Uploaded April 2026 | Updated September 2026, 14 hours ago
Trivy has taken a beating recently because their supply chain was compromised and there was malware injected into their product.” - David Zendzian
So now you’re scanning all your software for malware with a scanner that has malware in it. Coté’s response lands a beat later: “Who watches the watchers?”
Clipped from a conversation on SBOMs and supply chain security with @davidzendzian on Tanzu Catsup.
Full episode: youtube.com/watch?v=QuMJZ9sBKjQ
Interested in a platform that can help you with enterprise-y excellence? Just TryTanzu.ai
Tanzu Catsup is a weekly conversation about platform engineering, cloud-native operations, and building software in large organizations…and, of course, AI.
Check us out Fridays at 10am US Eastern/4pm Amsterdam time! In YouTube: youtube.com/playlist?list=PLAdzTan_eSPSlg3nySSAI7DjrbN2Bt56r
Hosts: @thecote and David Zendzian
Trivy has taken a beating recently because their supply chain was compromised and there was malware injected into their product.” - David Zendzian
So now you’re scanning all your software for malware with a scanner that has malware in it. Coté’s response lands a beat later: “Who watches the watchers?”
Clipped from a conversation on SBOMs and supply chain security with @davidzendzian on Tanzu Catsup.
Full episode: youtube.com/watch?v=QuMJZ9sBKjQ
Interested in a platform that can help you with enterprise-y excellence? Just TryTanzu.ai
Tanzu Catsup is a weekly conversation about platform engineering, cloud-native operations, and building software in large organizations…and, of course, AI.
Check us out Fridays at 10am US Eastern/4pm Amsterdam time! In YouTube: youtube.com/playlist?list=PLAdzTan_eSPSlg3nySSAI7DjrbN2Bt56r
Hosts: @thecote and David Zendzian










