# container image security Published articles for container image security. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Why the CVE doom cycle cannot be solved by working harder DevFeed: [Why the CVE doom cycle cannot be solved by working harder]() Original publisher: [Read original article]() Author: Sam Barlien Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [vulnerability management](), [Automation](), [container-security](), [Vulnerabilities](), [configuration]() Tags: [automation](), [container-image-security](), [cve](), [false-positives](), [secure-by-design](), [security](), [vulnerability-management]() ### AI overview The article argues that the recurring cycle of scanning, triaging, patching, and redeploying container images cannot be solved by working harder or using faster scanners. Because vulnerability findings and CVEs accumulate faster than manual remediation can handle, it recommends embedding vulnerability management into the platform through secure-by-design practices, golden paths, and automation. ### Source excerpt Manual CVE triage doesn't scale. Break the CVE doom cycle by shifting vulnerability management into the platform with golden paths and automation ## Check out Chainguard at KubeCon EU in London on April 1-4 DevFeed: [Check out Chainguard at KubeCon EU in London on April 1-4]() Original publisher: [Read original article]() Published: 2025-03-31T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [chainguard libraries](), [chainguard vms](), [Security](), [Containers](), [devrel]() Tags: [2025](), [chainguard](), [chainguard-containers](), [chainguard-images](), [chainguard-libraries](), [chainguard-vms](), [cloud-native](), [cloud-native-rejekts](), [container-image-security](), [containers](), [cves](), [devrel](), [event](), [java](), [kubecon](), [kubecon-eu](), [kubernetes](), [london](), [virtual-machines]() ### AI overview Chainguard announces its presence at KubeCon EU 2025 in London, where it will showcase Chainguard Containers, Chainguard Libraries, and Chainguard VMs. The article also previews talks on learning communities and container image security levels. ### Source excerpt Chainguard will be at booth N300 at KubeCon EU 2025 in London to discuss Chainguard Libraries, Chainguard VMs, and Chainguard Containers. ## Chainguard Images: The Easy Button for FedRAMP DevFeed: [Chainguard Images: The Easy Button for FedRAMP]() Original publisher: [Read original article]() Published: 2025-01-28T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Docker Hardened Images](), [container-security](), [vulnerability management](), [Containers](), [chainguard sboms](), [Security](), [Development]() Tags: [asset-management](), [ato](), [authority-to-operate](), [chainguard](), [chainguard-images](), [compliance](), [container](), [container-image-security](), [cve](), [fedramp](), [hardening](), [sboms](), [sca](), [sdlc](), [vulnerability](), [vulnerability-management]() ### AI overview This article explains how Chainguard Images can simplify and accelerate FedRAMP Authority to Operate compliance for organizations deploying containerized cloud products to federal government customers. It describes secure-by-design containers as helping address asset management, hardening, cryptography, and vulnerability management requirements, and notes Snowflake's achievement of FedRAMP High with Chainguard Images. ### Source excerpt Chainguard Images are designed to make achieving FedRAMP compliance for container images easier. Learn more about how we make vulnerability management simple. ## Understanding NIST's latest updates on container image security DevFeed: [Understanding NIST's latest updates on container image security]() Original publisher: [Read original article]() Published: 2024-07-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [Containers](), [supply-chain-security](), [Cybersecurity](), [Security]() Tags: [authentication](), [authorization](), [chainguard-images](), [container-image-security](), [container-security](), [containers](), [cybersecurity](), [image-security](), [nist](), [software-supply-chain](), [supply-chain-security](), [vulnerabilities]() ### AI overview This article explains NIST guidance relevant to container image security, including risks from misconfiguration, runtime threats, limited visibility, governance gaps, and compliance issues. It discusses NIST SP 800-161 Revision 1 and its focus on cybersecurity supply chain risk management, vulnerability monitoring, configuration management, authorization, and authentication. ### Source excerpt Learn about NIST's latest updates on container image security and how it impacts your organization's security posture. ## NIST's role in enhancing software supply chain security DevFeed: [NIST's role in enhancing software supply chain security]() Original publisher: [Read original article]() Published: 2024-07-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security]() Tags: [container-image-security](), [nist](), [software-supply-chain-security]() ### AI overview The article explains NIST's role in software supply chain security, including its Cybersecurity Framework, guidance following Executive Order 14028, and recommended practices such as risk assessment, supplier controls, SBOMs, incident response, and continuous monitoring. ### Source excerpt NIST's framework for enhancing software supply chain security: Learn how the NIST is guiding organizations to build a more secure software ecosystem. ## Chainguard's response to CVE-2023-6246 in glibc DevFeed: [Chainguard's response to CVE-2023-6246 in glibc]() Original publisher: [Read original article]() Published: 2024-02-01T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [container-security](), [chainguard images](), [Vulnerabilities](), [chainguard]() Tags: [chainguard](), [chainguard-images](), [container-image](), [container-image-security](), [cve](), [cve-2023-6246](), [deployment](), [glibc](), [security](), [wolfi]() ### AI overview Chainguard describes its response to CVE-2023-6246, a glibc heap-based buffer overflow that can enable local privilege escalation. The team patched the glibc Wolfi package and rebuilt affected Chainguard Images after coordinated disclosure. ### Source excerpt Chainguard swiftly addresses CVE-2023-6246 in glibc, reinforcing container image security with rapid patch deployment and updated advisories. ## Celebrating innovation in open source software and container image security with Chainguard Images DevFeed: [Celebrating innovation in open source software and container image security with Chainguard Images]() Original publisher: [Read original article]() Published: 2023-11-01T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [container-security](), [supply-chain-security](), [open-source-security](), [Open Source]() Tags: [chainguard-images](), [container-image-security](), [container-security](), [fedramp](), [fips](), [open-source-software](), [sbom](), [sigstore](), [software-bill-of-materials](), [software-signatures](), [software-supply-chain-security](), [vulnerabilities](), [vulnerability-management]() ### AI overview Chainguard describes the growth of Chainguard Images as a secure container image offering for open source software development and software supply chain security. The article highlights more than one million image builds, over 90 million pulls, a large inventory of tools and applications, reduced CVEs, passwordless token-based authentication, SBOMs, and Sigstore-verified software signatures. ### Source excerpt Explore the fusion of open source innovation and container security with Chainguard Images.