# scanners Published articles for scanners. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Human judgment doesn't leave the software factory. It relocates. DevFeed: [Human judgment doesn't leave the software factory. It relocates.]() Original publisher: [Read original article]() Author: Addy Osmani Published: 2026-08-21T00:00:00Z Content type: article Language: en Sources: [Addy Osmani]() Topics: [Software](), [coding](), [event driven](), [implementation](), [GitHub](), [Claude Code](), [codex]() Tags: [agent](), [architecture](), [automated](), [batch](), [build](), [claude-code](), [codex](), [event-driven](), [github](), [linear](), [maintainability](), [mutation-testing](), [pull-requests](), [quality](), [scanners](), [slack](), [software](), [testing](), [verification]() ### AI overview A field guide to building a repeatable software factory while keeping humans responsible for product intent, system design, quality standards, code review, and final merge decisions. It recommends early and continuous quality checks, deliberate constraints, and event-driven automation when ordinary coding workflows are no longer sufficient. ### Source excerpt A field guide to building a software factory that still has an owner. ## Introducing Our Newest Ecosystem Integration: Anchore Enterprise DevFeed: [Introducing Our Newest Ecosystem Integration: Anchore Enterprise]() Original publisher: [Read original article]() Published: 2025-09-23T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [anchore](), [chainguard](), [container images](), [Security](), [vulnerability scanning]() Tags: [anchore](), [anchore-enterprise](), [chainguard](), [chainguard-containers](), [chainguard-partners](), [compliance](), [container-images](), [integration](), [scanners](), [secure-by-default](), [software-supply-chain-security](), [vulnerability-scanning]() ### AI overview Chainguard announces a new integration with Anchore Enterprise. The integration combines Chainguard's secure-by-default container images with Anchore's SBOM management, vulnerability scanning, and automated compliance policy enforcement to support continuous software security and compliance. ### Source excerpt Discover more about Chainguard's new integration with Anchore Enterprise. ## The year so far: How Burp Suite DAST is leveling up enterprise security in 2025 DevFeed: [The year so far: How Burp Suite DAST is leveling up enterprise security in 2025]() Original publisher: [Read original article]() Author: Andrzej Matykiewicz Published: 2025-08-28T12:07:45Z Content type: article Language: en Sources: [PortSwigger Blog]() Topics: [Security](), [Automation](), [API](), [Authentication](), [OpenAPI Specification](), [Postman](), [Web](), [Vulnerabilities]() Tags: [2025](), [api](), [apis](), [automation](), [enterprise](), [openapi](), [qa](), [scale](), [scanners](), [security](), [speed](), [web](), [workflows]() ### AI overview This article recaps Burp Suite DAST improvements delivered during the first half of 2025 for enterprise security teams. It describes recurring portfolio scans, custom asset tags, continuous authenticated API scanning with automatic token refresh, and scan triggers from Postman Collections alongside OpenAPI and SOAP WSDL imports. ### Source excerpt Enterprise security teams are under more pressure than ever to secure sprawling application estates, without slowing down delivery. That's why, over the first half of 2025, we've delivered some of our ## Understanding CRA Compliance: Overcoming Challenges with an Integrated Security Testing Approach DevFeed: [Understanding CRA Compliance: Overcoming Challenges with an Integrated Security Testing Approach]() Original publisher: [Read original article]() Author: Snyk Team Published: 2025-06-25T23:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Testing](), [vulnerability management](), [DevOps](), [Tooling](), [Vulnerabilities](), [Development](), [Open Source]() Tags: [awareness](), [best-practices](), [blog](), [community](), [compliance](), [cra-requirements](), [cyber-resilience-act](), [cybersecurity](), [dependencies](), [deployment](), [developer](), [developers](), [development](), [devops](), [engineering](), [eu](), [scanners](), [secure-by-design](), [security](), [snyk-code](), [snyk-iac](), [snyk-learn](), [snyk-open-source](), [testing](), [vulnerabilities](), [vulnerability](), [vulnerability-management](), [workflows]() ### AI overview This article explains how the Cyber Resilience Act (CRA) changes software delivery expectations for organizations serving the EU. It highlights continuous security validation across