "SolarWinds", "Shai-Hulud", "1Password", "npm", "OWASP"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/chainguards-cto-on-why-every-build-needs-an-identity", "markdown": "https://wpnews.pro/news/chainguards-cto-on-why-every-build-needs-an-identity.md", "text": "https://wpnews.pro/news/chainguards-cto-on-why-every-build-needs-an-identity.txt", "jsonld": "https://wpnews.pro/news/chainguards-cto-on-why-every-build-needs-an-identity.jsonld"}}