# anchore Published articles for anchore. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run DevFeed: [Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run]() Original publisher: [Read original article]() Published: 2026-06-18T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [Containers](), [anchore](), [Open Source]() Tags: [anchore](), [anchore-enterprise](), [apache](), [built-from-source](), [chainguard](), [chainguard-containers](), [chainguard-images](), [cinc-auditor](), [compliance](), [fedramp](), [open-source](), [pipeline](), [scanner](), [stig](), [stigs]() ### AI overview Chainguard introduces a ready-to-run cinc-auditor container image for STIG scanning of Chainguard Containers. The image includes a maintained GPOS SRG InSpec profile, removes separate profile and dependency setup, and supports production compliance pipelines, including FedRAMP workflows. ### Source excerpt Chainguard launches a ready-to-run STIG scanner with a built-in GPOS SRG InSpec profile, simplifying compliance scans for containers and FedRAMP workflows. ## How Chainguard Automated Detection and Patching of a High-Severity CVE DevFeed: [How Chainguard Automated Detection and Patching of a High-Severity CVE]() Original publisher: [Read original article]() Published: 2026-02-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Security](), [vulnerability](), [anchore](), [grype](), [ci](), [GitHub](), [Pull Request]() Tags: [2025](), [anchore](), [chainguard](), [chainguard-containers](), [chainguard-cve-remediation](), [chainguard-factory](), [chainguard-images](), [ci](), [container-images](), [cve](), [github](), [grype](), [pull-request](), [security](), [vulnerability](), [zero-cves]() ### AI overview The article describes how Chainguard's Factory detected a high-severity vulnerability affecting k9s, updated Grype, opened and merged a pull request, and published a fixed package within 46 hours of the advisory. It also reports that Chainguard remediated 2,960 unique CVEs in November 2025 while meeting its stated remediation SLA. ### Source excerpt The Chainguard Factory and DriftlessAF automate CVE detection and patching, delivering fixes in hours and maintaining industry-leading remediation SLAs. ## Anchore Enterprise now validates Chainguard Libraries: prevent 98% of Python malware and eliminate high-severity CVE toil DevFeed: [Anchore Enterprise now validates Chainguard Libraries: prevent 98% of Python malware and eliminate high-severity CVE toil]() Original publisher: [Read original article]() Published: 2025-12-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [Python](), [supply-chain-security](), [Malware](), [Open Source]() Tags: [anchore](), [anchore-chainguard](), [anchore-chainguard-partnership](), [anchore-enterprise](), [chainguard](), [chainguard-libraries](), [chainguard-libraries-for-python](), [dependencies](), [malware](), [provenance](), [python](), [sboms](), [slsa](), [supply-chain](), [supply-chain-security]() ### AI overview Anchore Enterprise now supports scanning and validating Chainguard Libraries for Python. The integration combines Anchore's supply-chain security enforcement with Python libraries built from source in a tamper-proof, SLSA L2-certified environment with provenance and signed SBOMs, aiming to prevent malware introduced during build or distribution and reduce high-severity CVE remediation effort. ### Source excerpt Customers can now leverage Anchore Enterprise's scanning capabilities for Chainguard Libraries for Python. ## Introducing Our Newest Ecosystem Integration: Anchore Enterprise DevFeed: [Introducing Our Newest Ecosystem Integration: Anchore Enterprise]() Original publisher: [Read original article]() Published: 2025-09-23T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [anchore](), [chainguard](), [container images](), [Security](), [vulnerability scanning]() Tags: [anchore](), [anchore-enterprise](), [chainguard](), [chainguard-containers](), [chainguard-partners](), [compliance](), [container-images](), [integration](), [scanners](), [secure-by-default](), [software-supply-chain-security](), [vulnerability-scanning]() ### AI overview Chainguard announces a new integration with Anchore Enterprise. The integration combines Chainguard's secure-by-default container images with Anchore's SBOM management, vulnerability scanning, and automated compliance policy enforcement to support