# chainguard containers Chainguard Containers is a catalog of zero-CVE, built-from-source container images for engineers, with continuously rebuilt images and Helm charts. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Proven, not promised: Chainguard Containers achieves SLSA Build Level 3 DevFeed: [Proven, not promised: Chainguard Containers achieves SLSA Build Level 3]() Original publisher: [Read original article]() Published: 2026-08-17T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [supply-chain-security](), [software bill of materials](), [Security]() Tags: [chainguard](), [chainguard-containers](), [provenance](), [sbom](), [security](), [signing](), [slsa](), [software-supply-chain-security](), [supply-chain]() ### AI overview Chainguard says Coalfire independently assessed the Chainguard Containers build and release system as meeting SLSA Build Level 3 requirements. The article describes hardened, isolated builds, separately managed signing, provenance generation, and signed SBOMs for releases. ### Source excerpt Coalfire independently assessed Chainguard Containers at SLSA Build Level 3, validating hardened builds, provenance, and supply chain integrity. ## Why zero CVEs matters in mobile airgapped deployments DevFeed: [Why zero CVEs matters in mobile airgapped deployments]() Original publisher: [Read original article]() Published: 2026-07-28T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [Vulnerabilities](), [Security](), [chainguard containers](), [chainguard]() Tags: [chainguard](), [chainguard-containers](), [containers](), [cves](), [security](), [vulnerabilities]() ### AI overview The article explains why disconnected mobile and air-gapped systems become increasingly exposed as vulnerabilities accumulate while patching and live feeds are unavailable. It argues that starting with low-CVE container images and refreshing them before departure can reduce the vulnerability backlog, citing Chainguard Containers' stated CVE reduction and daily rebuild practices. ### Source excerpt Disconnected systems can't patch. Learn how minimal, zero-CVE containers help reduce vulnerability accumulation in air-gapped environments. ## Booz Allen Hamilton signs enterprise license agreement with Chainguard DevFeed: [Booz Allen Hamilton signs enterprise license agreement with Chainguard]() Original publisher: [Read original article]() Published: 2026-07-21T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [chainguard libraries](), [open-source-security](), [Security](), [Vulnerabilities](), [Open Source](), [Development]() Tags: [announce](), [ato](), [authority-to-operate](), [booz-allen-hamilton](), [booz-allen-hamilton-engineering](), [booz-chainguard-partnership](), [chainguard](), [chainguard-booz](), [chainguard-containers](), [chainguard-libraries](), [compliance](), [container-images](), [development](), [enterprise](), [government](), [partner](), [secure-by-default](), [security](), [supply-chain](), [trust](), [us](), [vulnerabilities]() ### AI overview Booz Allen Hamilton has signed an enterprise license agreement with Chainguard, giving more than 6,000 engineers access to Chainguard Containers and Chainguard Libraries across U.S. government programs. The agreement is intended to support secure-by-default software delivery, vulnerability remediation, compliance, and software supply chain requirements. ### Source excerpt Booz Allen and Chainguard partner to help 6,000+ engineers deliver secure-by-default software across U.S. government programs. ## Everything we announced during AI Readiness Innovation Week DevFeed: [Everything we announced during AI Readiness Innovation Week]() Original publisher: [Read original article]() Published: 2026-06-25T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [ai-coding](), [supply-chain-security](), [chainguard](), [open-source-security](), [Vulnerabilities](), [Security](), [chainguard libraries](), [chainguard containers](), [CI/CD](), [Frontier AI](), [GitHub]() Tags: [ai](), [ai-readiness](), [athena](), [aws-kiro](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [ci-cd](), [containers](), [cursor](), [frontier-ai-models](), [gartner-magic-quadrant](), [github](), [innovation](), [open-source](), [security](), [software-supply-chain](), [software-supply-chain-security](), [speed](), [vulnerabilities]() ### AI overview Chainguard summarizes announcements from AI Readiness Innovation Week, covering supply-chain security advances for containers, libraries, CI/CD pipelines, AI agent skills, IDE integrations, partnerships, and an industry coalition. The article highlights Athena, a coalition designed to coordinate