# provenance Published articles for provenance. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Glyph: A Multi-Strategy Agentic System for Column Description and Sensitivity-Ontology Tagging of Enterprise Data Catalogs DevFeed: [Glyph: A Multi-Strategy Agentic System for Column Description and Sensitivity-Ontology Tagging of Enterprise Data Catalogs]() Original publisher: [Read original article]() Published: 2026-09-16T00:00:00Z Content type: article Language: en Sources: [Apple Machine Learning Research]() Topics: [data](), [Large Language Model](), [Code](), [Retrieval-Augmented Generation](), [Access Control](), [Graphs](), [GitHub]() Tags: [agents](), [classification](), [code](), [data](), [documentation](), [governance](), [production](), [provenance](), [retrieval](), [vector-database]() ### AI overview Glyph is a production system for generating column descriptions and assigning sensitivity-ontology labels in enterprise data catalogs. It uses cooperating LLM agents, source-code-grounded retrieval, parallel tagging strategies, vector-based metadata matching, and ranked-output fusion to support auditable cataloging. ### Source excerpt Enterprise data lakes accumulate tables faster than human stewards can document or classify them, leaving columns with missing descriptions and unassigned governance labels. This documentation debt undermines data discovery, access control, and regulatory compliance. We present Glyph, a production system that frames two coupled problems, column description generation and column type annotation for data classification, as cooperating LLM agents orchestrated as stateful graphs. The Descriptor grounds generation in the pipeline source code that produces each column, retrieved on demand from an... ## Introducing Credentio: Open Source C++ Library for C2PA Content Credentials from Google DevFeed: [Introducing Credentio: Open Source C++ Library for C2PA Content Credentials from Google]() Original publisher: [Read original article]() Author: Sherif Hanna Published: 2026-09-12T11:04:33.891311Z Content type: news Language: en Sources: [Google Developers Blog]() Topics: [C++](), [Google](), [Open Source](), [Local-First](), [API](), [data]() Tags: [api](), [c-plus-plus](), [data-privacy](), [google](), [local-first](), [open-source](), [performance](), [provenance](), [validation]() ### AI overview Google introduces Credentio, an open-source C++ library for validating C2PA Content Credentials locally within client applications, server pipelines, and edge software. It is designed for high-performance validation of large media assets with lower memory usage, configurable trust lists, and no need to transmit files to cloud or external validation services. Future plans include generating and embedding Content Credentials. ### Source excerpt Credentio is a newly released, open-source C++ library from Google that allows developers to integrate high-performance, local-first validation of C2PA Content Credentials into their client and server applications. By processing assets entirely locally with a highly optimized memory footprint, the library delivers instant validation verdicts for multi-gigabyte media files without incurring cloud latency, bandwidth costs, or data privacy risks. The library currently features deep manifest parsing alongside configurable trust list integration, and is available now on Google Source with future plans to support full credential generation and embedding. ## What it took to reach 1 billion build manifests DevFeed: [What it took to reach 1 billion build manifests]() Original publisher: [Read original article]() Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [container images](), [chainguard os](), [supply-chain-security](), [sigstore](), [Linux](), [NumPy]() Tags: [chainguard](), [chainguard-factory](), [chainguard-os](), [container-images](), [go](), [open-source](), [provenance](), [sbom](), [sigstore](), [software-supply-chain]() ### AI overview Chainguard describes how it doubled container build output from 500 million to more than 1 billion manifests in six months. The article explains how Chainguard Factory and Chainguard OS support continuous rebuilds, while using source builds, SLSA Level 3 provenance, Sigstore signatures, and full SBOMs. ### Source excerpt Chainguard doubled its container build output in six months. Learn how Factory 2.0 uses AI and reconciliation to rebuild secure software at scale. ## Using deterministic systems and provenance to make AI-generated financial analysis verifiable DevFeed: [Using deterministic systems and provenance to make AI-generated financial analysis verifiable]() Original publisher: [Read original article]() Published: 2026-08-25T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Trustworthy AI](), [Artificial Intelligence](), [AI Platform](), [Large Language Model](), [Code](), [Finance]() Tags: [ai](), [ai-platform](), [financial](), [models](), [provenance](), [trustworthy-ai](), [verification]() ### AI