# sigstore Published articles for sigstore. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## What it took to reach 1 billion build manifests DevFeed: [What it took to reach 1 billion build manifests]() Original publisher: [Read original article]() Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [container images](), [chainguard os](), [supply-chain-security](), [sigstore](), [Linux](), [NumPy]() Tags: [chainguard](), [chainguard-factory](), [chainguard-os](), [container-images](), [go](), [open-source](), [provenance](), [sbom](), [sigstore](), [software-supply-chain]() ### AI overview Chainguard describes how it doubled container build output from 500 million to more than 1 billion manifests in six months. The article explains how Chainguard Factory and Chainguard OS support continuous rebuilds, while using source builds, SLSA Level 3 provenance, Sigstore signatures, and full SBOMs. ### Source excerpt Chainguard doubled its container build output in six months. Learn how Factory 2.0 uses AI and reconciliation to rebuild secure software at scale. ## Scaling Kubernetes governance: A platform engineer's guide to Kyverno and CEL DevFeed: [Scaling Kubernetes governance: A platform engineer's guide to Kyverno and CEL]() Original publisher: [Read original article]() Author: Koray Oksay Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Kubernetes](), [Platform Engineering](), [Security](), [developer velocity](), [Containers](), [supply-chain-security](), [YAML](), [opa](), [rego]() Tags: [common-expression-language](), [compliance](), [container-images](), [containers](), [cosign](), [deployment](), [developer-velocity](), [governance](), [hipaa](), [integration](), [kubernetes](), [kyverno](), [pci-dss](), [platform](), [policy](), [security](), [security-policies](), [sigstore](), [soc-2](), [supply-chain-security]() ### AI overview A guide to using Kyverno and its Common Expression Language support for Kubernetes governance. It explains how platform engineering teams can enforce policies, automate resource changes, generate resources, verify image signatures, and maintain security and compliance while preserving developer velocity. ### Source excerpt Kyverno with CEL support provides Policy-as-Code for Kubernetes governance. Enforce security, automate guardrails, and boost developer velocity for platform engineering teams. ## AI-driven zero-day combinations are challenging software security and open-source consumption DevFeed: [AI-driven zero-day combinations are challenging software security and open-source consumption]() Original publisher: [Read original article]() Published: 2026-05-28T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [open-source-security](), [Security](), [Open Source](), [Machine Learning, Security Attacks](), [Critical Infrastructure](), [openssf](), [sigstore]() Tags: [ai](), [anthropic-mythos](), [chainguard-containers](), [critical-infrastructure](), [fork](), [mfa](), [mythos](), [open-source](), [open-source-security](), [openssf](), [oss](), [project-glasswing](), [rust](), [sast](), [secure-open-source](), [security](), [sigstore]() ### AI overview The article argues that Mythos represents a potential new class of software-security threat: AI-driven combinations of existing issues that can produce more serious attacks than individual scanner findings. It discusses the limits of government regulation and calls for stronger trust infrastructure, coordinated disclosure, and safer open-source consumption. ### Source excerpt Mythos is changing software security fast. AI-driven zero-days demand new trust infrastructure, coordinated disclosure, and secure open source consumption. ## Securely Signing WebAssembly Components with Cosign (OIDC) DevFeed: [Securely Signing WebAssembly Components with Cosign (OIDC)]() Original publisher: [Read original article]() Author: Liam Randall Published: 2025-09-02T00:00:00Z Content type: tutorial Language: en Sources: [wasmCloud Blog]() Topics: [WebAssembly](), [sigstore](), [GitHub Container Registry](), [OpenID connect (OIDC)](), [Rust](), [Command-line interface](), [Authentication](), [Security]() Tags: [authentication](), [cli](), [cosign](), [github-container-registry](), [integrity](), [oci-registry](), [oidc](), [registry](), [security](), [signing](), [sigstore](), [supply-chain](), [supply-chain-security](), [verify](), [wasi](), [wasm-components](), [wasmcloud](), [webassembly](), [webassembly-wasmcloud-security-cosign-oidc-signing-oci-registry-supply-chain-security-wasi-wasm-comp]() ### AI overview A tutorial showing how to