# secure by default Published articles for secure by default. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## How platform engineering 2.0 mitigates AI security and compliance risks DevFeed: [How platform engineering 2.0 mitigates AI security and compliance risks]() Original publisher: [Read original article]() Author: Steven Vaughan-Nichols Published: 2026-09-04T16:46:09Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [Security](), [Securing AI](), [Responsibility & Safety]() Tags: [ai-agents](), [compliance](), [infrastructure](), [large-language-models-llms](), [platform-engineering](), [policy](), [secure-by-default](), [security]() ### AI overview The article explains how Platform Engineering 2.0 evolves existing Kubernetes, pipeline, internal developer platform, and process foundations to support production use of LLMs and AI agents. It emphasizes platform-level isolation, governance, policy-as-code, guardrails, and continuous compliance to mitigate AI security, regulatory, and operational risks. ### Source excerpt Discover how the shift from Platform Engineering 1.0 to 2.0 addresses critical AI security and compliance challenges. Learn how native model governance and workload isolation establish a scalable, secure foundation for integrating AI agents and LLMs into production workflows. ## Backblaze B2 To Encrypt New Uploads by Default DevFeed: [Backblaze B2 To Encrypt New Uploads by Default]() Original publisher: [Read original article]() Author: Backblaze Published: 2026-08-27T13:00:00Z Content type: release Language: en Sources: [Backblaze Blog | Cloud Storage & Cloud Backup]() Topics: [Cloud](), [Encryption](), [Security](), [configuration]() Tags: [b2cloud](), [cloud](), [cloud-storage](), [configuration](), [encryption](), [featured](), [featured-cloud-storage](), [secure-by-default](), [security](), [storage](), [uncategorized](), [update]() ### AI overview Backblaze B2 will automatically apply server-side AES-256 encryption to newly uploaded and copied object data at rest. SSE-B2 requires no application changes, added cost, or performance tradeoff, while SSE-C remains available for objects encrypted with customer-provided keys. ### Source excerpt Starting September 14, Backblaze B2 will automatically encrypt every new upload and destination copy at rest with AES-256. Always-on SSE-B2 strengthens security without application changes, added costs, or performance impact, while preserving SSE-C for customer-managed encryption keys when required instead. The post Backblaze B2 To Encrypt New Uploads by Default appeared first on Backblaze Blog | Cloud Storage & Cloud Backup ## Why AI-assisted attacks made software supply chain security its own category DevFeed: [Why AI-assisted attacks made software supply chain security its own category]() Original publisher: [Read original article]() Published: 2026-08-03T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Security](), [Artificial Intelligence](), [Open Source](), [Agent Skills](), [Application Security](), [CI/CD]() Tags: [agent-skills](), [ai](), [ai-assisted-attacks](), [ci-cd](), [containers](), [open-source](), [secure-by-default](), [security](), [software-supply-chain](), [software-supply-chain-security](), [supply-chain-security]() ### AI overview The article argues that AI has changed the economics and speed of software supply chain attacks, making software supply chain security a distinct category requiring dedicated tooling, budgets, and strategy. It describes how AI benefits defenders and attackers, while agents accelerate dependency adoption and introduce risks through artifacts such as agent skills. ### Source excerpt Software supply chain security is now its own category. Discover why AI is driving a shift toward trusted, secure-by-default open source. ## Understanding platform engineering's role in staying compliant with the EU's CRA DevFeed: [Understanding platform engineering's role in staying compliant with the EU's CRA]() Original publisher: [Read original article]() Author: Nigel Douglas Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [Security](), [vulnerability management](), [supply-chain-security](), [incident]() Tags: [compliance](), [cyber-resilience-act](), [engineering](), [eu](), [idp](), [incident](), [platform](), [platform-engineering](), [policy](), [regulatory](), [sboms](), [secure-by-default](), [secure-software](), [security](), [software-supply-chain](), [supply-chain](), [vulnerabilities](), [vulnerability-management]() ### AI overview The article explains how platform engineering can operationalize compliance with the EU's Cyber Resilience Act by embedding secure-by-default practices, automated SBOMs, and rapid incident reporting into an Internal Development Platform. It also outlines CRA compliance milestones and manufacturer responsibilities, including vulnerability management and security updates. ### Source excerpt The EU's Cyber Resilience Act (CRA) mandates secure