Name: How platform engineering unlocks CRA readiness
Start: 2026-05-21T17:00:00.000Z
End: 2026-05-21T18:00:00.000Z

This webinar explores how platform engineering teams are uniquely positioned to operationalize CRA compliance - turning regulatory obligations from the security and compliance teams into frictionless, automated workflows that developers will actually adopt.

How platform engineering unlocks CRA readiness

Explore 2026 artifact management trends as AI accelerates development but outpaces security. Learn why 93% of organizations use AI-generated code while only 17% have guardrails, and how a unified control plane helps secure the software supply chain.

Glenn Weinstein

Alison Sickelka

VP of Product

Lee Skillen

Chief Technology Officer

Meghan McGowan

Product Marketing Manager

AI has fundamentally shifted the source of engineering value from writing code to validating output. But as AI-generated artifacts become near-universal, a massive "Governance Frontier" has emerged. Our 2026 research reveals a dangerous disconnect: 93% of organizations have adopted AI code, yet only 17% have the automated guardrails to catch AI-specific risks like malicious model weights or hallucinated dependencies.

Join Cloudsmith’s leadership and product teams for an investigative look at the 2026 state of artifact management. We’ll move beyond the AI hype to discuss the "Unified Control Plane" - the only way to bridge the gap between AI speed and supply chain integrity.

AI acceleration and supply chain security: 2026 artifact management trends

npm axios attack: What happened and how to protect your supply chain

Nigel Douglas

Head of Developer Relations

Jenn Gile

Founder

LIVE BRIEFING: This week, axios - the JavaScript HTTP client with over 100 million weekly npm downloads - was compromised in a supply chain attack. A malicious actor used a compromised maintainer account to inject a remote access trojan into two active release branches.

Join our Head of Developer Relations, Nigel Douglas and Founder of OpenSourceMalware, Jenn Gile for a 30-minute live breakdown of the attack and practical steps any engineering team can take to reduce their exposure to this type of threat.

Live Briefing: Lessons from the axios npm attack

By submitting, you are subscribing to artiFACTS, Cloudsmith's monthly product newsletter. You can unsubscribe at any time.

Most software pipelines focus on writing code and deploying it, but the real risk is what happens in between. Join Cloudsmith and Octopus Deploy to learn how to build trust in software artifacts and enforce security and compliance through your Golden Path.

Ralph McTeggart 

Principal Engineer

Steve Fenton

Director of Developer Relations

Cristian Garcia

Senior Customer Success Manager

Golden Paths help scale developer productivity - but most stop before the point where trust actually breaks down.

Teams invest in source control and deployment automation, but what happens in between - artifact movement, approvals, and integrity - is often overlooked.

In this session, Cloudsmith and Octopus Deploy will show how to build trust continuously, from source to ship. You’ll leave with a clear mental model for trust in software delivery, and practical guidance on enforcing chain of custody, policy, and authorization through your Golden Path.

Because if you can’t prove it, you don’t control it.


Building trust from source to ship: The missing link in your Golden Path

Learn how to safely ingest, verify, and manage LLM models from Hugging Face in this live webinar. See a real workflow for quarantining, approving, and promoting models into production without slowing developers down.

Liana Ertz

Product Manager

Open model ecosystems like Hugging Face have transformed how teams build with AI. But with that speed comes risk: unverified publishers, mutable artifacts, dependency confusion, and models that change beneath your feet.

If you’re pulling models straight into production pipelines, you’re inheriting all the uncertainty of the public internet - into some of your most sensitive systems.

In this live session, Cloudsmith experts will show you how to take control of your AI supply chain. You’ll learn how to securely ingest, verify, and distribute LLM models from Hugging Face without slowing your teams down.

How platform engineering unlocks CRA readiness

Things you'll learn

Summary

AI acceleration and supply chain security: 2026 artifact management trends

Live Briefing: Lessons from the axios npm attack

Building trust from source to ship: The missing link in your Golden Path

How to securely source your LLM models from Hugging Face