overview Kepler describes a model-agnostic approach to trustworthy AI that combines language models with deterministic tools for retrieval, computation, provenance, and traceability. The article focuses on making financial analysis outputs verifiable by linking numbers to their sources, formulas, or computations. ### Source excerpt Trustworthy AI takes more than a powerful model. See how Kepler uses deterministic systems and provenance to make financial analysis verifiable. ## Proven, not promised: Chainguard Containers achieves SLSA Build Level 3 DevFeed: [Proven, not promised: Chainguard Containers achieves SLSA Build Level 3]() Original publisher: [Read original article]() Published: 2026-08-17T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [supply-chain-security](), [software bill of materials](), [Security]() Tags: [chainguard](), [chainguard-containers](), [provenance](), [sbom](), [security](), [signing](), [slsa](), [software-supply-chain-security](), [supply-chain]() ### AI overview Chainguard says Coalfire independently assessed the Chainguard Containers build and release system as meeting SLSA Build Level 3 requirements. The article describes hardened, isolated builds, separately managed signing, provenance generation, and signed SBOMs for releases. ### Source excerpt Coalfire independently assessed Chainguard Containers at SLSA Build Level 3, validating hardened builds, provenance, and supply chain integrity. ## ChainDrop npm Worm: Why SLSA Provenance Wasn't Enough DevFeed: [ChainDrop npm Worm: Why SLSA Provenance Wasn't Enough]() Original publisher: [Read original article]() Author: Harness Team Published: 2026-08-10T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [ChainDrop](), [npm](), [supply-chain-security](), [Malware](), [npm packages](), [GitHub Actions](), [GitHub]() Tags: [chaindrop](), [ci](), [ci-cd](), [github](), [github-actions](), [integrity](), [least-privilege](), [malware](), [npm](), [npm-worm](), [openid-connect](), [provenance](), [security](), [slsa](), [software-supply-chain-security](), [worm]() ### AI overview The ChainDrop npm worm compromised hundreds of packages while retaining valid SLSA provenance, demonstrating that build attestations do not guarantee source integrity. The article explains the worm's propagation, credential theft, persistence mechanisms, and recommended defenses, including source governance, dependency controls, least-privilege identities, policy gates, and runtime evidence. ### Source excerpt ChainDrop poisoned hundreds of npm packages while retaining valid provenance. Learn why signed builds need source governance, policy gates, and runtime evidence | Blog ## The continuous validation framework for data pipelines. DevFeed: [The continuous validation framework for data pipelines.]() Original publisher: [Read original article]() Author: Niruta Talwekar Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [data](), [DataOps](), [Data Quality](), [data observability](), [CI/CD](), [data-processing](), [DevOps](), [Platform Engineering]() Tags: [ci-cd](), [data](), [data-quality](), [devops](), [platform-engineering](), [provenance](), [software-testing](), [streaming]() ### AI overview The article introduces the Continuous Validation Framework (CVF), an end-to-end methodology for validating data pipelines through architectural isolation, configuration-driven data quality management, and continuous automation based on lineage-driven impact analysis. It reports production results including a 50% reduction in incidents and an 80% improvement in detecting data quality issues. ### Source excerpt A framework for automated, end-to-end data pipeline validation using isolation, declarative quality checks, and lineage-driven impact analysis. ## Artifact Registry: Audit Logs, Traceability, Usage Reporting DevFeed: [Artifact Registry: Audit Logs, Traceability, Usage Reporting]() Original publisher: [Read original article]() Author: Shibam Dhar Published: 2026-07-23T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [audit trail](), [CI/CD](), [Deployment]() Tags: [audit](), [ci-cd](), [compliance](), [deployment](), [logs](), [provenance](), [reporting](), [visibility]() ### AI overview This article explains how Harness Artifact Registry provides audit trails, access logs, deployment traceability, and custom metadata for tracking artifact usage across its lifecycle. It describes records for actions such as pushes, pulls, deletions, policy evaluations, and quarantine events, including the actor and timing. The article also explains how pipeline downloads can be linked to deployment context and pipeline runs. ### Source excerpt Learn how Harness Artifact Registry gives your organisation complete visibility into artifact usage through audit trails, RBAC-governed access logs, deployment | Blog ## AsyncAPI supply chain compromise: npm packages backdoored via GitHub Actions "pwn request" (July 