Build Safely with AI

The May 2026 Learning Lab with Erika Heidi explores AI-native threat models and how to mitigate risks involved with AI-assisted coding, leveraging Cursor and Chainguard for a secure AI SLDC.

Sections

• 0:00 Introduction and agenda
• 3:35 “This Changes Everything”
• 4:19 How the threat model changed with AI
• 8:17 Your local dev environment at risk
• 9:49 AI-native attack vectors
• 12:30 Closing the trust gap
• 14:14 Two principles for a safe SLDC with AI assistance
• 23:06 Vibecoding with trusted sources
• 27:26 The Chainguard plugin for Cursor
• 29:03 Demo - building an SBOM visualizer
• 31:27 The initial prompt
• 33:50 The resulting vibecoded app
• 34:20 Migrating to Chainguard Libraries
• 36:43 Verifying coverage
• 38:26 Recap of what we neutralized
• 40:15 Other Chainguard skills to try out on Cursor
• 48:45 Wrapping Up

Resources

• Slide deck
• Chainguard Plugin for Cursor
• Chainguard Containers
• Chainguard Libraries