# melange Published articles for melange. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Chainguard patches 3 "silent" Golang CVEs in under 24 hours DevFeed: [Chainguard patches 3 "silent" Golang CVEs in under 24 hours]() Original publisher: [Read original article]() Published: 2024-03-21T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Vulnerabilities](), [Go](), [chainguard images](), [Security](), [Automation](), [toolchain](), [DDoS](), [Monitoring](), [Open Source](), [Pull Request](), [Linux]() Tags: [automation](), [chainguard](), [chainguard-images](), [cve](), [cves](), [ddos](), [github](), [go](), [golang](), [golang-patch](), [linux](), [melange](), [merge](), [monitoring](), [safe-source-for-open-source](), [security](), [silent-cve](), [tooling](), [wolfi]() ### AI overview Chainguard describes how it patched three Golang CVEs in under 24 hours. Its automation monitored new Go releases, opened a pull request, rebuilt the Wolfi package, and updated Chainguard Images containing Go. ### Source excerpt See how Chainguard swiftly patched three Golang CVEs in under 24 hours, showcasing rapid response and dedication to secure software. ## Reimagining the Linux distro with Wolfi DevFeed: [Reimagining the Linux distro with Wolfi]() Original publisher: [Read original article]() Published: 2024-02-21T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Linux](), [chainguard](), [container-security](), [Security](), [Package Management](), [APK](), [Open Source]() Tags: [apk](), [apko](), [chainguard](), [chainguard-images](), [container-security](), [cve](), [linux](), [melange](), [open-source](), [package-management](), [secure-container-images](), [security](), [vulnerabilities](), [wolfi]() ### AI overview The article explains why Chainguard created Wolfi, a minimal Linux distribution designed for modern container use. It describes the roles of Melange for building APK packages and Apko for assembling reproducible container images, along with Wolfi's security advisory and vulnerability-management capabilities. ### Source excerpt Discover Wolfi: Chainguard's answer to modern container security, creating minimal, secure Linux distributions for today's needs. ## Wolfi's approach to container security and CVE management DevFeed: [Wolfi's approach to container security and CVE management]() Original publisher: [Read original article]() Published: 2024-02-08T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [Containers](), [open-source-security](), [Security](), [Open Source]() Tags: [apko](), [container-security](), [cve](), [cve-management](), [melange](), [oci](), [secure-images](), [secure-software-supply-chain](), [security](), [software-supply-chain](), [wolfi]() ### AI overview The article explains how Wolfi, a secure-by-default undistro, supports container security by helping create minimal, reproducible OCI-compliant images and reducing software supply chain risks. It also describes how Wolfi powers Chainguard Images. ### Source excerpt Discover Wolfi, the 'secure-by-default' undistro for container security, enhancing open-source software with minimal CVE counts and robust protection. ## Wolfi: a new paradigm in Linux for containers DevFeed: [Wolfi: a new paradigm in Linux for containers]() Original publisher: [Read original article]() Published: 2024-01-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Linux](), [Containers](), [Package Management](), [container images](), [Security]() Tags: [apk](), [apko](), [chainguard](), [chainguard-images](), [containers](), [linux](), [melange](), [package-management](), [security](), [wolfi]() ### AI overview Wolfi is a minimal Linux distribution designed for containerized applications. The article describes its focus on efficiency, security, rapid updates, reproducible APK-based package management, and container image creation through melange and apko. ### Source excerpt Wolfi is a Linux distribution built specifically for containerized applications. See how it can speed up your development process. ## Building minimal, up-to-date cloud images with Wolfi DevFeed: [Building minimal, up-to-date cloud images with Wolfi]() Original publisher: [Read original article]() Published: 2023-12-15T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Cloud](), [container images](), [supply-chain-security](), [Open Source](), [Tooling](), [DevOps]() Tags: [apk](), [apko](), [architecture](), [chainguard-academy](), [cloud](), [common-vulnerabilities-and-exposures](), [container](), [container-images](), [devops](), [efficiency](), [kubecon-na](), [melange](), [minimalism](), [open-source](), [os](), [packages](), [security](), [software-supply-chain-security](), [supply-chain-security](), [vulnerabilities](), [wolfi]() ### AI overview The article introduces Wolfi, an open source project for building minimal, up-to-date cloud and container images. It explains how Wolfi's security-first architecture, proactive updates, minimalism, and supporting