defense against vulnerabilities discovered by frontier AI models. ### Source excerpt Read about everything Chainguard announced during AI Readiness Innovation Week, including new features for Chainguard Libraries and Chainguard Containers. ## Adopt hardened containers without changing your pipelines, tooling, or environment DevFeed: [Adopt hardened containers without changing your pipelines, tooling, or environment]() Original publisher: [Read original article]() Published: 2026-06-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [chainguard containers](), [Security](), [Deployment](), [Tooling]() Tags: [chainguard](), [chainguard-containers](), [chainguard-redhat-rpm](), [cmvp](), [compliance](), [containers](), [cyclonedx](), [dependabot](), [deployment](), [fips](), [hardened-containers](), [provenance](), [rhel](), [rhel-10](), [rhel-9](), [rpm-10](), [rpm-9](), [sboms](), [secure-by-default](), [security](), [vulnerabilities]() ### AI overview Chainguard announces updates to Chainguard Containers that support enterprise adoption of hardened images without changing existing pipelines, tooling, or environments. The updates include RPM support for RHEL 9 and RHEL 10, compatible image tags, a CMVP-validated Go Geomys FIPS image, Dependabot support for private registries, and flattened CycloneDX SBOMs for compliance tools. ### Source excerpt Chainguard expands Containers with RPM support, FIPS enhancements, and easier migrations, bringing secure-by-default software to enterprise workflows. ## Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security DevFeed: [Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security]() Original publisher: [Read original article]() Published: 2026-06-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard containers](), [container images](), [Security](), [Containers](), [chainguard libraries]() Tags: [chainguard](), [chainguard-containers](), [chainguard-gartner](), [chainguard-gartner-mq](), [chainguard-libraries](), [container-images](), [gartner](), [gartner-magic-quadrant](), [sboms](), [secure-by-default](), [security](), [software-supply-chain-security](), [software-supply-chain-security-gartner](), [software-supply-chain-security-mq](), [zero-cves]() ### AI overview Chainguard's article discusses its recognition as a Leader in Gartner's inaugural Magic Quadrant for Software Supply Chain Security. It argues that accelerating vulnerability exploitation and AI-assisted development require prevention-oriented, secure-by-default supply chain security. The article highlights Chainguard Containers, which provides minimal container images rebuilt daily from source, with zero CVEs, SBOMs, and verifiable signatures, and briefly introduces Chainguard Libraries. ### Source excerpt Gartner names Chainguard a Leader in Software Supply Chain Security, highlighting its secure-by-default approach and market vision. ## Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run DevFeed: [Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run]() Original publisher: [Read original article]() Published: 2026-06-18T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [Containers](), [anchore](), [Open Source]() Tags: [anchore](), [anchore-enterprise](), [apache](), [built-from-source](), [chainguard](), [chainguard-containers](), [chainguard-images](), [cinc-auditor](), [compliance](), [fedramp](), [open-source](), [pipeline](), [scanner](), [stig](), [stigs]() ### AI overview Chainguard introduces a ready-to-run cinc-auditor container image for STIG scanning of Chainguard Containers. The image includes a maintained GPOS SRG InSpec profile, removes separate profile and dependency setup, and supports production compliance pipelines, including FedRAMP workflows. ### Source excerpt Chainguard launches a ready-to-run STIG scanner with a built-in GPOS SRG InSpec profile, simplifying compliance scans for containers and FedRAMP workflows. ## Building for the AI era: Chainguard partners with Endor Labs DevFeed: [Building for the AI era: Chainguard partners with Endor Labs]() Original publisher: [Read original article]() Published: 2026-05-19T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Application Security](), [Artificial Intelligence](), [AI-assisted coding](), [chainguard containers](), [Containers](), [Library](), [Agent Skill](), [CI/CD]() Tags: [agent](), [ai](), [ai-coding-agents](), [application-security](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [containers](), [cves](), [endor](), [endor-labs](), [observability](), [provenance](), [sboms](), [software-supply-chain](), [vulnerabilities]() ### AI overview Chainguard partners