2026) DevFeed: [AsyncAPI supply chain compromise: npm packages backdoored via GitHub Actions "pwn request" (July 2026)]() Original publisher: [Read original article]() Published: 2026-07-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [GitHub Actions](), [npm packages](), [AsyncAPI Specification](), [Malware](), [GitHub](), [Remote Access Trojan](), [passwords](), [ssh](), [Cloud](), [Cryptocurrency]() Tags: [asyncapi-supply-chain-attack](), [chainguard-asyncapi](), [chainguard-libraries](), [ci](), [cloud](), [cryptocurrency](), [github](), [github-actions](), [github-actions-pwn-request](), [malicious-packages](), [malware](), [miasma](), [npm](), [npm-packages](), [passwords](), [personal-access-token](), [provenance](), [pull-requests](), [remote-access-trojan](), [ssh](), [supply-chain](), [tokens]() ### AI overview The article analyzes a July 14, 2026 supply-chain compromise in which an attacker stole a privileged GitHub personal access token through a misconfigured GitHub Actions workflow and used it to publish five backdoored versions across four AsyncAPI npm packages. The malware activates when a library is loaded by a build or CI job and steals browser passwords, SSH keys, npm and GitHub tokens, cloud credentials, and cryptocurrency wallets while maintaining command-and-control access. It also explains why Chainguard customers were protected and recommends treating affected environments as compromised and rotating credentials. ### Source excerpt A supply chain attack compromised AsyncAPI npm packages via GitHub Actions. See how Chainguard blocked the malicious releases by design. ## Inside the Git Hooks: Tagging Every AI Agent Commit (Part 3) DevFeed: [Inside the Git Hooks: Tagging Every AI Agent Commit (Part 3)]() Original publisher: [Read original article]() Author: Eugene Petrenko Published: 2026-06-26T00:00:00Z Content type: tutorial Language: en Sources: [Eugene Petrenko]() Topics: [Git](), [hooks](), [AI Agent](), [observability](), [Security]() Tags: [ai-agent](), [ai-agents](), [ai-coding](), [capture](), [commit](), [eugene-petrenko](), [git](), [git-hooks](), [infrastructure](), [jonnyzzz](), [provenance](), [repo](), [sandbox](), [tag-41199d53f463](), [workflow]() ### AI overview This third-part tutorial explains a best-effort Git hook layer for AI agents running inside a sandbox. The hooks stamp session IDs on commits, preserve the tags through amend, rebase, and squash, and capture restorable copies of pushed changes while continuing to run repository-local hooks. ### Source excerpt Part 3 -- the build for the lighter solution. How a set of git hooks stamps a session id on every commit an AI Agent makes, survives squash and rebase, and captures each push -- all best-effort, all inside the sandbox. ## Fewer CVEs, more accurate findings: Wiz now scans Chainguard Libraries for Python and Java DevFeed: [Fewer CVEs, more accurate findings: Wiz now scans Chainguard Libraries for Python and Java]() Original publisher: [Read original article]() Published: 2026-06-25T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard libraries](), [chainguard libraries for python](), [Java](), [supply-chain-security](), [Security]() Tags: [chainguard](), [chainguard-libraries](), [chainguard-libraries-for-java](), [chainguard-libraries-for-python](), [cves](), [dependencies](), [java](), [provenance](), [python](), [security](), [software-supply-chain](), [supply-chain](), [wiz](), [wiz-chainguard-libraries](), [wiz-chainguard-scanner]() ### AI overview Wiz now scans Chainguard Libraries for Python and Java. The partnership combines source-built dependencies and backported fixes with Wiz's risk context and visibility, helping organizations assess vulnerabilities, prioritize remediation, and verify artifact provenance. ### Source excerpt Wiz now scans Chainguard Libraries for Python and Java, combining trusted, source-built dependencies with risk-based visibility and remediation. ## Adopt hardened containers without changing your pipelines, tooling, or environment DevFeed: [Adopt hardened containers without changing your pipelines, tooling, or environment]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [chainguard containers](), [Security](), [Deployment](), [Tooling]() Tags: [chainguard](), [chainguard-containers](), [chainguard-redhat-rpm](), [cmvp](), [compliance](), [containers](), [cyclonedx](), [dependabot](), [deployment](), [fips](), [hardened-containers](), [provenance](), [rhel](), [rhel-10](), [rhel-9](), [rpm-10](), [rpm-9](), [sboms](), [secure-by-default](), [security](), [vulnerabilities]() ### AI overview Chainguard announces updates to Chainguard Containers that support enterprise adoption of hardened images without changing existing pipelines, tooling, or environments. The updates include RPM support for RHEL 9 and RHEL 10, compatible image tags, a CMVP-validated Go Geomys FIPS image, Dependabot support for private registries, and flattened CycloneDX