software by design. Discover how platform engineering operationalizes compliance by embedding secure-by-default standards, automated SBOMs, and rapid incident reporting into your Internal Development Platform (IDP). This approach transforms compliance into a frictionless golden path ## Booz Allen Hamilton signs enterprise license agreement with Chainguard DevFeed: [Booz Allen Hamilton signs enterprise license agreement with Chainguard]() Original publisher: [Read original article]() Published: 2026-07-21T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [chainguard libraries](), [open-source-security](), [Security](), [Vulnerabilities](), [Open Source](), [Development]() Tags: [announce](), [ato](), [authority-to-operate](), [booz-allen-hamilton](), [booz-allen-hamilton-engineering](), [booz-chainguard-partnership](), [chainguard](), [chainguard-booz](), [chainguard-containers](), [chainguard-libraries](), [compliance](), [container-images](), [development](), [enterprise](), [government](), [partner](), [secure-by-default](), [security](), [supply-chain](), [trust](), [us](), [vulnerabilities]() ### AI overview Booz Allen Hamilton has signed an enterprise license agreement with Chainguard, giving more than 6,000 engineers access to Chainguard Containers and Chainguard Libraries across U.S. government programs. The agreement is intended to support secure-by-default software delivery, vulnerability remediation, compliance, and software supply chain requirements. ### Source excerpt Booz Allen and Chainguard partner to help 6,000+ engineers deliver secure-by-default software across U.S. government programs. ## Adopt hardened containers without changing your pipelines, tooling, or environment DevFeed: [Adopt hardened containers without changing your pipelines, tooling, or environment]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [chainguard containers](), [Security](), [Deployment](), [Tooling]() Tags: [chainguard](), [chainguard-containers](), [chainguard-redhat-rpm](), [cmvp](), [compliance](), [containers](), [cyclonedx](), [dependabot](), [deployment](), [fips](), [hardened-containers](), [provenance](), [rhel](), [rhel-10](), [rhel-9](), [rpm-10](), [rpm-9](), [sboms](), [secure-by-default](), [security](), [vulnerabilities]() ### AI overview Chainguard announces updates to Chainguard Containers that support enterprise adoption of hardened images without changing existing pipelines, tooling, or environments. The updates include RPM support for RHEL 9 and RHEL 10, compatible image tags, a CMVP-validated Go Geomys FIPS image, Dependabot support for private registries, and flattened CycloneDX SBOMs for compliance tools. ### Source excerpt Chainguard expands Containers with RPM support, FIPS enhancements, and easier migrations, bringing secure-by-default software to enterprise workflows. ## Securing the AI coding ecosystem: Chainguard and the AI tools developers use DevFeed: [Securing the AI coding ecosystem: Chainguard and the AI tools developers use]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Kiro](), [AI Development](), [cursor](), [Security](), [Containers](), [Open Source]() Tags: [ai](), [ai-agents](), [ai-coding](), [aws-kiro](), [chainguard](), [chainguard-ai-tools](), [chainguard-libraries](), [containers](), [cursor](), [developers](), [kiro](), [open-source](), [secure-by-default]() ### AI overview Chainguard argues that AI coding tools such as Kiro and Cursor need trusted sources for dependencies and container images. The article describes Chainguard Containers, Libraries, and a Kiro plugin intended to move projects from public registries to hardened supply-chain components. ### Source excerpt Chainguard brings secure-by-default containers and libraries to AI coding tools like Kiro and Cursor, making trusted open source the default. ## Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security DevFeed: [Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security]() Original publisher: [Read original article]() Published: 2026-06-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard containers](), [container images](), [Security](), [Containers](), [chainguard libraries]() Tags: [chainguard](), [chainguard-containers](), [chainguard-gartner](), [chainguard-gartner-mq](), [chainguard-libraries](), [container-images](), [gartner](), [gartner-magic-quadrant](), [sboms](), [secure-by-default](), [security](), [software-supply-chain-security](), [software-supply-chain-security-gartner](), [software-supply-chain-security-mq](), [zero-cves]() ### AI overview Chainguard's article discusses its recognition as a Leader in Gartner's inaugural Magic Quadrant for Software Supply Chain Security. It argues that accelerating vulnerability exploitation and AI-assisted development require prevention-oriented, secure-by-default supply chain security. The article highlights Chainguard Containers, which provides minimal container images rebuilt daily from source, with