tools such as melange, apko, and apk help reduce attack surfaces and CVE exposure while improving software supply chain security. ### Source excerpt Discover Wolfi OS: Crafting minimal, always up-to-date cloud images for superior security and efficiency in the cloud. ## Small octopus and a big idea: The story of how a one-year old Linux un-distro is improving the cloud's software supply chain DevFeed: [Small octopus and a big idea: The story of how a one-year old Linux un-distro is improving the cloud's software supply chain]() Original publisher: [Read original article]() Published: 2023-09-27T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Linux](), [supply-chain-security](), [Cloud Native Ecosystem](), [Open Source](), [GitHub Actions](), [vulnerability]() Tags: [apko](), [chainguard-images](), [cloud-native](), [containers](), [github-actions](), [linux](), [melange](), [open-source](), [software-supply-chain](), [software-supply-chain-security](), [vulnerability](), [wolfi]() ### AI overview Chainguard reviews Wolfi's first year as a minimal Linux un-distro focused on rapid package updates, fast CVE remediation, and cloud-native software supply chain security. The article reports package, repository, contributor, update-interval, and vulnerability-scanning milestones, and describes Wolfi's rolling-release approach and wolfi-act integration with GitHub Actions. ### Source excerpt Explore Wolfi's journey: A Linux un-distro revolutionizing cloud-native development with agile updates for robust software security. ## How to use Dockerfiles with wolfi-base images DevFeed: [How to use Dockerfiles with wolfi-base images]() Original publisher: [Read original article]() Published: 2023-09-14T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [Dockerfile](), [Docker](), [chainguard images](), [distroless](), [container images](), [Linux](), [Go]() Tags: [apko](), [base-images](), [chainguard-images](), [container-images](), [distroless](), [docker](), [docker-hub](), [dockerfiles](), [go](), [guide](), [how-to](), [melange](), [wolfi]() ### AI overview This tutorial explains how to use Dockerfiles with Chainguard wolfi-base and other Chainguard Images. It covers minimal static images, glibc-dynamic images, multi-stage builds, package management, and selecting image variants based on application dependencies and runtime needs. ### Source excerpt Your guide to leveraging Dockerfiles with Wolfi-base images for hardened container images. ## apko: a year later DevFeed: [apko: a year later]() Original publisher: [Read original article]() Published: 2023-02-28T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Development](), [Package manager](), [supply-chain-security](), [chainguard images](), [Unix](), [YAML](), [Terraform]() Tags: [alpine](), [apk](), [apko](), [chainguard](), [chainguard-enforce](), [chainguard-images](), [cloud-native](), [development](), [distroless](), [golang](), [linux](), [macos](), [melange](), [secure-software-supply-chain](), [terraform-provider](), [wolfi](), [yaml]() ### AI overview This article reviews apko one year after its public release. It describes apko's native Go implementation of the apk package manager, which runs on UNIX-like systems including macOS and BSDs, and explains how its declarative YAML interface helped support an ecosystem that includes Chainguard Images, Melange, Wolfi, and a Terraform provider. The article presents apko as a foundation for secure software supply chains through images-as-code and frequent image rebuilds. ### Source excerpt Dive in to apko and learn more about the project; where it's been in the past year, and where it's going. ## Make SBOMs, not GuessBOMs: Why we need to shift left on SBOM generation DevFeed: [Make SBOMs, not GuessBOMs: Why we need to shift left on SBOM generation]() Original publisher: [Read original article]() Published: 2023-01-26T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [software bill of materials](), [supply-chain-security](), [software dark matter](), [vulnerability management](), [Reverse Engineering](), [Containers]() Tags: [apko](), [chainguard-images](), [container-security](), [guessbom](), [melange](), [reverse-engineering](), [sbom](), [sboms](), [sca](), [shift-left](), [software-composition-analysis](), [software-dark-matter](), [software-supply-chain](), [vulnerability]() ### AI overview The article argues that SBOMs generated after a build by software composition analysis tools can be incomplete because they may miss components that bypass recorded metadata, such as files copied through Dockerfiles. It presents build-time generation as a better way to produce complete SBOMs and describes untracked files as software dark matter, which can make post-build SBOMs closer to best guesses than reliable inventories. ### Source excerpt GuessBOMs, SBOMs generated by reverse-engineering software artifacts, have severe limitations. The optimal point for generating complete SBOMs is at build time.