# zero cves Published articles for zero cves. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security DevFeed: [Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security]() Original publisher: [Read original article]() Published: 2026-06-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard containers](), [container images](), [Security](), [Containers](), [chainguard libraries]() Tags: [chainguard](), [chainguard-containers](), [chainguard-gartner](), [chainguard-gartner-mq](), [chainguard-libraries](), [container-images](), [gartner](), [gartner-magic-quadrant](), [sboms](), [secure-by-default](), [security](), [software-supply-chain-security](), [software-supply-chain-security-gartner](), [software-supply-chain-security-mq](), [zero-cves]() ### AI overview Chainguard's article discusses its recognition as a Leader in Gartner's inaugural Magic Quadrant for Software Supply Chain Security. It argues that accelerating vulnerability exploitation and AI-assisted development require prevention-oriented, secure-by-default supply chain security. The article highlights Chainguard Containers, which provides minimal container images rebuilt daily from source, with zero CVEs, SBOMs, and verifiable signatures, and briefly introduces Chainguard Libraries. ### Source excerpt Gartner names Chainguard a Leader in Software Supply Chain Security, highlighting its secure-by-default approach and market vision. ## Going deep: Upstream distros and hidden CVEs DevFeed: [Going deep: Upstream distros and hidden CVEs]() Original publisher: [Read original article]() Published: 2026-02-25T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Docker Hardened Images](), [supply-chain-security](), [container images](), [Vulnerabilities](), [Debian](), [Docker]() Tags: [chainguard-containers](), [debian](), [debian-containers](), [dhi](), [docker](), [docker-containers](), [docker-hardened-images](), [security](), [supply-chain](), [supply-chain-security](), [vex](), [vulnerabilities](), [zero-cves]() ### AI overview The article argues that container vendors relying on upstream distributions such as Debian or Alpine can inherit vulnerabilities because fixes may lag between upstream availability and downstream image releases. It examines Docker Hardened Images and claims that some CVEs are suppressed through no-DSA classifications and VEX documents even when fixes exist upstream but have not been incorporated into the images. ### Source excerpt Are all zero-CVE images truly secure? A deep dive into Debian no-DSA, VEX suppression, and why transparency matters in container supply chain security. ## How Chainguard Automated Detection and Patching of a High-Severity CVE DevFeed: [How Chainguard Automated Detection and Patching of a High-Severity CVE]() Original publisher: [Read original article]() Published: 2026-02-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Security](), [vulnerability](), [anchore](), [grype](), [ci](), [GitHub](), [Pull Request]() Tags: [2025](), [anchore](), [chainguard](), [chainguard-containers](), [chainguard-cve-remediation](), [chainguard-factory](), [chainguard-images](), [ci](), [container-images](), [cve](), [github](), [grype](), [pull-request](), [security](), [vulnerability](), [zero-cves]() ### AI overview The article describes how Chainguard's Factory detected a high-severity vulnerability affecting k9s, updated Grype, opened and merged a pull request, and published a fixed package within 46 hours of the advisory. It also reports that Chainguard remediated 2,960 unique CVEs in November 2025 while meeting its stated remediation SLA. ### Source excerpt The Chainguard Factory and DriftlessAF automate CVE detection and patching, delivering fixes in hours and maintaining industry-leading remediation SLAs. ## Why Trusted Software Supply Chains Matter More Than Zero-CVE Container Claims DevFeed: [Why Trusted Software Supply Chains Matter More Than Zero-CVE Container Claims]() Original publisher: [Read original article]() Published: 2026-01-15T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [container-security](), [container images](), [Docker Hub](), [Containers](), [Docker](), [Software]() Tags: [ceo](), [chainguard](), [chainguard-containers](), [chainguard-images](), [chainguard-libraries](), [container-images](), [docker](), [docker-hub](), [docker-images](), [echo-security](), [hardened-images](), [hardening](), [minimus](), [rapidfort](), [secure-by-default](), [security](), [software-supply-chain-security](), [wiz-images](), [zero-cves]() ### AI overview Chainguard CEO Dan Lorenc argues that container security depends on trusting the origins and build processes of software, rather than