# fips Published articles for fips. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## FIPS 140-3 support in OpenSearch DevFeed: [FIPS 140-3 support in OpenSearch]() Original publisher: [Read original article]() Author: Karsten Schnitter Published: 2026-09-16T19:12:14Z Content type: article Language: en Sources: [OpenSearch]() Topics: [fips 140-3](), [opensearch](), [Cryptography](), [Encryption](), [Security]() Tags: [aws](), [blog](), [compliance](), [cryptography](), [encryption](), [fips](), [fips-140-3](), [opensearch](), [security](), [technical]() ### AI overview This post explains OpenSearch support for a FIPS 140-3-compliant mode starting with version 3.6. It describes the validated cryptographic modules used for security-relevant operations, the collaboration involving SAP, SAS, and AWS, and how native FIPS mode differs from using a FIPS-validated TLS-terminating proxy. ### Source excerpt OpenSearch now supports running in a mode compliant with FIPS 140-3, contributed through a multi-year collaboration between SAP, SAS, and AWS. The post FIPS 140-3 support in OpenSearch appeared first on OpenSearch. ## FIPS 140-2 vs FIPS 140-3, Explained DevFeed: [FIPS 140-2 vs FIPS 140-3, Explained]() Original publisher: [Read original article]() Author: info@goteleport.com (Mayur Pipaliya) Published: 2026-09-09T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [fips 140-3](), [FIPS validation](), [Cryptography](), [Encryption](), [certificates](), [Security](), [Cloud]() Tags: [certificates](), [cloud](), [cmvp](), [cryptography](), [encryption](), [fedramp](), [fips](), [fips-140-3](), [fips-validation](), [security](), [sensitive-data]() ### AI overview This article explains the differences between FIPS 140-2 and FIPS 140-3, including the standards' origins, CMVP validation certificates, applicable requirements for protecting sensitive data, and the transition timeline through September 2026. ### Source excerpt Understand key changes from FIPS 140-2 to FIPS 140-3. ## Announcing Chainguard container images for Go 1.27 DevFeed: [Announcing Chainguard container images for Go 1.27]() Original publisher: [Read original article]() Published: 2026-08-31T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [container images](), [Go Language](), [Cryptography](), [Deployment](), [Security, Privacy and Abuse Prevention](), [Post-Quantum]() Tags: [chainguard](), [container](), [container-images](), [cryptography](), [deployment](), [fedramp](), [fedramp-ato](), [fips](), [go](), [hardening](), [images](), [post-quantum](), [release]() ### AI overview Chainguard announces three Go 1.27 container images: go, go-fips, and go-openssl-fips. The options differ in their FIPS-validated cryptography, including whether cryptography is built in or selected at deployment time. ### Source excerpt Chainguard simplifies Go 1.27 with three images and a new option to choose FIPS-validated cryptography at deployment without recompiling. ## Announcing Oracle Jipher 10.37: FIPS 140-3 Cryptography for Java DevFeed: [Announcing Oracle Jipher 10.37: FIPS 140-3 Cryptography for Java]() Original publisher: [Read original article]() Author: Poonam Parhar Published: 2026-08-25T00:00:00Z Content type: release Language: en Sources: [Inside Java]() Topics: [Cryptography](), [fips 140-3](), [openssl](), [Java](), [Encryption](), [Security, Privacy and Abuse Prevention]() Tags: [cryptographic](), [cryptography](), [fips](), [fips-140-3](), [java](), [openssl](), [oracle](), [security](), [standard]() ### AI overview Oracle Jipher 10 packages a FIPS 140-3 validated OpenSSL cryptographic module and exposes cryptographic services through Java Cryptography Architecture (JCA). ### Source excerpt Oracle Jipher 10 packages a FIPS 140-3 validated OpenSSL cryptographic module, making cryptographic services available through the standard Java Cryptography Architecture (JCA) framework. ## Adopt hardened containers without changing your pipelines, tooling, or environment DevFeed: [Adopt hardened containers without changing your pipelines, tooling, or environment]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [chainguard containers](), [Security](), [Deployment](), [Tooling]() Tags: [chainguard](), [chainguard-containers](), [chainguard-redhat-rpm](), [cmvp](), [compliance](), [containers](), [cyclonedx](), [dependabot](), [deployment](), [fips](), [hardened-containers](), [provenance](), [rhel](), [rhel-10](), [rhel-9](), [rpm-10](), [rpm-9](), [sboms](), [secure-by-default](), [security](), [vulnerabilities]() ### AI