zero CVEs, SBOMs, and verifiable signatures, and briefly introduces Chainguard Libraries. ### Source excerpt Gartner names Chainguard a Leader in Software Supply Chain Security, highlighting its secure-by-default approach and market vision. ## Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security DevFeed: [Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security]() Original publisher: [Read original article]() Published: 2026-06-18T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [supply-chain-security](), [Security](), [Open Source]() Tags: [2026](), [chainguard](), [chainguard-gartner](), [chainguard-gartner-magic-quadrant](), [cyber-resilience-act](), [fedramp](), [gartner](), [gartner-mq-software-supply-chain](), [nis2](), [provenance](), [sboms](), [secure-by-default](), [security](), [slsa](), [software-supply-chain](), [software-supply-chain-security](), [software-supply-chain-security-gartner]() ### AI overview Chainguard announces that it has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Software Supply Chain Security. The article highlights Chainguard's secure-by-default approach, hardened open source artifacts, cryptographic signatures, signed SBOMs, and SLSA-aligned provenance, along with support for regulatory requirements. ### Source excerpt Chainguard named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security, recognized for vision and secure-by-default innovation. ## Security risks and safeguards for vibe-coded applications DevFeed: [Security risks and safeguards for vibe-coded applications]() Original publisher: [Read original article]() Author: Martin Fowler (martin@martinfowler.com) Published: 2026-05-27T14:03:00Z Content type: opinion Language: en Sources: [Martin Fowler]() Topics: [Vibe coding](), [Security](), [AI Development](), [Artificial Intelligence](), [Code](), [Claude](), [Repl.it]() Tags: [ai](), [claude](), [coding](), [permission](), [permissions](), [replit](), [secure-by-default](), [security](), [software](), [vibe-coding]() ### AI overview The article examines security problems encountered while scaling a vibe-coded application built with Gemini, Replit AI, and Claude AI. It describes risks including public storage access and excessive token permissions, and recommends security context files, cautious permission handling, security intelligence feeds, and secure-by-default harnesses and templates. ### Source excerpt Vibe coding has significantly accelerated software prototyping but AI agents frequently recommend insecure configurations, creating security problems. Gautam Koul, Lucian Moss, Neil Drew-Lopez, and Daberechi Ruth Edeokoh share their experience while building applications for Thoughtworks's global marketing. They learned that to combat this we need to write a security context file to guide the AI, be cautious with AI permission requests, create a daily security intelligence feed, and provide builders with a secure-by-default harness and templates. more... ## Preparing for Mythos: Practical advice for engineering teams DevFeed: [Preparing for Mythos: Practical advice for engineering teams]() Original publisher: [Read original article]() Published: 2026-05-26T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [ai security](), [Security](), [anthropic](), [exploit chaining](), [Vulnerabilities](), [open-source-security](), [cURL]() Tags: [advice](), [ai](), [ai-security](), [ai-vulnerability-remediation](), [anthropic](), [article](), [chainguard-containers](), [chainguard-for-ai](), [chainguard-libraries](), [engineering](), [exploit-chaining](), [exploits](), [mythos](), [secure-by-default](), [security](), [vulnerabilities](), [work]() ### AI overview This opinion assesses the security implications of Anthropic's Mythos model and argues that defenders should use AI-assisted methods to identify and remediate vulnerabilities. It says Mythos appears especially capable at exploiting vulnerabilities and chaining exploits, while a test on curl found one new non-critical vulnerability. ### Source excerpt Anthropic's Mythos raises the stakes for software security. Learn how to survive faster exploits with secure-by-default supply chains and AI-assisted defense. ## Secure-by-default: Chainguard customers unaffected by the Trivy supply chain attack DevFeed: [Secure-by-default: Chainguard customers unaffected by the Trivy supply chain attack]() Original publisher: [Read original article]() Published: 2026-03-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [trivy](), [chainguard](), [incident](), [Security](), [CI/CD](), [Open Source]() Tags: [chainguard](), [ci-cd](), [incident](), [secure-by-default](), [security](), [supply-chain](), [supply-chain-security](), [trivy](), [vulnerability]() ### AI overview Chainguard reports that its customers were unaffected by the March 19, 2026 supply chain attack involving malicious releases of the Trivy vulnerability scanner, trivy-action, and setup-trivy. The article explains