# container-security The cybersecurity discipline of securing application containers and their lifecycle, including images, runtimes, registries, and orchestration. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## A Bootiful Podcast: BellSoft's Catherine Edelveis on hardened runtime images, container security, and more DevFeed: [A Bootiful Podcast: BellSoft's Catherine Edelveis on hardened runtime images, container security, and more]() Original publisher: [Read original article]() Author: joshlong Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Spring]() Topics: [container-security]() Tags: [batch](), [boot](), [cloud](), [container-security](), [event-driven](), [java](), [microservices](), [podcast](), [reactive](), [security](), [serverless](), [spring](), [spring-boot](), [web-applications]() ### AI overview A podcast conversation about using buildpacks and hardened images to ship Spring Boot applications with stronger security, cleaner defaults, and less Dockerfile work. ### Source excerpt Hi, Spring fans! I chat with BellSoft's Catherine Edelweiss about using buildpacks and hardened images to ship Spring Boot apps with stronger security, cleaner defaults, and far less Dockerfile pain. #BellSoft #Docker #Java #JRE #SpringBoot ## Why the CVE doom cycle cannot be solved by working harder DevFeed: [Why the CVE doom cycle cannot be solved by working harder]() Original publisher: [Read original article]() Author: Sam Barlien Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [vulnerability management](), [Automation](), [container-security](), [Vulnerabilities](), [configuration]() Tags: [automation](), [container-image-security](), [cve](), [false-positives](), [secure-by-design](), [security](), [vulnerability-management]() ### AI overview The article argues that the recurring cycle of scanning, triaging, patching, and redeploying container images cannot be solved by working harder or using faster scanners. Because vulnerability findings and CVEs accumulate faster than manual remediation can handle, it recommends embedding vulnerability management into the platform through secure-by-design practices, golden paths, and automation. ### Source excerpt Manual CVE triage doesn't scale. Break the CVE doom cycle by shifting vulnerability management into the platform with golden paths and automation ## Secure What Matters: Scaling Effortless Container Security for the AI Era DevFeed: [Secure What Matters: Scaling Effortless Container Security for the AI Era]() Original publisher: [Read original article]() Author: Pratip Banerji; Brendan Hann Published: 2026-04-07T04:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [container-security](), [snyk-container](), [Containers](), [vulnerability](), [Deployment](), [CI/CD](), [Command-line interface](), [Artificial Intelligence]() Tags: [ai](), [americas](), [awareness](), [blog](), [ci-cd](), [cli](), [container-security](), [containers](), [deployment](), [developer](), [devops](), [devsecops](), [docker](), [engineering](), [go](), [interest](), [security](), [snyk-container](), [snyk-platform](), [tech](), [vulnerability](), [vulnerability-insights]() ### AI overview Snyk announces the general availability of Container Registry Sync, which automates the discovery, scanning, and pruning of container images. The article also previews a unified product experience for managing container-image risk across CLI, CI/CD, and registries. ### Source excerpt Announcing Snyk Container Registry Sync GA for automated image management and runtime intelligence. Scale container security effortlessly for the fast-paced AI era. ## Forrester TEI study: Chainguard Containers delivered 233% return on investment DevFeed: [Forrester TEI study: Chainguard Containers delivered 233% return on investment]() Original publisher: [Read original article]() Published: 2026-02-18T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [container-security](), [chainguard](), [vulnerability management](), [Containers](), [Vulnerabilities](), [Application Security](), [Open Source]() Tags: [chainguard](), [chainguard-containers](), [chainguard-forrester](), [chainguard-roi](), [chainguard-value](), [cmmc](), [compliance](), [container-security](), [containers](), [forrester-tei](), [open-source](), [pci-dss](), [security](), [vulnerabilities](), [vulnerability-management]() ### AI overview A Forrester Consulting Total Economic Impact study commissioned by Chainguard reports that customers using Chainguard Containers achieved a 233% return on investment over three years, with $2.5 million in benefits and payback in less than six months. The article attributes these results to reduced vulnerabilities, simpler maintenance, and lower compliance overhead, supported by minimal zero-CVE container images and automated remediation. ### Source excerpt Explore the latest Forrester Consulting Total Economic Impact™ (TEI) study, commissioned by Chainguard. ## Why Trusted Software Supply Chains Matter More Than Zero-CVE