build a Rust-based WebAssembly component, sign it with Sigstore Cosign using OIDC identity, push it to GitHub Container Registry, and verify it before execution. ### Source excerpt Build, sign, and verify WebAssembly component artifacts using Sigstore's cosign with OIDC identity--secure, registry-native signatures for wasmCloud. ## No CVEs, No Surprises: Chainguard and the UK Software Security Code of Practice DevFeed: [No CVEs, No Surprises: Chainguard and the UK Software Security Code of Practice]() Original publisher: [Read original article]() Published: 2025-06-09T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [chainguard](), [chainguard containers](), [supply-chain-security](), [sdlc](), [Development](), [Cloud Native Ecosystem](), [Resilience](), [sigstore](), [Deployment]() Tags: [chainguard](), [chainguard-containers](), [compliance](), [cyber-resilience-act](), [emea](), [resilience](), [security](), [sigstore](), [slsa](), [software-development](), [software-supply-chain](), [sscop](), [ssdf](), [testing](), [uk](), [united-kingdom](), [zero-cves]() ### AI overview The article explains the United Kingdom's Software Security Code of Practice and maps its 14 principles across secure development, build integrity, deployment, and customer communication. It presents Chainguard Containers, provenance attestations, and signed SBOMs as ways Chainguard supports secure-by-default software and compliance efforts. ### Source excerpt Chainguard Containers support compliance with the United Kingdom's Software Security Code of Practice. Check out what the framework entails and how we help. ## Workload Identity Meets Supply Chain Security: Teleport's Sigstore Integration DevFeed: [Workload Identity Meets Supply Chain Security: Teleport's Sigstore Integration]() Original publisher: [Read original article]() Author: daniel.upton@goteleport.com (Dan Upton) Published: 2025-06-05T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [sigstore](), [supply-chain-security](), [Security](), [OpenID connect (OIDC)](), [GitHub Actions]() Tags: [attestation](), [github-actions](), [oidc](), [provenance](), [security](), [signing](), [sigstore](), [supply-chain](), [supply-chain-security]() ### AI overview This article explains how Teleport integrates with Sigstore to strengthen software supply chain security for workload identity. It describes signing software artifacts and attestations, and explains Sigstore's keyless approach using single-use certificates tied to OIDC identities. ### Source excerpt Learn how to use Teleport's integration with Sigstore to build supply chain security into your workload identity. ## Chainguard's Catalog of 1,300+ Container Images: Secure Foundation for Every Engineering Team DevFeed: [Chainguard's Catalog of 1,300+ Container Images: Secure Foundation for Every Engineering Team]() Original publisher: [Read original article]() Published: 2025-05-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [chainguard](), [Containers](), [chainguard os](), [container-security](), [Open Source](), [sigstore]() Tags: [chainguard](), [chainguard-catalog](), [chainguard-containers](), [chainguard-factory](), [chainguard-images](), [chainguard-os](), [container](), [container-images](), [cve-remediation](), [dependencies](), [open-source](), [provenance](), [safe-source-for-open-source](), [sigstore](), [slsa]() ### AI overview Chainguard describes its catalog of more than 1,300 minimal, zero-CVE container images, built from source on Chainguard OS and maintained through the Chainguard Factory. The article highlights daily rebuilds, automated dependency and CVE handling, and default SBOMs, SLSA provenance, and Sigstore signatures. ### Source excerpt Chainguard Containers is a catalog of over 1,300 container images powered by Chainguard OS and the Chainguard Factory. Discover the safe source for open source. ## KubeCon Europe 2025: Why Identity is the New Backbone of Secure Infrastructure DevFeed: [KubeCon Europe 2025: Why Identity is the New Backbone of Secure Infrastructure]() Original publisher: [Read original article]() Author: david.sudia@goteleport.com (Dave Sudia) Published: 2025-04-22T00:00:00Z Content type: opinion Language: en Sources: [Teleport]() Topics: [Security](), [Cloud](), [Platform Engineering](), [supply-chain-security](), [AI Infrastructure](), [policy-as-code](), [WebAssembly](), [sigstore]() Tags: [2025](), [ai-infrastructure](), [cloud](), [cloud-native](), [kubecon](), [kubecon-eu](), [platform-engineering](), [policy-as-code](), [security](), [sigstore](), [software-supply-chain-security](), [webassembly]() ### AI