# chainguard Published articles for chainguard. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Announcing the Sovereign Artifacts beta DevFeed: [Announcing the Sovereign Artifacts beta]() Original publisher: [Read original article]() Published: 2026-09-15T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Open Source](), [Software](), [cyber resilience act](), [Resilience]() Tags: [chainguard](), [container](), [cyber-resilience-act](), [eu](), [infrastructure](), [network](), [open-source](), [performance](), [resilience](), [supply-chain]() ### AI overview Chainguard has launched Sovereign Artifacts in beta, providing EU-local storage and delivery for secure container and library artifact bytes. Phase 1 stores artifacts in the EU, while authentication and build pipelines remain hosted in the United States. The service is intended to support sovereignty and data-residency requirements and reduce artifact pull times for European customers. ### Source excerpt Chainguard launches Sovereign Artifacts in beta, giving global organizations an EU-local option for secure container and library artifacts. ## Athena spotlight: Black Duck on the importance of flagging zero-days at scale DevFeed: [Athena spotlight: Black Duck on the importance of flagging zero-days at scale]() Original publisher: [Read original article]() Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Vulnerabilities](), [Artificial Intelligence](), [Frontier AI](), [Frontier Model](), [Security](), [Open Source]() Tags: [ai](), [anthropic](), [athena](), [attacks](), [chainguard](), [code](), [container-images](), [frontier-ai](), [frontier-ai-models](), [frontier-model](), [management](), [mythos](), [open-source](), [osv](), [project-glasswing](), [scale](), [security](), [source](), [vulnerabilities]() ### AI overview The article explains how Black Duck and the Athena coalition address the growing volume of AI-discovered open source zero-day vulnerabilities. Athena members use frontier models to scan sandboxed applications, while Chainguard triages, validates, and remediates findings and shares artifacts and OSV data. Black Duck uses that feed to alert customers and provide mitigation and remediation guidance. ### Source excerpt AI can find zero-days faster than teams can fix them. See how Black Duck and Athena work together to turn findings into actionable protection. ## Chainguard's Factory-Scale Automation for Toolchain Upgrades and Testing DevFeed: [Chainguard's Factory-Scale Automation for Toolchain Upgrades and Testing]() Original publisher: [Read original article]() Published: 2026-09-09T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [toolchain](), [Automation](), [Testing](), [Open Source](), [Go Language]() Tags: [automation](), [chainguard](), [go](), [open-source](), [security](), [testing](), [toolchain](), [upgrades]() ### AI overview Chainguard describes how its Factory uses automation to manage toolchain version selection, upgrades, builds, and testing across open source packages. The approach uses version streams and rebuilds packages with newer toolchain versions when builds and tests succeed, helping deliver updates quickly while maintaining reliability and security. ### Source excerpt See how Chainguard automates toolchain upgrades and testing to keep thousands of open source packages current, secure, and reliable at scale. ## What it took to reach 1 billion build manifests DevFeed: [What it took to reach 1 billion build manifests]() Original publisher: [Read original article]() Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [container images](), [chainguard os](), [supply-chain-security](), [sigstore](), [Linux](), [NumPy]() Tags: [chainguard](), [chainguard-factory](), [chainguard-os](), [container-images](), [go](), [open-source](), [provenance](), [sbom](), [sigstore](), [software-supply-chain]() ### AI overview Chainguard describes how it doubled container build output from 500 million to more than 1 billion manifests in six months. The article explains how Chainguard Factory and Chainguard OS support continuous rebuilds, while using source builds, SLSA Level 3 provenance, Sigstore signatures, and full SBOMs. ### Source excerpt Chainguard doubled its container build output in six months. Learn how Factory 2.0 uses AI and reconciliation to rebuild secure software at scale. ## Announcing Chainguard container images for Go 1.27 DevFeed: [Announcing Chainguard container images for Go 1.27]() Original