Container Claims DevFeed: [Why Trusted Software Supply Chains Matter More Than Zero-CVE Container Claims]() Original publisher: [Read original article]() Published: 2026-01-15T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [container-security](), [container images](), [Docker Hub](), [Containers](), [Docker](), [Software]() Tags: [ceo](), [chainguard](), [chainguard-containers](), [chainguard-images](), [chainguard-libraries](), [container-images](), [docker](), [docker-hub](), [docker-images](), [echo-security](), [hardened-images](), [hardening](), [minimus](), [rapidfort](), [secure-by-default](), [security](), [software-supply-chain-security](), [wiz-images](), [zero-cves]() ### AI overview Chainguard CEO Dan Lorenc argues that container security depends on trusting the origins and build processes of software, rather than relying primarily on post-hoc image hardening or zero-CVE claims. ### Source excerpt Chainguard CEO Dan Lorenc explains why real security comes from trusted, from-source software supply chains, not post-hoc hardening or zero-CVE promises. ## The only rule: Don't look at the code DevFeed: [The only rule: Don't look at the code]() Original publisher: [Read original article]() Published: 2025-12-29T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Vibe coding](), [AI Development](), [container-security](), [supply-chain-security]() Tags: [ai](), [ai-assisted-coding](), [ai-engineering](), [chainguard-ai](), [chainguard-vibelympics](), [code-quality](), [container-security](), [software-supply-chain](), [vibe-coding]() ### AI overview Chainguard's Vibelympics was a vibe-coding tournament in which 59 individuals and teams built software without looking at the generated code. The article describes the competition's challenges, including an emoji-only interface and a package ecosystem security auditor, and highlights selected submissions and results. ### Source excerpt Chainguard's Vibelympics competition brought out the best and most creative ideas in vibe coding and AI-assisted software development. ## Beyond the Scan: The Future of Snyk Container DevFeed: [Beyond the Scan: The Future of Snyk Container]() Original publisher: [Read original article]() Author: Brendan Hann; Pratip Banerji Published: 2025-11-04T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [container-security](), [Vulnerabilities](), [CI/CD]() Tags: [ai](), [awareness](), [blog](), [ci-cd](), [container-security](), [developer](), [docker](), [docker-hub](), [engineering](), [monitoring](), [pmm](), [security](), [snyk-container](), [vulnerabilities]() ### AI overview Snyk outlines a developer-first vision for container security that connects the IDE, CI/CD pipeline, container registry, and production. It highlights continuous registry monitoring to identify newly disclosed vulnerabilities in previously built images. ### Source excerpt Snyk Container rethinks security, moving beyond scans to deliver a comprehensive, end-to-end solution. It connects the entire lifecycle, from IDE to production, with continuous monitoring and AI-powered remediation. ## Agentic Container Security with Snyk MCP Server DevFeed: [Agentic Container Security with Snyk MCP Server]() Original publisher: [Read original article]() Author: Liran Tal Published: 2025-08-13T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [container-security](), [vulnerability](), [Application Security](), [Kubernetes](), [ci]() Tags: [agentic](), [ai](), [application-security](), [blog](), [container-security](), [containers](), [developer](), [devops](), [devrel](), [ide](), [interest](), [kubernetes](), [mcp](), [mcp-server](), [security](), [snyk-platform](), [vulnerability]() ### AI overview The article discusses using Snyk's MCP server in AI-powered IDE workflows to scan container vulnerabilities and recommend base-image changes earlier in development. ### Source excerpt Learn how Snyk's MCP server brings agentic security to container workflows. Automate vulnerability scanning and base image recommendations directly within your AI-powered IDE. ## Chainguard Now Available on Microsoft Azure Marketplace; Scan Chainguard Container Images with Microsoft Defender for Cloud DevFeed: [Chainguard Now Available on Microsoft Azure Marketplace; Scan Chainguard Container Images with Microsoft Defender for Cloud]() Original publisher: [Read original article]() Published: 2025-07-16T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Azure](), [container images](), [container-security](), [vulnerability scanning](), [Microsoft]() Tags: [azure](), [azure-marketplace](), [chainguard](), [chainguard-containers](), [chainguard-images](), [ci-cd](), [container-images](), [container-security](), [defender](), [microsoft-defender](), [security](), [vulnerability-scanning]() ### AI overview Chainguard Containers is now available through the Microsoft Azure Marketplace, enabling Azure customers to adopt it within existing procurement, billing, deployment, and CI/CD workflows. Microsoft Defender