Your AI Agent Is Running As Root
About this episode
Luke Hinds discusses the security implications of AI coding agents and introduces Sigstore as a solution for software supply chain security.
When you fire up Claude Code, Cursor, or any AI coding agent, it launches with your full system permissions, your SSH keys, cloud credentials, browser passwords, every file on your machine. Most developers never think twice about it. Luke Hinds did. And then he built something about it. Luke is the creator of Sigstore, the cryptographic signing infrastructure now used by PyPI, Homebrew, GitHub, and Google as the industry standard for software supply chain security. In this episode, he joins C...
More episodes of Resilient Cyber
- Why AI Security Feels So Fragile
- You Can't Trust What You Can't Verify — The Case for AI Model Identity
- Securing the Vibe: Tanya Janca on AI-Generated Code, Mythos, and the New AppSec Reality
- AI and the Future of Secure Coding
- The 350 Million Problem: Securing the Businesses No One Else Will
- Before the Breach: The Zero Day Clock and the Race Against Exploitation
Explore listener stats, chart rankings, contacts and more on the Resilient Cyber podcast page.