Sign in

Matt Moore

@mattmoor.dev
390 followers 300 following 32 posts

Founder/CTO of @chainguard.dev

PostsRepliesMedia
Reposted by Matt Moore
Software Engineering Daily @softwaredaily.bsky.social · 04/08/2026
Matt Moore is a co-founder and CTO of @chainguard.dev. He joins Gregor Vand to discuss AI powered software supply chain threats, CI/CD attacks, software inventories, and machine speed patching. @mattmoor.dev softwareengineeringdaily.com/podcasts/ai-...
softwareengineeringdaily.com
AI-Powered Threats to the Software Supply Chain - Software Engineering Daily
Matt Moore is a co-founder and CTO of Chainguard. He joins Gregor Vand to discuss AI powered software supply chain threats, CI/CD attacks, software inventories, and machine speed patching.
122
Reposted by Matt Moore
The New Stack @thenewstack.io · 17/06/2026
Chainguard's new scanner blocks "greyware" — open source packages that pass every security check but still steal credentials, harvest API keys, and phone home to remote servers.
bit.ly
"Don't just grab random stuff off the internet": What Chainguard found in 52,000 open-source packages
Chainguard's new scanner blocks "greyware" — open source packages that pass every security check but still steal credentials, harvest API keys, and phone home to remote servers.
031
Matt Moore @mattmoor.dev · 24/05/2026
Vegas?
030
Matt Moore @mattmoor.dev · 21/05/2026
Sounds risky
110
Matt Moore @mattmoor.dev · 06/03/2026
yaml
120
Reposted by Matt Moore
Justin Garrison @justingarrison.com · 17/01/2026
Anyone who builds software with client side validation should go read about phreaking
4172
Reposted by Matt Moore
The New Stack @thenewstack.io · 11/10/2025
By maintaining focus on your existing goals and proven metrics, you can ensure that AI becomes a genuine accelerator of your mission rather than an expensive distraction. By @stevefenton.co.uk
bit.ly
How To Measure AI's Organizational Impact
By maintaining focus on your existing goals and proven metrics, you can ensure that AI becomes a genuine accelerator of your mission rather than an expensive distraction.
011
Reposted by Matt Moore
Jorge Castro 🇵🇷 🦖 @castrojo.bsky.social · 20/09/2025
LOL they won't listen to me, maybe they'll listen to @mattmoor.dev
1103
Matt Moore @mattmoor.dev · 20/09/2025
media.tenor.com
a man in a plaid shirt is saying `` i am pretty wisdomous '' .
ALT: a man in a plaid shirt is saying `` i am pretty wisdomous '' .
050
Reposted by Matt Moore
The New Stack @thenewstack.io · 14/09/2025
Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them. By @mattmoor.dev, thanks to Chainguard
bit.ly
Should Your Team Be Vibe Coding?
Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them.
041
Reposted by Matt Moore
Matt "msw" Wilson @msw.bsky.social · 12/09/2025
PSA: attacks on public infrastructure like software package registries are on the rise. Here’s an active one targeting folks who have crates.io accounts.
crates.io
crates.io: Rust Package Registry
143
Matt Moore @mattmoor.dev · 12/09/2025
“On the rise” feels like such an understatement. 😞
000
Matt Moore @mattmoor.dev · 06/09/2025
h/t to @castrojo.bsky.social for nudging us in the bootc direction 🙏
120
Matt Moore @mattmoor.dev · 06/09/2025
I think we are looking into bootc compatibility, but no that’s not how we are building them. We are currently declaratively assembling EFI partitioned boot disks in apko style to compose with all of the infrastructure we have built up to assemble (and custom assemble) thousands of images at scale.
120
Reposted by Matt Moore
The New Stack @thenewstack.io · 06/09/2025
Six months after launching container host VMs, Chainguard is expanding into application and base VM images with zero-CVE guarantees. By @darrylktaft.bsky.social
bit.ly
Why Chainguard Is Doubling Down on Virtual Machines in a Container World
Six months after launching container host VMs, Chainguard is expanding into application and base VM images with zero-CVE guarantees.
131
Reposted by Matt Moore
The New Stack @thenewstack.io · 05/09/2025
Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them. By @mattmoor.dev, thanks to Chainguard
bit.ly
Should Your Team Be Vibe Coding?
Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them.
021
Matt Moore @mattmoor.dev · 27/07/2025
ko, jib, apko, Bazel rules_oci, … Most are last mile tools, but the key is avoiding imperative RUN.
020
Matt Moore @mattmoor.dev · 25/07/2025
“SSH” 😂
020
Reposted by Matt Moore