for Cloud can also scan Chainguard container images for vulnerabilities, improving visibility and security across container environments. ### Source excerpt Chainguard is now listed on the Microsoft Azure Marketplace. In addition, Microsoft Defender for Cloud can now scan Chainguard container images. ## Fork yeah: We're bringing kaniko back DevFeed: [Fork yeah: We're bringing kaniko back]() Original publisher: [Read original article]() Published: 2025-06-05T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Open Source](), [supply-chain-security](), [container-security](), [Docker](), [Kubernetes]() Tags: [chainguard](), [container](), [container-security](), [deprecated](), [docker](), [docker-images](), [fork](), [google](), [kaniko](), [kubernetes](), [maintenance](), [open-source](), [safe-source-for-open-source](), [software-supply-chain]() ### AI overview Chainguard is forking and taking over maintenance of Kaniko after Google announced plans to archive it. The project will remain open and upstream, with a focus on maintenance and minor bug fixes rather than new features, while Chainguard also offers commercial Kaniko images for organizations needing zero-CVE or FIPS versions. ### Source excerpt Chainguard is taking over the maintenance of the Kaniko project, recently deprecated by Google. Learn more about why we're doing it and what is next. ## Chainguard's Catalog of 1,300+ Container Images: Secure Foundation for Every Engineering Team DevFeed: [Chainguard's Catalog of 1,300+ Container Images: Secure Foundation for Every Engineering Team]() Original publisher: [Read original article]() Published: 2025-05-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [chainguard](), [Containers](), [chainguard os](), [container-security](), [Open Source](), [sigstore]() Tags: [chainguard](), [chainguard-catalog](), [chainguard-containers](), [chainguard-factory](), [chainguard-images](), [chainguard-os](), [container](), [container-images](), [cve-remediation](), [dependencies](), [open-source](), [provenance](), [safe-source-for-open-source](), [sigstore](), [slsa]() ### AI overview Chainguard describes its catalog of more than 1,300 minimal, zero-CVE container images, built from source on Chainguard OS and maintained through the Chainguard Factory. The article highlights daily rebuilds, automated dependency and CVE handling, and default SBOMs, SLSA provenance, and Sigstore signatures. ### Source excerpt Chainguard Containers is a catalog of over 1,300 container images powered by Chainguard OS and the Chainguard Factory. Discover the safe source for open source. ## Evaluating Container Security with Container Hardening Priorities: Some CHPs for Your SLSA DevFeed: [Evaluating Container Security with Container Hardening Priorities: Some CHPs for Your SLSA]() Original publisher: [Read original article]() Published: 2025-04-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [container images](), [supply-chain-security](), [Security]() Tags: [best-practices](), [chainguard](), [chainguard-containers](), [chainguard-images](), [chps](), [configuration](), [container-hardening-priorities](), [container-image](), [container-images](), [container-security](), [hardening](), [minimalism](), [provenance](), [security](), [security-best-practices](), [slsa](), [standard](), [supply-chain-security](), [vulnerabilities]() ### AI overview Chainguard introduces Container Hardening Priorities (CHPs), a framework for assessing container image security. CHPs complements SLSA and focuses initially on build-time characteristics including minimalism, provenance, configuration and metadata, and vulnerabilities. ### Source excerpt Chainguard has announced Container Hardening Priorities (CHPs), a new framework to assess the security of container images. Learn how it works. ## What FedRAMP 20x Means for You DevFeed: [What FedRAMP 20x Means for You]() Original publisher: [Read original article]() Published: 2025-04-02T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Automation](), [authority to operate](), [chainguard](), [chainguard containers](), [container-security](), [cve remediation](), [Security]() Tags: [authority-to-operate](), [automation](), [chainguard-containers](), [complexity](), [compliance](), [container-security](), [cost](), [cve-remediation](), [cves](), [fedramp](), [fedramp-20x](), [monitoring](), [security](), [vulnerabilities]() ### AI overview The article explains that FedRAMP 20x is intended to streamline the authority-to-operate process through automation and continuous validation. It says the core security and compliance controls are not changing and that the existing agency-based FedRAMP Rev. 5 authorization path remains active. ### Source excerpt FedRAMP 20x is a new initiative designed to automate and simplify the FedRAMP process. Get the rundown on what is changing, and how Chainguard can help. ## Chainguard Images are the Gold Standard for PCI DSS v4.0 DevFeed: [Chainguard Images are the Gold Standard for PCI DSS