Products
Chainguard Images
Reduce your attack surface with minimal, distroless images.
Chainguard Enforce
Manage, monitor and enforce end-to-end policies.
Chainguard Services
Infrastructure, configuration, and compliance assessment.
Developer
Resources
Company
Contact
Back
Docs
Open source
Back
Unchained blog
Chainguard labs
Customer stories
Education
Back
About
Newsroom
Careers
Back
About
Newsroom
Careers
CHAINGUARD LABS

Original research on software security

Learn from our team of developers, maintainers, academics and researchers to help you secure your supply chain.

Categories
Research
Articles
Whitepapers
Commentary
Popular topics
Policy
Malware
AL/ML
Base images
Sigstore
SBOM
Open source
SLSA
Save
Research
Are SBOMs Any Good?: Preliminary Measurement of the Quality of Open Source Project SBOMs
December 21, 2022
Images
Filter
Sorry, no matches for Spongebob

June 25, 2023

Articles
Good MLOps is good ML supply chain security
Articles
Good MLOps is good ML supply chain security
This is some text inside of a div block.
AL/ML

June 6, 2023

Commentary
The Open-Source Software in Our Pockets Needs Our Help
Commentary
The Open-Source Software in Our Pockets Needs Our Help
This is some text inside of a div block.
Open source

May 10, 2023

Research
Speranza: Usable, privacy-friendly software signing
Research
Speranza: Usable, privacy-friendly software signing
This is some text inside of a div block.
Sigstore

May 3, 2023

Research
Enforce Against Vulnerability Sprawl with Up-to-Date Images
Research
Enforce Against Vulnerability Sprawl with Up-to-Date Images
This is some text inside of a div block.
Base images

March 15, 2023

Research
SLSA++ A Survey of Software Supply Chain Security Practices and Beliefs
Research
SLSA++ A Survey of Software Supply Chain Security Practices and Beliefs
This is some text inside of a div block.
SLSA

March 15, 2023

Articles
New SLSA++ Survey Reveals Real-World Developer Approaches to Software Supply Chain Security
Articles
New SLSA++ Survey Reveals Real-World Developer Approaches to Software Supply Chain Security
This is some text inside of a div block.
SLSA

March 1, 2023

Research
A Software Supply Chain Security Audit of Git
Research
A Software Supply Chain Security Audit of Git
This is some text inside of a div block.
SLSA

January 19, 2023

Research
Are SBOMs Good Enough for Government Work?
Research
Are SBOMs Good Enough for Government Work?
This is some text inside of a div block.
SBOM

December 21, 2022

Research
Are SBOMs Any Good?: Preliminary Measurement of the Quality of Open Source Project SBOMs
Research
Are SBOMs Any Good?: Preliminary Measurement of the Quality of Open Source Project SBOMs
This is some text inside of a div block.
SBOM

November 30, 2022

Articles
Securing the Machine Learning Supply Chain
Articles
Securing the Machine Learning Supply Chain
This is some text inside of a div block.
AL/ML

November 10, 2022

Commentary
The Securing Open Source Software Act Is Good, but Whatever Happened to Legal Liability?
Commentary
The Securing Open Source Software Act Is Good, but Whatever Happened to Legal Liability?
This is some text inside of a div block.
Policy

November 9, 2022

Research
Software Dark Matter is the Enemy of Software Transparency
Research
Software Dark Matter is the Enemy of Software Transparency
This is some text inside of a div block.
SBOM

November 7, 2022

Research
Sigstore: Software Signing for Everybody
Research
Sigstore: Software Signing for Everybody
This is some text inside of a div block.
Sigstore

October 17, 2022

Commentary
When will SBOMs finally benefit the federal government’s software supply chain?
Commentary
When will SBOMs finally benefit the federal government’s software supply chain?
This is some text inside of a div block.
Policy

October 13, 2022

Research
Hunting Malware on Package Repositories
Research
Hunting Malware on Package Repositories
This is some text inside of a div block.
Malware

August 25, 2022

Commentary
Should Uncle Sam Worry About ‘Foreign’ Open-Source Software? Geographic Known Unknowns and Open-Source Software Security
Commentary
Should Uncle Sam Worry About ‘Foreign’ Open-Source Software? Geographic Known Unknowns and Open-Source Software Security
This is some text inside of a div block.
Policy

August 23, 2022

Research
Taming Bad Python Packages: Assessing Python Malware Detectors with a Benchmark Dataset
Research
Taming Bad Python Packages: Assessing Python Malware Detectors with a Benchmark Dataset
This is some text inside of a div block.
Malware

June 21, 2022

Articles
Is Open Source Eating the World’s Software? Measuring the Proportion of Open Source in Proprietary Software Using Java Binaries
Articles
Is Open Source Eating the World’s Software? Measuring the Proportion of Open Source in Proprietary Software Using Java Binaries
This is some text inside of a div block.
Open source

March 31, 2022

Whitepapers
All About That Base Image
Whitepapers
All About That Base Image
This is some text inside of a div block.
Base images
Previous
X
 of 
X
Next
Products

Chainguard Images

Chainguard Enforce

Chainguard Services

Developer

Open source

Docs

Resources

Unchained blog

Chainguard Labs

Customer stories

Scanners

Security

Education

Company

About

Newsroom

Careers

Legal

Contact

Follow

Twitter

GitHub

LinkedIn

TikTok

© 2023 Chainguard, Inc.

Contact