proprietary code, open source libraries, and third-party dependencies, and recommends integrated security testing, secure-by-design practices, aligned teams, modern tooling, and security embedded in daily development workflows. ### Source excerpt Learn how to meet CRA requirements with integrated security testing, secure-by-design workflows, and scalable practices for modern dev teams. ## Trusted Open Source Means Compatibility: New Integration with Orca Security DevFeed: [Trusted Open Source Means Compatibility: New Integration with Orca Security]() Original publisher: [Read original article]() Published: 2025-06-17T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [orca security](), [Security](), [container images](), [Containers]() Tags: [chainguard-containers](), [chainguard-os](), [compatibility](), [false-positives](), [open-source-scanners](), [orca-security](), [partnership](), [provenance](), [scanner](), [scanners](), [security](), [vulnerabilities]() ### AI overview Chainguard announces an integration with Orca Security that adds visibility for Chainguard OS and Chainguard Containers images in the Orca Platform. The integration exposes image metadata, scans images and installed packages for vulnerabilities against Chainguard Security Advisories, and provides additional security context for remediation. ### Source excerpt Chainguard now has an integration with Orca Security. Discover more about our new partnership. ## Updates on CVE for End-of-Life Versions DevFeed: [Updates on CVE for End-of-Life Versions]() Original publisher: [Read original article]() Published: 2025-03-07T16:00:00Z Content type: news Language: en Sources: [Node.js Blog]() Topics: [Node.js](), [Vulnerabilities](), [Security](), [releases]() Tags: [cve](), [end-of-life](), [node-js](), [scanners](), [security](), [updates](), [upgrade](), [vulnerabilities]() ### AI overview The Node.js team updated its CVE policy for end-of-life releases after CVE-2025-23087, CVE-2025-23088, and CVE-2025-23089 were rejected by the CVE Program. New CVEs will include EOL releases unless specific information shows that a vulnerability does not apply. Node.js does not routinely assess EOL versions because of limited resources and their differing dependencies, build processes, and platform support. ### Source excerpt Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts. ## Shifting Cyber Norms: Microsoft security POST-ing to you DevFeed: [Shifting Cyber Norms: Microsoft security POST-ing to you]() Original publisher: [Read original article]() Published: 2025-01-23T11:42:25Z Content type: opinion Language: en Sources: [Bert Hubert's writings]() Topics: [Security](), [email](), [Microsoft](), [JavaScript](), [Single-page application (SPA)]() Tags: [cybersecurity](), [email](), [javascript](), [microsoft](), [programming](), [scanners](), [security]() ### AI overview The article argues that Microsoft and other email security scanners now visit links in transmitted email and execute their JavaScript, including requests that trigger POST actions. It reports that this behavior can invalidate single-use passwordless sign-on and email-confirmation links, and discusses changing norms around email inspection and software behavior. ### Source excerpt tl;dr: Microsoft and other email security scanners will visit the links in email you transmit, and run the JavaScript in those links, including calls that lead to POSTs going out. This used to be unacceptable, since POSTs have side effects. Yet here we are. This breaks even somewhat sophisticated single-use sign-on / email confirmation messages. Read on for how to deal with this, and some thoughts on how we should treat gatekeepers like Microsoft that can randomly break things & get away with it. ## Panic! At The Distro: A Study of Malware Prevention in Linux Distributions DevFeed: [Panic! At The Distro: A Study of Malware Prevention in Linux Distributions]() Original publisher: [Read original article]() Published: 2024-12-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Linux](), [Malware](), [Maintainers](), [open-source-security](), [Benchmark](), [dataset]() Tags: [alpine](), [benchmark](), [dataset](), [debian](), [distribution](), [false-positives](), [linux](), [maintainers](), [malware](), [malware-prevention](), [open-source-software](), [reproducible-builds](), [research](), [scanners](), [software-supply-chain](), [wolfi]() ### AI overview Chainguard studies malware prevention in Linux distributions through maintainer interviews and a Linux package malware benchmark dataset. The study reports that most interviewed distributions do not