corpus.blog
41554 blogs · [ { "id": "01a0b5ca-2148-7135-81a2-9e166b5641a4", "title": "The phantom menace of CVE-2019-3826: Unmasking the false positive", "url": "https://www.chainguard.dev/unchained/the-phantom-menace-of-cve-2019-3826-unmasking-the-false-positive", "published_at": "2023-10-31T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e166b96d917", "title": "Unlocking efficiency and security on GitLab: On-demand images with 0-CVE packages powered by Wolfi", "url": "https://www.chainguard.dev/unchained/unlocking-efficiency-and-security-on-gitlab-on-demand-images-with-0-cve-packages-powered-by-wolfi", "published_at": "2023-10-30T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e166bcca036", "title": "The haunting silence of CVE-Unknown: Unveiling the secrets of silent fixes", "url": "https://www.chainguard.dev/unchained/the-haunting-silence-of-cve-unknown-unveiling-the-secrets-of-silent-fixes", "published_at": "2023-10-25T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e166cc26e56", "title": "Announcing Bazel rules for extending Chainguard Images", "url": "https://www.chainguard.dev/unchained/announcing-bazel-rules-for-extending-chainguard-images", "published_at": "2023-10-24T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e166d447ce0", "title": "Check out Chainguard at KubeCon NA in Chicago on November 6-9!", "url": "https://www.chainguard.dev/unchained/check-out-chainguard-at-kubecon-na-in-chicago-on-november-6-9", "published_at": "2023-10-20T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e166db045bd", "title": "The unmasking of the Phantom's Masquerade: When junk CVEs reveal their true nature", "url": "https://www.chainguard.dev/unchained/the-unmasking-of-the-phantoms-masquerade-when-junk-cves-reveal-their-true-nature", "published_at": "2023-10-17T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e166e8d2b07", "title": "Chainguard’s response to CVE-2023-38545 and CVE-2023-38546 in curl", "url": "https://www.chainguard.dev/unchained/chainguards-response-to-cve-2023-38545-and-cve-2023-38546-in-curl", "published_at": "2023-10-11T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e166ed78692", "title": "Introducing Chainguard Images for Node.js LTS 20, Python 3.12 and OpenJDK/JRE 21", "url": "https://www.chainguard.dev/unchained/introducing-chainguard-images-for-node-js-lts-20-python-3-12-and-openjdk-jre-21", "published_at": "2023-10-11T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e166f03d060", "title": "VEXed? Then Grype about it: Chainguard and Anchore announce Grype supports OpenVEX", "url": "https://www.chainguard.dev/unchained/vexed-then-grype-about-it-chainguard-and-anchore-announce-grype-supports-openvex", "published_at": "2023-10-10T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e166f483171", "title": "The haunting of CVE-2022-3474: A ghostly tale of package detection failure", "url": "https://www.chainguard.dev/unchained/the-haunting-of-cve-2022-3474-a-ghostly-tale-of-package-detection-failure", "published_at": "2023-10-10T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e166f8fe484", "title": "Conquering your Build Horizon", "url": "https://www.chainguard.dev/unchained/conquering-your-build-horizon", "published_at": "2023-10-10T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e166fe7b5fb", "title": "Why Chainguard uses Grype as its first line of defense for CVEs", "url": "https://www.chainguard.dev/unchained/why-chainguard-uses-grype-as-its-first-line-of-defense-for-cves", "published_at": "2023-10-06T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1670a6655d", "title": "Understanding attacker techniques in distroless containers", "url": "https://www.chainguard.dev/unchained/understanding-attacker-techniques-in-distroless-containers", "published_at": "2023-10-05T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e16719f67c7", "title": "The haunting of CVE-2023-2454: A developer's nightmare", "url": "https://www.chainguard.dev/unchained/the-haunting-of-cve-2023-2454-a-developers-nightmare", "published_at": "2023-10-03T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1672130eb8", "title": "Small octopus and a big idea: The story of how a one-year old Linux un-distro is improving the cloud’s software supply chain", "url": "https://www.chainguard.dev/unchained/small-octopus-and-a-big-idea-the-story-of-how-a-one-year-old-linux-un-distro-is-improving-the-clouds-software-supply-chain", "published_at": "2023-09-27T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e167234716b", "title": "Chainguard’s