SBOMs for compliance tools. ### Source excerpt Chainguard expands Containers with RPM support, FIPS enhancements, and easier migrations, bringing secure-by-default software to enterprise workflows. ## Chainguard Libraries for Java is now GA; CVE remediation beta available for sign up DevFeed: [Chainguard Libraries for Java is now GA; CVE remediation beta available for sign up]() Original publisher: [Read original article]() Published: 2026-06-23T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [Java](), [Spring Boot](), [Security](), [Back end]() Tags: [chainguard](), [chainguard-libraries](), [chainguard-libraries-for-java](), [cve](), [cve-remediation](), [dependencies](), [java](), [java-packages](), [java-spring](), [open-source](), [provenance](), [sboms](), [scanner](), [security](), [zero-cve-packages]() ### AI overview Chainguard Libraries for Java is generally available, and its CVE remediation capability is available in beta. The article describes backported fixes for critical and high-severity CVEs across the Spring Boot ecosystem, helping teams manage risks in pinned or legacy Java dependencies while planning upgrades. ### Source excerpt Chainguard Libraries for Java is now GA, delivering CVE-remediated dependencies with SBOMs, provenance, and scanner-recognized fixes. ## Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security DevFeed: [Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security]() Original publisher: [Read original article]() Published: 2026-06-18T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [supply-chain-security](), [Security](), [Open Source]() Tags: [2026](), [chainguard](), [chainguard-gartner](), [chainguard-gartner-magic-quadrant](), [cyber-resilience-act](), [fedramp](), [gartner](), [gartner-mq-software-supply-chain](), [nis2](), [provenance](), [sboms](), [secure-by-default](), [security](), [slsa](), [software-supply-chain](), [software-supply-chain-security](), [software-supply-chain-security-gartner]() ### AI overview Chainguard announces that it has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Software Supply Chain Security. The article highlights Chainguard's secure-by-default approach, hardened open source artifacts, cryptographic signatures, signed SBOMs, and SLSA-aligned provenance, along with support for regulatory requirements. ### Source excerpt Chainguard named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security, recognized for vision and secure-by-default innovation. ## @mastra npm scope takeover: 143 packages backdoored via compromised contributor account DevFeed: [@mastra npm scope takeover: 143 packages backdoored via compromised contributor account]() Original publisher: [Read original article]() Published: 2026-06-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [npm](), [Malware](), [Remote Access Trojan](), [Cryptocurrency](), [C2]() Tags: [c2](), [chainguard-libraries](), [chainguard-packages](), [command-and-control](), [crypto](), [malware](), [mastra](), [npm](), [npm-takeover](), [packages](), [provenance](), [remote-access](), [remote-access-trojan](), [secure-packages](), [software-packages](), [supply-chain](), [tls]() ### AI overview The article reports that an attacker used a compromised former contributor account to republish all 143 packages in the @mastra npm scope on June 17, 2026. The malicious versions could disable TLS verification, download a cryptocurrency wallet stealer and remote access trojan, and establish command-and-control access. It recommends auditing dependency trees and lockfiles and rotating credentials on affected hosts. ### Source excerpt A supply chain attack compromised all 143 @mastra packages. Chainguard customers stayed protected through malware blocking and source-built libraries. ## PM Brain OS: The Second Brain for Product Managers, Made of Markdown DevFeed: [PM Brain OS: The Second Brain for Product Managers, Made of Markdown]() Original publisher: [Read original article]() Author: Paweł Huryn Published: 2026-05-20T13:09:25Z Content type: tutorial Language: en Sources: [The Product Compass]() Topics: [Claude Code](), [MDX](), [Open Source]() Tags: [audit-trail](), [claude](), [claude-code](), [dogfooding](), [markdown](), [open-source](), [provenance](), [rag](), [repo]() ### AI overview The article presents PM Brain, an open-source second-brain system for product managers built from Markdown files in a Git repository. Claude reads and updates the files according to a CLAUDE.md operating manual, while weekly sweeps promote recurring, decision-relevant, or strategy-relevant information into a durable layer. The system intentionally avoids vector databases, embeddings, cloud storage, and automatic tagging, and includes installation guidance, commands, architecture details, provenance, and evaluation results. ### Source excerpt A folder of files on your laptop. Claude reads them before answering, writes to them after, sweeps them every Friday. Open source. 