# chainguard factory Published articles for chainguard factory. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## What it took to reach 1 billion build manifests DevFeed: [What it took to reach 1 billion build manifests]() Original publisher: [Read original article]() Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [container images](), [chainguard os](), [supply-chain-security](), [sigstore](), [Linux](), [NumPy]() Tags: [chainguard](), [chainguard-factory](), [chainguard-os](), [container-images](), [go](), [open-source](), [provenance](), [sbom](), [sigstore](), [software-supply-chain]() ### AI overview Chainguard describes how it doubled container build output from 500 million to more than 1 billion manifests in six months. The article explains how Chainguard Factory and Chainguard OS support continuous rebuilds, while using source builds, SLSA Level 3 provenance, Sigstore signatures, and full SBOMs. ### Source excerpt Chainguard doubled its container build output in six months. Learn how Factory 2.0 uses AI and reconciliation to rebuild secure software at scale. ## How Chainguard Automated Detection and Patching of a High-Severity CVE DevFeed: [How Chainguard Automated Detection and Patching of a High-Severity CVE]() Original publisher: [Read original article]() Published: 2026-02-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Security](), [vulnerability](), [anchore](), [grype](), [ci](), [GitHub](), [Pull Request]() Tags: [2025](), [anchore](), [chainguard](), [chainguard-containers](), [chainguard-cve-remediation](), [chainguard-factory](), [chainguard-images](), [ci](), [container-images](), [cve](), [github](), [grype](), [pull-request](), [security](), [vulnerability](), [zero-cves]() ### AI overview The article describes how Chainguard's Factory detected a high-severity vulnerability affecting k9s, updated Grype, opened and merged a pull request, and published a fixed package within 46 hours of the advisory. It also reports that Chainguard remediated 2,960 unique CVEs in November 2025 while meeting its stated remediation SLA. ### Source excerpt The Chainguard Factory and DriftlessAF automate CVE detection and patching, delivering fixes in hours and maintaining industry-leading remediation SLAs. ## Introducing Fulfillment Dashboard: New artifact requests are now self-serve DevFeed: [Introducing Fulfillment Dashboard: New artifact requests are now self-serve]() Original publisher: [Read original article]() Published: 2026-02-12T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [dashboards](), [chainguard containers](), [chainguard](), [Containers](), [Development]() Tags: [chainguard](), [chainguard-containers](), [chainguard-factory](), [chainguard-images](), [console](), [customers](), [fulfillment-dashboard](), [real-time](), [scale](), [search](), [secure-software](), [self-service](), [self-service-container-images](), [visibility](), [workflows]() ### AI overview Chainguard introduces Fulfillment Dashboard, a self-service console for submitting, tracking, searching, and voting on secure container image requests. It provides lifecycle visibility, target delivery dates, deduplication, and community upvoting to help prioritize fulfillment. ### Source excerpt Fulfillment Dashboard gives Chainguard customers real-time visibility, tracking, and community voting for new secure container image requests. ## How I learned to stop worrying and love the latest tag DevFeed: [How I learned to stop worrying and love the latest tag]() Original publisher: [Read original article]() Published: 2026-02-11T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container images](), [Docker](), [Dockerfile](), [chainguard containers](), [Docker Hardened Images](), [Kubernetes](), [YAML]() Tags: [chainguard](), [chainguard-automations](), [chainguard-containers](), [chainguard-factory](), [container-image-digests](), [cryptographic](), [digestabot](), [digests](), [docker](), [docker-hardened-images](), [hardened-images](), [latest-tag](), [reproducibility]() ### AI overview The article explains how to use the latest tag as part of a secure container image update strategy. It recommends pinning images to cryptographic digests to ensure reproducibility, enable reliable rollbacks, and prevent unexpected version changes, while retaining tags for readability and tooling. It also introduces automated workflows for finding and updating digests. ### Source excerpt The latest tag isn't unsafe by default -- pin images to digests for reproducible, secure updates while staying current with automated workflows. ## DriftlessAF: Introducing Chainguard Factory 2.0 DevFeed: [DriftlessAF: Introducing Chainguard Factory 2.0]() Original publisher: [Read original article]() Published: 2026-01-29T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Artificial Intelligence](), [Automation](), [Bot](), [Open Source](), [event driven](), [legacy]() Tags: [agentic](), [ai](), [architecture](), [automation](), [bots](), [chainguard](), [chainguard-containers](), [chainguard-factory](), [chainguard-images](), [chainguard-libraries](), [cve](), [driftlessaf](), [event-driven](), [legacy](), [open-source](), [reconciliation](), [safe-source-for-open-source](), [self-healing]() ### AI overview Chainguard announces Chainguard Factory 2.0, powered by the DriftlessAF agentic framework. The system uses AI-driven, self-healing reconciliation to build and maintain more than 2,000 zero-CVE images, and DriftlessAF is being open-sourced. ### Source excerpt Chainguard Factory 2.0, powered by DriftlessAF, brings AI-driven, self-healing reconciliation to build and maintain 2,000+ zero-CVE images -- now open sourced. ## Doing our best work: Chainguard's engineering principles in practice DevFeed: [Doing our best work: Chainguard's engineering principles in