relying primarily on post-hoc image hardening or zero-CVE claims. ### Source excerpt Chainguard CEO Dan Lorenc explains why real security comes from trusted, from-source software supply chains, not post-hoc hardening or zero-CVE promises. ## Meeting the Zero-CVE Mandate: How Chainguard Helps Businesses Ship Secure Software That Customers Trust DevFeed: [Meeting the Zero-CVE Mandate: How Chainguard Helps Businesses Ship Secure Software That Customers Trust]() Original publisher: [Read original article]() Published: 2025-10-06T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [supply-chain-security](), [Containers](), [software bill of materials](), [Security]() Tags: [chainguard](), [chainguard-containers](), [chainguard-custom-assembly](), [chainguard-images](), [containers](), [cves](), [provenance](), [sboms](), [secure-software](), [security](), [software-supply-chain-security](), [zero-cves]() ### AI overview The article explains how Chainguard helps businesses meet stricter software security requirements for self-hosted, cloud, packaged-agent, and embedded software. It focuses on zero known CVEs at delivery, verifiable SBOMs, provenance attestations, compatibility with security tooling, and the challenges of open source dependencies and container images. ### Source excerpt Chainguard's zero-CVE containers come with broad compatibility, custom assembly, verifiable provenance and SBOMs, and more to help you ship secure software. ## Chainguard Containers Catalog Expands to More Than 1,700 Minimal, Zero-CVE Images DevFeed: [Chainguard Containers Catalog Expands to More Than 1,700 Minimal, Zero-CVE Images]() Original publisher: [Read original article]() Published: 2025-09-09T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [chainguard](), [Security](), [Serverless]() Tags: [azure-functions](), [catalog-pricing](), [chainguard](), [chainguard-containers](), [chainguard-images](), [container-images](), [containers](), [cve](), [pricing](), [security](), [zero-cves]() ### AI overview Chainguard describes its Containers catalog, claiming more than 1,700 minimal, zero-CVE images rebuilt daily, over 600 FIPS-compliant images, and expanded support for Java and Azure Functions. It also outlines Catalog Pricing, which provides commercial customers access to the catalog and its underlying packages. ### Source excerpt Our Chainguard Containers catalog now has more than 1,700 minimal, zero-CVE images, rebuilt from source every day - industry-leading in both breadth and depth. ## Expanding Chainguard VMs: Zero-CVE Application & Base Virtual Machine Images for Cloud and On-Prem DevFeed: [Expanding Chainguard VMs: Zero-CVE Application & Base Virtual Machine Images for Cloud and On-Prem]() Original publisher: [Read original article]() Published: 2025-09-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard vms](), [Cloud](), [on-prem](), [chainguard os](), [Java](), [Jenkins](), [nginx](), [Python]() Tags: [chainguard-vms](), [cloud](), [cloud-virtual-machines](), [cve](), [java](), [jenkins](), [nginx](), [on-prem](), [os](), [provenance](), [python](), [rebuilds](), [sbom](), [secure-by-default](), [security-vm-images](), [virtual-machine-images](), [zero-cves]() ### AI overview Chainguard VMs is expanding with zero-CVE application images for Jenkins, Nginx, and Squid Proxy, plus base images for Chainguard OS, Java, and Python. The virtual machine images support cloud and on-premises deployments and are continuously rebuilt from source with automated updates, CVE remediation, and SBOM-driven provenance attestations. ### Source excerpt Chainguard VMs is expanding with new Application and Base VM Images -- giving teams a secure, zero-CVE foundation to build and innovate faster. ## Discover the Value of Chainguard Containers with the Value Calculator DevFeed: [Discover the Value of Chainguard Containers with the Value Calculator]() Original publisher: [Read original article]() Published: 2025-08-28T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [chainguard](), [Tool](), [Vulnerabilities](), [Development]() Tags: [business-value](), [chainguard](), [chainguard-containers](), [chainguard-images](), [chainguard-roi](), [common-vulnerabilities-and-exposures](), [compliance](), [container-images](), [cve-remediation](), [developers](), [engineering](), [tool](), [vulnerabilities](), [zero-cves]() ### AI overview Chainguard introduces a self-serve Value Calculator that estimates the organizational value of adopting Chainguard Containers. The tool uses metrics such as developer count, revenue, container-image usage, CVE remediation time, hardening effort, organizational maturity, industry, and compliance requirements to