AI coding assistants pull open-source packages, libraries and container images into enterprise codebases faster than security teams can review them, widening dependency sprawl and supply-chain risk from malicious, typosquatted or compromised transitive dependencies. Chainguard CISO Quincy Castro say