response to CVE-2023-4527 in glibc", "url": "https://www.chainguard.dev/unchained/chainguards-response-to-cve-2023-4527-in-glibc", "published_at": "2023-09-25T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e167250d29d", "title": "A growing ecosystem of vulnerability scanners that now support Chainguard Images and Wolfi", "url": "https://www.chainguard.dev/unchained/a-growing-ecosystem-of-vulnerability-scanners-that-now-support-chainguard-images-and-wolfi", "published_at": "2023-09-21T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1672bf917a", "title": "How to use Dockerfiles with wolfi-base images", "url": "https://www.chainguard.dev/unchained/how-to-use-dockerfiles-with-wolfi-base-images", "published_at": "2023-09-14T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e16738aa05d", "title": "An update on Chainguard Images FIPS Validation", "url": "https://www.chainguard.dev/unchained/an-update-on-chainguard-images-fips-validation", "published_at": "2023-09-13T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e16740ee9ea", "title": "Working with government and industry to put open source security tooling into practice", "url": "https://www.chainguard.dev/unchained/working-with-government-and-industry-to-put-open-source-security-tooling-into-practice", "published_at": "2023-09-12T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1674a97660", "title": "Stemming the tide of false positive vulnerabilities", "url": "https://www.chainguard.dev/unchained/stemming-the-tide-of-false-positive-vulnerabilities", "published_at": "2023-09-11T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1675577a03", "title": "Announcing a Chainguard Image for OpenTF", "url": "https://www.chainguard.dev/unchained/announcing-a-chainguard-image-for-opentf", "published_at": "2023-09-06T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1675a85c29", "title": "Update for Chainguard Images users on HashiCorp license changes", "url": "https://www.chainguard.dev/unchained/update-for-chainguard-images-users-on-hashicorp-license-changes", "published_at": "2023-09-01T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1675d5d8f3", "title": "Making vulnerability data better for machines (and humans!) with OpenVEX: How Isovalent and Chainguard use OpenVEX", "url": "https://www.chainguard.dev/unchained/making-vulnerability-data-better-for-machines-and-humans-with-openvex-how-isovalent-and-chainguard-use-openvex", "published_at": "2023-08-31T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1675e0c702", "title": "Securing the ML supply chain with new Chainguard AI Images", "url": "https://www.chainguard.dev/unchained/securing-the-ml-supply-chain-with-new-chainguard-ai-images", "published_at": "2023-08-24T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1676934d03", "title": "When a picture is worth 306 CVEs: New image vulnerability comparisons in Chainguard Academy", "url": "https://www.chainguard.dev/unchained/when-a-picture-is-worth-306-cves-new-image-vulnerability-comparisons-in-chainguard-academy", "published_at": "2023-08-23T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1676a14bde", "title": "Taming bad Python packages: Assessing Python malware detectors with a benchmark dataset", "url": "https://www.chainguard.dev/unchained/taming-bad-python-packages-assessing-python-malware-detectors-with-a-benchmark-dataset", "published_at": "2023-08-23T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1676a6d09a", "title": "Exploring new capabilities in the Chainguard Registry to enable secure and efficient container image management", "url": "https://www.chainguard.dev/unchained/exploring-new-capabilities-in-the-chainguard-registry-to-enable-secure-and-efficient-container-image-management", "published_at": "2023-08-22T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e167726bf96", "title": "Chainguard Image now available for Zig", "url": "https://www.chainguard.dev/unchained/chainguard-image-now-available-for-zig", "published_at": "2023-08-18T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e167736ee23", "title": "Important updates for Chainguard Images public catalog users", "url": "https://www.chainguard.dev/unchained/important-updates-for-chainguard-images-public-catalog-users", "published_at": "2023-08-16T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e16773adcf9", "title": "Fully bootstrapping Go from source in