# chainguard Chainguard is an organization that builds secure, hardened open-source software artifacts and maintains tools for secure software delivery. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Announcing the Sovereign Artifacts beta DevFeed: [Announcing the Sovereign Artifacts beta]() Original publisher: [Read original article]() Published: 2026-09-15T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Open Source](), [Software](), [cyber resilience act](), [Resilience]() Tags: [chainguard](), [container](), [cyber-resilience-act](), [eu](), [infrastructure](), [network](), [open-source](), [performance](), [resilience](), [supply-chain]() ### AI overview Chainguard has launched Sovereign Artifacts in beta, providing EU-local storage and delivery for secure container and library artifact bytes. Phase 1 stores artifacts in the EU, while authentication and build pipelines remain hosted in the United States. The service is intended to support sovereignty and data-residency requirements and reduce artifact pull times for European customers. ### Source excerpt Chainguard launches Sovereign Artifacts in beta, giving global organizations an EU-local option for secure container and library artifacts. ## Chainguard and Athena prepare to disclose vulnerabilities found by frontier AI models DevFeed: [Chainguard and Athena prepare to disclose vulnerabilities found by frontier AI models]() Original publisher: [Read original article]() Published: 2026-09-15T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [Vulnerabilities](), [chainguard](), [anthropic](), [Software](), [Code](), [Open Source]() Tags: [ai](), [anthropic](), [infrastructure](), [project-glasswing](), [software](), [vulnerabilities]() ### AI overview This opinion post reports on Chainguard's Athena initiative and its plans to begin disclosing 50 model-generated vulnerability findings. It discusses Anthropic's Project Glasswing, vulnerability discovery, responsible disclosure, patch pipelines, and infrastructure the company plans to open source. ### Source excerpt Frontier AI is finding zero-days faster than the industry can fix them. See how Chainguard and Athena are preparing for what comes next. ## Chainguard's Factory-Scale Automation for Toolchain Upgrades and Testing DevFeed: [Chainguard's Factory-Scale Automation for Toolchain Upgrades and Testing]() Original publisher: [Read original article]() Published: 2026-09-09T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [toolchain](), [Automation](), [Testing](), [Open Source](), [Go Language]() Tags: [automation](), [chainguard](), [go](), [open-source](), [security](), [testing](), [toolchain](), [upgrades]() ### AI overview Chainguard describes how its Factory uses automation to manage toolchain version selection, upgrades, builds, and testing across open source packages. The approach uses version streams and rebuilds packages with newer toolchain versions when builds and tests succeed, helping deliver updates quickly while maintaining reliability and security. ### Source excerpt See how Chainguard automates toolchain upgrades and testing to keep thousands of open source packages current, secure, and reliable at scale. ## What it took to reach 1 billion build manifests DevFeed: [What it took to reach 1 billion build manifests]() Original publisher: [Read original article]() Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [container images](), [chainguard os](), [supply-chain-security](), [sigstore](), [Linux](), [NumPy]() Tags: [chainguard](), [chainguard-factory](), [chainguard-os](), [container-images](), [go](), [open-source](), [provenance](), [sbom](), [sigstore](), [software-supply-chain]() ### AI overview Chainguard describes how it doubled container build output from 500 million to more than 1 billion manifests in six months. The article explains how Chainguard Factory and Chainguard OS support continuous rebuilds, while using source builds, SLSA Level 3 provenance, Sigstore signatures, and full SBOMs. ### Source excerpt Chainguard doubled its container build output in six months. Learn how Factory 2.0 uses AI and reconciliation to rebuild secure software at scale. ## Proven, not promised: Chainguard Containers achieves SLSA Build Level 3 DevFeed: [Proven, not promised: Chainguard Containers achieves SLSA Build Level 3]() Original publisher: [Read original article]() Published: 2026-08-17T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [supply-chain-security](), [software