v4.0]() Original publisher: [Read original article]() Published: 2025-02-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [container-security](), [Containers](), [supply-chain-security](), [vulnerability management]() Tags: [chainguard](), [chainguard-images](), [chainguard-sboms](), [compliance](), [container](), [container-image](), [container-image-compliance](), [container-images](), [container-security](), [containers](), [cryptography](), [financial](), [pci-dss](), [pci-dss-v4-0](), [sboms](), [software-bill-of-materials](), [software-composition-analysis](), [software-supply-chain](), [stig](), [vulnerability](), [vulnerability-management]() ### AI overview The article explains how Chainguard Images can support selected PCI DSS v4.0 container-security controls. It focuses on asset and vulnerability management, hardened images, FIPS cryptography, build-time SBOMs, software supply chain inventory, and continuously updated containers. ### Source excerpt Chainguard Images are designed to make container image compliance for PCI DSS v4.0 easy for any company involved in card transactions. ## Chainguard Images: The Easy Button for FedRAMP DevFeed: [Chainguard Images: The Easy Button for FedRAMP]() Original publisher: [Read original article]() Published: 2025-01-28T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Docker Hardened Images](), [container-security](), [vulnerability management](), [Containers](), [chainguard sboms](), [Security](), [Development]() Tags: [asset-management](), [ato](), [authority-to-operate](), [chainguard](), [chainguard-images](), [compliance](), [container](), [container-image-security](), [cve](), [fedramp](), [hardening](), [sboms](), [sca](), [sdlc](), [vulnerability](), [vulnerability-management]() ### AI overview This article explains how Chainguard Images can simplify and accelerate FedRAMP Authority to Operate compliance for organizations deploying containerized cloud products to federal government customers. It describes secure-by-design containers as helping address asset management, hardening, cryptography, and vulnerability management requirements, and notes Snowflake's achievement of FedRAMP High with Chainguard Images. ### Source excerpt Chainguard Images are designed to make achieving FedRAMP compliance for container images easier. Learn more about how we make vulnerability management simple. ## 10 Docker Security Best Practices DevFeed: [10 Docker Security Best Practices]() Original publisher: [Read original article]() Author: Liran Tal; Omer Levi Hevroni Published: 2025-01-08T18:58:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Docker](), [container-security](), [Dockerfile](), [supply-chain-security](), [Kubernetes]() Tags: [acquisition](), [alpine](), [awareness](), [base-images](), [c](), [cheat-sheet](), [container-security](), [debian](), [developer](), [devops](), [devrel](), [devsecops](), [distroless](), [docker](), [go](), [google](), [security](), [security-best-practices](), [snyk-container](), [supply-chain-security](), [vulnerabilities]() ### AI overview This article explains Docker security across image builds, container runtime, supply-chain risks, and orchestration. It presents best practices including using minimal or distroless base images, multi-stage builds, reducing attack surface, and running containers with the least privilege. It also references Docker Hub, Kubernetes, Helm, Alpine Linux, Go, C, Debian, Node, and Google distroless images. ### Source excerpt Understand the basics of Docker security best practices with our Docker Cheat Sheet to improve container security. ## Blog: How to Deploy Falco with k8s-metacollector + k8smeta Plugin DevFeed: [Blog: How to Deploy Falco with k8s-metacollector + k8smeta Plugin]() Original publisher: [Read original article]() Published: 2024-10-14T00:00:00Z Content type: tutorial Language: en Sources: [Falco - Falco](), [Falco - The Falco blog]() Topics: [Falco](), [Kubernetes](), [container-security](), [Security](), [Deployment](), [Kubernetes clusters](), [monitor]() Tags: [clusters](), [container-security](), [deployment](), [enrichment](), [falco](), [helm](), [k8s-metacollector](), [k8smeta](), [kubernetes](), [monitor](), [plugin](), [security](), [tutorial]() ### AI overview This tutorial explains how to deploy Falco with the k8s-metacollector and k8smeta plugin on Kubernetes. It shows how these components add Kubernetes metadata such as pod names, namespaces, and deployment details to Falco security alerts, and how Falco's append_output feature can add extra metadata fields without modifying rules. ### Source excerpt In today's cloud-native world, securing Kubernetes environments has become increasingly critical as containerized workloads gain complexity. Falco is designed to monitor and detect anomalous activities in Kubernetes clusters and container environments. By continuously observing system calls and enriching event data with metadata, Falco ensures that any suspicious behavior is detected in