Wolfi", "url": "https://www.chainguard.dev/unchained/fully-bootstrapping-go-from-source-in-wolfi", "published_at": "2023-08-11T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1677a01f46", "title": "What every CISO should know about the new SSDF security self-attestation form", "url": "https://www.chainguard.dev/unchained/what-every-ciso-should-know-about-the-new-ssdf-security-self-attestation-form", "published_at": "2023-08-08T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e167848026e", "title": "Get in Chainguard, we’re going to fabulous Las Vegas!", "url": "https://www.chainguard.dev/unchained/get-in-chainguard-were-going-to-fabulous-las-vegas", "published_at": "2023-08-04T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1678c6067c", "title": "The zero CVE challenge: Can official Docker Hub images pass the test?", "url": "https://www.chainguard.dev/unchained/the-zero-cve-challenge-can-official-docker-hub-images-pass-the-test", "published_at": "2023-08-03T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e1679ada712", "title": "Can Protobom end the SBOM format wars?", "url": "https://www.chainguard.dev/unchained/can-protobom-end-the-sbom-format-wars", "published_at": "2023-07-31T00:00:00+00:00" }, { "id": "01a0b5ca-2148-7135-81a2-9e167a43c255", "title": "wolfi-act: Dynamic GitHub Actions from Wolfi packages", "url": "https://www.chainguard.dev/unchained/wolfi-act-dynamic-github-actions-from-wolfi-packages", "published_at": "2023-07-28T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e3693b02a98", "title": "Fuzzy CVEs, tarfiles, and untrusted input", "url": "https://www.chainguard.dev/unchained/fuzzy-cves-tarfiles-and-untrusted-input", "published_at": "2023-07-27T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e3693fccabb", "title": "Elastic partners with Chainguard on Software Supply Chain security and SLSA assessment", "url": "https://www.chainguard.dev/unchained/elastic-partners-with-chainguard-on-software-supply-chain-security-and-slsa-assessment", "published_at": "2023-07-26T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e3694d5c6ad", "title": "Good MLOps is good ML supply chain security", "url": "https://www.chainguard.dev/unchained/good-mlops-is-good-ml-supply-chain-security", "published_at": "2023-07-25T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36956e1ac1", "title": "Chainguard named to inaugural Redpoint InfraRed 100", "url": "https://www.chainguard.dev/unchained/chainguard-named-to-inaugural-redpoint-infrared-100", "published_at": "2023-07-17T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36960d36d4", "title": "How Chainguard fixes vulnerabilities before they're detected", "url": "https://www.chainguard.dev/unchained/how-chainguard-fixes-vulnerabilities-before-theyre-detected", "published_at": "2023-07-14T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369624396b", "title": "OCI announces upcoming changes for registries", "url": "https://www.chainguard.dev/unchained/oci-announces-upcoming-changes-for-registries", "published_at": "2023-07-13T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e3696688644", "title": "Advancing the use of memory safe programming languages", "url": "https://www.chainguard.dev/unchained/advancing-the-use-of-memory-safe-programming-languages", "published_at": "2023-07-12T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e3696ab0dd4", "title": "Cleared for takeoff: Meeting TSA’s new cybersecurity requirements", "url": "https://www.chainguard.dev/unchained/cleared-for-takeoff-meeting-tsas-new-cybersecurity-requirements", "published_at": "2023-07-10T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e3697647dea", "title": "So you want to check image signatures in Kubernetes…?", "url": "https://www.chainguard.dev/unchained/so-you-want-to-check-image-signatures-in-kubernetes", "published_at": "2023-07-06T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e3697af7d0c", "title": "Reproducing Chainguard’s reproducible image builds", "url": "https://www.chainguard.dev/unchained/reproducing-chainguards-reproducible-image-builds", "published_at": "2023-07-05T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e3697cb76de", "title": "Strengthening CI/CD Environments: Insights from NSA and DHS CISA guidance", "url": "https://www.chainguard.dev/unchained/strengthening-ci-cd-environments-insights-from-nsa-and-dhs-cisa-guidance", "published_at": "2023-06-30T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36981c2318", "title": "Chainguard Image now