continuous software security and compliance. ### Source excerpt Discover more about Chainguard's new integration with Anchore Enterprise. ## Introducing Scanfrog: Dodge Container Vulnerabilities DevFeed: [Introducing Scanfrog: Dodge Container Vulnerabilities]() Original publisher: [Read original article]() Published: 2025-07-30T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [vulnerability scanning](), [vulnerability management](), [grype](), [chainguard](), [chainguard containers](), [Security](), [Terminal](), [arcade](), [Open Source]() Tags: [anchore](), [chainguard](), [chainguard-containers](), [container](), [container-image](), [container-image-vulnerabilities](), [container-images](), [containers](), [free](), [games](), [grype](), [management](), [open-source](), [scanfrog](), [security](), [terminal](), [vulnerabilities](), [vulnerability-scanner](), [vulnerability-scanning]() ### AI overview Scanfrog is a Frogger-style terminal game that turns vulnerabilities found in a container image into game obstacles. It uses Grype, a free and open-source vulnerability scanner, to create levels based on vulnerability-scanning results and illustrates why reducing vulnerabilities improves software security. ### Source excerpt Scanfrog is a Frogger-style game created by one of Chainguard's engineers to showcase how difficult it can be to dodge vulnerabilities in containers. ## Grype Adds OpenVEX Support for Vulnerability Analysis DevFeed: [Grype Adds OpenVEX Support for Vulnerability Analysis]() Original publisher: [Read original article]() Published: 2023-10-10T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [grype](), [openvex](), [supply-chain-security](), [vulnerability management](), [anchore](), [chainguard](), [Security]() Tags: [anchore](), [chainguard](), [cve](), [cybersecurity-and-infrastructure-security-agency](), [grype](), [openssf](), [openvex](), [scanner](), [security](), [software-bill-of-materials](), [software-supply-chain-security](), [vex](), [vulnerability-management](), [vulnerability-scanner]() ### AI overview Grype, Anchore's open-source vulnerability scanner, now supports OpenVEX, a machine-readable standard for vulnerability analysis. The article explains how this can provide context for vulnerabilities and help reduce false positives and vulnerability-management effort. ### Source excerpt Open source vulnerability scanner Grype has added support for OpenVEX, making software supply chain security easier. Learn how to implement it today. ## Chainguard to accelerate VEX adoption through OpenVEX specification DevFeed: [Chainguard to accelerate VEX adoption through OpenVEX specification]() Original publisher: [Read original article]() Published: 2023-01-31T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [openvex](), [chainguard](), [supply-chain-security](), [anchore](), [Vulnerabilities]() Tags: [anchore](), [chainguard](), [chainguard-images](), [cyclonedx](), [false-positives](), [google](), [images](), [linux-foundation](), [openvex](), [sbom-vex](), [scanners](), [security](), [software-supply-chain](), [spdx](), [supply-chain](), [vex](), [vulnerabilities](), [vulnerability](), [vulnerability-tool](), [wolfi]() ### AI overview Chainguard announces the OpenVEX specification and reference toolchain, developed with industry and CISA VEX Working Group collaboration. OpenVEX helps software producers describe vulnerability exploitability and enables consumers to filter false positives, complementing SBOMs. ### Source excerpt VEX needs the industry to come together to build formats that integrate into existing practices. OpenVEX enables organizations to put VEX into practice. ## GoReleaser v1 -- one year later DevFeed: [GoReleaser v1 -- one year later]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2022-11-14T00:00:00Z Content type: article Language: en Sources: [Carlos Becker]() Topics: [releases](), [GitHub](), [Maintainers](), [Security](), [sigstore](), [anchore](), [openssf]() Tags: [anchore](), [github](), [maintainers](), [openssf](), [release](), [releases](), [security](), [sigstore]() ### AI overview A retrospective on GoReleaser's first year after version 1.0.0, covering its development activity, release cadence, community growth, new features, bug fixes, integrations, and progress on security and supply-chain practices. ### Source excerpt We launched GoReleaser v1 exactly 1 year ago today!