Canva's Supply Chain Security Enhancement with Chainguard

This case study outlines how Canva addressed supply chain risk by partnering with Chainguard. The document describes the challenges Canva faced, including the management of vulnerabilities from container images and the complexities introduced by third-party libraries. As the engineering organization grew, the burden of vulnerability management became increasingly unsustainable, leading to a reactive security posture. The case study details the decision-making process that led to the adoption of Chainguard, emphasizing the importance of minimalism and verifiable proof of trust through signed Software Bill of Materials (SBOMs). The results of this implementation included invisible quality improvements and a stronger security posture, allowing developers to work without the constant interruption of vulnerability alerts. The document concludes by highlighting how enhanced security measures have become a competitive advantage for Canva, demonstrating their commitment to security as a critical requirement for serving their large user base.