Organizations spend too much time and effort managing vulnerabilities in containers, particularly in regulated industries. Join Minimus's Neil Carpenter as he operationalizes Minimus's hardened, near-zero CVE container images to vastlyto reduce the friction of addressing vulnerabilities in an application's services. In sixty minutes, we'll go from thousands of vulnerabilities demanding attention from platform engineers, SREs, and developers to a manageable workload.

In this talk, we analyze supply chain risks in NPM and Python package managers and how deep and pervasive the problem goes. We focus on real data and analysis to show how much risk even trivial apps pull in through transitive dependencies.