overview An opinion article from KubeCon Europe 2025 argues that identity is central to securing cloud-native infrastructure. It connects platform engineering, AI workloads, software supply chain security, and WebAssembly with the need for short-lived, auditable identities and verified access for human and non-human actors. ### Source excerpt At KubeCon EU 2025, identity emerged as the key to cloud-native security. Learn why teams are shifting to short-lived, auditable identities--and how Teleport leads. ## Chainguard's Vision for a Safer Software Supply Chain DevFeed: [Chainguard's Vision for a Safer Software Supply Chain]() Original publisher: [Read original article]() Published: 2025-01-30T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard](), [Security](), [sigstore](), [Open Source]() Tags: [chainguard](), [chainguard-images](), [container-images](), [cve](), [integrity](), [open-source](), [security](), [signing](), [sigstore](), [software-development](), [software-supply-chain](), [supply-chain-attacks](), [supply-chain-integrity]() ### AI overview Chainguard presents its vision for secure software development, arguing that security and innovation should advance together. The article advocates signed binaries, verified dependencies, source-built container images, cryptographic build evidence, and broader adoption of supply-chain integrity standards such as Sigstore. ### Source excerpt Chainguard is building the future of secure software development, where security and innovation move in lockstep and every line of code makes software safer. ## Check out Chainguard at KubeCon NA in Salt Lake City on November 12-15! DevFeed: [Check out Chainguard at KubeCon NA in Salt Lake City on November 12-15!]() Original publisher: [Read original article]() Published: 2024-10-16T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard images](), [container images](), [supply-chain-security](), [sigstore](), [distroless](), [CI/CD](), [Cloud](), [Security](), [devrel]() Tags: [chainguard](), [chainguard-images](), [ci-cd](), [cloud](), [cloud-native-rejekts](), [conference](), [container](), [debug](), [developers](), [devrel](), [devsecops](), [distroless](), [event](), [kubecon](), [kubernetes](), [multi-arch](), [sboms](), [security](), [sigstore](), [sigstorecon](), [slsa](), [software-supply-chain-security]() ### AI overview Chainguard announces its participation in KubeCon North America 2024 in Salt Lake City, including product demonstrations of Chainguard Images and appearances at Cloud-Native Rejekts and SigstoreCon. ### Source excerpt Chainguard is going to be at KubeCon North America 2024 in Salt Lake City. See where we'll be and how you can meet us to learn more about Chainguard Images. ## Happy birthday Kubernetes, from K8s Co-Creator and Chainguard Co-Founder Ville Aikas DevFeed: [Happy birthday Kubernetes, from K8s Co-Creator and Chainguard Co-Founder Ville Aikas]() Original publisher: [Read original article]() Published: 2024-06-06T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Kubernetes](), [chainguard](), [Containers](), [distributed-systems](), [Cloud](), [Google]() Tags: [chainguard](), [cloud-native](), [containers](), [k8s](), [kubernetes](), [open-source](), [sigstore](), [software-supply-chain-security]() ### AI overview Chainguard co-founder and Kubernetes co-creator Ville Aikas recounts Kubernetes' origins at Google, including how ideas from the Borg system and the need for shared infrastructure influenced its development. He discusses how Kubernetes and containers enabled operating infrastructure at scale and changed security practices. ### Source excerpt Chainguard co-founder and Kubernetes co-creator Ville Aikas reflects on 10 years of innovation and shares his birthday wishes for the future of cloud-native. ## New Chainguard Images for Selenium, Gotenberg and more DevFeed: [New Chainguard Images for Selenium, Gotenberg and more]() Original publisher: [Read original article]() Published: 2024-03-11T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Selenium](), [releases](), [container images](), [Security & compliance, Cloud security]() Tags: [argocd](), [chainguard-images](), [container-images](), [container-security](), [cve](), [gotenberg](), [security](), [selenium](), [sigstore]() ### AI overview Chainguard describes new Chainguard Images released in February, highlighting a minimal, CVE-free Selenium container image and additional images such as Gotenberg. The article explains Chainguard's approach to rebuilding open source packages