bill of materials](), [Security]() Tags: [chainguard](), [chainguard-containers](), [provenance](), [sbom](), [security](), [signing](), [slsa](), [software-supply-chain-security](), [supply-chain]() ### AI overview Chainguard says Coalfire independently assessed the Chainguard Containers build and release system as meeting SLSA Build Level 3 requirements. The article describes hardened, isolated builds, separately managed signing, provenance generation, and signed SBOMs for releases. ### Source excerpt Coalfire independently assessed Chainguard Containers at SLSA Build Level 3, validating hardened builds, provenance, and supply chain integrity. ## Patching Vulnerabilities Without an Upstream Fix DevFeed: [Patching Vulnerabilities Without an Upstream Fix]() Original publisher: [Read original article]() Published: 2026-08-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [vulnerability](), [ai security](), [chainguard](), [Automation](), [Frontier AI]() Tags: [ai-security](), [automation](), [chainguard](), [cves](), [sandbox](), [software](), [vulnerability]() ### AI overview Chainguard describes how its Athena vulnerability clearinghouse addresses exploitable vulnerabilities when no upstream fix exists. The article explains that generating an AI-written patch is straightforward, while proving the patch is correct and safe requires extensive engineering and validation inside a microVM sandbox. ### Source excerpt Generating an AI security patch is easy. Trusting it is hard. Learn how Chainguard proves zero-day fixes are safe before they ship. ## The keyv and cacheable npm Supply Chain Attack: Inside the Mini Shai-Hulud Campaign DevFeed: [The keyv and cacheable npm Supply Chain Attack: Inside the Mini Shai-Hulud Campaign]() Original publisher: [Read original article]() Published: 2026-08-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [npm](), [Malware](), [chainguard](), [GitHub](), [C2](), [Ethereum]() Tags: [aws](), [chainguard](), [ethereum](), [github](), [malware](), [mini-shai-hulud](), [npm](), [payload](), [shai-hulud](), [smart-contract](), [supply-chain]() ### AI overview The article examines a 2026 npm supply-chain attack in which a compromised maintainer account was used to publish malicious versions of keyv and cacheable-related packages. It reports credential theft, worm-like propagation to hundreds of downstream packages, and command-and-control infrastructure discovered through an Ethereum smart contract. It also explains that Chainguard customers were protected by malware scanning and package cooldowns. ### Source excerpt The latest npm supply chain attack hit keyv and cacheable. See how Chainguard's malware scanning and cooldowns kept customers protected. ## How Chainguard Uses Hardware-Virtualized Sandboxes to Isolate AI Agents and Untrusted Code DevFeed: [How Chainguard Uses Hardware-Virtualized Sandboxes to Isolate AI Agents and Untrusted Code]() Original publisher: [Read original article]() Published: 2026-07-29T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Artificial Intelligence](), [Security](), [Code](), [qemu](), [Containers]() Tags: [ai](), [ai-agents](), [chainguard](), [code](), [hardware](), [kvm](), [sandboxes](), [security]() ### AI overview Chainguard describes applying its build-isolation approach to sandboxing AI agents and other untrusted code. The approach uses fresh hardware-virtualized QEMU/KVM environments with their own kernels to limit blast radius and prevent persistence or access to sensitive signing materials. ### Source excerpt AI agents need sandboxes. Learn how Chainguard uses microVMs to safely run untrusted code, contain exploits, and protect sensitive workloads. ## Responding to the Five Eyes guidance on AI and cyber risk DevFeed: [Responding to the Five Eyes guidance on AI and cyber risk]() Original publisher: [Read original article]() Published: 2026-07-15T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Cybersecurity](), [Artificial Intelligence](), [Frontier AI](), [Resilience](), [vulnerability](), [chainguard]() Tags: [ai](), [chainguard](), [deployment](), [five-eyes-security](), [government-of-canada](), [identity-and-access-management](), [mythos](), [resilience](), [security](), [software-supply-chain](), [software-supply-chain-security](), [vulnerability]() ### AI overview The article interprets joint Five Eyes guidance warning that frontier AI may increase the speed, scale, and