estimate potential gains from reducing engineering toil, mitigating risk, and supporting revenue growth. ### Source excerpt Chainguard's Value Calculator is a new tool we created to make it easy to quantify the value of using Chainguard Containers for your specific organization. ## No CVEs, No Surprises: Chainguard and the UK Software Security Code of Practice DevFeed: [No CVEs, No Surprises: Chainguard and the UK Software Security Code of Practice]() Original publisher: [Read original article]() Published: 2025-06-09T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [chainguard](), [chainguard containers](), [supply-chain-security](), [sdlc](), [Development](), [Cloud Native Ecosystem](), [Resilience](), [sigstore](), [Deployment]() Tags: [chainguard](), [chainguard-containers](), [compliance](), [cyber-resilience-act](), [emea](), [resilience](), [security](), [sigstore](), [slsa](), [software-development](), [software-supply-chain](), [sscop](), [ssdf](), [testing](), [uk](), [united-kingdom](), [zero-cves]() ### AI overview The article explains the United Kingdom's Software Security Code of Practice and maps its 14 principles across secure development, build integrity, deployment, and customer communication. It presents Chainguard Containers, provenance attestations, and signed SBOMs as ways Chainguard supports secure-by-default software and compliance efforts. ### Source excerpt Chainguard Containers support compliance with the United Kingdom's Software Security Code of Practice. Check out what the framework entails and how we help. ## How R1 Universities Can Simplify CMMC 2.0 Compliance with Chainguard Containers DevFeed: [How R1 Universities Can Simplify CMMC 2.0 Compliance with Chainguard Containers]() Original publisher: [Read original article]() Published: 2025-06-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Containers](), [vulnerability management](), [Vulnerabilities](), [Security](), [chainguard](), [chainguard os](), [Automation](), [Linux](), [Malware](), [systems]() Tags: [2025](), [chainguard](), [chainguard-containers](), [chainguard-factory](), [chainguard-os](), [cmmc](), [cmmc-2-0](), [compliance](), [containers](), [cve](), [cve-remediation](), [cves](), [funding](), [linux](), [malware](), [management](), [security](), [software](), [systems](), [vulnerabilities](), [zero-cves]() ### AI overview This article explains how Chainguard Containers may help R1 universities prepare for CMMC 2.0 Level 2 requirements tied to Department of Defense research contracts. It focuses on vulnerability-management controls, including timely identification, reporting, remediation, malware protection, and risk assessment, and describes Chainguard's minimal container images, Chainguard OS, and Chainguard Factory. ### Source excerpt With CMMC 2.0 compliance becoming an important prerequisite to research funding for R1 universities, Chainguard Containers are the perfect solution. See how. ## ATO in a Box: Simplifying Compliance for Software Vendors with Chainguard and Ask Sage DevFeed: [ATO in a Box: Simplifying Compliance for Software Vendors with Chainguard and Ask Sage]() Original publisher: [Read original article]() Published: 2025-06-02T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [chainguard containers](), [Automation](), [Generative AI](), [Artificial Intelligence](), [Security](), [Vulnerabilities](), [Authorization]() Tags: [ai](), [ask-sage](), [ato](), [ato-in-a-box](), [authority-to-operate](), [automation](), [chainguard](), [chainguard-customer](), [container-images](), [generative](), [secure-container-images](), [security](), [vulnerabilities](), [zero-cve-containers](), [zero-cves]() ### AI overview This article presents Ask Sage's ATO in a Box, built with Chainguard Containers, automation, and AI to simplify and accelerate the Authorization to Operate process for software vendors. It describes secure container images, automated documentation and evidence collection, risk assessments, and compliance-package generation for regulated government deployments. ### Source excerpt Chainguard customer Ask Sage utilizes Chainguard Containers to build ATO in a Box, a solution utilizing automation to speed up the authority to operate process. ## Why Golden Images still matter and how to secure them with Chainguard DevFeed: [Why Golden Images still matter and how to secure them with Chainguard]() Original publisher: [Read original article]() Published: 2025-05-22T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [DevOps](), [software bill of materials](), [Software](), [cloud-infrastructure](), [Open Source]() Tags: [aws](), [azure](), [chainguard](), [chainguard-containers](), [container-image](), [container-images](), [containers](), [devops](), [golden-image](), [golden-images](), [how-to](), [provenance](), [sbom](), [security](), [zero-cves]() ### AI overview This article explains why well-managed golden image programs remain important for modern software delivery. It describes how continuously rebuilt, patched, signed, scanned, and versioned images--with SBOMs, attestations, provenance, and policy compliance--can improve security and streamline development workflows, while presenting Chainguard as an alternative to homegrown programs. ### Source excerpt Golden container image programs can be a great way to increase efficiency and security for your engineering team. Learn how to do it right with Chainguard. ## Chainguard Starter Images Now Available in Iron Bank: Minimal, Secure, and Reliable DevFeed: [Chainguard Starter Images Now Available in Iron Bank: Minimal, Secure, and Reliable]() Original publisher: [Read original article]() Published: 2025-03-06T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard images](), [supply-chain-security](), [container images](), [Security](), [Vulnerabilities]() Tags: [chainguard](), [chainguard-starter-images](), [container](), [container-images](), [iron-bank](), [sboms](), [secure-by-default](), [secure-software](), [software-supply-chain-security](), [vulnerabilities](), [zero-cve-container-images](), [zero-cves]() ### AI overview Chainguard Starter Images are now available in the Iron Bank image repository. The images are designed to reduce vulnerability findings, simplify VAT remediation, and streamline the path to Authorization to Operate. Chainguard describes them as secure-by-default images built from source with signed and attested artifacts, build-time SBOMs, hardened compiler settings, and reduced attack surfaces. ### Source excerpt Chainguard Starter Images are zero CVE container images that are now available in the Iron Bank image repository. ## Guardcraft: A Minecraft Java Server with Zero CVEs DevFeed: [Guardcraft: A Minecraft Java Server with Zero CVEs]() Original publisher: [Read original article]() Published: 2025-02-28T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Docker](), [Containers](), [Vulnerabilities](), [grype](), [Docker Hub](), [Security](), [Ubuntu](), [Linux](), [Steam Deck]() Tags: [bedrock](), [chainguard](), [chainguard-containers](), [chainguard-images](), [container](), [container-image](), [containers](), [docker](), [docker-hub](), [grype](), [guardcraft](), [linux](), [security](), [steam-deck](), [vulnerabilities](), [zero-cves]() ### AI overview The article describes building a Minecraft Java server with a Chainguard Image. It compares a popular Ubuntu-based Docker Hub image with the Chainguard approach, highlighting the former's 165 unresolved CVEs and the latter's stated result of zero CVEs. ### Source excerpt We built a Minecraft Java server using a Chainguard Image, resulting in zero CVEs and a whole lot of fun! ## Announcing Chainguard Custom Assembly: Image Customization Without Complexity DevFeed: [Announcing Chainguard Custom Assembly: Image Customization Without Complexity]() Original publisher: [Read original article]() Published: 2025-02-20T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [open-source-security](), [Containers](), [Security](), [Development]() Tags: [bash](), [chainguard](), [chainguard-custom-assembly](), [chainguard-images](), [complexity](), [container-images](), [curl](), [custom-assembly](), [customization](), [cve](), [cve-remediation](), [development](), [docker](), [image](), [integrity](), [maintenance](), [no-vulnerabilities](), [open-source](), [open-source-software](), [secure-by-design](), [security](), [security-best-practices](), [slsa](), [zero-cves]() ### AI overview Chainguard announces the beta release of Custom Assembly, a product for tailoring Chainguard Images with required packages while preserving hardened builds, security practices, and CVE remediation coverage. The article explains that the product addresses complex, maintenance-heavy customization workflows involving manual image changes, Docker builds, and proprietary pipelines. ### Source excerpt Custom Assembly is Chainguard's new image customization product that enables companies to consume zero-CVE open source software tailored to unique requirements. ## Guest Post: Securing the Foundation of Dynamic Data Governance at Velotix DevFeed: [Guest Post: Securing the Foundation of Dynamic Data Governance at Velotix]() Original publisher: [Read original article]() Published: 2025-02-19T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [data-governance](), [chainguard images](), [Security](), [Vulnerabilities](), [Amazon