how compromised credentials enabled the releases, why the incident threatened CI/CD pipeline secrets, and what organizations using the affected versions should do. ### Source excerpt Chainguard customers are unaffected by the Trivy supply chain attack. ## Introducing Chainguard Repository: A unified experience for secure-by-default open source artifacts DevFeed: [Introducing Chainguard Repository: A unified experience for secure-by-default open source artifacts]() Original publisher: [Read original article]() Published: 2026-03-17T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard repository](), [chainguard](), [Open Source](), [Security](), [Containers]() Tags: [agent-skills](), [ai-agents](), [chainguard](), [chainguard-repo](), [chainguard-repository](), [ci-cd-workflows](), [container-images](), [containers](), [libraries](), [open-source](), [open-source-artifacts](), [packages](), [policy](), [secure-by-default](), [virtual-machine-images]() ### AI overview Chainguard introduces Chainguard Repository, a unified experience for consuming secure-by-default open source artifacts with configurable policy enforcement. It brings together container images, libraries, OS packages, agent skills, CI/CD workflows, and virtual machine images through Chainguard-managed endpoints and provides compliance controls, security improvements through source rebuilds, and visibility dashboards. ### Source excerpt Chainguard Repository is a single, Chainguard-managed experience for pulling secure-by-default artifacts with built-in, configurable policy enforcement. ## Introducing Chainguard Commercial Builds: Secure-by-default containers for commercial software DevFeed: [Introducing Chainguard Commercial Builds: Secure-by-default containers for commercial software]() Original publisher: [Read original article]() Published: 2026-03-17T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard commercial builds](), [Containers](), [open-source-security](), [supply-chain-security](), [Open Source](), [Security]() Tags: [azul](), [chainguard](), [chainguard-commercial-builds](), [chainguard-containers](), [containers](), [elastic](), [f5-nginx](), [gitlab](), [grafana-labs](), [open-source-software](), [partnership](), [provenance](), [sbom](), [secure-by-default](), [supply-chain-security](), [vulnerabilities]() ### AI overview Chainguard announces Commercial Builds, a partnership program with commercial and open source software providers. The program packages their software with the Chainguard Factory to provide hardened container images and support more consistent software supply chain security. ### Source excerpt Chainguard Commercial Builds is a new partnership program with commercial and open source software providers to package software using the Chainguard Factory. ## Chainguard + Second Front: A faster, more secure path into government markets DevFeed: [Chainguard + Second Front: A faster, more secure path into government markets]() Original publisher: [Read original article]() Published: 2026-02-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [container images](), [DevSecOps](), [supply-chain-security](), [Vulnerabilities](), [Deployment](), [Cybersecurity]() Tags: [chainguard](), [chainguard-containers](), [chainguard-for-compliance](), [cmmc](), [container-image-compliance](), [container-images](), [cve-remediation](), [cybersecurity](), [devsecops](), [federal-compliance](), [fedramp](), [government](), [iso](), [provenance](), [sbom](), [second-front-systems](), [secure-by-default](), [secure-by-design](), [security](), [soc-2](), [software-supply-chain]() ### AI overview Chainguard and Second Front are partnering to help software companies pursue federal market requirements, including FedRAMP authorization and DoD impact-level accreditations. The article describes combining Chainguard's hardened container images with Second Front's Game Warden DevSecOps platform to support secure application delivery and vulnerability reduction. ### Source excerpt Discover how Chainguard and Second Front are partnering to help build a secure path into government markets for your organization. ## Expanding Chainguard's Helm chart coverage and deepening user experiences DevFeed: [Expanding Chainguard's Helm chart coverage and deepening user experiences]() Original publisher: [Read original article]() Published: 2026-02-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Kubernetes](), [DevOps](), [container images](), [Security](), [SRE](), [Deployment](), [YAML]() Tags: [bitnami-alternative](), [bitnami-helm-charts](), [chainguard](), [chainguard-containers](), [chainguard-helm](), [chainguard-helm-charts](), [container-images](), [deployment](), [devops](), [helm](), [helm-charts](), [kubernetes](), [provenance](), [secure-by-default](), [secure-container-images](), [security](), [sre](), [yaml]() ### AI overview Chainguard is expanding its Helm chart catalog to include community charts and