Video on

What is the Chainguard Factory?

Sat, 02 Aug 2025 16:00:00 +0000

Transcript

Interviewer: So Dustin, can you explain what the Chainguard Factory is?

What does the Chainguard Factory build?

Sat, 02 Aug 2025 16:00:00 +0000

Transcript

Interviewer: So Dustin, what does the Factory actually build every day?

Touring the Chainguard Factory

Sat, 02 Aug 2025 16:00:00 +0000

Transcript

Interviewer: So Dustin, can you give us a quick tour of the Chainguard Factory?

What is the future of the Chainguard Factory?

Sat, 02 Aug 2025 16:00:00 +0000

Transcript

Interviewer: So what do you see as the future for the Factory?

How Chainguard creates container images with low-to-no CVEs

Fri, 31 May 2024 12:21:01 +0000

Chainguard Containers typically report few or no CVEs when scanned, which raises a fair question about whether those findings are being suppressed. They are not. Scanners read Chainguard Containers exactly as they read any other container, and they report whatever they find. The low counts are instead the product of three practices: shipping less software, rebuilding nightly, and publishing security advisories that tell scanners what a given finding means.

This article explains each practice, and describes how to verify the results independently.

Inside the Chainguard Factory - Assemble 2025

Thu, 31 Jul 2025 16:00:00 +0000

Transcript

Sam (Introduction): We’re very fortunate our Vice President of Engineering, Dustin Kirkland, is going to be walking us through the Chainguard Factory, which you would have heard a little bit about during the keynote today. So I’ll go ahead and turn things over to Dustin. We will have time at the end for questions, so keep that in mind. Thank you.

Updating container images with Renovate (and no PATs!)

Tue, 23 Dec 2025 09:30:00 +0100

In this video, Developer Relations Engineer Adrian Mouat shows you how you can update container images using Renovate with Octo STS, eliminating the need for GitHub Personal Access Tokens.

Video

What you’ll learn

How to set up Renovate as a GitHub Action
Using Octo STS to eliminate Personal Access Tokens
Configuring trust policies for automated workflows
Setting up assumable identities for private registries
Automating container image and GitHub Actions updates

Transcript

In this video, I’m going to show you how you can use Renovate to update container images and GitHub actions. At Chainguard, we do talk a lot about the need to keep software up to date. And in my opinion, it’s essential you do that for both security and maintainability. So, if you stay on an old version of a package for too long, there’s a strong chance that you’ll be bitten by an unpatched vulnerability. But also, the longer you stay on an old version, the harder updating becomes. So, it’s much better to do frequent small updates than it is to occasionally be forced into having to do major breaking updates.