Chainguard Blog
Featured posts
Chainguard Libraries for Python: Now Generally Available with CVE Remediation and Malware Protection
Chainguard Libraries for Python, trusted open source language libraries designed for CVE remediation and malware protection, is now generally available.
Bria Giordano, Director, Product Marketing, and Anushka Iyer, Product Marketing Manager
The State of Trusted Open Source: December 2025
Chainguard’s State of Trusted Open Source for December 2025 dives into usage trends for Chainguard Containers, CVE data, and why remediation speed matters.
Ed Sawma, VP of Product Marketing, and Sasha Itkis, Product Analyst
Security insights delivered before they become problems
Latest updates
- open source
Unlocking efficiency and security on GitLab: On-demand images with 0-CVE packages powered by Wolfi
Batuhan Apaydin and Furkan Türkal
- product
The haunting silence of CVE-Unknown: Unveiling the secrets of silent fixes
John Speed Meyers, Principal Research Scientist
- product
Announcing Bazel rules for extending Chainguard Images
Adam Dawson, Principal Product Manager at Chainguard and Alex Eagle, Aspect
- news
Check out Chainguard at KubeCon NA in Chicago on November 6-9!
Will Dolinsky, Content Marketing Specialist
- product
The unmasking of the Phantom's Masquerade: When junk CVEs reveal their true nature
John Speed Meyers, Principal Research Scientist
- security
Chainguard’s response to CVE-2023-38545 and CVE-2023-38546 in curl
Dan Luhring, Staff Software Engineer
- product
Introducing Chainguard Images for Node.js LTS 20, Python 3.12 and OpenJDK/JRE 21
Adam Dawson, Principal Product Manager
- open source
VEXed? Then Grype about it: Chainguard and Anchore announce Grype supports OpenVEX
Adolfo Veytia, Alex Goodman, Dan Luhring, and John Speed Meyers
- product
The haunting of CVE-2022-3474: A ghostly tale of package detection failure
John Speed Meyers, Principal Research Scientist
- engineering
Conquering your Build Horizon
Matt Moore, CTO & Co-Founder
- security
Why Chainguard uses Grype as its first line of defense for CVEs
Dan Luhring, Staff Software Engineer
- security
Understanding attacker techniques in distroless containers
Adrian Mouat, Staff DevRel Engineer