improve the user experience. The charts are designed to work with Chainguard container images, reducing manual YAML configuration, troubleshooting, provenance checks, and security risks in Kubernetes deployments. ### Source excerpt Chainguard's expanded Helm charts deliver signed, tested, secure-by-default deployments that eliminate YAML toil and simplify Kubernetes at scale. ## Be my base image: Introducing Linky's Matchmaker DevFeed: [Be my base image: Introducing Linky's Matchmaker]() Original publisher: [Read original article]() Published: 2026-02-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Dockerfile](), [chainguard containers](), [Containers](), [Vulnerabilities](), [App](), [Web]() Tags: [base-images](), [chainguard](), [chainguard-containers](), [chainguard-images](), [chainguard-valentine-s-day](), [comparisons](), [container-images](), [containers](), [dockerfile-converter](), [dockerfiles](), [documentation](), [images](), [secure-by-default](), [vulnerabilities]() ### AI overview Linky's Matchmaker is a web-based app that analyzes Dockerfiles, recommends compatible Chainguard Containers, and generates downloadable converted Dockerfiles. It also provides image availability checks, documentation and tag links, and vulnerability comparisons. ### Source excerpt Linky's Matchmaker converts your Dockerfile to Chainguard Containers, recommending secure, minimal base images and generating an updated file in minutes ## The tech leader's mandate: Use engineering to accelerate sales velocity DevFeed: [The tech leader's mandate: Use engineering to accelerate sales velocity]() Original publisher: [Read original article]() Published: 2026-02-04T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Security](), [supply-chain-security](), [Software Engineering](), [Development]() Tags: [chainguard](), [chainguard-containers](), [chainguard-for-startups](), [chainguard-libraries](), [chainguard-startups-pricing](), [container-images](), [containers](), [packages](), [sales](), [sboms](), [secure-by-default](), [security](), [security-compliance](), [software-supply-chain](), [velocity]() ### AI overview This article argues that security and compliance concerns can slow enterprise sales for startups. It recommends embedding security into the software development lifecycle and presents Chainguard's secure-by-default components as a way to reduce software supply chain friction while supporting product development and sales velocity. ### Source excerpt Chainguard can help your engineering team accelerate sales velocity by reducing security friction and enabling engineering to be a growth accelerator. ## The maturity gap in ML pipeline infrastructure DevFeed: [The maturity gap in ML pipeline infrastructure]() Original publisher: [Read original article]() Published: 2026-01-26T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [Architecture & Design](), [Tooling](), [Machine learning](), [Software Engineering](), [PyTorch]() Tags: [ai-coding](), [attacks](), [chainguard-pytorch-image](), [infrastructure](), [machine-learning](), [machine-learning-pipelines](), [ml](), [ml-ops](), [pipeline](), [python](), [pytorch](), [secure-by-default](), [security](), [security-best-practices](), [serialization](), [serialization-format](), [tooling]() ### AI overview This article argues that ML pipeline infrastructure in 2026 has a security maturity gap: common tooling does not yet provide the secure-by-default protections expected in software engineering. It examines risks including data poisoning, model laundering, and insecure model serialization, and discusses short-term mitigations and longer-term industry improvements. ### Source excerpt ML pipelines in 2026 still lack secure-by-default tooling. Learn the key security gaps in ML Ops and how teams can reduce risk today. ## Security baked into your software supply chain: The combined benefit of JFrog and Chainguard DevFeed: [Security baked into your software supply chain: The combined benefit of JFrog and Chainguard]() Original publisher: [Read original article]() Published: 2026-01-23T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Security](), [container images](), [chainguard](), [Jfrog](), [Docker Hub](), [AI Models]() Tags: [ai](), [ai-models](), [base-images](), [chainguard](), [chainguard-containers](), [chainguard-jfrog](), [chainguard-jfrog-collaboration](), [chainguard-libraries](), [compliance](), [container](), [container-images](), [devops](), [docker-hub](), [jfrog](), [jfrog-artifactory](), [jfrog-xray](), [secure-by-default](), [security](), [software-supply-chain](), [supply-chain](), [vulnerabilities]() ### AI overview This article describes a Chainguard and JFrog collaboration for securing the software supply chain through secure-by-default container base images, policy-based curation, and continuous compliance. It presents Chainguard as providing clean, continuously updated images and JFrog Curation as screening upstream