and propagating updates. ### Source excerpt Unlock the latest Chainguard Images for Selenium, Gotenberg, and more, boosting your cloud security with zero-CVE, minimal container solutions. ## Strengthening your software supply chain security DevFeed: [Strengthening your software supply chain security]() Original publisher: [Read original article]() Published: 2024-01-08T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Security](), [Software](), [Vulnerabilities](), [chainguard images](), [container images](), [sigstore](), [snyk]() Tags: [chainguard](), [container-images](), [containers](), [cve](), [dependency](), [grype](), [image](), [reproducible-builds](), [sbom](), [security](), [sigstore](), [slsa](), [snyk](), [software](), [solarwinds](), [supply-chain](), [supply-chain-security](), [vulnerabilities](), [vulnerability-scanning](), [wolfi]() ### AI overview This article explains software supply chain risks from open-source and third-party components, using the SolarWinds attack as an example. It recommends verifying artifacts, signing container images, minimizing dependencies, updating software, scanning for vulnerabilities, using smaller base images, adopting reproducible builds, and increasing SLSA maturity. ### Source excerpt Secure your codebase with advanced supply chain security tactics: artifact authentication, minimal images and more from Chainguard. ## The incremental path to container images: Chainguard Images DevFeed: [The incremental path to container images: Chainguard Images]() Original publisher: [Read original article]() Published: 2023-11-28T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [container images](), [Vulnerabilities](), [Kubernetes](), [vulnerability management](), [Exploit]() Tags: [alpine](), [apk](), [chainguard-images](), [container-image](), [container-images](), [distroless-containers](), [hardened-images](), [helm](), [kubernetes](), [kyverno](), [prometheus](), [sigstore](), [vulnerabilities]() ### AI overview This article explains an incremental approach to migrating existing container images to Chainguard Images. It recommends starting with hardened Application Images that can often be adopted as drop-in replacements, then progressing toward Base Images. ### Source excerpt Explore how easy it is to migrate existing container images to Chainguard Images, whether you are adopting Application Images or Base Images. ## Top 5 takeaways from KubeCon NA 2023: SSCS, Wolfi and more DevFeed: [Top 5 takeaways from KubeCon NA 2023: SSCS, Wolfi and more]() Original publisher: [Read original article]() Published: 2023-11-21T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [open-source-security](), [Kubernetes](), [cloud-infrastructure]() Tags: [cloud-native](), [digital-signatures](), [kubecon](), [kubecon-na](), [kubernetes](), [open-source-software](), [sigstore](), [software-bill-of-materials](), [software-supply-chain-security](), [sscs](), [wofli](), [wolfi]() ### AI overview Chainguard reviews five takeaways from KubeCon North America 2023, focusing on the event's growth, the rising awareness of software supply chain security, and the shift toward implementing security tools and processes within software development. The article also highlights SBOMs, digital signatures, attestations, Wolfi, and related cloud-native topics. ### Source excerpt Chainguard's breakdown of KubeCon NA 2023: Top five highlights in software supply chain security, Wolfi, and more. ## Chainguard announces new Sigstore Images to bring critical software supply chain tooling to enterprises DevFeed: [Chainguard announces new Sigstore Images to bring critical software supply chain tooling to enterprises]() Original publisher: [Read original article]() Published: 2023-11-14T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [sigstore](), [supply-chain-security](), [chainguard]() Tags: [chainguard](), [chainguard-images](), [cve](), [helm-charts](), [image](), [on-prem](), [sigstore](), [software-supply-chain-security](), [vulnerability-management]() ### AI overview Chainguard launched a Sigstore bundle of 17 images for organizations that need to run a private, on-premises Sigstore stack. The bundle is compatible with official Helm charts and includes components such as Fulcio, Rekor, Trillian, CT Log, Redis, Cosign, and a Timestamp Authority. ### Source excerpt Revolutionize your enterprise's software supply chain with Chainguard's new Sigstore images. ## Celebrating innovation in open source software and container image security with Chainguard Images DevFeed: [Celebrating innovation in open