# chainguard sboms Published articles for chainguard sboms. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Introducing Chainguard OS Packages: Secure ingredients for custom container builds DevFeed: [Introducing Chainguard OS Packages: Secure ingredients for custom container builds]() Original publisher: [Read original article]() Published: 2026-03-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard os](), [container images](), [Docker Hardened Images](), [Vulnerabilities](), [Linux](), [Automation](), [Dockerfile](), [Open Source](), [bazel](), [chainguard sboms](), [APK]() Tags: [apk](), [apko](), [automation](), [base-images](), [bazel](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [chainguard-os](), [chainguard-os-packages](), [chainguard-packages](), [chainguard-sboms](), [container](), [container-images](), [cve](), [dockerfiles](), [open-source](), [sboms](), [secure-software-packages](), [software-packages](), [vulnerabilities](), [zero-cve-packages]() ### AI overview Chainguard introduces Chainguard OS Packages, a service providing continuously maintained, enterprise-grade packages and base images for teams that build custom container images. Customers retain control over image composition and build tooling while Chainguard handles package sourcing, rebuilding, vulnerability remediation, and SBOM generation. ### Source excerpt Chainguard OS Packages are enterprise-grade, zero-CVE packages and base images built and continuously maintained in the Chainguard Factory. ## Super SBOMs: See exactly what's inside DevFeed: [Super SBOMs: See exactly what's inside]() Original publisher: [Read original article]() Published: 2026-01-29T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Containers](), [chainguard](), [Security](), [spdx]() Tags: [chainguard-containers](), [chainguard-sboms](), [containers](), [cyclonedx](), [fedramp](), [sbom](), [sboms](), [security](), [software-bill-of-materials](), [software-supply-chain-security](), [spdx](), [vulnerability]() ### AI overview Chainguard Containers now provide richer SBOMs with binary-level details about embedded libraries and dependencies, along with CycloneDX support in addition to SPDX. The added visibility helps teams trace vulnerabilities and assess license compliance. ### Source excerpt Chainguard Containers ship richer SBOMs with binary-level library details plus new CycloneDX support, making CVE impact and compliance tracing fast and clear. ## Applying SOC 2 with Chainguard: A practical guide for DevOps and engineering leaders DevFeed: [Applying SOC 2 with Chainguard: A practical guide for DevOps and engineering leaders]() Original publisher: [Read original article]() Published: 2026-01-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [SOC](), [DevOps](), [supply-chain-security](), [Containers](), [CI/CD](), [Software as a service]() Tags: [chainguard-containers](), [chainguard-libraries](), [chainguard-sboms](), [ci-cd](), [compliance](), [containers](), [devops](), [how-does-chainguard-help-with-soc-2](), [sboms](), [secure-by-default](), [security](), [soc](), [soc-2](), [soc-2-chainguard](), [soc-2-compliance](), [software-supply-chain]() ### AI overview This practical guide explains how DevOps and engineering teams can apply SOC 2 principles to continuously changing cloud-native infrastructure and software supply chains. It covers Type 1 and Type 2 reporting, continuous control evidence, automated integrity checks, audit visibility, secure-by-default containers, and automated SBOMs, with Chainguard presented as a way to reduce audit friction without slowing delivery. ### Source excerpt Learn how Chainguard helps DevOps teams meet SOC 2 requirements with secure-by-default containers, automated SBOMs, and continuous, audit-ready evidence. ## Understanding NYDFS and why it matters DevFeed: [Understanding NYDFS and why it matters]() Original publisher: [Read original article]() Published: 2026-01-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Cybersecurity](), [Open Source](), [open-source-security](), [container images](), [CI/CD](), [vulnerability]() Tags: [chainguard](), [chainguard-containers](), [chainguard-libraries](), [chainguard-sboms](), [ci-cd](), [compliance](), [container-images](), [cybersecurity](), [financial-services](), [new-york-department-of-financial-services](), [nydfs](), [nydfs-500](), [nydfs-500-compliance](), [nydfs-500-for-containers](), [open-source](), [sboms](), [vulnerability]() ### AI overview This article explains NYDFS cybersecurity requirements for financial institutions and describes how Chainguard supports compliance with secure open source artifacts, automated SBOMs, attestations, centralized storage, and vulnerability remediation evidence. ### Source excerpt Learn how Chainguard helps financial institutions meet NYDFS 500 with zero-CVE open source, signed SBOMs, auditable evidence, and vulnerability remediation. ## Chainguard Images are the Gold Standard for PCI DSS v4.0 DevFeed: [Chainguard Images are the Gold Standard for PCI DSS v4.0]() Original publisher: [Read original article]() Published: 2025-02-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [container-security](), [Containers](), [supply-chain-security](), [vulnerability management]() Tags: [chainguard](), [chainguard-images](), [chainguard-sboms](), [compliance](), [container](), [container-image](), [container-image-compliance](), [container-images](), [container-security](), [containers](), [cryptography](), [financial](), [pci-dss](), [pci-dss-v4-0](), [sboms](), [software-bill-of-materials](), [software-composition-analysis](), [software-supply-chain](), [stig](), [vulnerability](), [vulnerability-management]() ### AI overview The article explains how Chainguard Images can support selected PCI DSS v4.0 container-security controls. It focuses on asset and vulnerability management, hardened images, FIPS cryptography, build-time SBOMs, software supply chain inventory, and continuously updated containers. ### Source excerpt Chainguard Images are designed to make container image compliance for PCI DSS v4.0 easy for any company involved in card transactions.