publisher: [Read original article]() Published: 2026-08-31T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [container images](), [Go Language](), [Cryptography](), [Deployment](), [Security, Privacy and Abuse Prevention](), [Post-Quantum]() Tags: [chainguard](), [container](), [container-images](), [cryptography](), [deployment](), [fedramp](), [fedramp-ato](), [fips](), [go](), [hardening](), [images](), [post-quantum](), [release]() ### AI overview Chainguard announces three Go 1.27 container images: go, go-fips, and go-openssl-fips. The options differ in their FIPS-validated cryptography, including whether cryptography is built in or selected at deployment time. ### Source excerpt Chainguard simplifies Go 1.27 with three images and a new option to choose FIPS-validated cryptography at deployment without recompiling. ## Proven, not promised: Chainguard Containers achieves SLSA Build Level 3 DevFeed: [Proven, not promised: Chainguard Containers achieves SLSA Build Level 3]() Original publisher: [Read original article]() Published: 2026-08-17T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [supply-chain-security](), [software bill of materials](), [Security]() Tags: [chainguard](), [chainguard-containers](), [provenance](), [sbom](), [security](), [signing](), [slsa](), [software-supply-chain-security](), [supply-chain]() ### AI overview Chainguard says Coalfire independently assessed the Chainguard Containers build and release system as meeting SLSA Build Level 3 requirements. The article describes hardened, isolated builds, separately managed signing, provenance generation, and signed SBOMs for releases. ### Source excerpt Coalfire independently assessed Chainguard Containers at SLSA Build Level 3, validating hardened builds, provenance, and supply chain integrity. ## Patching Vulnerabilities Without an Upstream Fix DevFeed: [Patching Vulnerabilities Without an Upstream Fix]() Original publisher: [Read original article]() Published: 2026-08-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [vulnerability](), [ai security](), [chainguard](), [Automation](), [Frontier AI]() Tags: [ai-security](), [automation](), [chainguard](), [cves](), [sandbox](), [software](), [vulnerability]() ### AI overview Chainguard describes how its Athena vulnerability clearinghouse addresses exploitable vulnerabilities when no upstream fix exists. The article explains that generating an AI-written patch is straightforward, while proving the patch is correct and safe requires extensive engineering and validation inside a microVM sandbox. ### Source excerpt Generating an AI security patch is easy. Trusting it is hard. Learn how Chainguard proves zero-day fixes are safe before they ship. ## Introducing the Guardener GitHub App DevFeed: [Introducing the Guardener GitHub App]() Original publisher: [Read original article]() Published: 2026-08-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard actions](), [GitHub](), [CI/CD](), [migration](), [Security](), [Open Source]() Tags: [chainguard](), [chainguard-actions](), [ci-cd](), [github](), [migration](), [open-source](), [pull-request](), [security](), [yaml]() ### AI overview Chainguard introduces the Guardener GitHub app in beta to automate migration from GitHub Actions to secure-by-default Chainguard Actions. The app helps teams inventory actions across repositories and open migration pull requests for actions with Chainguard equivalents, improving CI/CD security with less developer friction. ### Source excerpt Meet the Guardener GitHub app, built to automate migration to hardened Chainguard Actions and help teams secure CI/CD without slowing developers. ## The keyv and cacheable npm Supply Chain Attack: Inside the Mini Shai-Hulud Campaign DevFeed: [The keyv and cacheable npm Supply Chain Attack: Inside the Mini Shai-Hulud Campaign]() Original publisher: [Read original article]() Published: 2026-08-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [npm](), [Malware](), [chainguard](), [GitHub](), [C2](), [Ethereum]() Tags: [aws](), [chainguard](), [ethereum](), [github](), [malware](), [mini-shai-hulud](), [npm](), [payload](), [shai-hulud](), [smart-contract](), [supply-chain]() ### AI overview The article examines a 2026 npm supply-chain attack in which a compromised maintainer account was used to publish malicious versions of keyv and cacheable-related packages. It reports credential theft, worm-like propagation to hundreds of downstream