Chainguard
Chainguard, based by former Google engineers with deep expertise in Linux distributions and provide chain safety, is a supplier of hardened, repeatedly up to date, “zero-CVE” open-source software program packages, from base working system photographs to minimal container photographs, language libraries, and digital machine home equipment. The corporate focuses on devsecops groups, with options designed to present each builders and safety architects a extra reliable basis for constructing and working software program.
The flagship providing is a rolling Linux distribution backed by safety SLAs: seven days for crucial vulnerabilities and 14 for others, although the common repair time is beneath 48 hours, in line with the corporate. Chainguard says it maintains a rising catalog of greater than 1,600 container photographs, increasing by about 100 per 30 days, every constructed instantly from upstream supply fairly than derived from one other distribution. This “farm-to-table” strategy ensures the complete instrument chain, together with compilers, runtimes, and dependencies, is rebuilt, retested, and re-released inside hours of an upstream replace.
Chainguard Libraries are safe builds of broadly used Java and Python packages, with Node.js libraries subsequent on the roadmap. Chainguard says that constructing libraries from supply addresses a standard hole, the place builders fetch third-party code instantly from the web with out the protections of a packaged distribution. A 3rd product line, Chainguard Digital Machines, applies the identical minimal, hardened philosophy to purpose-built VM home equipment, usually used as Kubernetes employee nodes or in scale-out cloud deployments. In lots of instances, container photographs from the Chainguard catalog might be rendered as bootable VM home equipment for workloads that require full OS-level entry to {hardware} assets.