real-time, protecting against threats like privilege escalations, file tampering, and network anomalies. In this tutorial, we will guide you through deploying Falco with two powerful components: k8s-metacollector and the k8smeta plugin. These tools significantly enhance Falco's security event detection by adding important Kubernetes context, such as pod names, namespaces, deployment details, to the alerts. Additionally, we will explore how to leverage the new append_output feature introduced in Falco version 0.39.0. This feature allows you to append extra metadata fields to Falco's output, without the need to modify your rules. By the end of this guide, you will have a Falco setup capable of detecting security issues in Kubernetes with enriched metadata output, ensuring you get a complete picture of your cluster's security posture. Whether you're an experienced Kubernetes administrator or just starting to explore container security, this guide will help you make the most of Falco's capabilities in a Kubernetes environment. What You'll Learn: The purpose and benefits of using the k8s-metacollector and k8smeta plugin to enrich Falco alerts with Kubernetes-specific data. How to deploy Falco with the k8smeta plugin on a Kubernetes cluster. How to configure and use the append_output feature to enhance Falco alerts with additional metadata fields. Prerequisites: A working Kubernetes cluster and some familiarity with Kubernetes concepts. Basic knowledge of Falco and how it works. Helm installed on your system (for easy deployment of Falco). Let's dive in and set up a Falco deployment that w ## Proactive AppSec continuous vulnerability management for developers and security teams DevFeed: [Proactive AppSec continuous vulnerability management for developers and security teams]() Original publisher: [Read original article]() Author: Liran Tal Published: 2024-10-02T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [vulnerability management](), [Open Source](), [AI Development](), [container-security](), [Exploit](), [GitHub Copilot](), [Containers](), [npm](), [React]() Tags: [ai](), [attacks](), [awareness](), [blog](), [c-cpp](), [code](), [code-security](), [container](), [container-security](), [dependency](), [developer](), [developers](), [development](), [devrel](), [devsecops](), [docker](), [javascript](), [node-js](), [open](), [open-source](), [open-source-security](), [ruby](), [security](), [snyk](), [snyk-code](), [snyk-container](), [snyk-open-source](), [software](), [software-development](), [source](), [supply-chain](), [supply-chain-attacks](), [vs-code](), [vulnerabilities](), [vulnerability](), [vulnerability-management]() ### AI overview The article explains why developers and security teams need continuous vulnerability management across the software development lifecycle. It covers risks from open-source dependencies, vendor-controlled supply chains, AI-generated code, prompt injection, GitHub Copilot, and containerized applications, and emphasizes automating vulnerability identification, remediation, dependency scanning, and container security. ### Source excerpt Protect against modern threats like open-source supply chain attacks and AI-generated code vulnerabilities. Automate dependency scanning, remediation, and container security to ensure your applications are safe and compliant. Secure your software development with Snyk's comprehensive vulnerability management solution. ## Meet Chainguard at Black Hat USA 2024 in Vegas! DevFeed: [Meet Chainguard at Black Hat USA 2024 in Vegas!]() Original publisher: [Read original article]() Published: 2024-07-19T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Cybersecurity](), [Application Security](), [container-security](), [Open Source]() Tags: [black-hat](), [chainguard](), [charity](), [container-security](), [cves](), [cybersecurity](), [developers](), [events](), [insights](), [music](), [networking](), [open-source](), [organization](), [protection](), [security](), [sponsor](), [techniques](), [us]() ### AI overview Chainguard announces its participation in Black Hat USA 2024 in Las Vegas, including a booth, a cybersecurity breakfast co-hosted with GitGuardian, social events, and a container security capture-the-flag challenge at DEF CON 32. ### Source excerpt Join Chainguard at Black Hat USA 2024 for cybersecurity insights, networking, and fun in Las Vegas this August. Don't miss our exciting events and activities! ## Understanding NIST's latest updates on container image security DevFeed: [Understanding NIST's latest updates on container image security]() Original publisher: [Read original article]() Published: 2024-07-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [Containers](), [supply-chain-security](), [Cybersecurity](), [Security]() Tags: [authentication](), [authorization](), [chainguard-images](), [container-image-security](), [container-security](), [containers](), [cybersecurity](), [image-security](), [nist](), [software-supply-chain](), [supply-chain-security](), [vulnerabilities]() ### AI