packages, and command-and-control infrastructure discovered through an Ethereum smart contract. It also explains that Chainguard customers were protected by malware scanning and package cooldowns. ### Source excerpt The latest npm supply chain attack hit keyv and cacheable. See how Chainguard's malware scanning and cooldowns kept customers protected. ## How Chainguard Uses Hardware-Virtualized Sandboxes to Isolate AI Agents and Untrusted Code DevFeed: [How Chainguard Uses Hardware-Virtualized Sandboxes to Isolate AI Agents and Untrusted Code]() Original publisher: [Read original article]() Published: 2026-07-29T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Artificial Intelligence](), [Security](), [Code](), [qemu](), [Containers]() Tags: [ai](), [ai-agents](), [chainguard](), [code](), [hardware](), [kvm](), [sandboxes](), [security]() ### AI overview Chainguard describes applying its build-isolation approach to sandboxing AI agents and other untrusted code. The approach uses fresh hardware-virtualized QEMU/KVM environments with their own kernels to limit blast radius and prevent persistence or access to sensitive signing materials. ### Source excerpt AI agents need sandboxes. Learn how Chainguard uses microVMs to safely run untrusted code, contain exploits, and protect sensitive workloads. ## Why zero CVEs matters in mobile airgapped deployments DevFeed: [Why zero CVEs matters in mobile airgapped deployments]() Original publisher: [Read original article]() Published: 2026-07-28T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [Vulnerabilities](), [Security](), [chainguard containers](), [chainguard]() Tags: [chainguard](), [chainguard-containers](), [containers](), [cves](), [security](), [vulnerabilities]() ### AI overview The article explains why disconnected mobile and air-gapped systems become increasingly exposed as vulnerabilities accumulate while patching and live feeds are unavailable. It argues that starting with low-CVE container images and refreshing them before departure can reduce the vulnerability backlog, citing Chainguard Containers' stated CVE reduction and daily rebuild practices. ### Source excerpt Disconnected systems can't patch. Learn how minimal, zero-CVE containers help reduce vulnerability accumulation in air-gapped environments. ## Booz Allen Hamilton signs enterprise license agreement with Chainguard DevFeed: [Booz Allen Hamilton signs enterprise license agreement with Chainguard]() Original publisher: [Read original article]() Published: 2026-07-21T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [chainguard libraries](), [open-source-security](), [Security](), [Vulnerabilities](), [Open Source](), [Development]() Tags: [announce](), [ato](), [authority-to-operate](), [booz-allen-hamilton](), [booz-allen-hamilton-engineering](), [booz-chainguard-partnership](), [chainguard](), [chainguard-booz](), [chainguard-containers](), [chainguard-libraries](), [compliance](), [container-images](), [development](), [enterprise](), [government](), [partner](), [secure-by-default](), [security](), [supply-chain](), [trust](), [us](), [vulnerabilities]() ### AI overview Booz Allen Hamilton has signed an enterprise license agreement with Chainguard, giving more than 6,000 engineers access to Chainguard Containers and Chainguard Libraries across U.S. government programs. The agreement is intended to support secure-by-default software delivery, vulnerability remediation, compliance, and software supply chain requirements. ### Source excerpt Booz Allen and Chainguard partner to help 6,000+ engineers deliver secure-by-default software across U.S. government programs. ## Responding to the Five Eyes guidance on AI and cyber risk DevFeed: [Responding to the Five Eyes guidance on AI and cyber risk]() Original publisher: [Read original article]() Published: 2026-07-15T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Cybersecurity](), [Artificial Intelligence](), [Frontier AI](), [Resilience](), [vulnerability](), [chainguard]() Tags: [ai](), [chainguard](), [deployment](), [five-eyes-security](), [government-of-canada](), [identity-and-access-management](), [mythos](), [resilience](), [security](), [software-supply-chain](), [software-supply-chain-security](), [vulnerability]() ### AI overview The article interprets joint Five Eyes guidance warning that frontier AI may increase the speed, scale, and sophistication of cyberattacks. It argues that organizations should