available for Pulumi", "url": "https://www.chainguard.dev/unchained/chainguard-image-now-available-for-pulumi", "published_at": "2023-06-29T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e3698db37b9", "title": "A guide on how to use Chainguard Images for public catalog tier users", "url": "https://www.chainguard.dev/unchained/a-guide-on-how-to-use-chainguard-images-for-public-catalog-tier-users", "published_at": "2023-06-23T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e3699b235db", "title": "An enhanced Chainguard Academy learning experience", "url": "https://www.chainguard.dev/unchained/an-enhanced-chainguard-academy-learning-experience", "published_at": "2023-06-22T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369a00161a", "title": "The principle of minimalism", "url": "https://www.chainguard.dev/unchained/the-principle-of-minimalism", "published_at": "2023-06-22T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369aa04e48", "title": "Ship software to Uncle Sam faster with zero-known vulnerability containers", "url": "https://www.chainguard.dev/unchained/ship-software-to-uncle-sam-faster-with-zero-known-vulnerability-containers", "published_at": "2023-06-20T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369af57d6a", "title": "Government perspectives on software self-attestation requirements", "url": "https://www.chainguard.dev/unchained/government-perspectives-on-software-self-attestation-requirements", "published_at": "2023-06-15T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369b30fc80", "title": "The importance of toolchain security in NIST's SSDF", "url": "https://www.chainguard.dev/unchained/the-importance-of-toolchain-security-in-nists-ssdf", "published_at": "2023-06-12T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369b82dff4", "title": "Designing build date epoch in Chainguard Images", "url": "https://www.chainguard.dev/unchained/designing-build-date-epoch-in-chainguard-images", "published_at": "2023-06-08T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369b9412a2", "title": "Celebrating 5 years of NTIA’s SBOM work", "url": "https://www.chainguard.dev/unchained/celebrating-5-years-of-ntias-sbom-work", "published_at": "2023-06-07T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369bf3a973", "title": "Come see Chainguard (virtually) at Cloudsmith Unpacked on June 20!", "url": "https://www.chainguard.dev/unchained/come-see-chainguard-virtually-at-cloudsmith-unpacked-on-june-20", "published_at": "2023-06-06T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369c3e8ad9", "title": "Fully bootstrapping Java from source in Wolfi", "url": "https://www.chainguard.dev/unchained/fully-bootstrapping-java-from-source-in-wolfi", "published_at": "2023-06-02T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369c5d534c", "title": "Introducing \"Speranza\": Enhancing software signing with privacy and usability", "url": "https://www.chainguard.dev/unchained/introducing-speranza-enhancing-software-signing-with-privacy-and-usability", "published_at": "2023-05-30T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369cab3526", "title": "Fortify, comply and conquer FedRAMP with Chainguard Images", "url": "https://www.chainguard.dev/unchained/fortify-comply-and-conquer-fedramp-with-chainguard-images", "published_at": "2023-05-25T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369d4c5b37", "title": "Building Chainguard's container image registry", "url": "https://www.chainguard.dev/unchained/building-chainguards-container-image-registry", "published_at": "2023-05-23T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369d92742d", "title": "OSS security: Chainguard May 2023 update", "url": "https://www.chainguard.dev/unchained/oss-security-chainguard-may-2023-update", "published_at": "2023-05-22T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369e266c9c", "title": "Scaling Chainguard Images with a growing catalog and proactive security updates", "url": "https://www.chainguard.dev/unchained/scaling-chainguard-images-with-a-growing-catalog-and-proactive-security-updates", "published_at": "2023-05-18T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369e908dc2", "title": "How to explain the CISA software attestation requirements to your board", "url": "https://www.chainguard.dev/unchained/how-to-explain-the-cisa-software-attestation-requirements-to-your-board", "published_at": "2023-05-05T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369f55d8e1", "title": "Meet