with Endor Labs to help teams building with AI coding agents secure the software supply chain. Chainguard provides source-built artifacts, daily rebuilds, signed SBOMs, and SLSA Level 3 provenance, while Endor Labs analyzes application context to identify vulnerabilities that are genuinely reachable and exploitable. ### Source excerpt Chainguard and Endor Labs help teams build securely at AI speed with source-built artifacts, exploitability analysis, and fewer vulnerabilities to triage. ## Chainguard brings first-party RHEL 9 and RHEL 10 RPM support to Chainguard OS, joins FINOS DevFeed: [Chainguard brings first-party RHEL 9 and RHEL 10 RPM support to Chainguard OS, joins FINOS]() Original publisher: [Read original article]() Published: 2026-05-11T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard os](), [chainguard containers](), [Security](), [Critical Infrastructure](), [Package Management](), [Open Source](), [Cloud Native Ecosystem](), [Resilience](), [APK](), [Linux]() Tags: [chainguard](), [chainguard-containers](), [chainguard-finserv](), [chainguard-os](), [cloud](), [cloud-native](), [compatibility](), [compliance](), [container](), [container-images](), [containers](), [critical-infrastructure](), [cve](), [dependencies](), [hardening](), [images](), [linux](), [make](), [mythos](), [open](), [open-source](), [project-glasswing](), [rhel](), [rhel-10](), [rhel-9]() ### AI overview Chainguard announces first-party RHEL 9 and RHEL 10 RPM compatibility for packages in Chainguard Containers built on Chainguard OS. The company also announces that it is joining FINOS to support open source collaboration in financial infrastructure. ### Source excerpt Chainguard adds first-party RHEL 9/10 RPM compatibility and joins FINOS, helping financial institutions modernize securely for the AI-driven threat era. ## How we automatically test the world's most secure Linux distribution DevFeed: [How we automatically test the world's most secure Linux distribution]() Original publisher: [Read original article]() Published: 2026-05-01T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [test-coverage](), [chainguard os](), [Linux](), [chainguard containers]() Tags: [chainguard](), [chainguard-containers](), [chainguard-os](), [chainguard-packages](), [chainguard-testing](), [linux](), [test-coverage]() ### AI overview Chainguard OS has achieved 100% test coverage across its package and subpackage catalog. The automated tests execute software, verify behavior, and test service lifecycles across x86_64 and aarch64 packages before release. ### Source excerpt Chainguard OS achieves 100% package test coverage, verifying every component runs correctly to make rolling updates secure, reliable, and enterprise-ready. ## Going beyond CVEs: Chainguard's one day KEV SLA DevFeed: [Going beyond CVEs: Chainguard's one day KEV SLA]() Original publisher: [Read original article]() Published: 2026-04-28T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Vulnerabilities](), [chainguard containers](), [Security](), [cisa]() Tags: [chainguard](), [chainguard-containers](), [chainguard-cves](), [chainguard-images](), [chainguard-kevs](), [cisa](), [containers](), [cves](), [exploited-vulnerabilities](), [kevs](), [known-exploitable-vulnerabilities](), [security]() ### AI overview Chainguard announces a one-calendar-day SLA for remediating CVEs added to the CISA Known Exploited Vulnerabilities Catalog when they affect Chainguard container images. The article explains the SLA's relationship to exploited-vulnerability prioritization and Chainguard's continuous remediation processes. ### Source excerpt Chainguard introduces a 1-day KEV SLA, ensuring exploited vulnerabilities are fixed fast--aligned with how security teams prioritize real-world threats. ## Chainguard customers safe from elementary-data compromise DevFeed: [Chainguard customers safe from elementary-data compromise]() Original publisher: [Read original article]() Published: 2026-04-25T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Malware](), [data observability](), [Data Quality](), [chainguard containers](), [chainguard libraries]() Tags: [chainguard](), [chainguard-containers](), [chainguard-customers](), [chainguard-libraries](), [data-observability](), [data-quality](), [elementary-data-compromise](), [malware](), [pypi](), [pypi-malware]() ### AI overview Chainguard reports that customers using its Python Libraries and Container images were unaffected by the compromised elementary-data 0.23.3 package on PyPI. Chainguard detected malicious patterns before building the package, while the compromised release was quarantined