overview This article explains NIST guidance relevant to container image security, including risks from misconfiguration, runtime threats, limited visibility, governance gaps, and compliance issues. It discusses NIST SP 800-161 Revision 1 and its focus on cybersecurity supply chain risk management, vulnerability monitoring, configuration management, authorization, and authentication. ### Source excerpt Learn about NIST's latest updates on container image security and how it impacts your organization's security posture. ## Chainguard's STIG-Hardened FIPS Images now generally available DevFeed: [Chainguard's STIG-Hardened FIPS Images now generally available]() Original publisher: [Read original article]() Published: 2024-07-11T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [container-security](), [container images](), [Containers](), [Security](), [Operating system](), [Docker Hardened Images]() Tags: [chainguard](), [chainguard-images](), [compliance](), [container-images](), [container-security](), [fips](), [hardening](), [html](), [report](), [security](), [security-technical-implementation-guide](), [stig](), [stigs]() ### AI overview Chainguard announced the general availability of STIG-hardened FIPS Images. The release maps applicable GPOS SRG controls to containers and provides the STIG in XCCDF format for validation with SCAP tools, supporting FedRAMP compliance workflows. ### Source excerpt Enhance your container security with Chainguard's STIG-hardened FIPS images, now generally available, offering unparalleled compliance and protection. ## Build a golden image program with Chainguard Images and JFrog Artifactory and Xray DevFeed: [Build a golden image program with Chainguard Images and JFrog Artifactory and Xray]() Original publisher: [Read original article]() Published: 2024-07-09T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [supply-chain-security](), [container images](), [Platform Engineering](), [Open Source](), [DevOps](), [Vulnerabilities]() Tags: [announce](), [build](), [chainguard](), [chainguard-images](), [container](), [container-images](), [container-security](), [cves](), [developers](), [development](), [devops](), [golden-image](), [hardened-images](), [integration](), [jfrog](), [jfrog-artifactory](), [open-source](), [platform-engineering](), [safe-source-for-open-source](), [xray]() ### AI overview The article explains how to build a secure golden image program by combining Chainguard Images with JFrog Artifactory and Xray. It describes using hardened container images, centralized artifact management, continuous vulnerability scanning, and a curated open source catalog to support platform and DevOps teams. ### Source excerpt Learn how to create a secure and streamlined golden image program with Chainguard Images, JFrog Artifactory, and Xray. ## Get Smart in Five Minutes: Is your software supply chain secure? DevFeed: [Get Smart in Five Minutes: Is your software supply chain secure?]() Original publisher: [Read original article]() Published: 2024-06-18T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [open-source-security](), [Vulnerabilities](), [Security](), [container-security](), [chainguard]() Tags: [article](), [chainguard](), [container-security](), [dan-lorenc](), [get-smart](), [open-source-software](), [software-supply-chain](), [software-supply-chain-security](), [sscs](), [supply-chain-attacks]() ### AI overview This article presents Episode 2 of "Get Smart in 5 Minutes," focused on software supply chain security. It explains risks from vulnerable software components, the benefits and risks of open-source software, supply chain attacks, inventory management, and choosing well-maintained components. Dan Lorenc of Chainguard provides expert commentary. ### Source excerpt Worried about your software supply chain? Take 5 minutes to learn about the risks and how to mitigate them. Secure your software today. ## STIG hardening container images DevFeed: [STIG hardening container images]() Original publisher: [Read original article]() Published: 2024-06-07T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [Security](), [chainguard images](), [Containers](), [chainguard]() Tags: [chainguard](), [chainguard-images](), [compliance](), [container-security](), [containers](), [false-positives](), [fedramp](), [hardened-image](), [hardening](), [pci-dss](), [security](), [security-technical-implementation-guide](), [stig](), [stig-hardening]() ### AI overview The article discusses hardening container images against STIG requirements, including how to distinguish controls that apply to containers from those that apply to the host operating system or Docker service. It also notes that false positives can occur in container security scans. ### Source excerpt Dive into the world of STIG hardening for container images. Explore expert insights, practical tips, and Chainguard solutions to fortify your container security. [Next page]()