Chainguard at Open Source Summit North America 2023 [May 10 – 12 in Vancouver]!", "url": "https://www.chainguard.dev/unchained/meet-chainguard-at-open-source-summit-north-america-2023-may-10-12-in-vancouver", "published_at": "2023-05-05T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369fec0124", "title": "Enforce against vulnerability sprawl with up-to-date images", "url": "https://www.chainguard.dev/unchained/enforce-against-vulnerability-sprawl-with-up-to-date-images", "published_at": "2023-05-03T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e369ff1fd21", "title": "Chainguard joins DHS S&T new startup cohort to strengthen software supply chain", "url": "https://www.chainguard.dev/unchained/chainguard-joins-dhs-s-t-new-startup-cohort-to-strengthen-software-supply-chain", "published_at": "2023-04-27T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a0b91ae6", "title": "Move over, Dockerfiles! The new way to craft containers", "url": "https://www.chainguard.dev/unchained/move-over-dockerfiles-the-new-way-to-craft-containers", "published_at": "2023-04-27T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a10afa0b", "title": "Open source software takes center stage at RSA", "url": "https://www.chainguard.dev/unchained/open-source-software-takes-center-stage-at-rsa", "published_at": "2023-04-24T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a207aba1", "title": "Chainguard and CNCF conduct SLSA assessments for Argo and Prometheus projects", "url": "https://www.chainguard.dev/unchained/chainguard-and-cncf-conduct-slsa-assessments-for-argo-and-prometheus-projects", "published_at": "2023-04-19T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a2f91e68", "title": "npm + Sigstore: Making Javascript secure by default", "url": "https://www.chainguard.dev/unchained/npm-sigstore-making-javascript-secure-by-default", "published_at": "2023-04-19T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a3ca8031", "title": "Chainguard open sources new policy catalog for Sigstore policy-controller", "url": "https://www.chainguard.dev/unchained/chainguard-open-sources-new-policy-catalog-for-sigstore-policy-controller", "published_at": "2023-04-18T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a3f5edf2", "title": "Chainguard Images now available to government agencies on U.S. Air Force Platform One", "url": "https://www.chainguard.dev/unchained/chainguard-images-now-available-to-government-agencies-on-u-s-air-force-platform-one", "published_at": "2023-04-18T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a48531ee", "title": "Chainguard Image now available for prometheus", "url": "https://www.chainguard.dev/unchained/chainguard-image-now-available-for-prometheus", "published_at": "2023-04-14T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a4e73420", "title": "Join Chainguard at KubeCon EU in Amsterdam April 19-21!", "url": "https://www.chainguard.dev/unchained/join-chainguard-at-kubecon-eu-in-amsterdam-april-19-21", "published_at": "2023-04-13T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a5dd8883", "title": "It all started with a commit: Celebrating 6 years of Distroless", "url": "https://www.chainguard.dev/unchained/it-all-started-with-a-commit-celebrating-6-years-of-distroless", "published_at": "2023-04-12T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a65fedae", "title": "Tired of searching through your scan results? Try the Chainguard OpenSearch Image", "url": "https://www.chainguard.dev/unchained/tired-of-searching-through-your-scan-results-try-the-chainguard-opensearch-image", "published_at": "2023-04-07T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a75e23a8", "title": "The role of attestations in a secure software supply chain", "url": "https://www.chainguard.dev/unchained/the-role-of-attestations-in-a-secure-software-supply-chain", "published_at": "2023-04-04T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a834875f", "title": "ICYMI: What's new in Chainguard Academy", "url": "https://www.chainguard.dev/unchained/icymi-whats-new-in-chainguard-academy", "published_at": "2023-04-03T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36a91d7180", "title": "GitCommitted with your dream base image", "url": "https://www.chainguard.dev/unchained/gitcommitted-with-your-dream-base-image", "published_at": "2023-04-01T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36aa013882", "title": "Are Kubernetes Validating Admission Policies the end of admission