OpenSearch Service](), [Kafka]() Tags: [case-study](), [chainguard](), [chainguard-images](), [common-vulnerabilities-and-exposures](), [guest-post](), [performance](), [productivity](), [security](), [time](), [velotix](), [vulnerabilities](), [zero-cves]() ### AI overview A guest post explains how Velotix uses Chainguard Images to reduce CVEs across its data-governance platform. The article describes challenges with vendor-provided images and dependency upgrades, and highlights scheduled recompilation to keep infrastructure-level libraries current. ### Source excerpt Velotix utilizes Chainguard Images to help reduce CVEs, improve performance, and save time. Learn how Chainguard helps them build a more secure infrastructure. ## Enabling Secure Software Development in 2025 DevFeed: [Enabling Secure Software Development in 2025]() Original publisher: [Read original article]() Published: 2025-01-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [open-source-security](), [supply-chain-security](), [container images](), [Containers](), [vulnerability](), [DevOps]() Tags: [2025](), [chainguard](), [chainguard-customers](), [chainguard-images](), [container-images](), [fips](), [hardening](), [software-development](), [software-supply-chain](), [software-supply-chain-attack](), [vulnerability](), [zero-cves]() ### AI overview Chainguard describes its 2025 focus on scaling secure software development through a catalog of more than 1,000 container images, source-built components, daily rebuilding, automation, vulnerability remediation, and hardened images. The company reports patching more than 55,000 CVEs and saving customers over 200,000 engineering hours in 2024. ### Source excerpt Chainguard is building on the success they generated for their customers in 2024. Take a look back at the numbers, and see what's next for us and our users! ## New Chainguard Images November 2024: Bun, CockroachDB, Open Liberty DevFeed: [New Chainguard Images November 2024: Bun, CockroachDB, Open Liberty]() Original publisher: [Read original article]() Published: 2024-12-18T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Bun](), [CockroachDB](), [open liberty]() Tags: [bun](), [chainguard-images](), [cockroachdb](), [container-images](), [open-liberty](), [selenium](), [zero-cves]() ### AI overview Chainguard announces 70 container images built in November 2024, including images for Open Liberty, CockroachDB, and Bun. The article describes the new images and their stated runtime, database, and JavaScript-tooling use cases. ### Source excerpt Check out the new zero-CVE Chainguard Images built in November 2024, including offerings for Bun, CockroachDB, Open Liberty, Selenium, and more. ## New Chainguard Images October 2024: Swift, Dart, and more DevFeed: [New Chainguard Images October 2024: Swift, Dart, and more]() Original publisher: [Read original article]() Published: 2024-11-14T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [container images](), [Swift](), [Dart]() Tags: [chainguard](), [chainguard-images](), [container-images](), [cve](), [dart](), [fips](), [jaeger](), [linkerd](), [swift](), [zero-cves]() ### AI overview Chainguard's October 2024 update announces 126 new CVE-free container images, including offerings for Swift, Dart, Linkerd, and Jaeger, along with new FIPS-enabled images and a notice about upcoming Developer tier changes. ### Source excerpt Go over all the new Chainguard container images released in October, including new offerings for Swift, Dart, Linkerd, Jaeger, and more. ## Kernel-Independent FIPS Images DevFeed: [Kernel-Independent FIPS Images]() Original publisher: [Read original article]() Published: 2024-11-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Linux](), [Security](), [Deployment](), [CI/CD]() Tags: [chainguard-fips](), [chainguard-fips-images](), [chainguard-images](), [ci-cd](), [compliance](), [container-images](), [federal-information-processing-standards](), [fedramp](), [fips](), [linux](), [security](), [zero-cves]() ### AI overview Chainguard FIPS Images can run on any Linux kernel by replacing the kernel entropy source with a userspace entropy source. This enables FIPS workloads on current kernels, hardware, instance types, developer machines, CI/CD deployments, and non-FIPS managed cloud offerings while supporting runtimes such as NodeJS, Python, Go, PHP, .NET, and C/C++. ### Source excerpt Chainguard's FIPS Images are available for deployment on any Linux kernel, thanks to some new innovation by our engineering team. Learn what this means. ## Milestone: 1,000 Secure Container Images and Over 100 Work Years Saved DevFeed: [Milestone: 1,000 Secure