# Docker Hardened Images Docker-maintained hardened container images, Helm charts, and system packages for secure software supply chains. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Moving from Minimus to Docker Hardened Images DevFeed: [Moving from Minimus to Docker Hardened Images]() Original publisher: [Read original article]() Author: Vishrut Iyengar Published: 2026-08-25T22:27:06Z Content type: article Language: en Sources: [Docker]() Topics: [Docker Hardened Images](), [migration](), [Docker](), [supply-chain-security](), [Docker Hub](), [Open Source](), [Debian](), [Artificial Intelligence]() Tags: [apache](), [ci](), [community](), [debian](), [docker](), [docker-hardened-images](), [docker-hub](), [enterprise](), [guide](), [migration](), [open-source](), [products](), [security](), [solutions](), [supply-chain](), [vulnerabilities]() ### AI overview Docker explains how Minimus customers can migrate to Docker Hardened Images before the Minimus registry goes offline on October 22, 2026. The article highlights the 60-day maintenance window, free migration assistance, DHI's open-source Apache 2.0 catalog, and a drop-in migration process centered on updating Dockerfile FROM lines. ### Source excerpt The Minimus registry goes offline on October 22. Here is the migration path, the free help Docker is offering, and where to start. ## MinIO End of Life: How to Stay Patched and Audit-Ready with Docker ELS DevFeed: [MinIO End of Life: How to Stay Patched and Audit-Ready with Docker ELS]() Original publisher: [Read original article]() Author: Vishrut Iyengar Published: 2026-08-24T13:00:00Z Content type: article Language: en Sources: [Docker]() Topics: [Docker Hardened Images](), [open-source-security](), [Security](), [migration](), [Docker](), [Open Source](), [Go]() Tags: [community](), [docker](), [docker-hardened-images](), [enterprise](), [go](), [migration](), [open-source](), [open-source-security](), [production](), [products](), [releases](), [security](), [solutions]() ### AI overview Docker's Extended Lifecycle Support keeps MinIO patched and audit-ready after the project's upstream end of life. The article explains how Docker maintains hardened images, tracks CVEs across MinIO and its Go dependencies, backports fixes, and supports teams that cannot immediately migrate their production object storage. ### Source excerpt MinIO reached end of life in February 2026. Docker Extended Lifecycle Support (ELS) keeps end-of-life software like it patched, compliant, and audit-ready for up to five years, covering versions upstream no longer supports all the way up to entire projects. ## ClickHouse on Docker Hardened Images DevFeed: [ClickHouse on Docker Hardened Images]() Original publisher: [Read original article]() Author: Karolina Ruiz Rogelj; Melvyn Peignon Published: 2026-07-10T15:28:34Z Content type: article Language: en Sources: [ClickHouse Blog]() Topics: [clickhouse](), [Docker Hardened Images](), [Docker](), [Security](), [Vulnerabilities](), [Docker Image](), [vulnerability](), [Ubuntu](), [apt](), [Perl](), [Amazon Web Services]() Tags: [apt](), [clickhouse](), [deployment](), [developers](), [docker](), [docker-hardened-images](), [docker-hub](), [docker-image](), [images](), [security](), [ubuntu](), [vulnerability]() ### AI overview ClickHouse is now available as a Docker Hardened Image: a minimal, security-hardened build that preserves ClickHouse behavior while shipping only the components needed to run the database and pass enterprise vulnerability scans. ### Source excerpt ClickHouse is now available as a Docker Hardened Image: a minimal, security-hardened build that passes enterprise vulnerability scans by shipping only what the database needs to run, with no change to how ClickHouse behaves. ## Docker Hodgepodge Images DevFeed: [Docker Hodgepodge Images]() Original publisher: [Read original article]() Published: 2026-04-15T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Docker Hardened Images](), [supply-chain-security](), [vulnerability](), [Docker]() Tags: [chainguard-vs-docker](), [dhi](), [docker](), [docker-containers](), [docker-hardened-images](), [docker-images](), [free-container-images](), [security](), [supply-chain-security](), [vulnerability](), [vulnerability-scanner]() ### AI overview The article argues that Docker Hardened Images are Debian Trixie derivatives rather than ordinary Debian images. It contends that Docker's custom repository, rebuilt packages, and operating-system identification can cause vulnerability scanners and related tools to produce inaccurate results, creating supply chain security concerns. ### Source excerpt Docker ships their own Linux distro, they just pretend not to. Learn how misidentification and VEX usage can mislead scanners and impact supply chain security. ## Introducing Chainguard OS Packages: Secure ingredients for custom container builds DevFeed: [Introducing Chainguard OS Packages: Secure ingredients for custom container builds]() Original publisher: [Read original article]() Published: 2026-03-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard os](), [container images](), [Docker Hardened Images](), [Vulnerabilities](), [Linux](), [Automation](), [Dockerfile](), [Open Source](), [bazel](), [chainguard sboms](), [APK]() Tags: [apk](), [apko](), [automation](), [base-images](), [bazel](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [chainguard-os](), [chainguard-os-packages](), [chainguard-packages](), [chainguard-sboms](), [container](), [container-images](), [cve](), [dockerfiles](), [open-source](), [sboms](), [secure-software-packages](), [software-packages](), [vulnerabilities](), [zero-cve-packages]() ### AI overview Chainguard introduces Chainguard OS Packages, a service providing continuously maintained, enterprise-grade packages and base images for teams that build custom container images. Customers retain control over image composition and build tooling while Chainguard handles package sourcing, rebuilding, vulnerability remediation, and SBOM generation. ### Source excerpt Chainguard OS Packages are enterprise-grade, zero-CVE packages and base images built and continuously maintained in the Chainguard Factory. ## Going deep: Upstream distros and hidden CVEs DevFeed: [Going deep: Upstream distros and hidden CVEs]() Original publisher: [Read original article]() Published: 2026-02-25T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Docker Hardened Images](), [supply-chain-security](), [container images](), [Vulnerabilities](), [Debian](), [Docker]() Tags: [chainguard-containers](), [debian](), [debian-containers](), [dhi](), [docker](), [docker-containers](), [docker-hardened-images](), [security](), [supply-chain](), [supply-chain-security](), [vex](), [vulnerabilities](), [zero-cves]() ### AI overview The article argues that container vendors relying on upstream distributions such as Debian or Alpine can inherit vulnerabilities because fixes may lag between upstream availability and downstream image releases. It examines Docker Hardened Images and claims that some CVEs are suppressed through no-DSA classifications and VEX documents even when fixes exist upstream but have not been incorporated into the images. ### Source excerpt Are all zero-CVE images truly secure? A deep dive into Debian no-DSA, VEX suppression, and why transparency matters in container supply chain security. ## Chainguard FIPS enters 2026 with OpenSSL 3.1.2 and better CMVP visibility DevFeed: [Chainguard FIPS enters 2026 with OpenSSL 3.1.2 and better CMVP visibility]() Original publisher: [Read original article]() Published: 2026-01-07T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Docker Hardened Images](), [Cryptography](), [Security, Privacy and Abuse Prevention](), [container images]() Tags: [2026](), [chainguard](), [chainguard-containers](), [chainguard-fips](), [cmvp](), [cmvp-sboms](), [fips](), [fips-140-3](), [fips-compliance](), [fips-containers](), [fips-validation](), [openssl](), [sboms](), [validation]() ### AI overview Chainguard updates its FIPS container images to use the Chainguard FIPS provider for OpenSSL 3.1.2, identified by CMVP certificate #5102. The images now expose CMVP and entropy certification numbers through SBOM packages, while future OpenSSL 3.4 and 3.6 upgrades remain under coordination and review with NIST. ### Source excerpt We updated our FIPS container images with OpenSSL 3.1.2 (CMVP #5102), clearer CMVP visibility in SBOMs, and a roadmap for upcoming FIPS 140-3 cryptography. ## Trusted Container Images: A Better Way to Build and Deploy Software DevFeed: [Trusted Container Images: A Better Way to Build and Deploy Software]() Original publisher: [Read original article]() Published: 2025-06-11T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Docker Hardened Images](), [Containers](), [Security](), [chainguard containers](), [Open Source]() Tags: [buyers-guide](), [chainguard-containers](), [chainguard-libraries](), [chainguard-vms](), [container-images](), [open-source-artifacts](), [secure-by-design](), [secure-container-images](), [secure-open-source-artifacts](), [security](), [supply-chain-security]() ### AI overview Chainguard's Buyer's Guide presents trusted container images and other open source artifacts as a way for enterprise engineering and security teams to reduce maintenance work, address supply-chain risks, and simplify compliance. It highlights Chainguard Containers as minimal, hardened images continuously built from source. ### Source excerpt Chainguard's Trusted Container Images and Open Source Artifacts Buyer's Guide helps you improve supply chain security and reduce costly engineering toil. ## Chainguard Images: The Easy Button for FedRAMP DevFeed: [Chainguard Images: The Easy Button for FedRAMP]() Original publisher: [Read original article]() Published: 2025-01-28T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Docker Hardened Images](), [container-security](), [vulnerability management](), [Containers](), [chainguard sboms](), [Security](), [Development]() Tags: [asset-management](), [ato](), [authority-to-operate](), [chainguard](), [chainguard-images](), [compliance](), [container](), [container-image-security](), [cve](), [fedramp](), [hardening](), [sboms](), [sca](), [sdlc](), [vulnerability](), [vulnerability-management]() ### AI overview This article explains how Chainguard Images can simplify and accelerate FedRAMP Authority to Operate compliance for organizations deploying containerized cloud products to federal government customers. It describes secure-by-design containers as helping address asset management, hardening, cryptography, and vulnerability management requirements, and notes Snowflake's achievement of FedRAMP High with Chainguard Images. ### Source excerpt Chainguard Images are designed to make achieving FedRAMP compliance for container images easier. Learn more about how we make vulnerability