controllers?", "url": "https://www.chainguard.dev/unchained/are-kubernetes-validating-admission-policies-the-end-of-admission-controllers", "published_at": "2023-03-31T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36aaa045b3", "title": "New Chainguard Academy tutorial: Cosign the manual way", "url": "https://www.chainguard.dev/unchained/new-chainguard-academy-tutorial-cosign-the-manual-way", "published_at": "2023-03-30T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36ab9579f2", "title": "Sigstore policy-controller 101", "url": "https://www.chainguard.dev/unchained/sigstore-policy-controller-101", "published_at": "2023-03-29T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36ac816568", "title": "Chainguard Image now available for NATS", "url": "https://www.chainguard.dev/unchained/chainguard-image-now-available-for-nats", "published_at": "2023-03-27T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36ad5b82f4", "title": "Chainguard contributes Rekor Search project to Sigstore", "url": "https://www.chainguard.dev/unchained/chainguard-contributes-rekor-search-project-to-sigstore", "published_at": "2023-03-24T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36ae3d13a9", "title": "OSS Security: Chainguard Spring 2023 update", "url": "https://www.chainguard.dev/unchained/oss-security-chainguard-spring-2023-update", "published_at": "2023-03-22T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36ae5374e0", "title": "Chainguard Image now available for Apache Zookeeper", "url": "https://www.chainguard.dev/unchained/chainguard-image-now-available-for-apache-zookeeper", "published_at": "2023-03-20T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36af027430", "title": "New SLSA++ Survey reveals real-world developer approaches to software supply chain security", "url": "https://www.chainguard.dev/unchained/new-slsa-survey-reveals-real-world-developer-approaches-to-software-supply-chain-security", "published_at": "2023-03-15T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36af7d683d", "title": "What the fuzz? Better coding through randomized testing", "url": "https://www.chainguard.dev/unchained/what-the-fuzz-better-coding-through-randomized-testing", "published_at": "2023-03-13T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36af85ff03", "title": "What the fork? Imposter commits in GitHub Actions and CI/CD", "url": "https://www.chainguard.dev/unchained/what-the-fork-imposter-commits-in-github-actions-and-ci-cd", "published_at": "2023-03-08T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36af9bdbb6", "title": "Chainguard Image now available for Postgres", "url": "https://www.chainguard.dev/unchained/chainguard-image-now-available-for-postgres", "published_at": "2023-03-06T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36b03c431a", "title": "Charting a secure by default future", "url": "https://www.chainguard.dev/unchained/charting-a-secure-by-default-future", "published_at": "2023-03-02T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36b091499f", "title": "Chainguard conducts SLSA software supply chain security audit of open source project Git", "url": "https://www.chainguard.dev/unchained/chainguard-conducts-slsa-software-supply-chain-security-audit-of-open-source-project-git", "published_at": "2023-03-01T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36b0fa1afe", "title": "apko: a year later", "url": "https://www.chainguard.dev/unchained/apko-a-year-later", "published_at": "2023-02-28T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36b1960a11", "title": "Hopping into spring with Chainguard’s RabbitMQ Image", "url": "https://www.chainguard.dev/unchained/hopping-into-spring-with-chainguards-rabbitmq-image", "published_at": "2023-02-24T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36b2832f26", "title": "SBOMs in a multi-architecture world", "url": "https://www.chainguard.dev/unchained/sboms-in-a-multi-architecture-world", "published_at": "2023-02-22T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36b337e034", "title": "Building towards OCI v1.1 support in cosign", "url": "https://www.chainguard.dev/unchained/building-towards-oci-v1-1-support-in-cosign", "published_at": "2023-02-17T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36b36957a9", "title": "Chainguard named an IDC Innovator for open source software supply chain security", "url": "https://www.chainguard.dev/unchained/chainguard-named-an-idc-innovator-for-open-source-software-supply-chain-security", "published_at": "2023-02-15T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36b45afe3a", "title": "A purl of wisdom on SBOMs and vulnerabilities", "url": "https://www.chainguard.dev/unchained/a-purl-of-wisdom-on-sboms-and-vulnerabilities", "published_at": "2023-02-14T00:00:00+00:00" }, { "id": "01a0b5ca-2149-71cb-97e0-2e36b548eaeb", "title": "Chainguard Image now available for HAProxy", "url": "https://www.chainguard.dev/unchained/chainguard-image-now-available-for-haproxy", "published_at": "2023-02-09T00:00:00+00:00" } ] posts Claim your blog
