# open source software security Published articles for open source software security. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Why Chainguard's Full-Stack Approach to Secure Software Supply Chain Is Built to Scale DevFeed: [Why Chainguard's Full-Stack Approach to Secure Software Supply Chain Is Built to Scale]() Original publisher: [Read original article]() Published: 2025-07-09T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard os](), [chainguard](), [Open Source]() Tags: [automated](), [chainguard](), [chainguard-factory](), [chainguard-os](), [cve](), [dependencies](), [open-source-artifacts](), [open-source-software-security](), [provenance](), [reproducibility](), [secure-software](), [secure-software-supply-chain](), [software-supply-chain](), [supply-chain-security]() ### AI overview The article presents Chainguard's integrated approach to software supply chain security, combining Chainguard OS with the Chainguard Factory. It describes reproducible source builds, incremental updates, traceable contents, verifiable metadata, and automated maintenance of open source artifacts. ### Source excerpt Learn how Chainguard OS and the Chainguard Factory delivers the only scalable path to secure, reliable software artifacts. ## Our approach to continuous documentation for Chainguard Images DevFeed: [Our approach to continuous documentation for Chainguard Images]() Original publisher: [Read original article]() Published: 2024-01-24T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Documentation](), [chainguard images](), [container images](), [chainguard](), [PHP](), [GitHub Actions](), [YAML](), [JSON](), [Terraform]() Tags: [chainguard](), [chainguard-images](), [container-images](), [devops](), [documentation](), [github-actions](), [json](), [open-source-software-security](), [oss](), [php](), [refactoring](), [terraform](), [yaml]() ### AI overview This article explains Chainguard's Autodocs system for continuously generating documentation for Chainguard Images. The workflow uses image metadata, README files, PHP, GitHub Actions, JSON caches, and the Chainguard Registry to generate approximately 1,600 Markdown pages for about 500 images at each run. ### Source excerpt Elevate your DevOps with Chainguard's Autodocs: Continuous, automated documentations for secure container images made easy. ## Software development security redefined: Sourcegraph's story DevFeed: [Software development security redefined: Sourcegraph's story]() Original publisher: [Read original article]() Published: 2023-12-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [supply-chain-security](), [chainguard images](), [open-source-security](), [chainguard](), [software bill of materials]() Tags: [chainguard](), [chainguard-images](), [customer-story](), [cve](), [open-source-software-security](), [software-bill-of-materials](), [software-supply-chain-security](), [sourcegraph](), [vulnerability-management]() ### AI overview This customer story describes how Sourcegraph used Chainguard Images, built on Wolfi OS, together with OpenVEX and SBOMs to simplify vulnerability management and strengthen software supply chain security. The article states that Sourcegraph achieved zero known vulnerabilities in a short timespan. ### Source excerpt Sourcegraph's story: leveraging Chainguard's technology for streamlined software development and heightened security. ## Application and AI roundup - September DevFeed: [Application and AI roundup - September]() Original publisher: [Read original article]() Author: Adam Published: 2023-10-04T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [Application Security](), [Memory Safety](), [c/c++](), [open-source-security](), [Zig](), [Artificial Intelligence](), [cisa]() Tags: [appsec](), [c-c-plus-plus](), [c-plus-plus](), [cybersecurity](), [development](), [memory-safety](), [open-source-software-security]() ### AI overview A September roundup covering application security developments involving memory safety, C and C++, Zig, hardware memory tagging, secure-by-design AI guidance, cybersecurity policy for medical devices, and open-source software security. ### Source excerpt September was a big month in appsec for both memory safety and policy ## Chainguard Announces Participation in Hacker Summer Camp Security Conferences DevFeed: [Chainguard Announces Participation in Hacker Summer Camp Security Conferences]() Original publisher: [Read original article]() Published: 2023-08-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Cybersecurity](), [supply-chain-security](), [open-source-security](), [container-security](), [software composition analysis]() Tags: [black-hat](), [chainguard](), [container-security](), [cybersecurity](), [defcon](), [open-source-software-security](), [sboms](), [sca]() ### AI overview Chainguard announces its participation in BSides, Black Hat, and DEFCON in Las Vegas, including a talk on limitations of software composition analysis and software bills of material in vulnerability management. ### Source excerpt Join the Hacker Summer Camp: A hub for cybersecurity enthusiasts to explore, learn, and collaborate on cutting-edge security strategies. ## Open source software takes center stage at RSA DevFeed: [Open source software takes center stage at RSA]() Original publisher: [Read original article]() Published: 2023-04-24T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [open-source-security](), [supply-chain-security](), [Open Source](), [npm](), [sigstore](), [Python](), [OpenID connect (OIDC)](), [Kubernetes]() Tags: [npm](), [oidc](), [open-source-software](), [open-source-software-security](), [openid-connect](), [python](), [security](), [sigstore](), [software-supply-chain](), [software-supply-chain-security]() ### AI overview The article examines why open-source software security became a major topic at the 2023 RSA Conference. It discusses software supply-chain risks, including the Log4j exploit, and highlights package provenance in npm, Sigstore-based signing and verification, and trusted publishers using OpenID Connect in PyPI. ### Source excerpt Open source software security takes center stage in the 2023 RSA Trends Report. Learn why it's a top concern. ## OSS Security: Chainguard Spring 2023 update DevFeed: [OSS Security: Chainguard Spring 2023 update]() Original publisher: [Read original article]() Published: 2023-03-22T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [open-source-security](), [supply-chain-security](), [Open Source](), [Security](), [software bill of materials]() Tags: [chainguard](), [cloud-native](), [cloud-native-security-con](), [fosdem](), [foss](), [gitops](), [kubecon-eu](), [kubernetes](), [open-source-software](), [open-source-software-security](), [openssf](), [oss](), [sigstore](), [software-bill-of-materials](), [software-supply-chain](), [supply-chain-security]() ### AI overview Chainguard's Spring 2023 update describes its involvement in open-source software security during the first part of 2023. It covers community leadership, conference talks and workshops, software freedom advocacy, and efforts to make software bills of materials useful and widely adopted for supply-chain security. ### Source excerpt Chainguard believes open source is important and we mean it. Check out how we've been involved in OSS Security in the first part of 2023.