management simple. ## Explore Chainguard CVE Visualizations: Now in Beta DevFeed: [Explore Chainguard CVE Visualizations: Now in Beta]() Original publisher: [Read original article]() Published: 2024-12-19T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard images](), [Docker Hardened Images](), [container images](), [Security](), [grype](), [trivy]() Tags: [announce](), [blog](), [business](), [chainguard](), [chainguard-images](), [comparisons](), [container-images](), [cve](), [cve-reporting](), [cve-visualizations](), [cves](), [developer](), [grype](), [nginx](), [python](), [security](), [trivy](), [vulnerabilities]() ### AI overview Chainguard announces the beta release of CVE Visualizations in its console. The capability compares Chainguard Images with alternative container images over time using total CVEs, severity-level trends, and image size, helping organizations communicate security, engineering, and economic benefits. ### Source excerpt Check out Chainguard CVE Visualizations, a new capability that allows for comparisons of CVE numbers between Chainguard Images and alternative container images. ## Unlocking Chainguard's container security solutions DevFeed: [Unlocking Chainguard's container security solutions]() Original publisher: [Read original article]() Published: 2024-03-05T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [container-security](), [container images](), [vulnerability management](), [Docker Hardened Images](), [vulnerability scanning](), [supply-chain-security](), [Monitoring]() Tags: [chainguard](), [chainguard-images](), [container-image](), [container-images](), [container-security](), [cve](), [cve-fatigue](), [hardened-images](), [security](), [software-supply-chain-security](), [vulnerabilities](), [vulnerability-management](), [vulnerability-scanning]() ### AI overview This article discusses Chainguard's approach to container security, focusing on minimal hardened container images, SBOMs, signatures, vulnerability scanning, continuous monitoring, and updates. It also considers the operational trade-offs between building container images internally and using managed solutions. ### Source excerpt Uncover insights on whether to build or buy in container lifecycle management with tips from Chainguard, balancing security and operational needs. ## Streamline your FedRAMP certification with this container security checklist DevFeed: [Streamline your FedRAMP certification with this container security checklist]() Original publisher: [Read original article]() Published: 2024-02-15T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [Docker Hardened Images](), [Security & compliance, Cloud security](), [chainguard images](), [vulnerability management](), [sdlc]() Tags: [chainguard-images](), [compliance](), [container-security](), [federal-compliance](), [fedramp](), [sdlc](), [security](), [vulnerability-management]() ### AI overview This article presents a preview of a container security checklist for organizations pursuing FedRAMP certification. It covers asset management, container supply-chain hardening, and continuous vulnerability management within the accreditation boundary. ### Source excerpt Explore our FedRAMP container security compliance checklist. Tailored for CISOs and developers, it simplifies FedRAMP certification, ensuring robust compliance. ## New year, new image: Introducing the Chainguard Images Directory DevFeed: [New year, new image: Introducing the Chainguard Images Directory]() Original publisher: [Read original article]() Published: 2023-12-13T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Docker Hardened Images](), [Docker Hub](), [vulnerability](), [Security]() Tags: [chainguard](), [chainguard-images](), [chainguard-images-directory](), [common-vulnerabilities-and-exposures](), [container-image-registry](), [container-images](), [digestabot](), [security](), [vulnerability]() ### AI overview Chainguard introduces an updated Images Directory for discovering and using its minimal, hardened container images. The release also adds Security Advisories with information about CVE mitigation and introduces digestabot, a free GitHub Action for keeping Developer Images current. ### Source excerpt Discover how the updated Chainguard Images Directory simplifies finding container images and critical vulnerability advisories. ## Working with government and industry to put open source security tooling into practice DevFeed: [Working with government and industry to put open source security tooling into practice]() Original publisher: [Read original article]() Published: 2023-09-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [open-source-security](), [software bill of materials](), [supply-chain-security](), [Tooling](), [cisa](), [Docker Hardened Images]() Tags: [bombshell](), [chainguard](), [cisa](), [cyclonedx](), [open-source](), [open-source-security](), [protobom](), [sbom](), [security](), [software-bill-of-materials](), [software-supply-chain-security](), [spdx](), [vex]() ### AI overview Chainguard describes two open-source SBOM tools developed with the U.S. Department of Homeland Security and other startups: protobom, which translates SBOM data between formats, and bomshell, which combines and composes SBOMs. The initiative aims to improve software supply chain security and visibility. ### Source excerpt Pioneering SBOM tools with government and industry allies, Chainguard advances open source security measures.