Back to Chainguard Blog
Blog · corpus.blog/blogs/chainguard.dev/posts

Chainguard Blog

chainguard.dev

2023

The phantom menace of CVE-2019-3826: Unmasking the false positiveoriginal ↗
31 Oct 2023
Unlocking efficiency and security on GitLab: On-demand images with 0-CVE packages powered by Wolfioriginal ↗
30 Oct 2023
The haunting silence of CVE-Unknown: Unveiling the secrets of silent fixesoriginal ↗
25 Oct 2023
Announcing Bazel rules for extending Chainguard Imagesoriginal ↗
24 Oct 2023
Check out Chainguard at KubeCon NA in Chicago on November 6-9!original ↗
20 Oct 2023
The unmasking of the Phantom's Masquerade: When junk CVEs reveal their true natureoriginal ↗
17 Oct 2023
Chainguard’s response to CVE-2023-38545 and CVE-2023-38546 in curloriginal ↗
11 Oct 2023
Introducing Chainguard Images for Node.js LTS 20, Python 3.12 and OpenJDK/JRE 21original ↗
11 Oct 2023
VEXed? Then Grype about it: Chainguard and Anchore announce Grype supports OpenVEXoriginal ↗
10 Oct 2023
The haunting of CVE-2022-3474: A ghostly tale of package detection failureoriginal ↗
10 Oct 2023
Conquering your Build Horizonoriginal ↗
10 Oct 2023
Why Chainguard uses Grype as its first line of defense for CVEsoriginal ↗
6 Oct 2023
Understanding attacker techniques in distroless containersoriginal ↗
5 Oct 2023
The haunting of CVE-2023-2454: A developer's nightmareoriginal ↗
3 Oct 2023
Small octopus and a big idea: The story of how a one-year old Linux un-distro is improving the cloud’s software supply chainoriginal ↗
27 Sept 2023
Chainguard’s response to CVE-2023-4527 in glibcoriginal ↗
25 Sept 2023
A growing ecosystem of vulnerability scanners that now support Chainguard Images and Wolfioriginal ↗
21 Sept 2023
How to use Dockerfiles with wolfi-base imagesoriginal ↗
14 Sept 2023
An update on Chainguard Images FIPS Validationoriginal ↗
13 Sept 2023
Working with government and industry to put open source security tooling into practiceoriginal ↗
12 Sept 2023
Stemming the tide of false positive vulnerabilitiesoriginal ↗
11 Sept 2023
Announcing a Chainguard Image for OpenTForiginal ↗
6 Sept 2023
Update for Chainguard Images users on HashiCorp license changesoriginal ↗
1 Sept 2023
Making vulnerability data better for machines (and humans!) with OpenVEX: How Isovalent and Chainguard use OpenVEXoriginal ↗
31 Aug 2023
Securing the ML supply chain with new Chainguard AI Imagesoriginal ↗
24 Aug 2023
When a picture is worth 306 CVEs: New image vulnerability comparisons in Chainguard Academyoriginal ↗
23 Aug 2023
Taming bad Python packages: Assessing Python malware detectors with a benchmark datasetoriginal ↗
23 Aug 2023
Exploring new capabilities in the Chainguard Registry to enable secure and efficient container image managementoriginal ↗
22 Aug 2023
Chainguard Image now available for Zigoriginal ↗
18 Aug 2023
Important updates for Chainguard Images public catalog usersoriginal ↗
16 Aug 2023
Fully bootstrapping Go from source in Wolfioriginal ↗
11 Aug 2023
What every CISO should know about the new SSDF security self-attestation formoriginal ↗
8 Aug 2023
Get in Chainguard, we’re going to fabulous Las Vegas!original ↗
4 Aug 2023
The zero CVE challenge: Can official Docker Hub images pass the test?original ↗
3 Aug 2023
Can Protobom end the SBOM format wars?original ↗
31 Jul 2023
wolfi-act: Dynamic GitHub Actions from Wolfi packagesoriginal ↗
28 Jul 2023
Fuzzy CVEs, tarfiles, and untrusted inputoriginal ↗
27 Jul 2023
Elastic partners with Chainguard on Software Supply Chain security and SLSA assessmentoriginal ↗
26 Jul 2023
Good MLOps is good ML supply chain securityoriginal ↗
25 Jul 2023
Chainguard named to inaugural Redpoint InfraRed 100original ↗
17 Jul 2023
How Chainguard fixes vulnerabilities before they're detectedoriginal ↗
14 Jul 2023
OCI announces upcoming changes for registriesoriginal ↗
13 Jul 2023
Advancing the use of memory safe programming languagesoriginal ↗
12 Jul 2023