source software and container image security with Chainguard Images]() Original publisher: [Read original article]() Published: 2023-11-01T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [container-security](), [supply-chain-security](), [open-source-security](), [Open Source]() Tags: [chainguard-images](), [container-image-security](), [container-security](), [fedramp](), [fips](), [open-source-software](), [sbom](), [sigstore](), [software-bill-of-materials](), [software-signatures](), [software-supply-chain-security](), [vulnerabilities](), [vulnerability-management]() ### AI overview Chainguard describes the growth of Chainguard Images as a secure container image offering for open source software development and software supply chain security. The article highlights more than one million image builds, over 90 million pulls, a large inventory of tools and applications, reduced CVEs, passwordless token-based authentication, SBOMs, and Sigstore-verified software signatures. ### Source excerpt Explore the fusion of open source innovation and container security with Chainguard Images. ## Signing container images: Comparing Sigstore, Notary, and Docker Content Trust DevFeed: [Signing container images: Comparing Sigstore, Notary, and Docker Content Trust]() Original publisher: [Read original article]() Author: Hrittik Roy Published: 2023-09-26T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Containers](), [supply-chain-security](), [Security](), [Docker]() Tags: [article](), [awareness](), [blog](), [container-images](), [container-security](), [cryptographic](), [developer](), [devops](), [docker](), [draftdotdev](), [kubernetes](), [oidc](), [openid-connect](), [security](), [signing](), [sigstore](), [snyk-container](), [software-supply-chain](), [transparency-log](), [tutorial]() ### AI overview This article compares Sigstore Cosign, Notary v2, and Docker Content Trust for signing and verifying container images. It explains how cryptographic signatures help establish image authenticity, integrity, ownership, accountability, and supply-chain compliance, then introduces a tutorial for integrating one of the tools into a workflow. ### Source excerpt In this article, we will compare three popular container signing solutions: Sigstore Cosign, Notary v2, and Docker Content Trust (DCT), (a.k.a. Notary v1). You'll learn about their features, capabilities, and suitability for securing container image supply chains. ## Securing the ML supply chain with new Chainguard AI Images DevFeed: [Securing the ML supply chain with new Chainguard AI Images]() Original publisher: [Read original article]() Published: 2023-08-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard images](), [Machine learning](), [chainguard](), [Kubernetes](), [sigstore]() Tags: [ai](), [chainguard](), [chainguard-ai](), [chainguard-images](), [conda-image](), [cve-remediation](), [kubeflow-image](), [ml-security](), [ml-supply-chain](), [open-ai-image](), [openai-image](), [python-image](), [sboms](), [secure-images](), [security](), [sigstore](), [software-signatures]() ### AI overview Chainguard announces a Chainguard Images AI bundle for securing the ML supply chain across the AI workload lifecycle. The collection includes development, workflow management, deployment, and vector database images, with software signatures, SBOMs, and CVE remediation. ### Source excerpt Chainguard AI Images: Your pathway to a secure ML supply chain with hardened, efficient AI/ML lifecycle solutions. ## Elastic partners with Chainguard on Software Supply Chain security and SLSA assessment DevFeed: [Elastic partners with Chainguard on Software Supply Chain security and SLSA assessment]() Original publisher: [Read original article]() Published: 2023-07-26T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard](), [Security](), [open-source-security](), [sigstore](), [Open Source]() Tags: [chainguard](), [open-source](), [open-source-software](), [security](), [sigstore](), [slsa](), [slsa-assessement](), [slsa-levels](), [software-artifact-signing](), [software-supply-chain](), [software-supply-chain-security](), [supply-chain](), [trust]() ### AI overview Elastic partnered with Chainguard to assess its software supply chain using the SLSA framework. The article describes supply-chain risks across source, build, dependencies, and packages, and highlights software artifact signing with Sigstore as a security measure. ### Source excerpt Elastic and Chainguard unite for enhanced software supply chain security and SLSA assessment. ## Five Challenges of