overview Chainguard announces updates to Chainguard Containers that support enterprise adoption of hardened images without changing existing pipelines, tooling, or environments. The updates include RPM support for RHEL 9 and RHEL 10, compatible image tags, a CMVP-validated Go Geomys FIPS image, Dependabot support for private registries, and flattened CycloneDX SBOMs for compliance tools. ### Source excerpt Chainguard expands Containers with RPM support, FIPS enhancements, and easier migrations, bringing secure-by-default software to enterprise workflows. ## Chainguard EKS add-ons are now available in the AWS Marketplace DevFeed: [Chainguard EKS add-ons are now available in the AWS Marketplace]() Original publisher: [Read original article]() Published: 2026-04-30T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Amazon EKS](), [aws-marketplace](), [chainguard](), [Security](), [supply-chain-security](), [Image](), [Containers]() Tags: [aws-eks-add-ons](), [aws-marketplace](), [chainguard](), [chainguard-aws](), [chainguard-containers](), [chainguard-eks-add-ons](), [compliance](), [eks-add-ons](), [fips](), [fips-140-3](), [kubernetes](), [security](), [software-supply-chain]() ### AI overview Chainguard announces that its EKS add-ons are available in AWS Marketplace. The five add-ons provide networking, DNS, storage, and traffic-management components, with zero-known-CVE images and FIPS 140-3 validation for organizations that need greater control over security and compliance. ### Source excerpt Chainguard delivers zero-CVE, FIPS 140-3 EKS add-ons on AWS Marketplace, simplifying secure Kubernetes for regulated environments with full control. ## CMMC Phase 2, explained: Requirements, deadlines, and who's affected DevFeed: [CMMC Phase 2, explained: Requirements, deadlines, and who's affected]() Original publisher: [Read original article]() Published: 2026-04-29T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Cybersecurity](), [Security & Privacy](), [Cryptography](), [vulnerability management](), [vulnerability scanning](), [Encryption](), [MFA]() Tags: [certificates](), [cmmc](), [cmmc-container-images](), [cmmc-phase-2](), [cmvp](), [compliance](), [cve](), [cybersecurity-maturity-model-certification](), [fips](), [nist](), [sboms](), [stig](), [stigs](), [supply-chain](), [u-s-dod](), [vulnerability-management](), [vulnerability-scanning]() ### AI overview This article explains the requirements, deadlines, and scope of CMMC Phase 2. It describes the CMMC Level 2 certification requirements for organizations handling Controlled Unclassified Information or supporting Department of Defense and certain civilian agency contracts, including MFA, encryption, vulnerability scanning, supported systems, independent assessments, and compliance documentation. ### Source excerpt CMMC Phase 2 and NIST 800-171 are here. Learn how Chainguard helps teams meet compliance with FIPS, STIGs, and zero-CVE containers. ## Owning the boundary: Introducing the Chainguard FIPS Provider for OpenSSL 3.4.0 DevFeed: [Owning the boundary: Introducing the Chainguard FIPS Provider for OpenSSL 3.4.0]() Original publisher: [Read original article]() Published: 2026-03-11T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Cryptography](), [container images](), [Security](), [Vulnerabilities]() Tags: [2026](), [chainguard](), [chainguard-containers](), [chainguard-fips](), [chainguard-fips-images](), [cmvp](), [compliance](), [container-images](), [cryptographic](), [cve-remediation](), [fips](), [fips-containers](), [open-ssl-3-4-0](), [updates](), [vulnerabilities]() ### AI overview Chainguard announces the Chainguard FIPS Provider for OpenSSL 3.4.0, validated under CMVP certificate #5132. Beginning March 17, 2026, Chainguard FIPS container images will upgrade to it. The article explains that owning the validated cryptographic module lets Chainguard remediate vulnerabilities within the validated boundary and manage the required resubmission process without depending on third parties. ### Source excerpt Chainguard is the first and only to FIPS-validate OpenSSL 3.4, owning the validated cryptographic module that powers our FIPS images. ## FIPS-ing the Un-FIPS-able: Apache Kafka DevFeed: [FIPS-ing the Un-FIPS-able: Apache Kafka]() Original publisher: [Read original article]() Published: 2026-03-05T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Apache-Kafka](), [chainguard](), [Cryptography](), [Security](), [Event-Streaming](), [TLS (Transport Layer Security)](), [Open Source]() Tags: [apache](), [apache-kafka](), [apache-kafka-fips](), [chainguard](), [chainguard-containers](), [chainguard-images](), [chainguard-kafka-container](), [chainguard-kafka-image](), [cryptography](), [event-streaming](), [fips](), [fips-140-3](), [fips-containers](), [kafka](), [open-source](), [tls]() ### AI overview Chainguard announces FIPS-validated images for Apache Kafka, describing targeted source changes, validated cryptographic providers, TLS and keystore requirements, testing, and image maintenance for regulated environments. ### Source excerpt Chainguard delivers the FIPS-validated Apache Kafka images, enabling secure event streaming for FedRAMP and regulated environments. ## Chainguard FIPS enters 2026 with OpenSSL 3.1.2 and better CMVP visibility DevFeed: [Chainguard FIPS enters 2026 with OpenSSL 3.1.2 and better CMVP visibility]() Original publisher: [Read original article]() Published: 2026-01-07T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Docker Hardened Images](), [Cryptography](), [Security, Privacy and Abuse Prevention](), [container images]() Tags: [2026](), [chainguard](), [chainguard-containers](), [chainguard-fips](), [cmvp](), [cmvp-sboms](), [fips](), [fips-140-3](), [fips-compliance](), [fips-containers](), [fips-validation](), [openssl](), [sboms](), [validation]() ### AI overview Chainguard updates its FIPS container images to use the Chainguard FIPS provider for OpenSSL 3.1.2, identified by CMVP certificate #5102. The images now expose CMVP and entropy certification numbers through SBOM packages, while future OpenSSL 3.4 and 3.6 upgrades remain under coordination and review with NIST. ### Source excerpt We updated our FIPS container images with OpenSSL 3.1.2 (CMVP #5102), clearer CMVP visibility in SBOMs, and a roadmap for upcoming FIPS 140-3 cryptography. ## Chainguard's FIPS-validated, hardened VM images: compliance without the complexity DevFeed: [Chainguard's FIPS-validated, hardened VM images: compliance without the complexity]() Original publisher: [Read original article]() Published: 2025-11-20T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard vms](), [Security](), [Deployment](), [configuration]() Tags: [announce](), [benchmark](), [chainguard](), [chainguard-vm-images](), [chainguard-vms](), [compliance](), [deployment](), [fips](), [fips-140-3](), [fips-virtual-machine-images](), [fips-vms](), [secure-boot](), [security](), [stig](), [stig-hardening]() ### AI overview Chainguard announces compliance capabilities for Chainguard VMs, including FIPS 140-3-validated cryptography, DISA STIG hardening, CIS Benchmark Level 1 hardening, and Secure Boot enabled by default. The updates are intended to help regulated organizations deploy secure, audit-ready VM infrastructure while reducing the engineering effort required for compliance. ### Source excerpt Chainguard VM images are FIPS 140-3 validated, STIG-hardened, and CIS-compliant, giving regulated industries instant, secure, and audit-ready infrastructure. ## Chainguard + Booz Allen: Delivering Trusted Open-Source Software to U.S. Government Agencies DevFeed: [Chainguard + Booz Allen: Delivering Trusted Open-Source Software to U.S. Government Agencies]() Original publisher: [Read original article]() Published: 2025-10-15T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [container images](), [Containers](), [open-source-security](), [Vulnerabilities](), [Open Source](), [Security]() Tags: [announce](), [ato](), [booz-allen-hamilton](), [chainguard](), [chainguard-booz-partnership](), [chainguard-containers](), [chainguard-dod-partnership](), [chainguard-libraries](), [common-vulnerabilities-and-exposures](), [compliance](), [container-images](), [containers](), [engineering](), [fedramp](), [fips](), [government](), [hardened-containers](), [open-source](), [open-source-software](), [sboms](), [secure-by-default](), [secure-software](), [security](), [stateramp](), [supply-chain](), [vulnerabilities](), [zero-cve-container-images]() ### AI overview Chainguard and Booz Allen announced a partnership to help U.S. government agencies and defense programs secure software supply chains, reduce vulnerabilities, and accelerate compliance. The partnership combines Booz Allen's mission expertise with Chainguard's secure-by-default open-source software, including hardened containers that helped one defense-related