Container Images and Over 100 Work Years Saved]() Original publisher: [Read original article]() Published: 2024-11-06T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [container images](), [chainguard](), [Security](), [open-source-security](), [Open Source](), [distroless](), [Compiler](), [Software](), [Debian]() Tags: [chainguard](), [chainguard-images](), [compiler](), [container](), [container-images](), [containers](), [debian](), [hardening](), [no-vulnerabilities](), [provenance](), [sboms](), [secure-container-images](), [vulnerabilities](), [zero-cves]() ### AI overview Chainguard announces that its catalog has reached 1,000 secure container images and has helped more than 100 enterprise customers remediate over 54,000 CVEs, saving 216,000 engineering hours. The article reflects on the company's three-year journey and its decision to build Chainguard Images from source to provide faster vulnerability patching, comprehensive SBOMs and provenance attestations, broad version support, and compiler hardening. ### Source excerpt Chainguard now offers over 1,000 container images with zero CVEs in our Chainguard Images Directory. Discover how we got here, and how our images can help you. ## How much time is wasted triaging known exploits? DevFeed: [How much time is wasted triaging known exploits?]() Original publisher: [Read original article]() Published: 2024-06-21T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [vulnerability management](), [Vulnerabilities](), [Exploit](), [chainguard images](), [container images](), [grype](), [chainguard]() Tags: [base-container-images](), [chainguard-images](), [container-image](), [container-images](), [cve](), [cve-management](), [cves](), [efficiency](), [exploited-vulnerabilities](), [exploits](), [grype](), [kev-catalog](), [known-exploited-vulnerability](), [nvd-cve](), [vulnerability](), [vulnerability-detection](), [vulnerability-management](), [zero-cves]() ### AI overview The article reports that seven percent of 230 popular Bitnami container images contained CVEs listed in the Known Exploited Vulnerability catalog, but detailed triage found that none were exploitable in those container contexts. It argues that CVE triage consumes substantial staff time, while Chainguard Images historically remediated affected CVEs in an average of 2.5 days. ### Source excerpt Stop wasting time on known exploits. Read our latest research and discover strategies to streamline your vulnerability management for maximum efficiency. ## Zero CVEs and just as fast: Chainguard's Python & Go Images DevFeed: [Zero CVEs and just as fast: Chainguard's Python & Go Images]() Original publisher: [Read original article]() Published: 2024-04-24T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Go Language](), [Python](), [benchmarking](), [container images](), [Security](), [Open Source]() Tags: [benchmark](), [benchmarking](), [chainguard](), [chainguard-images](), [container](), [container-images](), [cve](), [cves](), [go](), [performance](), [python](), [security](), [security-best-practices](), [zero-cves]() ### AI overview Chainguard benchmarks its Python and Go container images against upstream open-source equivalents using standard test suites. The Python image averages 1.5 percent faster across 104 tests, while the Go image averages less than one percent slower across 24 tests, indicating essentially tied performance alongside low-to-no CVEs and supply-chain security features. ### Source excerpt Upgrade your Python and Go security without sacrificing speed. Chainguard Images offer zero CVEs and blazing performance. ## Can debloated containers pass the zero CVE test? DevFeed: [Can debloated containers pass the zero CVE test?]() Original publisher: [Read original article]() Published: 2023-11-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [Vulnerabilities](), [Security](), [container images](), [chainguard images](), [grype](), [chainguard]() Tags: [container-images](), [containers](), [cve](), [cves](), [grype](), [hardened-images](), [hardening](), [security](), [software-supply-chain-security-research](), [vulnerabilities](), [zero-cves]() ### AI overview The article analyzes 28 debloated container images and finds that they reduce CVEs by an average of 64% compared with baseline images, but still contain an average of 33 CVEs. It also reports an average of five high or critical vulnerabilities, concluding that debloated containers do not pass the zero-CVE test. The comparison uses Grype and includes Chainguard Images versions. ### Source excerpt Exploring the efficiency of debloated containers in the Zero CVE test: Chaingaurd's analysis of security and efficiency.