Verifying Container Signatures at Deployment Time in Kubernetes DevFeed: [Five Challenges of Verifying Container Signatures at Deployment Time in Kubernetes]() Original publisher: [Read original article]() Published: 2023-07-06T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [Kubernetes](), [Containers](), [Security](), [Deployment]() Tags: [admission-controller](), [container](), [container-image](), [deployment](), [kubernetes](), [policy-controller](), [security](), [security-policy-platform](), [signing](), [signing-containers](), [sigstore](), [sigstore-policy-controller](), [software-signatures](), [software-supply-chain](), [webhooks]() ### AI overview This article explains five challenges involved in verifying container signatures during Kubernetes deployment. It focuses on admission webhooks, locating containers across resource types, handling ephemeral containers and custom resource definitions, and maintaining logic as Kubernetes APIs change. ### Source excerpt Learn about five challenges you might encounter when trying to verify container signatures at deployment time in Kubernetes. ## Strengthening CI/CD Environments: Insights from NSA and DHS CISA guidance DevFeed: [Strengthening CI/CD Environments: Insights from NSA and DHS CISA guidance]() Original publisher: [Read original article]() Published: 2023-06-30T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [CI/CD](), [supply-chain-security](), [DevSecOps](), [Cybersecurity](), [cisa]() Tags: [chainguard-images](), [ci-cd](), [cicd](), [cisa](), [continuous-verification](), [cybersecurity](), [devsecops](), [secure-software-development-frameworks](), [security](), [sigstore](), [slsa](), [software-supply-chain](), [software-supply-chain-security](), [ssdf]() ### AI overview This commentary explains NSA and DHS CISA guidance for securing CI/CD environments. It highlights risks to downstream environments and software consumers, including compromised developer credentials and application libraries, and recommends established software supply chain security frameworks such as SLSA and CNCF best practices. ### Source excerpt Fortify your CI/CD environments with insights from NSA and DHS CISA guidance, presented by Chainguard. ## Introducing "Speranza": Enhancing software signing with privacy and usability DevFeed: [Introducing "Speranza": Enhancing software signing with privacy and usability]() Original publisher: [Read original article]() Published: 2023-05-30T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Cryptography](), [open-source-security](), [sigstore](), [OpenID connect (OIDC)](), [npm]() Tags: [chainguard](), [chainguard-labs](), [cryptography](), [digital-signatures](), [oidc](), [open-source-security](), [pii](), [privacy](), [security](), [sigstore](), [software-artifact-signing](), [software-supply-chain](), [software-supply-chain-security](), [software-supply-chain-security-research](), [supply-chain]() ### AI overview Chainguard Labs introduces Speranza, a research project for usable, privacy-friendly software signing. The article explains how it aims to improve software supply chain security while addressing the usability problems of long-lived cryptographic keys and the privacy risks of exposing maintainers' identities or metadata. It also discusses potential applications in open source package repositories and enterprise deployments of Sigstore. ### Source excerpt Chainguard Labs announces, "Speranza: Usable, privacy-friendly software signing," to help balance usability and privacy for software signing techniques. ## Scaling Chainguard Images with a growing catalog and proactive security updates DevFeed: [Scaling Chainguard Images with a growing catalog and proactive security updates]() Original publisher: [Read original article]() Published: 2023-05-18T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [chainguard](), [Containers](), [Security](), [supply-chain-security]() Tags: [chainguard](), [chainguard-images](), [container-images](), [cve](), [provenance](), [sboms](), [secure-minimal-image](), [security](), [sigstore](), [software-supply-chain]() ### AI overview Chainguard announces updates to Chainguard Images, including paid Standard and Custom catalogs, authentication for proactive security notifications, and a dedicated registry. The updates target enterprise development teams and support software supply chain security. ### Source excerpt Chainguard Images boosts support for enterprise development teams with expanded catalog offerings, a dedicated registry, and proactive security notifications. [Next page]()