Chainguard ⛓️

Today, we're starting Athena's disclosure program. The first release is 14 vulnerabilities that were quietly fixed in open source projects but never got a CVE, so they never popped up on your scanners. Each now has an advisory on our public VEX feed, a free patch in our GitHub repo, and a remediated artifact available in Chainguard Repository.

Below, we show what these silent vulnerabilities can hide.

Read more about Athena's disclosure process: chainguard.dev/unchained/athe…

We migrated off GitHub Actions and onto Chainguard Checks ✅

Why? Agents pushed our busiest repo to 2,000 merges a day, and we couldn’t keep stalling every time GitHub went down. Now our builds are 2x faster. Checks is in beta now: chainguard.dev/unchained/gith…

You can't fix what you can't see. That's why we made the Chainguard Insights Dashboard, powered by Guardener 🎉

With it, security teams can:
• See container images across all their GitHub repos
• Spot which images are hardened and which aren’t
• Prioritize by projected CVE reduction
• Migrate in one click, with PRs ready to merge

Live now: chainguard.dev/unchained/intr…

looks like Linky got their snowflake ❄️👀

🆕🆕🆕 from Chainguard: Athena members now get a dedicated endpoint for fixes with breaking changes.

Breaking fixes are kept in a separate endpoint, so you decide when to opt in. Learn more: chainguard.dev/unchained/chai…