components and enforcing organizational policies. ### Source excerpt Chainguard and JFrog secure the software supply chain with secure-by-default container images, policy-based curation, and continuous compliance. ## Guiding the future of Chainguard OS: Announcing the FUD Committee DevFeed: [Guiding the future of Chainguard OS: Announcing the FUD Committee]() Original publisher: [Read original article]() Published: 2026-01-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard os](), [Security](), [supply-chain-security](), [Open Source](), [Linux]() Tags: [chainguard](), [chainguard-containers](), [chainguard-customers](), [chainguard-os](), [chainguard-steering-committee](), [enterprise](), [open-source](), [requirements](), [secure-by-default](), [security](), [software-supply-chain](), [wolfi]() ### AI overview Chainguard announces the Fully User Directed (FUD) Committee, a customer-led steering committee intended to guide the future of Chainguard OS. The committee will represent customer organizations and help shape technical decisions, standards, and the product roadmap around secure, production-scale software supply chain needs. ### Source excerpt The Chainguard OS Fully User Directed Committee is a customer-led steering committee for Chainguard OS. Learn how you can be a member. ## Applying SOC 2 with Chainguard: A practical guide for DevOps and engineering leaders DevFeed: [Applying SOC 2 with Chainguard: A practical guide for DevOps and engineering leaders]() Original publisher: [Read original article]() Published: 2026-01-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [SOC](), [DevOps](), [supply-chain-security](), [Containers](), [CI/CD](), [Software as a service]() Tags: [chainguard-containers](), [chainguard-libraries](), [chainguard-sboms](), [ci-cd](), [compliance](), [containers](), [devops](), [how-does-chainguard-help-with-soc-2](), [sboms](), [secure-by-default](), [security](), [soc](), [soc-2](), [soc-2-chainguard](), [soc-2-compliance](), [software-supply-chain]() ### AI overview This practical guide explains how DevOps and engineering teams can apply SOC 2 principles to continuously changing cloud-native infrastructure and software supply chains. It covers Type 1 and Type 2 reporting, continuous control evidence, automated integrity checks, audit visibility, secure-by-default containers, and automated SBOMs, with Chainguard presented as a way to reduce audit friction without slowing delivery. ### Source excerpt Learn how Chainguard helps DevOps teams meet SOC 2 requirements with secure-by-default containers, automated SBOMs, and continuous, audit-ready evidence. ## Why Trusted Software Supply Chains Matter More Than Zero-CVE Container Claims DevFeed: [Why Trusted Software Supply Chains Matter More Than Zero-CVE Container Claims]() Original publisher: [Read original article]() Published: 2026-01-15T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [container-security](), [container images](), [Docker Hub](), [Containers](), [Docker](), [Software]() Tags: [ceo](), [chainguard](), [chainguard-containers](), [chainguard-images](), [chainguard-libraries](), [container-images](), [docker](), [docker-hub](), [docker-images](), [echo-security](), [hardened-images](), [hardening](), [minimus](), [rapidfort](), [secure-by-default](), [security](), [software-supply-chain-security](), [wiz-images](), [zero-cves]() ### AI overview Chainguard CEO Dan Lorenc argues that container security depends on trusting the origins and build processes of software, rather than relying primarily on post-hoc image hardening or zero-CVE claims. ### Source excerpt Chainguard CEO Dan Lorenc explains why real security comes from trusted, from-source software supply chains, not post-hoc hardening or zero-CVE promises. ## Building digital products for the Cyber Resilience Act DevFeed: [Building digital products for the Cyber Resilience Act]() Original publisher: [Read original article]() Published: 2026-01-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [supply-chain-security](), [Software Engineering](), [DevOps](), [Open Source](), [Internet of things](), [Software as a service]() Tags: [chainguard-containers](), [container-images](), [cra-requirements](), [cyber-resilience-act](), [devops](), [eu](), [eu-cra-for-containers](), [european-container-compliance](), [iot](), [saas](), [secure-by-default](), [security](), [software-supply-chain](), [vulnerabilities]() ### AI overview The article explains how teams building software or hardware products for EU customers can prepare for the Cyber Resilience Act (CRA). It covers security-by-design requirements, secure development and build practices, vulnerability reporting, enforcement timelines, and how Chainguard can help reduce security toil. ### Source excerpt Get ready for the EU Cyber Resilience Act. See how Chainguard helps teams meet CRA security-by-design requirements with zero-CVE container images and libraries. [Next page]()