and related GitHub and Docker artifacts were removed. ### Source excerpt Malicious elementary-data version hit PyPI. Chainguard customers stayed protected by detecting malware pre-build and serving only verified safe versions. ## Chainguard customers safe from new npm worm and xinference supply chain attack DevFeed: [Chainguard customers safe from new npm worm and xinference supply chain attack]() Original publisher: [Read original article]() Published: 2026-04-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Malware](), [npm](), [Credential theft](), [Library](), [chainguard libraries](), [chainguard containers](), [GitHub]() Tags: [chainguard](), [chainguard-containers](), [chainguard-libraries](), [chainguard-malware](), [credential-theft](), [github](), [malicious-packages](), [malware](), [npm](), [npm-malware](), [npm-worm](), [packages](), [pypi-malware](), [supply-chain](), [worm](), [xinference]() ### AI overview The article reports npm and PyPI malware attacks affecting 25 packages with more than 60,000 combined monthly downloads. It explains that Chainguard customers were protected because Chainguard builds from verifiable source code and rejects packages that rely on install-time scripts. ### Source excerpt New npm and PyPI malware hit many popular packages. Chainguard customers stayed protected by blocking install scripts and rebuilding only verified source code. ## Chainguard and Cursor partner to bring secure open source artifacts to agentic coding DevFeed: [Chainguard and Cursor partner to bring secure open source artifacts to agentic coding]() Original publisher: [Read original article]() Published: 2026-04-21T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [agentic-coding](), [cursor](), [chainguard containers](), [chainguard libraries](), [Security](), [Open Source](), [ai-coding]() Tags: [agentic-coding](), [ai-agents](), [chainguard](), [chainguard-containers](), [chainguard-cursor-partnership](), [chainguard-libraries](), [cursor](), [open-source](), [secure-open-source](), [security](), [shai-hulud](), [supply-chain]() ### AI overview Chainguard and Cursor are partnering to provide trusted, secure open source containers and libraries for agentic coding. The integration directs developers away from insecure public registries toward Chainguard Repository artifacts, helping reduce malware and software supply chain risks without slowing development. ### Source excerpt Chainguard and Cursor partner to secure AI-generated code with trusted, source-built containers and libraries, reducing risk without slowing developers. ## Is Grype a single point of failure for Chainguard's CVE detection? DevFeed: [Is Grype a single point of failure for Chainguard's CVE detection?]() Original publisher: [Read original article]() Published: 2026-04-10T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [grype](), [chainguard](), [Malware](), [chainguard containers](), [Open Source](), [Containers]() Tags: [chainguard](), [chainguard-containers](), [chainguard-os](), [chainguard-scanners](), [containers](), [cve](), [grype](), [malware](), [open-source](), [source](), [supply-chain-attacks](), [trivy]() ### AI overview The article explains why Grype is not a single point of failure in Chainguard's CVE detection system. It describes layered defenses including building Grype from source, malware detection, and alternative input-source protections to improve the reliability of security findings. ### Source excerpt Is Grype a single point of failure? Learn how Chainguard uses layered defenses, source builds, and multiple data sources to ensure trusted CVE detection. ## SecDB is the past, OSV is the future DevFeed: [SecDB is the past, OSV is the future]() Original publisher: [Read original article]() Published: 2026-04-09T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [vulnerability](), [Vulnerabilities](), [chainguard packages](), [Security]() Tags: [chainguard](), [chainguard-containers](), [chainguard-scanners](), [cves](), [deprecated](), [open-source-vulnerabilities](), [osv](), [secdb](), [security](), [vulnerability](), [vulnerability-data](), [vulnerability-scanning]() ### AI overview Chainguard is deprecating its SecDB vulnerability feed and plans to sunset it at the end of 2026. The company is moving toward the OSV schema because it supports more precise vulnerability data, including unfixed vulnerabilities and component-level advisory details. ### Source excerpt Chainguard is deprecating SecDB in favor of OSV, delivering more accurate, granular vulnerability data and better visibility for modern software supply chains. ## Removing supply chain friction: How PeopleTec improved developer productivity with Chainguard DevFeed: [Removing supply chain friction: How PeopleTec improved developer productivity with Chainguard]() Original publisher: [Read original article]() Published: 2026-04-02T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [supply-chain-security](), [chainguard containers](), [Containers](), [code productivity](), [migration]() Tags: [accelerate](), [chainguard](), [chainguard-assemble](), [chainguard-containers](), [chainguard-developer-experience](), [chainguard-migration](), [ci](), [code](), [containers](), [cve-remediation](), [developer](), [developer-velocity](), [migration](), [migration-guides](), [peopletec](), [provenance](), [security](), [supply-chain](), [vulnerability-management]() ### AI overview PeopleTec describes how it used Chainguard Security controls and Chainguard Containers to reduce software supply-chain friction, address vulnerabilities in base images, improve provenance and compliance workflows, and support developer productivity. The approach emphasized early adopters, low-friction migration, and automated policy checks in CI. ### Source excerpt Learn how PeopleTec used Chainguard to reduce security friction, accelerate adoption, and align platform consistency with developer velocity. ## Chainguard introduces Catalog Starter with five free trusted container images DevFeed: [Chainguard introduces Catalog Starter with five free trusted container images]() Original publisher: [Read original article]() Published: 2026-03-17T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard catalog starter](), [chainguard catalog](), [container images](), [chainguard containers]() Tags: [chainguard-catalog](), [chainguard-catalog-starter](), [chainguard-containers](), [chainguard-free-tier](), [container-images](), [free](), [free-chainguard-containers](), [free-chainguard-images](), [security]() ### AI overview Chainguard introduces Catalog Starter, a free offering that lets developers choose five trusted container images from the Chainguard catalog for development and production workloads. ### Source excerpt Chainguard Catalog Starter is a new free offering that gives developers instant access to trusted container images from the industry's most comprehensive catalog ## Chainguard + Second Front: A faster, more secure path into government markets DevFeed: [Chainguard + Second Front: A faster, more secure path into government markets]() Original publisher: [Read original article]() Published: 2026-02-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [container images](), [DevSecOps](), [supply-chain-security](), [Vulnerabilities](), [Deployment](), [Cybersecurity]() Tags: [chainguard](), [chainguard-containers](), [chainguard-for-compliance](), [cmmc](), [container-image-compliance](), [container-images](), [cve-remediation](), [cybersecurity](), [devsecops](), [federal-compliance](), [fedramp](), [government](), [iso](), [provenance](), [sbom](), [second-front-systems](), [secure-by-default](), [secure-by-design](), [security](), [soc-2](), [software-supply-chain]() ### AI overview Chainguard and Second Front are partnering to help software companies pursue federal market requirements, including FedRAMP authorization and DoD impact-level accreditations. The article describes combining Chainguard's hardened container images with Second Front's Game Warden DevSecOps platform to support secure application delivery and vulnerability reduction. ### Source excerpt Discover how Chainguard and Second Front are partnering to help build a secure path into government markets for your organization. ## Forrester TEI study: Chainguard Containers delivered 233% return on investment DevFeed: [Forrester TEI study: Chainguard Containers delivered 233% return on investment]() Original publisher: [Read original article]() Published: 2026-02-18T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [container-security](), [chainguard](), [vulnerability management](), [Containers](), [Vulnerabilities](), [Application Security](), [Open Source]() Tags: [chainguard](), [chainguard-containers](), [chainguard-forrester](), [chainguard-roi](), [chainguard-value](), [cmmc](), [compliance](), [container-security](), [containers](), [forrester-tei](), [open-source](), [pci-dss](), [security](), [vulnerabilities](), [vulnerability-management]() ### AI overview A Forrester Consulting Total Economic Impact study commissioned by Chainguard reports that customers using Chainguard Containers achieved a 233% return on investment over three years, with $2.5 million in benefits and payback in less than six months. The article