AI-Driven SBOM & Remediation

In modern cloud native delivery, the speed of shipping outpaces the speed of security.

Vulnerability scanners produce thousands of CVEs against every release; engineering teams ignore most of them; and the ones that actually matter slip through.

The fundamental problem is not detection, it is decision and remediation at machine speed.

In this session, Himanshu walks through how to build a reachability-aware autonomous Security Operations Center directly into Kubernetes-native CI/CD pipelines. AI agents consume SBOMs and CVE feeds generated with Trivy, score vulnerabilities through reachability analysis (does this CVE actually touch a live code path?), and propose patches as policy-gated pull requests via Kyverno, OPA, and Argo CD. Falco and Tetragon provide runtime signals back to the agent loop, closing the cycle from runtime evidence to source-tree fix.

The talk covers the closed-loop architecture, the failure modes real teams hit.

At DevOpsDays Taipei :) 🇹🇼

hitting the scuba kitty dance coz I’m visiting Taiwan again 🇹🇼

I’ll be speaking at DevOpsDays Taipei 2026 (jun 25-26) on ‘AI driven SBOM & Remediation’

Taiwan holds a very special place for me and I want to gatekeep it so bad. Taipei was the first international city I ever travelled to and no other city has topped it since, EVER

last time I did mention I’d drop some travel stories and forgot but will do this time. going full north Taiwan -> south Taiwan :)

also going to be in Singapore next week 🇸🇬

so anyone from SG and TW, if there’s an event or just want to grab coffee, hit me up!! LETS GO

Thank you Chris, Augustin and DevOpsDays Taipei team + Alex ~