proactively scan repositories, while existing open-source malware scanners often produce false positives. ### Source excerpt Chainguard wanted to know more about malware prevention in Linux distributions. So we did a study to see what maintainers are doing about it. See the results. ## Get Smart in 5 Minutes: Vulnerability remediation unveiled DevFeed: [Get Smart in 5 Minutes: Vulnerability remediation unveiled]() Original publisher: [Read original article]() Published: 2024-08-16T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Vulnerabilities](), [software bill of materials](), [Security](), [Software]() Tags: [developer](), [sbom](), [scanners](), [security](), [software-bill-of-materials](), [vulnerabilities]() ### AI overview This introductory article explains vulnerability remediation as the process of fixing flaws identified by software scanners. It describes common obstacles, including triage, uncertainty about the affected code, and unclear ownership. It presents software bills of materials (SBOMs) as a way to identify software components, while noting that outdated or inaccurate SBOMs may miss vulnerabilities or malware. The article emphasizes that software vulnerabilities can affect everyone through data breaches, service disruptions, and physical harm. ### Source excerpt Learn the basics of vulnerability remediation from this teaser of Chainguard's Get Smart in Five Minutes series on Youtube. ## Improving Laravel Application Security with Aikido DevFeed: [Improving Laravel Application Security with Aikido]() Original publisher: [Read original article]() Author: James Brooks Published: 2024-07-08T14:30:00Z Content type: news Language: en Sources: [Laravel Blog]() Topics: [Laravel](), [Application Security](), [Vulnerabilities](), [PHP](), [cloud security]() Tags: [application-security](), [cloud-security](), [hipaa](), [integration](), [iso-27001](), [laravel](), [php](), [scanners](), [security](), [security-vulnerabilities](), [soc2]() ### AI overview Laravel has partnered with Aikido to add security scanning for Laravel applications using Forge. The integration identifies potential vulnerabilities and security flags, surfaces findings within Forge, and combines code and cloud security scanners to help developers manage application security and compliance requirements. ### Source excerpt As your Laravel application grows, managing security objectives becomes more challenging, especially for small teams or solo developers. Today, Laravel has teamed up with Aikido to provide a seamless solution for securing your Laravel application. With Aikido, Laravel developers using Forge can effortlessly scan for and identify potential security vulnerabilities, all in less than 1 minute. ## Hardened Container Images: Images for a Secure Supply Chain DevFeed: [Hardened Container Images: Images for a Secure Supply Chain]() Original publisher: [Read original article]() Published: 2024-04-30T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard images](), [Containers](), [container-security](), [Vulnerabilities](), [grype](), [snyk]() Tags: [canonical](), [canonical-chiselled-image](), [chainguard](), [chainguard-images](), [container](), [container-image](), [container-images](), [container-security](), [containers](), [cve](), [debian](), [dockerhub](), [false-positives](), [grype](), [hardened-container-image](), [iron-bank](), [redhat](), [scanners](), [security](), [shift-left](), [snyk](), [software-supply-chain](), [supply-chain](), [vulnerabilities]() ### AI overview Chainguard introduces its inaugural State of Hardened Container Images report, examining the security of hardened container images from providers including Red Hat, Iron Bank, and Chainguard. The article argues that hardened container images deserve distinct consideration from container vulnerability scanning and describes the report as addressing secure software supply chains. ### Source excerpt Check out our analysis of the hardened container image landscape, including offerings from Red Hat, Iron Bank, and others. ## Improving product reliability by imposing constraints as a part of CI/CD process DevFeed: [Improving product reliability by imposing constraints as a part of CI/CD process]() Original publisher: [Read original article]() Author: Pedro Moura Published: 2023-11-03T14:26:59Z Content type: article Language: en Sources: [Revolut Engineering]() Topics: [CI/CD](), [Application Security](), [Vulnerabilities](), [Data analysis]() Tags: [application-security](), [blocking](), [ci-cd](), [data-analysis](), [devsecops](), [engineering](), [sast](), [sca](), [scanners](), [security](), [security-vulnerabilities](), [software-development]() ### AI