program obtain authorization to operate in eight weeks. ### Source excerpt Chainguard and Booz Allen partner to help federal programs eliminate vulnerabilities, save engineering time, and accelerate compliance timelines. ## Announcing Kernel-Independent FIPS for Java DevFeed: [Announcing Kernel-Independent FIPS for Java]() Original publisher: [Read original article]() Published: 2025-08-14T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [Java](), [Cryptography](), [Cybersecurity](), [container images](), [Linux]() Tags: [amazon](), [ato](), [azure](), [chainguard](), [chainguard-containers](), [chainguard-fips-images](), [compliance](), [container-images](), [cos](), [cryptography](), [fedramp](), [fedramp-ato](), [fedramp-containers](), [fips](), [implementation](), [java](), [linux](), [nist](), [openssl](), [security]() ### AI overview Chainguard announces Kernel-Independent FIPS availability across its Java FIPS image catalog. The update uses FIPS-validated cryptography and validated userspace entropy, allowing Java FIPS workloads to run with any host kernel and on platforms including GKE with COS, Amazon Bottlerocket, Flatcar Linux, and Azure Linux. It is intended to simplify production deployment and accelerate FedRAMP authorization to operate. ### Source excerpt Kernel-Independent FIPS is now available across the full catalog of Chainguard FIPS images for Java, simplifying and accelerating compliance for FedRAMP ATO. ## FIPS-Validated Container Images: When, Where, and Why DevFeed: [FIPS-Validated Container Images: When, Where, and Why]() Original publisher: [Read original article]() Published: 2025-07-10T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Containers](), [Encryption](), [Cryptography](), [Security]() Tags: [chainguard](), [compliance](), [container-images](), [cryptography](), [encryption](), [fedramp](), [financial-services](), [fips](), [fips-validation](), [healthcare](), [nist](), [public-sector](), [security]() ### AI overview This article explains why FIPS-validated cryptography is required at the container image level for workloads subject to FedRAMP and NIST 800-53 requirements. It describes Chainguard's FIPS-validated container images, their cryptographic boundaries, and how they help organizations address compliance and authorization requirements in regulated environments. ### Source excerpt Chainguard's catalog of 1,400+ trusted container images includes 400+ FIPS-validated variants. ## Forging Ahead in Federal Compliance: Chainguard's FIPS 140-3 and 186-5 Milestones DevFeed: [Forging Ahead in Federal Compliance: Chainguard's FIPS 140-3 and 186-5 Milestones]() Original publisher: [Read original article]() Published: 2025-06-06T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [container images](), [Security](), [Testing](), [interoperability]() Tags: [chainguard](), [chainguard-containers](), [chainguard-fips](), [compliance](), [container-images](), [cryptographic](), [digital-signature](), [ed25519](), [federal-compliance](), [federal-information-processing-standards](), [fedramp](), [fips](), [fips-140-3](), [fips-validation](), [nist](), [openssl](), [security](), [signing](), [standards](), [validation]() ### AI overview Chainguard FIPS container images are being upgraded to support current FIPS 140-3 and FIPS 186-5 standards, including OpenSSL with FIPS 140-3 validation and Ed25519 signing support. ### Source excerpt Chainguard FIPS images have been upgraded to start using the OpenSSL project 3.1.2 module with FIPS 140-3 validation. Learn more about what this means. ## Chainguard Containers Enabled with PQC Support DevFeed: [Chainguard Containers Enabled with PQC Support]() Original publisher: [Read original article]() Published: 2025-06-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Post Quantum Cryptography (PQC)](), [Cryptography](), [TLS (Transport Layer Security)](), [Security, Privacy and Abuse Prevention](), [ssh](), [Internet Engineering Task Force (IETF)]() Tags: [chainguard-containers](), [compliance](), [cryptography](), [encryption](), [fips](), [ietf](), [nist](), [post-quantum-cryptography](), [post-quantum-cryptography-pqc](), [quantum](), [ssh](), [tls]() ### AI overview Chainguard Containers now support Post-Quantum Cryptography (PQC), including FIPS 203 ML-KEM and other algorithms used in TLS and SSH communications. The article explains the risks posed by quantum attacks and "harvest now, decrypt later" scenarios, and describes ongoing