Uploaded March 2026 | Updated September 2026, 23 hours ago

---

Advisory feeds are the ultimate source of truth, right? In this lightning talk, Orca and Chainguard pull back the curtain on how advisory data is actually produced, aggregated, and consumed by scanners and platforms. We’ll dig into a few pervasive myths: that missing advisories imply safety, that pristine zero CVE dashboards always reflect reality, and that scanner disagreements are proof a tool is broken.

About Chainguard
Founded by the industry's leading experts on open source software, security and cloud native development, we are on a mission to be the safe source for open source.

Where to find us:
Website: https://www.chainguard.dev/
Twitter: twitter.com/chainguard_dev
LinkedIn: linkedin.com/company/chainguard-dev
TikTok: tiktok.com/@chainguard_dev