overview Revolut describes a CI/CD approach that uses automated risk calculation, data analysis, security scanning, and deployment constraints to improve product reliability. The approach aims to identify vulnerabilities and bugs early, mitigate them, and potentially block high-risk applications from reaching production. ### Source excerpt At Revolut, we always aim to consistently provide efficient, high-quality, and secure services. Our primary goals are to enhance product quality, increase customer satisfaction, and reduce business risk. To achieve those goals, we should aim to be as proactive -- rather than reactive -- as possible. This means fixing any point of failure before it reaches production by identifying, reporting, and potentially blocking deployments that can impact the reliability of our products. In this article, we'll explain how we achieve those goals using automated risk calculation, data analysis, and imposing constraints to push for the mitigation of open vulnerabilities and the fix of reported bugs identified in our products. Challenges faced by Revolut Each application/service has its own specifications, with different technology stacks and architectures, bringing a diversity of security challenges and different vulnerabilities. That being said, application risk cannot be based only on the reported security vulnerabilities but also in the context of that specific application. Continuous scanning, reporting, visibility, and risk evaluation are essential to providing the best security advice and automated security controls. Nowadays there are several types of security scanners (SAST, SCA, DAST, IaC, etc.) that help security professionals to identify and report vulnerabilities, where each of them can belong to a different third-party provider. For further information on these, read our article on continuous security. Data scraped from different sources creates friction when it's needed to group findings and provide mitigations. This can also decrease mean time to identify vulnerabilities and mean time to provide mitigations. Also, to avoid such negative workflow impact, security must be shifted left. Without a centralised source of truth for security-related application data, most of the time is wasted on searching for information/findings in segmented platforms and finding the corre ## A growing ecosystem of vulnerability scanners that now support Chainguard Images and Wolfi DevFeed: [A growing ecosystem of vulnerability scanners that now support Chainguard Images and Wolfi]() Original publisher: [Read original article]() Published: 2023-09-21T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Security](), [open-source-security](), [trivy](), [Monitoring](), [Open Source]() Tags: [chainguard](), [chainguard-images](), [container](), [container-images](), [cve](), [false-positives](), [grype](), [prisma-cloud](), [sca](), [scanners](), [secure-images](), [security](), [snyk](), [trivy](), [vulnerabilities](), [vulnerability](), [wiz](), [wolfi]() ### AI overview Chainguard Images and the Wolfi distribution are now supported by a growing ecosystem of open-source and enterprise vulnerability scanners, including Docker Scout, Grype, Snyk, Trivy, and Wiz. The broader integration helps users monitor and prioritize scan results, verify vulnerabilities, reduce scanner noise and false positives, and build more secure software. ### Source excerpt Secure your software with Chainguard & Wolfi, now recognized by leading vulnerability scanners. ## Announcing a Chainguard Image for OpenTF DevFeed: [Announcing a Chainguard Image for OpenTF]() Original publisher: [Read original article]() Published: 2023-09-06T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Open Source](), [Containers](), [foss](), [Terraform](), [Security]() Tags: [chainguard](), [chainguard-images](), [container](), [foss](), [linux](), [oci-registry](), [open-source](), [opentf](), [scanners](), [security](), [state](), [terraform]() ### AI overview Chainguard announces a Chainguard Image for OpenTF, the open-source fork of Terraform created after HashiCorp's license changes. The image is available through Wolfi and Chainguard Images for Linux amd64 and arm64, with a 65 MB size and zero known CVEs according to supported scanners. The article also discusses planned state encryption and OCI registry support, plus future testing and Terraform plugin availability for OpenTF. ### Source excerpt Discover how Chainguard for OpenTF bridges the open-source community, ensuring secure and efficient container