Chainguard reposted this
Shift5 freed up their engineers to build - not babysit CVEs. Here’s how.… In their words: "Now we can spend our time on cybersecurity for the DoD, rather than having to worry about just making sure our products are secure." Shift5's primary customer is the DoD, requiring all of their products to be FIPS compliant. Nearly half of the Platform Engineering team's time was spent writing STIGs and patching CVEs, diverting time away from building their core products. At #Assemble2025, Director of Platform Engineering, Shaun McDonnell, shared how they hardened their software supply chain, reduced CVEs by 100x, and increased developer efficiency. Watch below and read his full story here 👉 https://lnkd.in/gazyHfsH === 🚄 Shift5 defends the operational technology inside military aircraft, ground vehicles, and transportation fleets. Their challenge? Secure complex software environments without driving up costs or slowing delivery. With Chainguard, they: - Eliminated 100x more known CVEs - Reduced the time and labor spent on patching - Strengthened their Zero Trust posture — aligned with DoD mandates - Increased efficiency across their engineering and compliance teams === 💡 Why it matters: Federal agencies are being asked to do more with less — tighter budgets, faster delivery, higher cyber expectations. Shift5 is sharing their blueprint for how to: - Reduce operational and compliance overhead - Deploy hardened containers that don’t require constant patching - Improve software assurance without sacrificing speed or cost efficiency === #DoD #Cybersecurity #ZeroTrust #DevSecOps #PublicSector #FedIT #SBOM #CostEfficiency #SoftwareSupplyChain #ComplianceReady #Chainguard #Shift5 #InfrastructureSecurity #DefenseTech