# Mastering the "compliance end run" with Chainguard Images

DevFeed: [Mastering the "compliance end run" with Chainguard Images](<https://devfeed.tech/articles/mastering-the-compliance-end-run-with-chainguard-images-13148.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/mastering-the-compliance-end-run-with-chainguard-images>)

Published: 2024-07-30T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container](<https://devfeed.tech/tags/container.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [fedramp-rev-5](<https://devfeed.tech/tags/fedramp-rev-5.md>), [pci-dss](<https://devfeed.tech/tags/pci-dss.md>), [secure-container-images](<https://devfeed.tech/tags/secure-container-images.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

## AI overview

The article explains how the "compliance end run" shifts responsibility for software compliance to customers who run a vendor's stack in their own environments. It highlights the resulting vulnerability-management obligations under PCI DSS v4 and FedRAMP Rev 5, and presents Chainguard Images as a minimal, secure starting point for reducing vulnerabilities and meeting stringent compliance requirements.

## Source excerpt

Learn how to use Chainguard Images to streamline compliance and avoid the "compliance end run" that slows down sales and creates friction with customers.