# cyclonedx Published articles for cyclonedx. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Adopt hardened containers without changing your pipelines, tooling, or environment DevFeed: [Adopt hardened containers without changing your pipelines, tooling, or environment]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [chainguard containers](), [Security](), [Deployment](), [Tooling]() Tags: [chainguard](), [chainguard-containers](), [chainguard-redhat-rpm](), [cmvp](), [compliance](), [containers](), [cyclonedx](), [dependabot](), [deployment](), [fips](), [hardened-containers](), [provenance](), [rhel](), [rhel-10](), [rhel-9](), [rpm-10](), [rpm-9](), [sboms](), [secure-by-default](), [security](), [vulnerabilities]() ### AI overview Chainguard announces updates to Chainguard Containers that support enterprise adoption of hardened images without changing existing pipelines, tooling, or environments. The updates include RPM support for RHEL 9 and RHEL 10, compatible image tags, a CMVP-validated Go Geomys FIPS image, Dependabot support for private registries, and flattened CycloneDX SBOMs for compliance tools. ### Source excerpt Chainguard expands Containers with RPM support, FIPS enhancements, and easier migrations, bringing secure-by-default software to enterprise workflows. ## Super SBOMs: See exactly what's inside DevFeed: [Super SBOMs: See exactly what's inside]() Original publisher: [Read original article]() Published: 2026-01-29T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Containers](), [chainguard](), [Security](), [spdx]() Tags: [chainguard-containers](), [chainguard-sboms](), [containers](), [cyclonedx](), [fedramp](), [sbom](), [sboms](), [security](), [software-bill-of-materials](), [software-supply-chain-security](), [spdx](), [vulnerability]() ### AI overview Chainguard Containers now provide richer SBOMs with binary-level details about embedded libraries and dependencies, along with CycloneDX support in addition to SPDX. The added visibility helps teams trace vulnerabilities and assess license compliance. ### Source excerpt Chainguard Containers ship richer SBOMs with binary-level library details plus new CycloneDX support, making CVE impact and compliance tracing fast and clear. ## Evo Adds CycloneDX Support to Give Full AI Visibility DevFeed: [Evo Adds CycloneDX Support to Give Full AI Visibility]() Original publisher: [Read original article]() Author: John Carione Published: 2025-12-19T05:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [Security](), [Open Source]() Tags: [ai](), [application-security](), [awareness](), [blog](), [compliance](), [cyclonedx](), [developer](), [enterprise](), [governance](), [provenance](), [sbom](), [security](), [supply-chain](), [supply-chain-security]() ### AI overview Evo's Discovery Agent now supports CycloneDX 1.6 AI ModelCards, enabling portable AI Bills of Materials that inventory models, dependencies, provenance, licensing, and related metadata within existing SBOM workflows. The integration addresses enterprise security, compliance, and visibility gaps across AI supply chains. ### Source excerpt Enterprises face a critical visibility gap in AI models, creating security and compliance risks. Evo's new integration with CycloneDX 1.6 delivers intelligent, actionable AI-BOMs, providing complete oversight and robust governance for your entire AI supply chain. ## Working with government and industry to put open source security tooling into practice DevFeed: [Working with government and industry to put open source security tooling into practice]() Original publisher: [Read original article]() Published: 2023-09-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [open-source-security](), [software bill of materials](), [supply-chain-security](), [Tooling](), [cisa](), [Docker Hardened Images]() Tags: [bombshell](), [chainguard](), [cisa](), [cyclonedx](), [open-source](), [open-source-security](), [protobom](), [sbom](), [security](), [software-bill-of-materials](), [software-supply-chain-security](), [spdx](), [vex]() ### AI overview Chainguard describes two open-source SBOM tools developed with the U.S. Department of Homeland Security and other startups: protobom, which translates SBOM data between formats, and bomshell, which combines and composes SBOMs. The initiative aims to improve software supply chain security and visibility. ### Source excerpt Pioneering SBOM tools with government and industry allies, Chainguard advances open source security measures. ## Can Protobom end the SBOM format wars? DevFeed: [Can Protobom end the SBOM format wars?]() Original publisher: [Read original article]() Published: 2023-07-31T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Open Source](), [Library](), [open-source-security]() Tags: [cisa](), [collaboration](), [cyclonedx](), [library](), [open-source](), [protobom](), [pull-requests](), [sbom](), [sboms](), [security](), [software-bill-of-materials](), [software-supply-chain](), [software-supply-chain-security](), [spdx]() ### AI overview The article presents Protobom as an open source library designed to reduce the importance of choosing among SBOM formats. It provides a format-neutral representation of SBOM package and file data and translates that data between popular formats, allowing teams to focus more on software supply chain security. ### Source excerpt Probe the SBOM format wars: Can ProtoBOM herald a new era of consensus? Chainguard weighs in. ## Chainguard to accelerate VEX adoption through OpenVEX specification DevFeed: [Chainguard to accelerate VEX adoption through OpenVEX specification]() Original publisher: [Read original article]() Published: 2023-01-31T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [openvex](), [chainguard](), [supply-chain-security](), [anchore](), [Vulnerabilities]() Tags: [anchore](), [chainguard](), [chainguard-images](), [cyclonedx](), [false-positives](), [google](), [images](), [linux-foundation](), [openvex](), [sbom-vex](), [scanners](), [security](), [software-supply-chain](), [spdx](), [supply-chain](), [vex](), [vulnerabilities](), [vulnerability](), [vulnerability-tool](), [wolfi]() ### AI overview Chainguard announces the OpenVEX specification and reference toolchain, developed with industry and CISA VEX Working Group collaboration. OpenVEX helps software producers describe vulnerability exploitability and enables consumers to filter false positives, complementing SBOMs. ### Source excerpt VEX needs the industry to come together to build formats that integrate into existing practices. OpenVEX enables organizations to put VEX into practice.