work toward FIPS-certified PQC implementations. ### Source excerpt Chainguard Containers support Post-Quantum Cryptography (PQC). Learn more about what PQC is, and what Chainguard is doing to offer it today. ## Implementing FIPS compliance in Redpanda DevFeed: [Implementing FIPS compliance in Redpanda]() Original publisher: [Read original article]() Author: Kavya Shivashankar Published: 2025-05-20T00:00:00Z Content type: tutorial Language: en Sources: [Redpanda]() Topics: [Security](), [Cryptography](), [Encryption](), [Command-line interface](), [Linux]() Tags: [clusters](), [command-line](), [compliance](), [crypto](), [deploying-fips-compliant-redpanda](), [encryption](), [fips](), [fips-140-2-compliance](), [fips-compliance-redpanda](), [fips-mode-redpanda-installation](), [fips-validation-for-cryptographic-modules](), [implementing-fips-in-redpanda](), [installation](), [k8s](), [openssl](), [openssl-3-0-9-fips](), [product](), [production](), [red-hat](), [redpanda-enterprise-security-features](), [redpanda-fips-compliant-cluster](), [redpanda-openssl-configuration](), [redpanda-security-standards](), [rhel](), [secure-redpanda-clusters](), [security](), [standards]() ### AI overview This tutorial explains FIPS requirements for cryptographic modules and how Redpanda supports FIPS-compliant operation. It covers validated OpenSSL libraries, FIPS mode settings, licensing, deployment limitations, and an example single-node cluster installation on RHEL. ### Source excerpt Redpanda now supports FIPS, so you can run our clusters in secure environments with strict federal security standards for crypto modules. ## Keycloak 26.2.2 released DevFeed: [Keycloak 26.2.2 released]() Original publisher: [Read original article]() Author: Keycloak Team Published: 2025-04-30T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [Authentication](), [ci](), [migration]() Tags: [bugs](), [changes](), [ci](), [cve](), [fips](), [idm](), [kerberos](), [keycloak](), [keycloak-release](), [ldap](), [migration](), [openid-connect](), [release](), [saml](), [sso](), [tests](), [timeout](), [verification]() ### AI overview Keycloak 26.2.2 was released on April 30, 2025. The release includes a configurable distribution startup timeout, CI FIPS crypto tests, and fixes for a two-factor authentication bypass and hostname verification issues. ### Source excerpt To download the release go to Keycloak downloads. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Enhancements #39142 Make distribution startup timeout configurable testsuite Bugs #39125 [Keycloak CI] - FIPS UT - Run crypto tests ci #39349 CVE-2025-3910 Two factor authentication bypass #39350 CVE-2025-3501 Keycloak hostname verification ## FIPS-ing the Un-FIPS-able: Apache Spark DevFeed: [FIPS-ing the Un-FIPS-able: Apache Spark]() Original publisher: [Read original article]() Published: 2025-04-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Apache Spark](), [chainguard](), [container images](), [Cryptography](), [data-processing](), [distributed-systems](), [Data Infrastructure](), [Cybersecurity]() Tags: [apache](), [apache-spark](), [chainguard](), [chainguard-containers](), [cloud-native](), [compliance](), [container-images](), [cryptography](), [cybersecurity](), [data-infrastructure](), [fedramp](), [fips](), [fraud-detection](), [open-source](), [real-time-data-streaming](), [recommendation-systems](), [spark](), [spark-operator]() ### AI overview Chainguard announces FIPS-validated container images for Apache Spark and Spark Operator, built entirely from source. The article explains the demand for FIPS-compatible Spark in regulated environments and describes the effort to overcome incompatibilities between Spark and FIPS-approved cryptographic libraries. ### Source excerpt Chainguard now offers FIPS-validated container images for Apache Spark and Spark Operator. See how we did it. ## FIPS-ing the Un-FIPS-able: Apache Cassandra DevFeed: [FIPS-ing the Un-FIPS-able: Apache Cassandra]() Original publisher: [Read original article]() Published: 2025-03-05T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Apache Cassandra](), [Cryptography](), [container images](), [Encryption](), [chainguard]() Tags: [apache](), [cassandra](), [chainguard](), [compliance](), [container-images](), [cryptography](), [encryption](), [fedramp](), [fips](), [security]() ### AI overview Chainguard announces FIPS-validated container images for Apache Cassandra 4.0, 4.1, and 5.0, built entirely