Skip to content

Add reusable Athena zero-day protection module to Libraries overviews - #4180

Merged
s-stumbo merged 4 commits into
mainfrom
athena-mention
Oct 16, 2026
Merged

s-stumbo merged 4 commits into
mainfrom
athena-mention

Conversation

@s-stumbo

@s-stumbo s-stumbo commented Oct 9, 2026 •

Copy link
Copy Markdown
Collaborator

What this does

Adds a reusable blurb/athena.html shortcode describing zero-day protection through the Athena coalition, and places it in the CVE remediation section of the four Chainguard Libraries overview pages:

  • Chainguard Libraries overview (introduction/overview.md) — new CVE remediation section
  • Java overview — existing CVE remediation section
  • JavaScript overview — new CVE remediation section (see note below)
  • Python overview — existing CVE remediation section

The blurb is two paragraphs with no heading of its own, so it reads as the lead-in to each CVE remediation section. The prose mention of Athena links to https://www.chainguard.dev/athena.

Why a shortcode

Defining the content once keeps the four pages in sync — future wording changes happen in one place. This follows the repo's existing blurb/* pattern. The shortcode is invoked with the percent form ({{% blurb/athena %}}) so its Markdown link renders.

Reviewer note: JavaScript CVE remediation

This PR adds a CVE remediation section to the JavaScript overview, which did not previously have one. CVE remediation for JavaScript is being handled in a separate PR.

Testing plan

  1. Run npm ci (if dependencies are not current), then node_modules/.bin/hugo server.
  2. Visit each page and confirm the Athena blurb renders as two paragraphs at the top of the CVE remediation section:
    • /chainguard/libraries/introduction/overview/
    • /chainguard/libraries/java/overview/
    • /chainguard/libraries/javascript/overview/
    • /chainguard/libraries/python/overview/
  3. Confirm the blurb no longer has its own heading, and that the "Athena" link in the first paragraph points to https://www.chainguard.dev/athena.
  4. Confirm each page's table of contents lists "CVE remediation."

A clean hugo build of the full site was verified locally with no errors.


Created in collaboration with Claude Code running Claude Opus 4.8 (1M context) on 2026-10-09.

Create a `blurb/athena.html` shortcode describing zero-day protection
through the Athena coalition, and add it to the general Chainguard
Libraries overview and the Java, JavaScript, and Python overview pages.

The shortcode is invoked with the percent form so the heading renders as
a real h2 and appears in each page's table of contents.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@s-stumbo
s-stumbo requested a review from a team as a code owner October 9, 2026 17:18
@vercel

vercel Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
chainguard-docs-preview Ready Ready Preview Oct 16, 2026 1:05pm UTC

Request Review

@netlify

netlify Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for ornate-narwhal-088216 ready!

Name Link
🔨 Latest commit 98eab86
🔍 Latest deploy log https://app.netlify.com/projects/ornate-narwhal-088216/deploys/6ad220e4d23c2ba93e935a6b
😎 Deploy Preview https://deploy-preview-4180--ornate-narwhal-088216.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Remove the heading from the `blurb/athena` shortcode so it reads as
section body, and move the blurb into each page's CVE remediation
section. Add a CVE remediation section to the general Libraries overview
and the JavaScript overview, which previously had none.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

@SharpRake SharpRake left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Signed-off-by: s-stumbo <100295939+s-stumbo@users.noreply.github.com>

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we need to be clear that there is a gap in the time customers will get these fixes. We do make the fixes available for Chainguard customers after public disclosure has happened.

Signed-off-by: s-stumbo <sally.stumbo@chainguard.dev>
@s-stumbo
s-stumbo merged commit 6cd4306 into main Oct 16, 2026
15 checks passed
@s-stumbo
s-stumbo deleted the athena-mention branch October 16, 2026 13:14

This branch was successfully deployed

1 active deployment
Preview — 98eab86f Deployed Oct 16, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants