The trusted source for open source (& memes).
Joined July 2021
- Tweets4.8K
- Following116
- Followers6.7K
- Likes12.7K
Pinned Tweet
Today, we're starting Athena's disclosure program. The first release is 14 vulnerabilities that were quietly fixed in open source projects but never got a CVE, so they never popped up on your scanners. Each now has an advisory on our public VEX feed, a free patch in our GitHub repo, and a remediated artifact available in Chainguard Repository.
Below, we show what these silent vulnerabilities can hide.
Read more about Athena's disclosure process: chainguard.dev/unchained/ath…
HELLOOOO, KUBECON! 🎉
Here's where you can find us today:
🐙 Booth #110: Stop by to learn how we help organizations build with trusted open source and prevent AI attacks (and for the Linky-shaped cotton candy from 1-3pm!)
📣 10:35 - 10:55am: AI already found your Java vulnerabilities. Has your scanner? with @simpligility at the Demo Theater
📣 11:50am - 12:20pm: Welcome to the Vulnpocalypse! panel with @adrianmouat, Liz Rice, Hannah Foxwell, and Andrew Martin at Hyatt Regency, Level 2, Salt Lake Ballroom DE
🤝 Want to chat with our team 1:1? Book time with us here: get.chainguard.dev/kubecon20…
2
204
"Every day that GitHub has a bad day, we have a terrible day."
Chainguard CTO and Co-founder @mattomata explains why CI built for human devs in 2015 can’t keep up with coding agents, and why agents need feedback in seconds, not after a CI queue: chainguard.dev/unchained/ci-…
2
282
Still finalizing your KubeCon agenda? Here are a few things to add to the mix 👇 get.chainguard.dev/kubecon20…
2
193
🏆 Awards season continues! 🏆
We’re proud to be named one of @TheChannelCo's Stellar Startups for 2026 🎉 This list recognizes the security startups building the technology to stay ahead of today’s threats and attackers. Check it out: crn.com/rankings-and-lists/s…
5
290
Start an agent… detach the session… close your laptop… head to your meeting ☕️
Thirty minutes later, reattach to your terminal. Your Go service is built, tested, and ready to push. That’s Chainguard Workspaces 🔥
@adrianmouat walks through how hardened microVMs let AI agents build freely without putting your machine, credentials, or systems at risk. chainguard.dev/unchained/int…
1
229
We migrated off GitHub Actions and onto Chainguard Checks ✅
Why? Agents pushed our busiest repo to 2,000 merges a day, and we couldn’t keep stalling every time GitHub went down. Now our builds are 2x faster. Checks is in beta now: chainguard.dev/unchained/git…
You can't fix what you can't see. That's why we made the Chainguard Insights Dashboard, powered by Guardener 🎉
With it, security teams can:
• See container images across all their GitHub repos
• Spot which images are hardened and which aren’t
• Prioritize by projected CVE reduction
• Migrate in one click, with PRs ready to merge
Live now: chainguard.dev/unchained/int…
7
403
🆕🆕🆕 from Chainguard: Athena members now get a dedicated endpoint for fixes with breaking changes.
Breaking fixes are kept in a separate endpoint, so you decide when to opt in. Learn more: chainguard.dev/unchained/cha…
The fastest way to shrink a vulnerability backlog is to stop it from filling up in the first place 🚫
Field CISOs John Sapp Jr from Chainguard and Steve Cobb from @Zafran_io are getting together on November 10 to talk about how FinServ teams can stop new vulns at the source and deal with the ones already there.
Save your spot 👉 go.zafran.io/finserv-right-s…
🔁 Commit, push, wait, fail, repeat 🔁
Chainguard Checks breaks that dreaded cycle. Dylan Havelock shares what it looks like in practice. He runs CI locally, catches two failing tests, and has Claude Code fix them before anything is pushed. Now all your PRs are born green ✅
Try it free in beta: chainguard.dev/products/chec…
No Mythos access, no problem.
Chainguard Harness puts Claude Mythos 5.1 to work against a live build of your app inside an isolated microVM and hunts for the logic flaws, injection, and runtime bugs that static scanners miss.
Join the beta waitlist: chainguard.dev/products/harn…
SEE YOU AT KUBECON!
Stop by Booth #110 to learn how Chainguard helps teams secure their software supply chain, or book 15 minutes with our team so you’re guaranteed some time with us 1:1 👉 get.chainguard.dev/kubecon20…
2
6
335
brb hanging this one on the fridge
thanks for the recognition, @lightspeedvp, @FortuneMagazine, and @awscloud 💜
Your agents help you write the code. We help you:
✅ Ship it faster
✅ Run it securely
✅ Build it on a trusted foundation
Reid Tatoris and Sam Katzen walk through everything we launched at Assemble London 👇 chainguard.dev/unchained/eve…
The collab you didn’t know you needed: Chainguard x @ScienceBob
We’re teaming up with Science Bob for Family STEM Days in New York and San Francisco, and you and yours are invited! We'll have live experiments, activity stations, and a Q&A where your kids (or you!) can ask Bob anything.
🌁 SF: Sunday, November 15
🗽 NYC: Sunday, December 6
Links in the thread 👇
1
8
457
🌁 San Francisco: familystemdaywithchainguarda…
1
1
135
We made the #FortuneCyber60 list! 🎉
Security challenges are only growing, and we're proud to be named among the startups facing them head-on.
For the full list from @FortuneMagazine and @lightspeedvp: fortune.com/ranking/cyber/20…
💥 The latest thing hitting your security team: burnout
We surveyed 1,300 security leaders on the impact of AI on security teams, and 64% said AI-accelerated cyberattacks contributed to their burnout over the last year.
More on how burnout weakens defenses and more in The AI Exploit Gap: chainguard.dev/unchained/the…
We 💜 our partners!
Earlier this month, we brought together our EMEA-based partners for an Inaugural Partner Day ahead of Assemble London. Thank you to everyone who joined us, and a huge congrats to Somerford Associates and Alan&Eve, who were recognized for their outstanding partnership and customer impact in the Enterprise and Commercial segments, respectively.
We couldn't do it without you!
