# chainguard security Published articles for chainguard security. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Chainguard Launches Bugcrowd Bug Bounty With Up to $200,000 in Rewards DevFeed: [Chainguard Launches Bugcrowd Bug Bounty With Up to $200,000 in Rewards]() Original publisher: [Read original article]() Published: 2026-07-06T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Bug Bounty](), [Security](), [Vulnerabilities](), [Exploit](), [npm packages]() Tags: [bounty](), [bug-bounty](), [bugcrowd-bug-bounty](), [chainguard-bug-bounty](), [chainguard-security](), [exploit](), [malicious-packages](), [npm-packages](), [security](), [security-contest](), [shai-hulud](), [supply-chain](), [vulnerabilities]() ### AI overview Chainguard is running a Bugcrowd bug bounty from July 6-27, offering up to $200,000 to researchers who find vulnerabilities in its infrastructure and products. ### Source excerpt Chainguard launches a Bugcrowd bounty with up to $200K in rewards, inviting researchers to test its infrastructure against real-world attacks. ## Three Ways to Make Your SDLC Secure-by-Default DevFeed: [Three Ways to Make Your SDLC Secure-by-Default]() Original publisher: [Read original article]() Published: 2025-10-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [sdlc](), [open-source-security](), [supply-chain-security](), [Open Source](), [chainguard]() Tags: [chainguard](), [chainguard-containers](), [chainguard-images](), [chainguard-security](), [ci-cd](), [cloud-native](), [cves](), [open-source-software](), [sdlc](), [secure-by-default](), [software-supply-chain]() ### AI overview This article presents secure-by-default software development lifecycle practices. It recommends embedding security throughout development, standardizing trusted foundations, securing dependencies and base images, and integrating security into developer tools, CI/CD workflows, and runtime artifacts. ### Source excerpt Build secure software faster with Chainguard. Learn how secure-by-default SDLC practices eliminate CVEs, automate compliance, and embed trust from code to cloud. ## Simplify Continuous Compliance: How to Stay Audit-Ready and Ship Software Faster DevFeed: [Simplify Continuous Compliance: How to Stay Audit-Ready and Ship Software Faster]() Original publisher: [Read original article]() Published: 2025-10-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Application Security](), [open-source-security](), [Open Source](), [Software](), [chainguard]() Tags: [chainguard](), [chainguard-containers](), [chainguard-security](), [cmmc](), [compliance](), [cves](), [fedramp](), [iso-27001](), [open-source-software](), [pci-dss](), [security](), [soc-2](), [stateramp]() ### AI overview This article explains how organizations can treat software compliance as a continuous practice rather than a periodic audit exercise. It describes how open-source components, CVE remediation, provenance, SBOM coverage, and audit evidence affect platform engineering, application security, development velocity, and regulated-market access, while presenting Chainguard as a solution provider. ### Source excerpt Turn compliance into a growth driver with Chainguard. Eliminate CVEs, stay audit-ready, and meet FedRAMP, SOC 2, and ISO 27001 with secure images. ## Applying Zero Trust Principles to Open Source Software Supply Chain Security DevFeed: [Applying Zero Trust Principles to Open Source Software Supply Chain Security]() Original publisher: [Read original article]() Published: 2025-09-29T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Zero Trust](), [Open Source](), [open-source-security](), [supply-chain-security](), [Security](), [Git]() Tags: [chainguard-containers](), [chainguard-libraries](), [chainguard-security](), [git](), [open-source](), [open-source-software](), [security](), [security-best-practices](), [slsa](), [supply-chain-security](), [this-shit-is-hard](), [zero-trust]() ### AI overview This article explains how Chainguard applies Zero Trust principles to open source software supply chain security. It discusses weaknesses in Git identity and long-lived credentials, including risks from impersonation, credential theft, and compromised package publishing. ### Source excerpt Chainguard implements Zero Trust principles into everything we do to protect critical infrastructure in the age of open source. See how we do it. ## This Shit is Hard: Hardening glibc DevFeed: [This Shit is Hard: Hardening glibc]() Original publisher: [Read original article]() Published: 2025-08-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [Compiler](), [gcc](), [toolchain](), [chainguard](), [chainguard packages](), [C](), [Linux]() Tags: [c](), [c-c-plus-plus](), [chainguard](), [chainguard-containers](), [chainguard-security](), [compiler](), [compiler-flags](), [gcc](), [glibc](), [hardening](), [openssf](), [security](), [toolchain]() ### AI overview Chainguard describes its effort to build glibc with hardened compiler flags. The work involved collaboration with the upstream GCC and glibc projects to resolve complex issues and ship a hardened version of the library. ### Source excerpt Chainguard uses compiler flags to be proactive in the security of our products. See how our compiler flag usage helped us catch a complex bug in glibc.