sophistication of cyberattacks. It argues that organizations should strengthen software supply chain security, accelerate vulnerability remediation, reduce unnecessary dependencies, address legacy systems, improve identity and access management, and build cyber resilience into business and development practices. ### Source excerpt The Five Eyes AI guidance urges organizations to strengthen software supply chain security. Learn how Chainguard helps teams stay ahead. ## Chainguard Repository adds new policies, Chainguard Libraries for JavaScript is GA DevFeed: [Chainguard Repository adds new policies, Chainguard Libraries for JavaScript is GA]() Original publisher: [Read original article]() Published: 2026-06-25T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard repository](), [chainguard libraries for javascript](), [chainguard](), [JavaScript](), [Malware](), [Artificial Intelligence]() Tags: [ai](), [chainguard](), [chainguard-libraries](), [chainguard-libraries-for-java](), [chainguard-libraries-for-javascript](), [chainguard-libraries-for-python](), [chainguard-repo](), [chainguard-repository](), [javascript](), [libraries](), [malware](), [malware-scanner](), [policy](), [visibility]() ### AI overview Chainguard announces new malware and greyware scanning for additional artifact types, expanded policy controls, and new visibility features in Chainguard Repository. The article also announces general availability of Chainguard Libraries for JavaScript. ### Source excerpt Chainguard Repository adds malware and greyware scanning, expanded policy controls, and visibility to secure AI-driven software supply chains. ## Fewer CVEs, more accurate findings: Wiz now scans Chainguard Libraries for Python and Java DevFeed: [Fewer CVEs, more accurate findings: Wiz now scans Chainguard Libraries for Python and Java]() Original publisher: [Read original article]() Published: 2026-06-25T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard libraries](), [chainguard libraries for python](), [Java](), [supply-chain-security](), [Security]() Tags: [chainguard](), [chainguard-libraries](), [chainguard-libraries-for-java](), [chainguard-libraries-for-python](), [cves](), [dependencies](), [java](), [provenance](), [python](), [security](), [software-supply-chain](), [supply-chain](), [wiz](), [wiz-chainguard-libraries](), [wiz-chainguard-scanner]() ### AI overview Wiz now scans Chainguard Libraries for Python and Java. The partnership combines source-built dependencies and backported fixes with Wiz's risk context and visibility, helping organizations assess vulnerabilities, prioritize remediation, and verify artifact provenance. ### Source excerpt Wiz now scans Chainguard Libraries for Python and Java, combining trusted, source-built dependencies with risk-based visibility and remediation. ## Everything we announced during AI Readiness Innovation Week DevFeed: [Everything we announced during AI Readiness Innovation Week]() Original publisher: [Read original article]() Published: 2026-06-25T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [ai-coding](), [supply-chain-security](), [chainguard](), [open-source-security](), [Vulnerabilities](), [Security](), [chainguard libraries](), [chainguard containers](), [CI/CD](), [Frontier AI](), [GitHub]() Tags: [ai](), [ai-readiness](), [athena](), [aws-kiro](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [ci-cd](), [containers](), [cursor](), [frontier-ai-models](), [gartner-magic-quadrant](), [github](), [innovation](), [open-source](), [security](), [software-supply-chain](), [software-supply-chain-security](), [speed](), [vulnerabilities]() ### AI overview Chainguard summarizes announcements from AI Readiness Innovation Week, covering supply-chain security advances for containers, libraries, CI/CD pipelines, AI agent skills, IDE integrations, partnerships, and an industry coalition. The article highlights Athena, a coalition designed to coordinate defense against vulnerabilities discovered by frontier AI models. ### Source excerpt Read about everything Chainguard announced during AI Readiness Innovation Week, including new features for Chainguard Libraries and Chainguard Containers. ## How Chainguard uses AI agents to enforce engineering standards across a monorepo DevFeed: [How Chainguard uses AI agents to enforce engineering standards across a monorepo]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [Bot](), [chainguard](), [Pull