17 synthetic PM scenarios, 404 of 406 checks pass (~=99.5%). ## Building for the AI era: Chainguard partners with Endor Labs DevFeed: [Building for the AI era: Chainguard partners with Endor Labs]() Original publisher: [Read original article]() Published: 2026-05-19T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Application Security](), [Artificial Intelligence](), [AI-assisted coding](), [chainguard containers](), [Containers](), [Library](), [Agent Skill](), [CI/CD]() Tags: [agent](), [ai](), [ai-coding-agents](), [application-security](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [containers](), [cves](), [endor](), [endor-labs](), [observability](), [provenance](), [sboms](), [software-supply-chain](), [vulnerabilities]() ### AI overview Chainguard partners with Endor Labs to help teams building with AI coding agents secure the software supply chain. Chainguard provides source-built artifacts, daily rebuilds, signed SBOMs, and SLSA Level 3 provenance, while Endor Labs analyzes application context to identify vulnerabilities that are genuinely reachable and exploitable. ### Source excerpt Chainguard and Endor Labs help teams build securely at AI speed with source-built artifacts, exploitability analysis, and fewer vulnerabilities to triage. ## Luck isn't a security control: What happened with mini Shai-Hulud and what you need to do DevFeed: [Luck isn't a security control: What happened with mini Shai-Hulud and what you need to do]() Original publisher: [Read original article]() Published: 2026-05-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [Malware](), [Open Source](), [GitHub Actions](), [npm](), [CI/CD](), [GitHub](), [AI-assisted coding](), [vulnerability]() Tags: [ai-coding-agents](), [chainguard-containers](), [chainguard-libraries](), [ci-cd](), [dependencies](), [github](), [github-actions](), [mini-shai-hulud](), [npm](), [packages](), [provenance](), [python](), [security](), [shai-hulud](), [software-supply-chain-security](), [supply-chain](), [worm]() ### AI overview This article examines the mini Shai-Hulud supply chain worm, which affected more than 400 packages. It argues that malicious code can enter during package build and distribution without a CVE, and that teams should strengthen preventive security across registries, GitHub Actions, CI/CD pipelines, dependencies, AI coding agents, and configuration files. ### Source excerpt A new supply chain worm hit 400+ packages. Learn why preventive security, not reactive patching, is the only way to stop the next attack. ## Removing supply chain friction: How PeopleTec improved developer productivity with Chainguard DevFeed: [Removing supply chain friction: How PeopleTec improved developer productivity with Chainguard]() Original publisher: [Read original article]() Published: 2026-04-02T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [supply-chain-security](), [chainguard containers](), [Containers](), [code productivity](), [migration]() Tags: [accelerate](), [chainguard](), [chainguard-assemble](), [chainguard-containers](), [chainguard-developer-experience](), [chainguard-migration](), [ci](), [code](), [containers](), [cve-remediation](), [developer](), [developer-velocity](), [migration](), [migration-guides](), [peopletec](), [provenance](), [security](), [supply-chain](), [vulnerability-management]() ### AI overview PeopleTec describes how it used Chainguard Security controls and Chainguard Containers to reduce software supply-chain friction, address vulnerabilities in base images, improve provenance and compliance workflows, and support developer productivity. The approach emphasized early adopters, low-friction migration, and automated policy checks in CI. ### Source excerpt Learn how PeopleTec used Chainguard to reduce security friction, accelerate adoption, and align platform consistency with developer velocity. ## Introducing Chainguard Commercial Builds: Secure-by-default containers for commercial software DevFeed: [Introducing Chainguard Commercial Builds: Secure-by-default containers for commercial software]() Original publisher: [Read original article]() Published: 2026-03-17T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard commercial builds](), [Containers](), [open-source-security](), [supply-chain-security](), [Open Source](), [Security]() Tags: [azul](), [chainguard](), [chainguard-commercial-builds](), [chainguard-containers](), [containers](), [elastic](), [f5-nginx](), [gitlab](), [grafana-labs](), [open-source-software](), [partnership](), [provenance](), [sbom](), [secure-by-default](), [supply-chain-security](), [vulnerabilities]() ### AI overview Chainguard announces Commercial Builds, a partnership program with commercial and open source software providers. The program packages their software with the Chainguard Factory to provide hardened container images and support more consistent software supply chain security. ### Source excerpt Chainguard