# federal compliance

Published articles for federal compliance.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Canada's CPCSC and Bill C-8 are coming. Here's what you need to do.

DevFeed: [Canada's CPCSC and Bill C-8 are coming. Here's what you need to do.](<https://devfeed.tech/articles/canada-s-cpcsc-and-bill-c-8-are-coming-here-s-what-you-need-to-do-12917.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/canadas-cpcsc-and-bill-c-8-are-coming-heres-what-you-need-to-do>)

Published: 2026-05-14T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Critical Infrastructure](<https://devfeed.tech/topics/critical-infrastructure.md>), [Security](<https://devfeed.tech/topics/security.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Cloud Native Ecosystem](<https://devfeed.tech/topics/cloud-native-ecosystem.md>)

Tags: [bill-c-8](<https://devfeed.tech/tags/bill-c-8.md>), [canada-cmmc](<https://devfeed.tech/tags/canada-cmmc.md>), [canadian-program-for-cyber-security-certification](<https://devfeed.tech/tags/canadian-program-for-cyber-security-certification.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-libraries](<https://devfeed.tech/tags/chainguard-libraries.md>), [cmmc](<https://devfeed.tech/tags/cmmc.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [containers](<https://devfeed.tech/tags/containers.md>), [cpcsc](<https://devfeed.tech/tags/cpcsc.md>), [critical-infrastructure](<https://devfeed.tech/tags/critical-infrastructure.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [federal-compliance](<https://devfeed.tech/tags/federal-compliance.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [nist](<https://devfeed.tech/tags/nist.md>), [zero-cve-containers](<https://devfeed.tech/tags/zero-cve-containers.md>)

### AI overview

This article explains Canada's Canadian Program for Cyber Security Certification (CPCSC) and Bill C-8, focusing on the implications for defence suppliers and organizations in critical infrastructure. It describes the CPCSC as a mandatory cybersecurity certification regime, compares its technical basis with CMMC and NIST Special Publications 800-171 and 800-172, and outlines why organizations should prepare for Level 1 requirements. The article also describes how Chainguard can help Canadian defence suppliers meet those requirements with secure, zero-CVE containers.

### Source excerpt

CPCSC compliance is coming fast. Learn how Chainguard helps Canadian defence suppliers meet Level 1 requirements with secure, zero-CVE containers.

## Chainguard + Second Front: A faster, more secure path into government markets

DevFeed: [Chainguard + Second Front: A faster, more secure path into government markets](<https://devfeed.tech/articles/chainguard-second-front-a-faster-more-secure-path-into-government-markets-12980.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-second-front-a-faster-more-secure-path-into-government-markets>)

Published: 2026-02-20T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [chainguard containers](<https://devfeed.tech/topics/chainguard-containers.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [DevSecOps](<https://devfeed.tech/topics/devsecops.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-for-compliance](<https://devfeed.tech/tags/chainguard-for-compliance.md>), [cmmc](<https://devfeed.tech/tags/cmmc.md>), [container-image-compliance](<https://devfeed.tech/tags/container-image-compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cve-remediation](<https://devfeed.tech/tags/cve-remediation.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [federal-compliance](<https://devfeed.tech/tags/federal-compliance.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [government](<https://devfeed.tech/tags/government.md>), [iso](<https://devfeed.tech/tags/iso.md>), [provenance](<https://devfeed.tech/tags/provenance.md>), [sbom](<https://devfeed.tech/tags/sbom.md>), [second-front-systems](<https://devfeed.tech/tags/second-front-systems.md>), [secure-by-default](<https://devfeed.tech/tags/secure-by-default.md>), [secure-by-design](<https://devfeed.tech/tags/secure-by-design.md>), [security](<https://devfeed.tech/tags/security.md>), [soc-2](<https://devfeed.tech/tags/soc-2.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>)

### AI overview

Chainguard and Second Front are partnering to help software companies pursue federal market requirements, including FedRAMP authorization and DoD impact-level accreditations. The article describes combining Chainguard's hardened container images with Second Front's Game Warden DevSecOps platform to support secure application delivery and vulnerability reduction.

### Source excerpt

Discover how Chainguard and Second Front are partnering to help build a secure path into government markets for your organization.