from source. The work makes Cassandra deployable with FIPS-approved cryptography in regulated industries and government environments, helping customers strengthen software supply chains and meet compliance requirements. ### Source excerpt Chainguard was able to create FIPS container images for Apache Cassandra 4.0, 4.1, and 5.0. See how we did it. ## Enabling Secure Software Development in 2025 DevFeed: [Enabling Secure Software Development in 2025]() Original publisher: [Read original article]() Published: 2025-01-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [open-source-security](), [supply-chain-security](), [container images](), [Containers](), [vulnerability](), [DevOps]() Tags: [2025](), [chainguard](), [chainguard-customers](), [chainguard-images](), [container-images](), [fips](), [hardening](), [software-development](), [software-supply-chain](), [software-supply-chain-attack](), [vulnerability](), [zero-cves]() ### AI overview Chainguard describes its 2025 focus on scaling secure software development through a catalog of more than 1,000 container images, source-built components, daily rebuilding, automation, vulnerability remediation, and hardened images. The company reports patching more than 55,000 CVEs and saving customers over 200,000 engineering hours in 2024. ### Source excerpt Chainguard is building on the success they generated for their customers in 2024. Take a look back at the numbers, and see what's next for us and our users! ## FedRAMP vulnerability scanning requirements explained DevFeed: [FedRAMP vulnerability scanning requirements explained]() Original publisher: [Read original article]() Author: Can secure-by-default container images or VMs speed up FedRAMP authorization Published: 2024-11-21T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [vulnerability scanning](), [Vulnerabilities](), [Security](), [configuration](), [Containers]() Tags: [audits](), [authorization](), [automated](), [common-vulnerabilities-and-exposures](), [compliance](), [container-images](), [containers](), [cve](), [fedramp](), [fips](), [requirements](), [security](), [stigs](), [vulnerability-management](), [vulnerability-scanning]() ### AI overview This article explains FedRAMP vulnerability scanning requirements, including the required scan scope, recurring authenticated scans, reporting expectations, remediation timelines, and the role of scan data in continuous monitoring, authorization evidence, POA&Ms, and risk reviews. ### Source excerpt Understand FedRAMP vulnerability scanning rules, scope, and SLAs. Get compliance clarity and learn how to simplify audits. ## New Chainguard Images October 2024: Swift, Dart, and more DevFeed: [New Chainguard Images October 2024: Swift, Dart, and more]() Original publisher: [Read original article]() Published: 2024-11-14T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [container images](), [Swift](), [Dart]() Tags: [chainguard](), [chainguard-images](), [container-images](), [cve](), [dart](), [fips](), [jaeger](), [linkerd](), [swift](), [zero-cves]() ### AI overview Chainguard's October 2024 update announces 126 new CVE-free container images, including offerings for Swift, Dart, Linkerd, and Jaeger, along with new FIPS-enabled images and a notice about upcoming Developer tier changes. ### Source excerpt Go over all the new Chainguard container images released in October, including new offerings for Swift, Dart, Linkerd, Jaeger, and more. ## Kernel-Independent FIPS Images DevFeed: [Kernel-Independent FIPS Images]() Original publisher: [Read original article]() Published: 2024-11-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Linux](), [Security](), [Deployment](), [CI/CD]() Tags: [chainguard-fips](), [chainguard-fips-images](), [chainguard-images](), [ci-cd](), [compliance](), [container-images](), [federal-information-processing-standards](), [fedramp](), [fips](), [linux](), [security](), [zero-cves]() ### AI overview Chainguard FIPS Images can run on any Linux kernel by replacing the kernel entropy source with a userspace entropy source. This enables FIPS workloads on current kernels, hardware, instance types, developer machines, CI/CD deployments, and non-FIPS managed cloud offerings while supporting runtimes such as NodeJS, Python, Go, PHP, .NET, and C/C++. ### Source excerpt Chainguard's FIPS Images are available for deployment on any Linux kernel, thanks to some new innovation by our engineering team. Learn what this means. [Next page]()