# secure minimal image

Published articles for secure minimal image.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Subtraction by addition: Leaner images, safer code

DevFeed: [Subtraction by addition: Leaner images, safer code](<https://devfeed.tech/articles/subtraction-by-addition-leaner-images-safer-code-13243.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/subtraction-by-addition-leaner-images-safer-code>)

Published: 2024-03-29T00:00:00Z

Content type: comparison

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [Docker Hub](<https://devfeed.tech/topics/docker-hub.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [comparison](<https://devfeed.tech/tags/comparison.md>), [container-image](<https://devfeed.tech/tags/container-image.md>), [cves](<https://devfeed.tech/tags/cves.md>), [docker-hub](<https://devfeed.tech/tags/docker-hub.md>), [image-cve](<https://devfeed.tech/tags/image-cve.md>), [secure-minimal-image](<https://devfeed.tech/tags/secure-minimal-image.md>)

### AI overview

The article compares Chainguard Images with commonly used container images for Python, kubectl, openjdk, and golang. It reports substantially smaller image sizes and zero listed CVEs in the examples, while explaining that reducing vulnerability noise can help security teams identify meaningful risks.

### Source excerpt

Learn how adding a few characters to your image names with Chainguard Images can slash image sizes by 93% and drop CVEs to zero.

## A guide on how to use Chainguard Images for public catalog tier users

DevFeed: [A guide on how to use Chainguard Images for public catalog tier users](<https://devfeed.tech/articles/a-guide-on-how-to-use-chainguard-images-for-public-catalog-tier-users-12858.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/a-guide-on-how-to-use-chainguard-images-for-public-catalog-tier-users>)

Published: 2023-06-23T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [migration](<https://devfeed.tech/topics/migration.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [chaingaurd-images](<https://devfeed.tech/tags/chaingaurd-images.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [container](<https://devfeed.tech/tags/container.md>), [container-image-registry](<https://devfeed.tech/tags/container-image-registry.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [guide](<https://devfeed.tech/tags/guide.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [images](<https://devfeed.tech/tags/images.md>), [migration](<https://devfeed.tech/tags/migration.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [open-source-software](<https://devfeed.tech/tags/open-source-software.md>), [secure-by-default](<https://devfeed.tech/tags/secure-by-default.md>), [secure-container-image](<https://devfeed.tech/tags/secure-container-image.md>), [secure-minimal-image](<https://devfeed.tech/tags/secure-minimal-image.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [wolfi](<https://devfeed.tech/tags/wolfi.md>)

### AI overview

This guide explains a policy change affecting Chainguard Images public catalog users. From August 16, 2023, public-tier users can pull only the latest tags and continue to pull images by digest; access to other tags requires a Standard or Custom catalog subscription. It describes the impact on existing build processes, authentication errors, migration options, and technical approaches for using images without version tags.

### Source excerpt

Learn about the upcoming Chainguard Images catalog changes and the actions required for Public tier users.

## A thought experiment on using low-vulnerability Chainguard Images to speed government software delivery

DevFeed: [A thought experiment on using low-vulnerability Chainguard Images to speed government software delivery](<https://devfeed.tech/articles/ship-software-to-uncle-sam-faster-with-zero-known-vulnerability-containers-13230.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/ship-software-to-uncle-sam-faster-with-zero-known-vulnerability-containers>)

Published: 2023-06-20T00:00:00Z

Content type: opinion

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Containers](<https://devfeed.tech/topics/containers.md>), [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [authority to operate](<https://devfeed.tech/topics/authority-to-operate.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [chainguard labs](<https://devfeed.tech/topics/chainguard-labs.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [ato](<https://devfeed.tech/tags/ato.md>), [authority-to-operate](<https://devfeed.tech/tags/authority-to-operate.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [chainguard-labs](<https://devfeed.tech/tags/chainguard-labs.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [containers](<https://devfeed.tech/tags/containers.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [government](<https://devfeed.tech/tags/government.md>), [image-cves](<https://devfeed.tech/tags/image-cves.md>), [secure-container-image](<https://devfeed.tech/tags/secure-container-image.md>), [secure-minimal-image](<https://devfeed.tech/tags/secure-minimal-image.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>), [vulnerability-scanner](<https://devfeed.tech/tags/vulnerability-scanner.md>)

### AI overview

This opinion article proposes studying whether Chainguard Images with zero-known or low vulnerability counts could reduce timelines and staff costs in government Authority to Operate processes. It presents this as a hypothesis requiring comparison with other ATO processes, not as a demonstrated result.

### Source excerpt

Discover how 0-known vulnerability containers from Chainguard Labs could accelerate software delivery to the government.

## Building Chainguard's container image registry

DevFeed: [Building Chainguard's container image registry](<https://devfeed.tech/articles/building-chainguard-s-container-image-registry-12903.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/building-chainguards-container-image-registry>)

Published: 2023-05-23T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [Cloudflare](<https://devfeed.tech/topics/cloudflare.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-image-registry](<https://devfeed.tech/tags/chainguard-image-registry.md>), [cloudflare](<https://devfeed.tech/tags/cloudflare.md>), [container](<https://devfeed.tech/tags/container.md>), [container-image](<https://devfeed.tech/tags/container-image.md>), [container-image-registry](<https://devfeed.tech/tags/container-image-registry.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [github-container-registry](<https://devfeed.tech/tags/github-container-registry.md>), [hardened-image](<https://devfeed.tech/tags/hardened-image.md>), [minimal-image](<https://devfeed.tech/tags/minimal-image.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [registry](<https://devfeed.tech/tags/registry.md>), [secure-by-design](<https://devfeed.tech/tags/secure-by-design.md>), [secure-container-images](<https://devfeed.tech/tags/secure-container-images.md>), [secure-images](<https://devfeed.tech/tags/secure-images.md>), [secure-minimal-image](<https://devfeed.tech/tags/secure-minimal-image.md>), [security](<https://devfeed.tech/tags/security.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>)

### AI overview

Chainguard explains why it built its own passwordless container image registry to improve security, control distribution, and manage costs. The registry is built on Cloudflare R2, uses short-lived OIDC credentials, and allows GitHub Actions workflows--not individual employees--to push images.

### Source excerpt

We built a passwordless container image registry with a focus on security to sustain the foundation for ongoing product growth & feature additions for our users.

## Scaling Chainguard Images with a growing catalog and proactive security updates

DevFeed: [Scaling Chainguard Images with a growing catalog and proactive security updates](<https://devfeed.tech/articles/scaling-chainguard-images-with-a-growing-catalog-and-proactive-security-updates-13216.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/scaling-chainguard-images-with-a-growing-catalog-and-proactive-security-updates>)

Published: 2023-05-18T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Security](<https://devfeed.tech/topics/security.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cve](<https://devfeed.tech/tags/cve.md>), [provenance](<https://devfeed.tech/tags/provenance.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [secure-minimal-image](<https://devfeed.tech/tags/secure-minimal-image.md>), [security](<https://devfeed.tech/tags/security.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>)

### AI overview

Chainguard announces updates to Chainguard Images, including paid Standard and Custom catalogs, authentication for proactive security notifications, and a dedicated registry. The updates target enterprise development teams and support software supply chain security.

### Source excerpt

Chainguard Images boosts support for enterprise development teams with expanded catalog offerings, a dedicated registry, and proactive security notifications.