## Forging Ahead in Federal Compliance: Chainguard's FIPS 140-3 and 186-5 Milestones

DevFeed: [Forging Ahead in Federal Compliance: Chainguard's FIPS 140-3 and 186-5 Milestones](<https://devfeed.tech/articles/forging-ahead-in-federal-compliance-chainguard-s-fips-140-3-and-186-5-milestones-13048.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/forging-ahead-in-federal-compliance-chainguards-fips-140-3-and-186-5-milestones>)

Published: 2025-06-06T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Security](<https://devfeed.tech/topics/security.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [interoperability](<https://devfeed.tech/topics/interoperability.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [digital-signature](<https://devfeed.tech/tags/digital-signature.md>), [ed25519](<https://devfeed.tech/tags/ed25519.md>), [federal-compliance](<https://devfeed.tech/tags/federal-compliance.md>), [federal-information-processing-standards](<https://devfeed.tech/tags/federal-information-processing-standards.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-140-3](<https://devfeed.tech/tags/fips-140-3.md>), [fips-validation](<https://devfeed.tech/tags/fips-validation.md>), [nist](<https://devfeed.tech/tags/nist.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [security](<https://devfeed.tech/tags/security.md>), [signing](<https://devfeed.tech/tags/signing.md>), [standards](<https://devfeed.tech/tags/standards.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

Chainguard FIPS container images are being upgraded to support current FIPS 140-3 and FIPS 186-5 standards, including OpenSSL with FIPS 140-3 validation and Ed25519 signing support.

### Source excerpt

Chainguard FIPS images have been upgraded to start using the OpenSSL project 3.1.2 module with FIPS 140-3 validation. Learn more about what this means.

## Navigating FedRAMP compliance: Essential insights and practical advice

DevFeed: [Navigating FedRAMP compliance: Essential insights and practical advice](<https://devfeed.tech/articles/navigating-fedramp-compliance-essential-insights-and-practical-advice-13168.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/navigating-fedramp-compliance-essential-insights-and-practical-advice>)

Author: Unlocking FedRAMP authorization

Published: 2024-09-05T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Requirements](<https://devfeed.tech/topics/requirements.md>), [audit](<https://devfeed.tech/topics/audit.md>), [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>)

Tags: [ask-sage](<https://devfeed.tech/tags/ask-sage.md>), [ceo](<https://devfeed.tech/tags/ceo.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [federal-compliance](<https://devfeed.tech/tags/federal-compliance.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [open-source-software](<https://devfeed.tech/tags/open-source-software.md>), [recommendations](<https://devfeed.tech/tags/recommendations.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This article recaps expert perspectives on navigating FedRAMP compliance, including defining system requirements, planning engineering workloads and deadlines, addressing vulnerability remediation, selecting sponsors, and obtaining authorization for cloud services. It also discusses adapting to FedRAMP Rev. 5 and integrating open source tools.

### Source excerpt

Gain essential insights and practical advice on navigating FedRAMP compliance from industry experts including how to integrate open source tools.

## Streamline your FedRAMP certification with this container security checklist

DevFeed: [Streamline your FedRAMP certification with this container security checklist](<https://devfeed.tech/articles/streamline-your-fedramp-certification-with-this-container-security-checklist-13240.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/streamline-your-fedramp-certification-with-this-container-security-checklist>)

Published: 2024-02-15T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [container-security](<https://devfeed.tech/topics/container-security.md>), [Docker Hardened Images](<https://devfeed.tech/topics/docker-hardened-images.md>), [Security & compliance, Cloud security](<https://devfeed.tech/topics/security-compliance-cloud-security.md>), [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [sdlc](<https://devfeed.tech/topics/sdlc.md>)

Tags: [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [federal-compliance](<https://devfeed.tech/tags/federal-compliance.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [sdlc](<https://devfeed.tech/tags/sdlc.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

### AI overview

This article presents a preview of a container security checklist for organizations pursuing FedRAMP certification. It covers asset management, container supply-chain hardening, and continuous vulnerability management within the accreditation boundary.

### Source excerpt

Explore our FedRAMP container security compliance checklist. Tailored for CISOs and developers, it simplifies FedRAMP certification, ensuring robust compliance.