strengthen software supply chain security, accelerate vulnerability remediation, reduce unnecessary dependencies, address legacy systems, improve identity and access management, and build cyber resilience into business and development practices. ### Source excerpt The Five Eyes AI guidance urges organizations to strengthen software supply chain security. Learn how Chainguard helps teams stay ahead. ## The State of Trusted Open Source: June 2026 DevFeed: [The State of Trusted Open Source: June 2026]() Original publisher: [Read original article]() Published: 2026-06-30T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Open Source](), [supply-chain-security](), [vulnerability](), [Artificial Intelligence](), [Security]() Tags: [2026](), [ai](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [cve](), [cve-data](), [cves](), [data](), [dependency](), [java](), [javascript](), [nginx](), [node](), [open-source](), [python](), [report](), [security](), [software](), [software-supply-chain](), [software-supply-chain-security](), [state-of-trusted-open-source](), [trends](), [vulnerability]() ### AI overview Chainguard's June 2026 report analyzes vulnerability data from more than 2,400 container image projects and 18,016 vulnerability instances observed from March through May 2026. It reports 886 distinct CVEs, with 63.1% of observed instances classified as high severity, and examines how AI-assisted development and security research are affecting software supply-chain risk. ### Source excerpt AI is accelerating vulnerability discovery. Explore the latest trusted open source trends, dependency risks, and CVE insights from Chainguard's report. ## Chainguard Repository adds new policies, Chainguard Libraries for JavaScript is GA DevFeed: [Chainguard Repository adds new policies, Chainguard Libraries for JavaScript is GA]() Original publisher: [Read original article]() Published: 2026-06-25T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard repository](), [chainguard libraries for javascript](), [chainguard](), [JavaScript](), [Malware](), [Artificial Intelligence]() Tags: [ai](), [chainguard](), [chainguard-libraries](), [chainguard-libraries-for-java](), [chainguard-libraries-for-javascript](), [chainguard-libraries-for-python](), [chainguard-repo](), [chainguard-repository](), [javascript](), [libraries](), [malware](), [malware-scanner](), [policy](), [visibility]() ### AI overview Chainguard announces new malware and greyware scanning for additional artifact types, expanded policy controls, and new visibility features in Chainguard Repository. The article also announces general availability of Chainguard Libraries for JavaScript. ### Source excerpt Chainguard Repository adds malware and greyware scanning, expanded policy controls, and visibility to secure AI-driven software supply chains. ## Fewer CVEs, more accurate findings: Wiz now scans Chainguard Libraries for Python and Java DevFeed: [Fewer CVEs, more accurate findings: Wiz now scans Chainguard Libraries for Python and Java]() Original publisher: [Read original article]() Published: 2026-06-25T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard libraries](), [chainguard libraries for python](), [Java](), [supply-chain-security](), [Security]() Tags: [chainguard](), [chainguard-libraries](), [chainguard-libraries-for-java](), [chainguard-libraries-for-python](), [cves](), [dependencies](), [java](), [provenance](), [python](), [security](), [software-supply-chain](), [supply-chain](), [wiz](), [wiz-chainguard-libraries](), [wiz-chainguard-scanner]() ### AI overview Wiz now scans Chainguard Libraries for Python and Java. The partnership combines source-built dependencies and backported fixes with Wiz's risk context and visibility, helping organizations assess vulnerabilities, prioritize remediation, and verify artifact provenance. ### Source excerpt Wiz now scans Chainguard Libraries for Python and Java, combining trusted, source-built dependencies with risk-based visibility and remediation. ## Everything we announced during AI Readiness Innovation Week DevFeed: [Everything we announced during AI Readiness Innovation Week]() Original publisher: [Read original article]() Published: 2026-06-25T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [ai-coding](), [supply-chain-security](), [chainguard](), [open-source-security](), [Vulnerabilities](), [Security](), [chainguard libraries](), [chainguard containers](), [CI/CD](), [Frontier