Request](), [GitHub Actions]() Tags: [agentic](), [agents](), [ai](), [ai-agents](), [chainguard](), [chainguard-agent-skills](), [chainguard-agents](), [chainguard-ai](), [chainguard-containers](), [chainguard-engineering](), [chainguard-libraries](), [ci](), [engineering](), [github](), [policy](), [pull-request](), [workflow]() ### AI overview Chainguard describes a system of specialized AI agents built on DriftlessAF that continuously checks code against machine-readable engineering standards, fixes drift, and supports CI repair. Over eight weeks, it opened more than 4,700 standards-fix pull requests; 75% judged low-risk were auto-merged when AI judgment agreed with deterministic checks. ### Source excerpt Chainguard uses AI-powered agents to continuously enforce engineering standards, remediate drift, and keep codebases aligned at scale. ## Securing the AI coding ecosystem: Chainguard and the AI tools developers use DevFeed: [Securing the AI coding ecosystem: Chainguard and the AI tools developers use]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Kiro](), [AI Development](), [cursor](), [Security](), [Containers](), [Open Source]() Tags: [ai](), [ai-agents](), [ai-coding](), [aws-kiro](), [chainguard](), [chainguard-ai-tools](), [chainguard-libraries](), [containers](), [cursor](), [developers](), [kiro](), [open-source](), [secure-by-default]() ### AI overview Chainguard argues that AI coding tools such as Kiro and Cursor need trusted sources for dependencies and container images. The article describes Chainguard Containers, Libraries, and a Kiro plugin intended to move projects from public registries to hardened supply-chain components. ### Source excerpt Chainguard brings secure-by-default containers and libraries to AI coding tools like Kiro and Cursor, making trusted open source the default. ## Chainguard plug-in now available on Cursor Marketplace DevFeed: [Chainguard plug-in now available on Cursor Marketplace]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [cursor](), [chainguard](), [AI-assisted coding](), [Containers](), [Security]() Tags: [ai-coding-agents](), [chainguard](), [chainguard-containers](), [chainguard-cursor](), [chainguard-cursor-marketplace](), [chainguard-libraries](), [containers](), [cursor](), [cursor-chainguard-containers](), [cursor-chainguard-libraries](), [libraries](), [mcp](), [plugin](), [security]() ### AI overview Chainguard has launched a plugin on the Cursor Marketplace that connects Cursor to Chainguard Containers, Chainguard Libraries, and the Chainguard Repository. The plugin is intended to make secure-by-default artifacts available in AI coding workflows and help agents remediate known vulnerabilities. ### Source excerpt Connect Cursor to Chainguard in minutes and make secure, malware-resistant containers and libraries the default for AI-generated code. ## Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security DevFeed: [Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security]() Original publisher: [Read original article]() Published: 2026-06-18T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [supply-chain-security](), [Security](), [Open Source]() Tags: [2026](), [chainguard](), [chainguard-gartner](), [chainguard-gartner-magic-quadrant](), [cyber-resilience-act](), [fedramp](), [gartner](), [gartner-mq-software-supply-chain](), [nis2](), [provenance](), [sboms](), [secure-by-default](), [security](), [slsa](), [software-supply-chain](), [software-supply-chain-security](), [software-supply-chain-security-gartner]() ### AI overview Chainguard announces that it has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Software Supply Chain Security. The article highlights Chainguard's secure-by-default approach, hardened open source artifacts, cryptographic signatures, signed SBOMs, and SLSA-aligned provenance, along with support for regulatory requirements. ### Source excerpt Chainguard named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security, recognized for vision and secure-by-default innovation. ## Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run DevFeed: [Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run]() Original publisher: [Read original article]() Published: 2026-06-18T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [Containers](), [anchore](), [Open Source]() Tags: [anchore](), [anchore-enterprise](), [apache](), [built-from-source](), [chainguard](), [chainguard-containers](), [chainguard-images](), [cinc-auditor](), [compliance](), [fedramp](), [open-source](), [pipeline](), [scanner](), [stig](), [stigs]() ### AI overview Chainguard introduces a ready-to-run cinc-auditor container image for STIG scanning of Chainguard Containers. The image includes a maintained GPOS SRG InSpec profile, removes separate profile and dependency setup, and supports production compliance pipelines, including FedRAMP workflows. ### Source excerpt Chainguard launches a ready-to-run STIG scanner with a built-in GPOS SRG InSpec profile, simplifying compliance scans for containers and FedRAMP workflows. ## Chainguard Agent Skills is now open to everyone, with a private registry to manage your internal skills DevFeed: [Chainguard Agent Skills is now open to everyone, with a private registry to manage your internal skills]() Original publisher: [Read original article]() Published: 2026-06-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Agent Skills](), [chainguard](), [Security](), [audit trail](), [Open Source]() Tags: [agent-skills](), [ai-agent-skills](), [audit-trail](), [chainguard](), [chainguard-agent-skills](), [chainguard-ai-agents](), [chainguard-skills](), [cursor](), [hardening](), [private-registry](), [registry](), [security]() ### AI overview Chainguard Agent Skills is now available to all users with more than 1,000 hardened community skills, a private registry for internal skills, and a closed beta for hardening first-party skills. The service is intended to help organizations securely standardize, distribute, and manage AI agent skills. ### Source excerpt Chainguard Agent Skills now offers 1,000+ hardened community skills, private registries, and beta hardening for first-party AI agent skills. ## The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware" DevFeed: [The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware"]() Original publisher: [Read original article]() Published: 2026-06-09T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Malware](), [Code](), [Open Source](), [npm](), [npm packages](), [Security]() Tags: [chainguard](), [chainguard-libraries](), [ecosystems](), [greyware](), [greyware-scanner](), [hardening](), [javascript](), [malware](), [malware-prevention](), [malware-scanner](), [npm](), [npm-packages](), [open-source](), [packages](), [scanner](), [security](), [source](), [supply-chain-attacks]() ### AI overview Chainguard has introduced a source code scanner that detects traditional malware and "greyware," harmful packages that may perform actions such as credential theft, command interception, API key harvesting, or persistent remote access. The scanner currently protects npm packages, scans more than 100,000 packages daily, and has blocked more than 52,000 packages identified as malware or greyware. ### Source excerpt Chainguard's new scanner blocks malware and 'greyware' before it reaches developers, protecting 100,000+ packages daily across open source ecosystems. ## Chainguard and Upwind: Secure what you build. Verify what you run. DevFeed: [Chainguard and Upwind: Secure what you build. Verify what you run.]() Original publisher: [Read original article]() Published: 2026-05-26T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard libraries](), [supply-chain-security](), [malicious packages](), [Application Security](), [Vulnerabilities]() Tags: [application-security](), [chainguard](), [chainguard-libraries](), [chainguard-libraries-for-python](), [chainguard-scanners](), [chainguard-upwind](), [cybersecurity](), [malicious-packages](), [malware-scanners](), [security](), [supply-chain-attacks](), [upwind](), [vulnerabilities]() ### AI overview Chainguard announces that Upwind now scans Chainguard Libraries for Python. The article describes combining trusted software artifacts with runtime visibility to reduce noise and supply chain risk. ### Source excerpt Chainguard and Upwind combine trusted, source-built artifacts with runtime verification to cut noise, reduce risk, and secure AI-era software. ## Canada's CPCSC and Bill C-8 are coming. Here's what you need to do. DevFeed: [Canada's CPCSC and Bill C-8 are coming. Here's what you need to do.]