# Building a Secure Software Supply Chain: 5 Key Insights from GitLab's Field CTO

DevFeed: [Building a Secure Software Supply Chain: 5 Key Insights from GitLab's Field CTO](<https://devfeed.tech/articles/building-a-secure-software-supply-chain-5-key-insights-from-gitlab-s-field-cto-12902.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/building-a-secure-software-supply-chain-5-key-insights-from-gitlabs-field-cto>)

Published: 2025-08-08T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [GitLab](<https://devfeed.tech/topics/gitlab.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [toolchain](<https://devfeed.tech/topics/toolchain.md>), [Developer experience](<https://devfeed.tech/topics/developer-experience.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cto](<https://devfeed.tech/tags/cto.md>), [developer-experience](<https://devfeed.tech/tags/developer-experience.md>), [gitlab](<https://devfeed.tech/tags/gitlab.md>), [head-of-engineering](<https://devfeed.tech/tags/head-of-engineering.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [secure-software-supply-chain](<https://devfeed.tech/tags/secure-software-supply-chain.md>), [security](<https://devfeed.tech/tags/security.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [tooling](<https://devfeed.tech/tags/tooling.md>)

## AI overview

This article presents takeaways from a Chainguard webinar with GitLab Field CTO George Kichukov about building a secure software supply chain. It highlights the need to move from security awareness to action, reduce toolchain sprawl, embed security into developer workflows, and maintain transparency when using open source. The supplied text ends before the fifth takeaway is provided.

## Source excerpt

Chainguard and GitLab recently recorded a webinar discussing challenges organizations face in building a secure software supply chain. Get the key takeaways.