Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Connect a 1Password Environment to the OpenShell runtime and let your agents work with the systems it needs without exposing real credentials to the model. Developers define their environment in 1Password and use the UI to provision an OpenShell credential provider. Secrets are mapped to OpenShell profiles, restricted to specific targets, and given an expiration date.

In 2020, the SolarWinds attack exposed the vulnerability of supply chains worldwide, a problem this episode’s guest, Matt Moore, had already been working to solve for years. In 2021, he co-founded Chainguard to protect supply chains from future breaches. His conversation with 1Password CTO Nancy Wang and Google Gemini’s Dev Tagare covers why the open source trust model is structurally broken and how AI agents have complicated supply chain security, with a live demo demonstrating how standard tools overlook many vulnerabilities.

An auditor asks you to prove that a former employee no longer has access to any workplace credentials. What do you do? With 1Password, you can pull up the Activity Log: deprovisioning timestamped, every access event recorded. The ticket is closed, and the evidence is right there. Controls aren't enough for compliance frameworks, proof is.