() Original publisher: [Read original article]() Published: 2026-05-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Cybersecurity](), [Critical Infrastructure](), [Security](), [Containers](), [Cloud Native Ecosystem]() Tags: [bill-c-8](), [canada-cmmc](), [canadian-program-for-cyber-security-certification](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [cmmc](), [compliance](), [containers](), [cpcsc](), [critical-infrastructure](), [cybersecurity](), [federal-compliance](), [fedramp](), [nist](), [zero-cve-containers]() ### AI overview This article explains Canada's Canadian Program for Cyber Security Certification (CPCSC) and Bill C-8, focusing on the implications for defence suppliers and organizations in critical infrastructure. It describes the CPCSC as a mandatory cybersecurity certification regime, compares its technical basis with CMMC and NIST Special Publications 800-171 and 800-172, and outlines why organizations should prepare for Level 1 requirements. The article also describes how Chainguard can help Canadian defence suppliers meet those requirements with secure, zero-CVE containers. ### Source excerpt CPCSC compliance is coming fast. Learn how Chainguard helps Canadian defence suppliers meet Level 1 requirements with secure, zero-CVE containers. ## Chainguard brings first-party RHEL 9 and RHEL 10 RPM support to Chainguard OS, joins FINOS DevFeed: [Chainguard brings first-party RHEL 9 and RHEL 10 RPM support to Chainguard OS, joins FINOS]() Original publisher: [Read original article]() Published: 2026-05-11T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard os](), [chainguard containers](), [Security](), [Critical Infrastructure](), [Package Management](), [Open Source](), [Cloud Native Ecosystem](), [Resilience](), [APK](), [Linux]() Tags: [chainguard](), [chainguard-containers](), [chainguard-finserv](), [chainguard-os](), [cloud](), [cloud-native](), [compatibility](), [compliance](), [container](), [container-images](), [containers](), [critical-infrastructure](), [cve](), [dependencies](), [hardening](), [images](), [linux](), [make](), [mythos](), [open](), [open-source](), [project-glasswing](), [rhel](), [rhel-10](), [rhel-9]() ### AI overview Chainguard announces first-party RHEL 9 and RHEL 10 RPM compatibility for packages in Chainguard Containers built on Chainguard OS. The company also announces that it is joining FINOS to support open source collaboration in financial infrastructure. ### Source excerpt Chainguard adds first-party RHEL 9/10 RPM compatibility and joins FINOS, helping financial institutions modernize securely for the AI-driven threat era. ## How does Chainguard prevent malware in Chainguard Libraries? DevFeed: [How does Chainguard prevent malware in Chainguard Libraries?]() Original publisher: [Read original article]() Published: 2026-05-01T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [Malware](), [supply-chain-security](), [chainguard](), [Open Source](), [Artificial Intelligence]() Tags: [ai](), [chainguard](), [chainguard-libraries](), [malware](), [open-source](), [software-supply-chain](), [supply-chain]() ### AI overview Chainguard explains how Chainguard Libraries protects customers from malware in open source dependencies by building packages from source in a controlled environment. The article describes binary artifacts without corresponding source code as a common supply-chain attack vector and highlights Chainguard's AI-powered Factory for reproducing packages at scale. ### Source excerpt With Chainguard Libraries, customers rely on a single controlled, auditable system. ## Chainguard EKS add-ons are now available in the AWS Marketplace DevFeed: [Chainguard EKS add-ons are now available in the AWS Marketplace]() Original publisher: [Read original article]() Published: 2026-04-30T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Amazon EKS](), [aws-marketplace](), [chainguard](), [Security](), [supply-chain-security](), [Image](), [Containers]() Tags: [aws-eks-add-ons](), [aws-marketplace](), [chainguard](), [chainguard-aws](), [chainguard-containers](), [chainguard-eks-add-ons](), [compliance](), [eks-add-ons](), [fips](), [fips-140-3](), [kubernetes](), [security](), [software-supply-chain]() ### AI overview Chainguard announces that its EKS add-ons are available in AWS Marketplace. The five add-ons provide networking, DNS, storage, and traffic-management components, with zero-known-CVE images and FIPS 140-3 validation for organizations that need greater control over security and compliance. ### Source excerpt Chainguard delivers zero-CVE, FIPS 140-3 EKS add-ons on AWS Marketplace, simplifying secure Kubernetes for regulated environments with full control. [Next page]()