Chainguard Blog
RSS FeedFeatured stories

Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security
Gartner names Chainguard a Leader in Software Supply Chain Security, highlighting its secure-by-default approach and market vision.

What it took to reach 1 billion build manifests
Chainguard doubled its container build output in six months. Learn how Factory 2.0 uses AI and reconciliation to rebuild secure software at scale.
Latest updates
productIntroducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run
newsChainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security
productChainguard Agent Skills is now open to everyone, with a private registry to manage your internal skills
security@mastra npm scope takeover: 143 packages backdoored via compromised contributor account
engineeringFaster than the advisory
productThe expanding threat landscape: Chainguard now scans source code for traditional malware and “greyware”
securityMiasma Phantom Gyp npm attack: 57 packages, 286 malicious versions hijack CI/CD pipelines via binding.gyp
securityChainguard customers safe from Mini Shai-Hulud worm targeting @redhat-cloud-services npm packages with 100K+ weekly downloads
engineeringThe hardest fork
security5 security myths that Mythos ended (as told by a CISO)
securityPreparing for Mythos: Practical advice for engineering teams
newsChainguard and Upwind: Secure what you build. Verify what you run.