AI](), [GitHub]() Tags: [ai](), [ai-readiness](), [athena](), [aws-kiro](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [ci-cd](), [containers](), [cursor](), [frontier-ai-models](), [gartner-magic-quadrant](), [github](), [innovation](), [open-source](), [security](), [software-supply-chain](), [software-supply-chain-security](), [speed](), [vulnerabilities]() ### AI overview Chainguard summarizes announcements from AI Readiness Innovation Week, covering supply-chain security advances for containers, libraries, CI/CD pipelines, AI agent skills, IDE integrations, partnerships, and an industry coalition. The article highlights Athena, a coalition designed to coordinate defense against vulnerabilities discovered by frontier AI models. ### Source excerpt Read about everything Chainguard announced during AI Readiness Innovation Week, including new features for Chainguard Libraries and Chainguard Containers. ## Adopt hardened containers without changing your pipelines, tooling, or environment DevFeed: [Adopt hardened containers without changing your pipelines, tooling, or environment]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [chainguard containers](), [Security](), [Deployment](), [Tooling]() Tags: [chainguard](), [chainguard-containers](), [chainguard-redhat-rpm](), [cmvp](), [compliance](), [containers](), [cyclonedx](), [dependabot](), [deployment](), [fips](), [hardened-containers](), [provenance](), [rhel](), [rhel-10](), [rhel-9](), [rpm-10](), [rpm-9](), [sboms](), [secure-by-default](), [security](), [vulnerabilities]() ### AI overview Chainguard announces updates to Chainguard Containers that support enterprise adoption of hardened images without changing existing pipelines, tooling, or environments. The updates include RPM support for RHEL 9 and RHEL 10, compatible image tags, a CMVP-validated Go Geomys FIPS image, Dependabot support for private registries, and flattened CycloneDX SBOMs for compliance tools. ### Source excerpt Chainguard expands Containers with RPM support, FIPS enhancements, and easier migrations, bringing secure-by-default software to enterprise workflows. ## How Chainguard uses AI agents to enforce engineering standards across a monorepo DevFeed: [How Chainguard uses AI agents to enforce engineering standards across a monorepo]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [Bot](), [chainguard](), [Pull Request](), [GitHub Actions]() Tags: [agentic](), [agents](), [ai](), [ai-agents](), [chainguard](), [chainguard-agent-skills](), [chainguard-agents](), [chainguard-ai](), [chainguard-containers](), [chainguard-engineering](), [chainguard-libraries](), [ci](), [engineering](), [github](), [policy](), [pull-request](), [workflow]() ### AI overview Chainguard describes a system of specialized AI agents built on DriftlessAF that continuously checks code against machine-readable engineering standards, fixes drift, and supports CI repair. Over eight weeks, it opened more than 4,700 standards-fix pull requests; 75% judged low-risk were auto-merged when AI judgment agreed with deterministic checks. ### Source excerpt Chainguard uses AI-powered agents to continuously enforce engineering standards, remediate drift, and keep codebases aligned at scale. ## Securing the AI coding ecosystem: Chainguard and the AI tools developers use DevFeed: [Securing the AI coding ecosystem: Chainguard and the AI tools developers use]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Kiro](), [AI Development](), [cursor](), [Security](), [Containers](), [Open Source]() Tags: [ai](), [ai-agents](), [ai-coding](), [aws-kiro](), [chainguard](), [chainguard-ai-tools](), [chainguard-libraries](), [containers](), [cursor](), [developers](), [kiro](), [open-source](), [secure-by-default]() ### AI overview Chainguard argues that AI coding tools such as Kiro and Cursor need trusted sources for dependencies and container images. The article describes Chainguard Containers, Libraries, and a Kiro plugin intended to move projects from public registries to hardened supply-chain components. ### Source excerpt Chainguard brings secure-by-default containers and libraries to AI coding tools like Kiro and Cursor, making trusted open source the default. ## Chainguard plug-in now available on Cursor Marketplace DevFeed: [Chainguard plug-in now available on Cursor Marketplace]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [cursor](), [chainguard](), [AI-assisted coding](), [Containers](), [Security]() Tags: [ai-coding-agents](), [chainguard](), [chainguard-containers](), [chainguard-cursor](), [chainguard-cursor-marketplace](), [chainguard-libraries](), [containers](), [cursor](), [cursor-chainguard-containers](), [cursor-chainguard-libraries](), [libraries](), [mcp](), [plugin](), [security]() ### AI overview Chainguard has launched a plugin on the Cursor Marketplace that connects Cursor to Chainguard Containers, Chainguard Libraries, and the Chainguard Repository. The plugin is intended to make secure-by-default artifacts available in AI coding workflows and help agents remediate known vulnerabilities. ### Source excerpt Connect Cursor to Chainguard in minutes and make secure, malware-resistant containers and libraries the default for AI-generated code. ## Chainguard Libraries for Java is now GA; CVE remediation beta available for sign up DevFeed: [Chainguard Libraries for Java is now GA; CVE remediation beta available for sign up]() Original publisher: [Read original article]() Published: 2026-06-23T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [Java](), [Spring Boot](), [Security](), [Back end]() Tags: [chainguard](), [chainguard-libraries](), [chainguard-libraries-for-java](), [cve](), [cve-remediation](), [dependencies](), [java](), [java-packages](), [java-spring](), [open-source](), [provenance](), [sboms](), [scanner](), [security](), [zero-cve-packages]() ### AI overview Chainguard Libraries for Java is generally available, and its CVE remediation capability is available in beta. The article describes backported fixes for critical and high-severity CVEs across the Spring Boot ecosystem, helping teams manage risks in pinned or legacy Java dependencies while planning upgrades. ### Source excerpt Chainguard Libraries for Java is now GA, delivering CVE-remediated dependencies with SBOMs, provenance, and scanner-recognized fixes. ## Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security DevFeed: [Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security]() Original publisher: [Read original article]() Published: 2026-06-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard containers](), [container images](), [Security](), [Containers](), [chainguard libraries]() Tags: [chainguard](), [chainguard-containers](), [chainguard-gartner](), [chainguard-gartner-mq](), [chainguard-libraries](), [container-images](), [gartner](), [gartner-magic-quadrant](), [sboms](), [secure-by-default](), [security](), [software-supply-chain-security](), [software-supply-chain-security-gartner](), [software-supply-chain-security-mq](), [zero-cves]() ### AI overview Chainguard's article discusses its recognition as a Leader in Gartner's inaugural Magic Quadrant for Software Supply Chain Security. It argues that accelerating vulnerability exploitation and AI-assisted development require prevention-oriented, secure-by-default supply chain security. The article highlights Chainguard Containers, which provides minimal container images rebuilt daily from source, with zero CVEs, SBOMs, and verifiable signatures, and briefly introduces Chainguard Libraries. ### Source excerpt Gartner names Chainguard a Leader in Software Supply Chain Security, highlighting its secure-by-default approach and market vision. ## Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security DevFeed: [Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security]() Original publisher: [Read original article]() Published: 2026-06-18T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [supply-chain-security](), [Security](), [Open Source]() Tags: [2026](), [chainguard](), [chainguard-gartner](), [chainguard-gartner-magic-quadrant](), [cyber-resilience-act](), [fedramp](), [gartner](), [gartner-mq-software-supply-chain](), [nis2](), [provenance](), [sboms](), [secure-by-default](), [security](), [slsa](), [software-supply-chain](), [software-supply-chain-security](), [software-supply-chain-security-gartner]() ### AI overview Chainguard announces that it has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Software Supply Chain Security. The article highlights Chainguard's secure-by-default approach, hardened open source artifacts, cryptographic signatures, signed SBOMs, and SLSA-aligned provenance, along with support for regulatory requirements. ### Source excerpt Chainguard named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security, recognized for vision and secure-by-default innovation. [Next page]()