AI Security Engineer Foundations + Certificate — Javier Garza, Snyk
An AI bill of materials turns a repository into a searchable inventory of models, datasets and agents.

Proof1 independent outlet
Key points
- Javier Garza demonstrates the workflow from a CLI scan to a visual dashboard, then asks it which models the project uses.
- That inventory anchors a broader security problem: teams cannot assess the AI components they do not know are there.
- The workshop connects shadow AI to prompt injection, supply chain risk, sensitive information disclosure and excessive agency, using Gandalf challenges and malicious instructions embedded in external content to show how an application's intended rules can be bypassed.
- Garza works through defenses at several layers.
Sources (1)
- [1]AI Security Engineer Foundations + Certificate — Javier Garza, SnykAI Engineer (YouTube) · Oct 11, 07:30 PM
An AI bill of materials turns a repository into a searchable inventory of models, datasets and agents.
Javier Garza demonstrates the workflow from a CLI scan to a visual dashboard, then asks it which models the project uses.
Extractive summary: sentences quoted from the sources.
Before this
- Oct 11, 2026SonarQube + OpenAI: Agentic Development — Killian Carlsen-Phelan, Sonar
- Oct 11, 2026Teaching Agents to Search with NVIDIA Data Designer — Dhruv Nathawani, NVIDIA
- Oct 11, 2026AI Security Engineer Foundations + Certificate — Micah Silverman, Snyk
- Oct 9, 2026openai/codex rust-v0.162.1: 0.162.1
- Oct 8, 2026openai/codex rust-v0.162.0: 0.162.0
- Oct 8, 2026Understanding Jev, the new model everyone is talking about
