What It Took to Reach 1 Billion Build Manifests

Summary: Chainguard doubled its container build output from 500 million to more than 1 billion build manifests in six months, alongside a catalog of over 3,000 unique container images and 675,000 image versions. The company attributes the volume to Factory 2.0 and its DriftlessAF agentic reconciliation layer, which replaced an event-driven build system that had produced duplicate build failures, work-item conflicts, and what it called a "cascading mess" for SREs.
What you should know: Chainguard's stated premise is that attackers using AI for vulnerability discovery and exploit chaining compress their cycle time, so the defender's rebuild cycle must compress by at least as much - every hour between an upstream change and a rebuilt, signed image is an hour an attacker does not have.

Read the original at The Hacker News ↗

Topics: Supply Chain & AppSec
Related: Kitesurf is now open source Cyber Risks · Nov 13, 2026
Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026
ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026