Commercial Builds is a new partnership program with commercial and open source software providers to package software using the Chainguard Factory. ## Chainguard + Second Front: A faster, more secure path into government markets DevFeed: [Chainguard + Second Front: A faster, more secure path into government markets]() Original publisher: [Read original article]() Published: 2026-02-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [container images](), [DevSecOps](), [supply-chain-security](), [Vulnerabilities](), [Deployment](), [Cybersecurity]() Tags: [chainguard](), [chainguard-containers](), [chainguard-for-compliance](), [cmmc](), [container-image-compliance](), [container-images](), [cve-remediation](), [cybersecurity](), [devsecops](), [federal-compliance](), [fedramp](), [government](), [iso](), [provenance](), [sbom](), [second-front-systems](), [secure-by-default](), [secure-by-design](), [security](), [soc-2](), [software-supply-chain]() ### AI overview Chainguard and Second Front are partnering to help software companies pursue federal market requirements, including FedRAMP authorization and DoD impact-level accreditations. The article describes combining Chainguard's hardened container images with Second Front's Game Warden DevSecOps platform to support secure application delivery and vulnerability reduction. ### Source excerpt Discover how Chainguard and Second Front are partnering to help build a secure path into government markets for your organization. ## Expanding Chainguard's Helm chart coverage and deepening user experiences DevFeed: [Expanding Chainguard's Helm chart coverage and deepening user experiences]() Original publisher: [Read original article]() Published: 2026-02-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Kubernetes](), [DevOps](), [container images](), [Security](), [SRE](), [Deployment](), [YAML]() Tags: [bitnami-alternative](), [bitnami-helm-charts](), [chainguard](), [chainguard-containers](), [chainguard-helm](), [chainguard-helm-charts](), [container-images](), [deployment](), [devops](), [helm](), [helm-charts](), [kubernetes](), [provenance](), [secure-by-default](), [secure-container-images](), [security](), [sre](), [yaml]() ### AI overview Chainguard is expanding its Helm chart catalog to include community charts and improve the user experience. The charts are designed to work with Chainguard container images, reducing manual YAML configuration, troubleshooting, provenance checks, and security risks in Kubernetes deployments. ### Source excerpt Chainguard's expanded Helm charts deliver signed, tested, secure-by-default deployments that eliminate YAML toil and simplify Kubernetes at scale. ## Evo Adds CycloneDX Support to Give Full AI Visibility DevFeed: [Evo Adds CycloneDX Support to Give Full AI Visibility]() Original publisher: [Read original article]() Author: John Carione Published: 2025-12-19T05:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [Security](), [Open Source]() Tags: [ai](), [application-security](), [awareness](), [blog](), [compliance](), [cyclonedx](), [developer](), [enterprise](), [governance](), [provenance](), [sbom](), [security](), [supply-chain](), [supply-chain-security]() ### AI overview Evo's Discovery Agent now supports CycloneDX 1.6 AI ModelCards, enabling portable AI Bills of Materials that inventory models, dependencies, provenance, licensing, and related metadata within existing SBOM workflows. The integration addresses enterprise security, compliance, and visibility gaps across AI supply chains. ### Source excerpt Enterprises face a critical visibility gap in AI models, creating security and compliance risks. Evo's new integration with CycloneDX 1.6 delivers intelligent, actionable AI-BOMs, providing complete oversight and robust governance for your entire AI supply chain. ## Custom Certificates are now available in Custom Assembly DevFeed: [Custom Certificates are now available in Custom Assembly]() Original publisher: [Read original article]() Published: 2025-12-19T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Security](), [configuration](), [YAML](), [Containers]() Tags: [certificates](), [chainguard](), [chainguard-containers](), [chainguard-custom-assembly](), [chainguard-images](), [configuration](), [custom-assembly](), [custom-container-images](), [enterprise-certificate-authority-certificates](), [provenance](), [security](), [yaml]() ### AI overview Chainguard announces custom certificate support for Custom Assembly, allowing enterprise certificate authority certificates to be added directly to Chainguard Containers through image configuration. The certificates are validated, stored with the image configuration, appended to standard trust stores at build time, and included in image provenance. ### Source excerpt Custom Certificate support for Custom Assembly allows you to add your enterprise certificate authority certificates directly to Chainguard Containers [Next page]()