attributes these results to reduced vulnerabilities, simpler maintenance, and lower compliance overhead, supported by minimal zero-CVE container images and automated remediation. ### Source excerpt Explore the latest Forrester Consulting Total Economic Impact™ (TEI) study, commissioned by Chainguard. ## Introducing Fulfillment Dashboard: New artifact requests are now self-serve DevFeed: [Introducing Fulfillment Dashboard: New artifact requests are now self-serve]() Original publisher: [Read original article]() Published: 2026-02-12T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [dashboards](), [chainguard containers](), [chainguard](), [Containers](), [Development]() Tags: [chainguard](), [chainguard-containers](), [chainguard-factory](), [chainguard-images](), [console](), [customers](), [fulfillment-dashboard](), [real-time](), [scale](), [search](), [secure-software](), [self-service](), [self-service-container-images](), [visibility](), [workflows]() ### AI overview Chainguard introduces Fulfillment Dashboard, a self-service console for submitting, tracking, searching, and voting on secure container image requests. It provides lifecycle visibility, target delivery dates, deduplication, and community upvoting to help prioritize fulfillment. ### Source excerpt Fulfillment Dashboard gives Chainguard customers real-time visibility, tracking, and community voting for new secure container image requests. ## Be my base image: Introducing Linky's Matchmaker DevFeed: [Be my base image: Introducing Linky's Matchmaker]() Original publisher: [Read original article]() Published: 2026-02-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Dockerfile](), [chainguard containers](), [Containers](), [Vulnerabilities](), [App](), [Web]() Tags: [base-images](), [chainguard](), [chainguard-containers](), [chainguard-images](), [chainguard-valentine-s-day](), [comparisons](), [container-images](), [containers](), [dockerfile-converter](), [dockerfiles](), [documentation](), [images](), [secure-by-default](), [vulnerabilities]() ### AI overview Linky's Matchmaker is a web-based app that analyzes Dockerfiles, recommends compatible Chainguard Containers, and generates downloadable converted Dockerfiles. It also provides image availability checks, documentation and tag links, and vulnerability comparisons. ### Source excerpt Linky's Matchmaker converts your Dockerfile to Chainguard Containers, recommending secure, minimal base images and generating an updated file in minutes ## How I learned to stop worrying and love the latest tag DevFeed: [How I learned to stop worrying and love the latest tag]() Original publisher: [Read original article]() Published: 2026-02-11T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container images](), [Docker](), [Dockerfile](), [chainguard containers](), [Docker Hardened Images](), [Kubernetes](), [YAML]() Tags: [chainguard](), [chainguard-automations](), [chainguard-containers](), [chainguard-factory](), [container-image-digests](), [cryptographic](), [digestabot](), [digests](), [docker](), [docker-hardened-images](), [hardened-images](), [latest-tag](), [reproducibility]() ### AI overview The article explains how to use the latest tag as part of a secure container image update strategy. It recommends pinning images to cryptographic digests to ensure reproducibility, enable reliable rollbacks, and prevent unexpected version changes, while retaining tags for readability and tooling. It also introduces automated workflows for finding and updating digests. ### Source excerpt The latest tag isn't unsafe by default -- pin images to digests for reproducible, secure updates while staying current with automated workflows. ## Super SBOMs: See exactly what's inside DevFeed: [Super SBOMs: See exactly what's inside]() Original publisher: [Read original article]() Published: 2026-01-29T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Containers](), [chainguard](), [Security](), [spdx]() Tags: [chainguard-containers](), [chainguard-sboms](), [containers](), [cyclonedx](), [fedramp](), [sbom](), [sboms](), [security](), [software-bill-of-materials](), [software-supply-chain-security](), [spdx](), [vulnerability]() ### AI overview Chainguard Containers now provide richer SBOMs with binary-level details about embedded libraries and dependencies, along with CycloneDX support in addition to SPDX. The added visibility helps teams trace vulnerabilities and assess license compliance. ### Source excerpt Chainguard Containers ship richer SBOMs with binary-level library details plus new CycloneDX support, making CVE impact and compliance tracing fast and clear. [Next page]()