Cleared for takeoff: Meeting TSA’s new cybersecurity requirementsoriginal ↗
10 Jul 2023
So you want to check image signatures in Kubernetes…?original ↗
6 Jul 2023
Reproducing Chainguard’s reproducible image buildsoriginal ↗
5 Jul 2023
Strengthening CI/CD Environments: Insights from NSA and DHS CISA guidanceoriginal ↗
30 Jun 2023
Chainguard Image now available for Pulumioriginal ↗
29 Jun 2023
A guide on how to use Chainguard Images for public catalog tier usersoriginal ↗
23 Jun 2023
An enhanced Chainguard Academy learning experienceoriginal ↗
22 Jun 2023
The principle of minimalismoriginal ↗
22 Jun 2023
Ship software to Uncle Sam faster with zero-known vulnerability containersoriginal ↗
20 Jun 2023
Government perspectives on software self-attestation requirementsoriginal ↗
15 Jun 2023
The importance of toolchain security in NIST's SSDForiginal ↗
12 Jun 2023
Designing build date epoch in Chainguard Imagesoriginal ↗
8 Jun 2023
Celebrating 5 years of NTIA’s SBOM workoriginal ↗
7 Jun 2023
Come see Chainguard (virtually) at Cloudsmith Unpacked on June 20!original ↗
6 Jun 2023
Fully bootstrapping Java from source in Wolfioriginal ↗
2 Jun 2023
Introducing "Speranza": Enhancing software signing with privacy and usabilityoriginal ↗
30 May 2023
Fortify, comply and conquer FedRAMP with Chainguard Imagesoriginal ↗
25 May 2023
Building Chainguard's container image registryoriginal ↗
23 May 2023
OSS security: Chainguard May 2023 updateoriginal ↗
22 May 2023
Scaling Chainguard Images with a growing catalog and proactive security updatesoriginal ↗
18 May 2023
How to explain the CISA software attestation requirements to your boardoriginal ↗
5 May 2023
Meet Chainguard at Open Source Summit North America 2023 [May 10 – 12 in Vancouver]!original ↗
5 May 2023
Enforce against vulnerability sprawl with up-to-date imagesoriginal ↗
3 May 2023
Chainguard joins DHS S&T new startup cohort to strengthen software supply chainoriginal ↗
27 Apr 2023
Move over, Dockerfiles! The new way to craft containersoriginal ↗
27 Apr 2023
Open source software takes center stage at RSAoriginal ↗
24 Apr 2023
Chainguard and CNCF conduct SLSA assessments for Argo and Prometheus projectsoriginal ↗
19 Apr 2023
npm + Sigstore: Making Javascript secure by defaultoriginal ↗
19 Apr 2023
Chainguard open sources new policy catalog for Sigstore policy-controlleroriginal ↗
18 Apr 2023
Chainguard Images now available to government agencies on U.S. Air Force Platform Oneoriginal ↗
18 Apr 2023
Chainguard Image now available for prometheusoriginal ↗
14 Apr 2023
Join Chainguard at KubeCon EU in Amsterdam April 19-21!original ↗
13 Apr 2023
It all started with a commit: Celebrating 6 years of Distrolessoriginal ↗
12 Apr 2023
Tired of searching through your scan results? Try the Chainguard OpenSearch Imageoriginal ↗
7 Apr 2023
The role of attestations in a secure software supply chainoriginal ↗
4 Apr 2023
ICYMI: What's new in Chainguard Academyoriginal ↗
3 Apr 2023
GitCommitted with your dream base imageoriginal ↗
1 Apr 2023
Are Kubernetes Validating Admission Policies the end of admission controllers?original ↗
31 Mar 2023
New Chainguard Academy tutorial: Cosign the manual wayoriginal ↗
30 Mar 2023
Sigstore policy-controller 101original ↗
29 Mar 2023
Chainguard Image now available for NATSoriginal ↗
27 Mar 2023
Chainguard contributes Rekor Search project to Sigstoreoriginal ↗
24 Mar 2023
OSS Security: Chainguard Spring 2023 updateoriginal ↗
22 Mar 2023
Chainguard Image now available for Apache Zookeeperoriginal ↗
20 Mar 2023
New SLSA++ Survey reveals real-world developer approaches to software supply chain securityoriginal ↗
15 Mar 2023
What the fuzz? Better coding through randomized testingoriginal ↗
13 Mar 2023
What the fork? Imposter commits in GitHub Actions and CI/CDoriginal ↗
8 Mar 2023
Chainguard Image now available for Postgresoriginal ↗
6 Mar 2023
Charting a secure by default futureoriginal ↗
2 Mar 2023
Chainguard conducts SLSA software supply chain security audit of open source project Gitoriginal ↗
1 Mar 2023
apko: a year lateroriginal ↗
28 Feb 2023
Hopping into spring with Chainguard’s RabbitMQ Imageoriginal ↗
24 Feb 2023
SBOMs in a multi-architecture worldoriginal ↗
22 Feb 2023
Building towards OCI v1.1 support in cosignoriginal ↗
17 Feb 2023
Chainguard named an IDC Innovator for open source software supply chain securityoriginal ↗
15 Feb 2023
A purl of wisdom on SBOMs and vulnerabilitiesoriginal ↗
14 Feb 2023
Chainguard Image now available for HAProxyoriginal ↗
9 Feb 2023
Previous Next