Sign in

Matt Moore

@mattmoor.dev
390 followers 300 following 32 posts

Founder/CTO of @chainguard.dev

PostsRepliesMedia
Reposted by Matt Moore
Software Engineering Daily @softwaredaily.bsky.social · 04/08/2026
Matt Moore is a co-founder and CTO of @chainguard.dev. He joins Gregor Vand to discuss AI powered software supply chain threats, CI/CD attacks, software inventories, and machine speed patching. @mattmoor.dev softwareengineeringdaily.com/podcasts/ai-...
softwareengineeringdaily.com
AI-Powered Threats to the Software Supply Chain - Software Engineering Daily
Matt Moore is a co-founder and CTO of Chainguard. He joins Gregor Vand to discuss AI powered software supply chain threats, CI/CD attacks, software inventories, and machine speed patching.
122
Reposted by Matt Moore
The New Stack @thenewstack.io · 17/06/2026
Chainguard's new scanner blocks "greyware" — open source packages that pass every security check but still steal credentials, harvest API keys, and phone home to remote servers.
bit.ly
"Don't just grab random stuff off the internet": What Chainguard found in 52,000 open-source packages
Chainguard's new scanner blocks "greyware" — open source packages that pass every security check but still steal credentials, harvest API keys, and phone home to remote servers.
031
Reposted by Matt Moore
Justin Garrison @justingarrison.com · 17/01/2026
Anyone who builds software with client side validation should go read about phreaking
4172
Reposted by Matt Moore
The New Stack @thenewstack.io · 11/10/2025
By maintaining focus on your existing goals and proven metrics, you can ensure that AI becomes a genuine accelerator of your mission rather than an expensive distraction. By @stevefenton.co.uk
bit.ly
How To Measure AI's Organizational Impact
By maintaining focus on your existing goals and proven metrics, you can ensure that AI becomes a genuine accelerator of your mission rather than an expensive distraction.
011
Reposted by Matt Moore
Jorge Castro 🇵🇷 🦖 @castrojo.bsky.social · 20/09/2025
LOL they won't listen to me, maybe they'll listen to @mattmoor.dev
1103
Reposted by Matt Moore
The New Stack @thenewstack.io · 14/09/2025
Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them. By @mattmoor.dev, thanks to Chainguard
bit.ly
Should Your Team Be Vibe Coding?
Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them.
041
Reposted by Matt Moore
Matt "msw" Wilson @msw.bsky.social · 12/09/2025
PSA: attacks on public infrastructure like software package registries are on the rise. Here’s an active one targeting folks who have crates.io accounts.
crates.io
crates.io: Rust Package Registry
143
Reposted by Matt Moore
The New Stack @thenewstack.io · 06/09/2025
Six months after launching container host VMs, Chainguard is expanding into application and base VM images with zero-CVE guarantees. By @darrylktaft.bsky.social
bit.ly
Why Chainguard Is Doubling Down on Virtual Machines in a Container World
Six months after launching container host VMs, Chainguard is expanding into application and base VM images with zero-CVE guarantees.
131
Reposted by Matt Moore
The New Stack @thenewstack.io · 05/09/2025
Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them. By @mattmoor.dev, thanks to Chainguard
bit.ly
Should Your Team Be Vibe Coding?
Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them.
021
Reposted by Matt Moore
Bryan Liles @bryanl.dev · 23/07/2025
There’s a difference between genAI not being good and not being able to get good results when using genAI.
261
Reposted by Matt Moore
Brad Fitzpatrick @bradfitz.com · 15/07/2025
For CI reasons (speed), I wrote a FUSE filesystem to act like the $GOMODCACHE directory to make it look like all world's #golang modules are available locally on disk without having to download them. Then the FS downloads them if/as needed, storing them in git trees/blobs (no commits) for de-dup.
1214710
Matt Moore @mattmoor.dev · 10/07/2025
Sounds like ko for swift 😁
040
Reposted by Matt Moore
Nick Frichette @frichetten.com · 10/07/2025
Cool to see AWS notifying customers of misconfigured OIDC trusts which are vulnerable!
182
Reposted by Matt Moore
The Onion @theonion.com · 02/04/2025
Report: 83% Of Americans Just Want To Put On Sunglasses And Say ‘Let’s Do This’ theonion.com/report-...
Report: 83% Of Americans Just Want To Put On Sunglasses And Say ‘Let’s Do This’
332086144
Reposted by Matt Moore
Dare Obasanjo @carnage4life.bsky.social · 28/02/2025
It costs nothing yet the feeling it generates is priceless when you let people know you appreciate the work they’re putting in.
927723
Reposted by Matt Moore
Jeremy, the patronizing Saint of DevOps 🇺🇦 @jerdog.dev · 10/02/2025
"Matt Damon famous?" "Well, maybe Ben Affleck famous..."
media.tenor.com
a man is sitting in a chair with his eyes closed and smiling .
ALT: a man is sitting in a chair with his eyes closed and smiling .
231
Matt Moore @mattmoor.dev · 05/01/2025
Find someone that looks at you the way Biden looks awarding Magic Johnson the medal of freedom.
240
Reposted by Matt Moore
The Needling @theneedling.com · 06/12/2024
Parents Mortified as Kids Turn Elf on the Shelf Into Snitch in the Ditch: bit.ly/4gnERdA
Tied-up Elf on a Shelf in a ditch with his mouth duct taped and a sign hanging from his neck reading "snitches get stitches"
7518107
Matt Moore @mattmoor.dev · 13/12/2024
Optimist: head Pessimist: tail Realist: grep
1132
Reposted by Matt Moore
Joe Beda @h.olysh.it · 30/11/2024
How do you weigh an elephant? The same way you weight a human, just on a much larger scale.
2131
Matt Moore @mattmoor.dev · 28/11/2024
King Charlie begging for 🦃
150
Matt Moore @mattmoor.dev · 28/11/2024
PSA: don’t forget to take the giblets out of the neck area.
010
Reposted by Matt Moore
Ian Lewis @ianlewis.org · 27/11/2024
Google Cloud's most annoying feature is probably that so much relies on GCP load balancers. You need them to do an static https site backed by a bucket, you need them to use IAP with Cloud Run, etc. etc. So many low cost services instantly jump to $30/m because they need an LB.
121
Reposted by Matt Moore
Justin Garrison @justingarrison.com · 23/11/2024
Someone told me it's the same pattern as cp and mv and I'll never forget command <thing that exists> <thing you want to create>
4315
Matt Moore @mattmoor.dev · 16/11/2024
This is cool. I guess I'm now @mattmoor.dev
280