practice]() Original publisher: [Read original article]() Published: 2025-12-03T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Architecture & Design](), [Scalability](), [Security](), [Open Source]() Tags: [architecture](), [chainguard](), [chainguard-containers](), [chainguard-engineering](), [chainguard-factory](), [chainguard-libraries](), [chainguard-vms](), [complexity](), [engineering](), [open-source](), [reduce](), [scalability](), [security](), [self-service](), [shared-responsibility](), [working-for-chainguard]() ### AI overview Chainguard describes four Engineering Principles--reducing complexity, empowering individuals, engineering value, and ensuring production excellence--and explains how the principles guide engineering practices and recognition. ### Source excerpt Learn more about Chainguard's Engineering Principles: reduce complexity, empower individuals, engineer value, and ensure production excellence. ## Why Chainguard's Full-Stack Approach to Secure Software Supply Chain Is Built to Scale DevFeed: [Why Chainguard's Full-Stack Approach to Secure Software Supply Chain Is Built to Scale]() Original publisher: [Read original article]() Published: 2025-07-09T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard os](), [chainguard](), [Open Source]() Tags: [automated](), [chainguard](), [chainguard-factory](), [chainguard-os](), [cve](), [dependencies](), [open-source-artifacts](), [open-source-software-security](), [provenance](), [reproducibility](), [secure-software](), [secure-software-supply-chain](), [software-supply-chain](), [supply-chain-security]() ### AI overview The article presents Chainguard's integrated approach to software supply chain security, combining Chainguard OS with the Chainguard Factory. It describes reproducible source builds, incremental updates, traceable contents, verifiable metadata, and automated maintenance of open source artifacts. ### Source excerpt Learn how Chainguard OS and the Chainguard Factory delivers the only scalable path to secure, reliable software artifacts. ## How R1 Universities Can Simplify CMMC 2.0 Compliance with Chainguard Containers DevFeed: [How R1 Universities Can Simplify CMMC 2.0 Compliance with Chainguard Containers]() Original publisher: [Read original article]() Published: 2025-06-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Containers](), [vulnerability management](), [Vulnerabilities](), [Security](), [chainguard](), [chainguard os](), [Automation](), [Linux](), [Malware](), [systems]() Tags: [2025](), [chainguard](), [chainguard-containers](), [chainguard-factory](), [chainguard-os](), [cmmc](), [cmmc-2-0](), [compliance](), [containers](), [cve](), [cve-remediation](), [cves](), [funding](), [linux](), [malware](), [management](), [security](), [software](), [systems](), [vulnerabilities](), [zero-cves]() ### AI overview This article explains how Chainguard Containers may help R1 universities prepare for CMMC 2.0 Level 2 requirements tied to Department of Defense research contracts. It focuses on vulnerability-management controls, including timely identification, reporting, remediation, malware protection, and risk assessment, and describes Chainguard's minimal container images, Chainguard OS, and Chainguard Factory. ### Source excerpt With CMMC 2.0 compliance becoming an important prerequisite to research funding for R1 universities, Chainguard Containers are the perfect solution. See how. ## This Shit is Hard: Inside the Chainguard Factory DevFeed: [This Shit is Hard: Inside the Chainguard Factory]() Original publisher: [Read original article]() Published: 2025-05-27T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Automation](), [Linux](), [Kubernetes](), [Scalability](), [GitHub Actions](), [observability](), [Open Source]() Tags: [automation](), [chainguard](), [chainguard-containers](), [chainguard-factory](), [chainguard-libraries](), [chainguard-os](), [cve-remediation](), [github-actions](), [infrastructure](), [kubernetes](), [linux](), [observability](), [open-source](), [scalability](), [speed](), [wolfi]() ### AI overview Chainguard describes how its Factory uses infrastructure, automation, and a custom Kubernetes-based build system to build and test thousands of packages and images. The article says the system replaced GitHub Actions and improved observability, scalability, and usability while supporting CVE remediation targets. ### Source excerpt The Chainguard Factory combines world-class talent and automation to produce packages and images at a level of speed unmatched by any other Linux distribution. ## Chainguard's Catalog of 1,300+ Container Images: Secure Foundation for Every Engineering Team DevFeed: [Chainguard's Catalog of 1,300+ Container Images: Secure Foundation for Every Engineering Team]() Original publisher: [Read original article]() Published: 2025-05-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [chainguard](), [Containers](), [chainguard os](), [container-security](), [Open Source](), [sigstore]() Tags: [chainguard](), [chainguard-catalog](), [chainguard-containers](), [chainguard-factory](), [chainguard-images](), [chainguard-os](), [container](), [container-images](), [cve-remediation](), [dependencies](), [open-source](), [provenance](), [safe-source-for-open-source](), [sigstore](), [slsa]() ### AI overview Chainguard describes its catalog of more than 1,300 minimal, zero-CVE container images, built from source on Chainguard OS and maintained through the Chainguard Factory. The article highlights daily rebuilds, automated dependency and CVE handling, and default SBOMs, SLSA provenance, and Sigstore signatures. ### Source excerpt Chainguard Containers is a catalog of over 1,300 container images powered by Chainguard OS and the Chainguard Factory. Discover the safe source for open source.