ecosystem transitions. ## Fuzzy CVEs, tarfiles, and untrusted input DevFeed: [Fuzzy CVEs, tarfiles, and untrusted input]() Original publisher: [Read original article]() Published: 2023-07-27T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Cybersecurity](), [Vulnerabilities](), [common vulnerabilities and exposures](), [Python](), [Open Source](), [Maintainers](), [NVD]() Tags: [common-vulnerabilities-and-exposures](), [cve](), [cves](), [cybersecurity](), [go](), [maintainers](), [nvd](), [open-source](), [python](), [scanner](), [scanners](), [software-supply-chain](), [vulnerability-scanner](), [vulnerability-scanning](), [wolfi]() ### AI overview This article examines CVE-2007-4559 in Python's tarfile module, why the 15-year-old issue may still appear in security scanners, and why its classification as a vulnerability is disputed. It discusses CVE processes, NVD entries, open-source maintainer constraints, and the risks of extracting untrusted tarfile inputs. ### Source excerpt Navigate fuzzy CVEs, tarfiles, and untrusted input with Chainguard, paving the way to secure coding practices. ## How Chainguard fixes vulnerabilities before they're detected DevFeed: [How Chainguard fixes vulnerabilities before they're detected]() Original publisher: [Read original article]() Published: 2023-07-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Vulnerabilities](), [Go](), [Security](), [Software](), [Pull Request](), [HTTP](), [releases](), [cloud-infrastructure](), [OAI-PMH]() Tags: [automated](), [base-images](), [build](), [chainguard](), [cve](), [go](), [http](), [image-cves](), [library](), [net](), [repo](), [scanner](), [scanners](), [security](), [vulnerabilities](), [vulnerability](), [vulnerability-management](), [vulnerability-scanning](), [wolfi]() ### AI overview Chainguard describes how Wolfi rapidly remediated CVE-2023-29406 in Go by automating upstream release monitoring, package rebuilding, testing, review, and release. The article explains that the fix reached Wolfi-packaged Go applications before vulnerability scanners had the information needed to detect it, and that the updated Go image and dependent packages were rebuilt to include the fix. ### Source excerpt Uncover Chainguard's strategic vulnerability remediation, enhancing your software's security posture. ## Chainguard to accelerate VEX adoption through OpenVEX specification DevFeed: [Chainguard to accelerate VEX adoption through OpenVEX specification]() Original publisher: [Read original article]() Published: 2023-01-31T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [openvex](), [chainguard](), [supply-chain-security](), [anchore](), [Vulnerabilities]() Tags: [anchore](), [chainguard](), [chainguard-images](), [cyclonedx](), [false-positives](), [google](), [images](), [linux-foundation](), [openvex](), [sbom-vex](), [scanners](), [security](), [software-supply-chain](), [spdx](), [supply-chain](), [vex](), [vulnerabilities](), [vulnerability](), [vulnerability-tool](), [wolfi]() ### AI overview Chainguard announces the OpenVEX specification and reference toolchain, developed with industry and CISA VEX Working Group collaboration. OpenVEX helps software producers describe vulnerability exploitability and enables consumers to filter false positives, complementing SBOMs. ### Source excerpt VEX needs the industry to come together to build formats that integrate into existing practices. OpenVEX enables organizations to put VEX into practice. ## SSL scanners DevFeed: [SSL scanners]() Original publisher: [Read original article]() Author: Marek Published: 2012-11-11T23:00:00Z Content type: opinion Language: en Sources: [Marek Majkowski]() Topics: [SSL](), [TLS (Transport Layer Security)](), [client](), [browser]() Tags: [browser](), [client](), [scanners](), [ssl](), [tls](), [traffic]() ### AI overview The author analyzes unusual SSL client requests observed while recording traffic on port 443 to build a database of SSL fingerprints. The article compares scans associated with SSL Labs, Netco Solutions, Johns Hopkins University, Amazon, and Opera, and discusses possible purposes and suspicious protocol probes. ### Source excerpt SSL scanners In June I started playing with fingerprinting SSL client requests. For example, an SSL fingerprint of my browser is: Read the docs of fingerprint format, or even more detailed description. I wanted to prepare a database of popular fingerprints, so I started recording traffic on port 443. I quickly noticed that apart from normal traffic there are some hosts sending weird SSL requests that make no practical sense and look like scanning.