Bryan Liles @bryanl.dev · 23/07/2025
There’s a difference between genAI not being good and not being able to get good results when using genAI.
261
Reposted by Matt Moore
Brad Fitzpatrick @bradfitz.com · 15/07/2025
For CI reasons (speed), I wrote a FUSE filesystem to act like the $GOMODCACHE directory to make it look like all world's #golang modules are available locally on disk without having to download them. Then the FS downloads them if/as needed, storing them in git trees/blobs (no commits) for de-dup.
1214710
Matt Moore @mattmoor.dev · 10/07/2025
I always knew it as “principle of least surprise”
130
Matt Moore @mattmoor.dev · 10/07/2025
Sounds like ko for swift 😁
040
Reposted by Matt Moore
Nick Frichette @frichetten.com · 10/07/2025
Cool to see AWS notifying customers of misconfigured OIDC trusts which are vulnerable!
182
Matt Moore @mattmoor.dev · 07/07/2025
I would like to subscribe for a future Chicago trip 😁
030
Matt Moore @mattmoor.dev · 20/05/2025
Is this separate from the annual gifting limit? This seems… small compared to that…? I can gift that to my daughter in a way that I bear the tax burden (IDGT), so in addition to gifting far more, it also grows (from their standpoint) tax free.
000
Matt Moore @mattmoor.dev · 18/05/2025
Your home having an open foundation sounds like a terrible idea 😝
020
Reposted by Matt Moore
The Onion @theonion.com · 02/04/2025
Report: 83% Of Americans Just Want To Put On Sunglasses And Say ‘Let’s Do This’ theonion.com/report-...
Report: 83% Of Americans Just Want To Put On Sunglasses And Say ‘Let’s Do This’
332086144
Matt Moore @mattmoor.dev · 28/03/2025
What if the demo is an integration with Google Slides?
010
Matt Moore @mattmoor.dev · 09/03/2025
You can get an external keyboard from Apple with Touch ID
210
Reposted by Matt Moore
Dare Obasanjo @carnage4life.bsky.social · 28/02/2025
It costs nothing yet the feeling it generates is priceless when you let people know you appreciate the work they’re putting in.
927723
Matt Moore @mattmoor.dev · 27/02/2025
I thought it was just me 😂
110
Matt Moore @mattmoor.dev · 24/02/2025
lol its not short!
000
Matt Moore @mattmoor.dev · 24/02/2025
Yeah, we watched the second a couple nights ago, and it was pretty disappointing (and long)
120
Reposted by Matt Moore
Jeremy, the patronizing Saint of DevOps 🇺🇦 @jerdog.dev · 10/02/2025
"Matt Damon famous?" "Well, maybe Ben Affleck famous..."
media.tenor.com
a man is sitting in a chair with his eyes closed and smiling .
ALT: a man is sitting in a chair with his eyes closed and smiling .
231
Matt Moore @mattmoor.dev · 13/01/2025
Resident Alien
010
Matt Moore @mattmoor.dev · 05/01/2025
Find someone that looks at you the way Biden looks awarding Magic Johnson the medal of freedom.
240
Reposted by Matt Moore
The Needling @theneedling.com · 06/12/2024
Parents Mortified as Kids Turn Elf on the Shelf Into Snitch in the Ditch: bit.ly/4gnERdA
Tied-up Elf on a Shelf in a ditch with his mouth duct taped and a sign hanging from his neck reading "snitches get stitches"
7518107
Matt Moore @mattmoor.dev · 13/12/2024
It all started with the homework 😉
010
Matt Moore @mattmoor.dev · 13/12/2024
“The cynic” 😉
010
Matt Moore @mattmoor.dev · 13/12/2024
Optimist: head Pessimist: tail Realist: grep
1132
Reposted by Matt Moore
Joe Beda @h.olysh.it · 30/11/2024
How do you weigh an elephant? The same way you weight a human, just on a much larger scale.
2131
Matt Moore @mattmoor.dev · 28/11/2024
King Charlie begging for 🦃
150
Matt Moore @mattmoor.dev · 28/11/2024
PSA: don’t forget to take the giblets out of the neck area.
010
Reposted by Matt Moore
Ian Lewis @ianlewis.org · 27/11/2024
Google Cloud's most annoying feature is probably that so much relies on GCP load balancers. You need them to do an static https site backed by a bucket, you need them to use IAP with Cloud Run, etc. etc. So many low cost services instantly jump to $30/m because they need an LB.
121
Matt Moore @mattmoor.dev · 26/11/2024
Maybe they were laughing because it should be HTTPS
040
Matt Moore @mattmoor.dev · 25/11/2024
I generally just use the step CLI
000
Matt Moore @mattmoor.dev · 23/11/2024
lol it looks like that
000
Matt Moore @mattmoor.dev · 23/11/2024
What is that?
100
Reposted by Matt Moore
Justin Garrison @justingarrison.com · 23/11/2024
Someone told me it's the same pattern as cp and mv and I'll never forget command <thing that exists> <thing you want to create>
4315