Introducing Chainguard Libraries: Guarded Java Language Dependencies Built from Source
Summary
Chainguard Libraries also mitigates the need for friction-heavy package curation and integrates seamlessly into developer workflows, empowering enterprises to ship software faster, without sacrificing security. Securing the modern software development lifecycle requires locking down every layer of the stack, including the operating system (OS), runtime environment, language libraries, and application code. Because public registries are low friction by design, they have minimal vetting for the artifacts uploaded to their repositories and no requirements for digital attestations to ensure package integrity and build security. At the same time, were making developers lives easier by removing the friction of manual or policy-based package curation and giving them one trusted source for dependencies that integrates seamlessly into their existing workflows. By meeting developers how and where they work, Chainguard enables engineering teams to ship products faster and with more confidence, ultimately driving business value for their organizations.