# sscop

Published articles for sscop.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## No CVEs, No Surprises: Chainguard and the UK Software Security Code of Practice

DevFeed: [No CVEs, No Surprises: Chainguard and the UK Software Security Code of Practice](<https://devfeed.tech/articles/no-cves-no-surprises-chainguard-and-the-uk-software-security-code-of-practice-13187.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/no-cves-no-surprises-chainguard-and-the-uk-software-security-code-of-practice>)

Published: 2025-06-09T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [chainguard containers](<https://devfeed.tech/topics/chainguard-containers.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [sdlc](<https://devfeed.tech/topics/sdlc.md>), [Development](<https://devfeed.tech/topics/development.md>), [Cloud Native Ecosystem](<https://devfeed.tech/topics/cloud-native-ecosystem.md>), [Resilience](<https://devfeed.tech/topics/resilience.md>), [sigstore](<https://devfeed.tech/topics/sigstore.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [cyber-resilience-act](<https://devfeed.tech/tags/cyber-resilience-act.md>), [emea](<https://devfeed.tech/tags/emea.md>), [resilience](<https://devfeed.tech/tags/resilience.md>), [security](<https://devfeed.tech/tags/security.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [slsa](<https://devfeed.tech/tags/slsa.md>), [software-development](<https://devfeed.tech/tags/software-development.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [sscop](<https://devfeed.tech/tags/sscop.md>), [ssdf](<https://devfeed.tech/tags/ssdf.md>), [testing](<https://devfeed.tech/tags/testing.md>), [uk](<https://devfeed.tech/tags/uk.md>), [united-kingdom](<https://devfeed.tech/tags/united-kingdom.md>), [zero-cves](<https://devfeed.tech/tags/zero-cves.md>)

### AI overview

The article explains the United Kingdom's Software Security Code of Practice and maps its 14 principles across secure development, build integrity, deployment, and customer communication. It presents Chainguard Containers, provenance attestations, and signed SBOMs as ways Chainguard supports secure-by-default software and compliance efforts.

### Source excerpt

Chainguard Containers support compliance with the United Kingdom's Software Security Code of Practice. Check out what the framework entails and how we help.