James Rawlings
@jdrawlings
Securing software supply chains by default @chainguard_dev, previously co-created Jenkins X
ID:119024524
02-03-2010 12:49:09
954 Tweets
2,0K Followers
561 Following
🍕CHICAGO: Are you ready for #KubeconNA ? ☸️
📍 Meet us at Booth Q12 👋
🎉 Come hang out with us: A Day of Security, OSS Soiree, Kuberoke, PartyCon
👂 Join Chainguardians talks: Carlos Panato puerco Adrian Mouat James Rawlings Lewis Denham-Parry James Strong
get.chainguard.dev/kubecon-na-202…
I went to bed and the curl CVE hadn't been announced yet. I woke up this morning and it was fixed and rolled out across every Chainguard ⛓️ image.
The NVD still hasn't published any details.
nvd.nist.gov/vuln/detail/CV…
It's Sp00ky Szn & we take that very seriously Chainguard ⛓️ 👻
This month we will be sharing our CVE ghost stories series -- where we breakdown the haunting effects of false positive & negative CVEs.
Read if you dare: chainguard.dev/unchained/the-…
🐙NEW IMAGE ALERT🐙
Check out Chainguard ⛓️'s Pulumi image:
chainguard.dev/unchained/chai…
The CVE count on the Chainguard Pulumi Image today according to Trivy is 15 compared to 737 in the official image -- that is a 97.9% decrease in CVEs. 📉
We're excited to announce some new features, images and product offerings for Chainguard ⛓️ images today!
🐙MAY COMMUNITY CALL💜 5/3 @ 11AM ET
We will discuss:
🛸How Wolfi's vuln discovery process works
🛤️How we track our investigations transparently using our advisory system
🛠️How we ensure Wolfi is updated w/ automation & tooling
🗣️Dan Luhring James Rawlings
github.com/wolfi-dev/comm…
We have an import message to send! Телеграф.lv from InfluxData is now available as a Chainguard ⛓️ image!
Fewer CVEs and much smaller than the other options. Try it out at cgr.dev/chainguard/tel… today!
The Chainguard ⛓️ images collection is growing rapidly, and it's not just base images! We also have full ready-to-run apps.
Recently we've added:
* NATS.io
* Apache Kafka
* TheZooKeeper
* Vault
with lots more on the way!
github.com/chainguard-ima…