Skip to content

Add reusable Athena zero-day protection module to Libraries overviews #4180

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
s-stumbo merged 4 commits into from
Oct 16, 2026
Merged

Add reusable Athena zero-day protection module to Libraries overviews #4180

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
b56653a
Add reusable Athena zero-day protection module to Libraries overviews
s-stumbo Oct 9, 2026
219fe3c
Move Athena blurb into CVE remediation sections, drop its header
s-stumbo Oct 9, 2026
418fac2
Merge branch 'main' into athena-mention
s-stumbo Oct 13, 2026
98eab86
update wording
s-stumbo Oct 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion content/chainguard/libraries/introduction/overview.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ description: "Learn about Chainguard Libraries, providing enhanced security for
comprehensive supply chain protection."
type: "article"
date: 2025-03-25T08:04:00+00:00
lastmod: 2026-09-28T14:00:04+00:00
lastmod: 2026-10-09T17:42:18+00:00
draft: false
tags: ["Chainguard Libraries", "Overview"]
menu:
Expand Down Expand Up @@ -121,6 +121,10 @@ To move an existing project over, follow the migration guide for
[JavaScript](/chainguard/libraries/javascript/migration/), or
[Python](/chainguard/libraries/python/migration/).

## CVE remediation

{{% blurb/athena %}}

## Chainguard criteria for building a library

Chainguard Libraries includes thousands of Java, JavaScript, and Python libraries, and coverage is continuously growing as we add more packages and versions over time. Chainguard aims to build libraries that are relevant to our customers and that support broader software supply chain security goals. However, it is not always feasible or safe to rebuild and redistribute every package from public registries such as Maven Central, npm, or PyPI.
Expand Down
4 changes: 3 additions & 1 deletion content/chainguard/libraries/java/overview.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ linktitle: "Java overview"
description: "Learn about Chainguard Libraries for Java, providing enhanced security for Maven dependencies through automated vulnerability patching and supply chain protection"
type: "article"
date: 2025-03-25T08:04:00+00:00
lastmod: 2026-10-07T18:02:47+00:00
lastmod: 2026-10-09T17:42:18+00:00
draft: false
tags: ["Chainguard Libraries", "Java", "Overview"]
menu:
Expand Down Expand Up @@ -118,6 +118,8 @@ guide](/chainguard/libraries/java/migration/).

## CVE remediation

{{% blurb/athena %}}

Chainguard Libraries for Java includes the [CVE
Remediation](/chainguard/libraries/policies-and-security/cve-remediation/) feature, available in beta for Spring Boot. Remediated
libraries include an appended local version identifier of `-0.cgr.N`.
Expand Down
6 changes: 5 additions & 1 deletion content/chainguard/libraries/javascript/overview.md
View file
Open in desktop

@katie-crabtree katie-crabtree Oct 14, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we need to be clear that there is a gap in the time customers will get these fixes. We do make the fixes available for Chainguard customers after public disclosure has happened.

Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ aliases:
description: "JavaScript libraries for your application development"
type: "article"
date: 2025-06-05T09:00:00+00:00
lastmod: 2026-10-08T23:13:51+00:00
lastmod: 2026-10-09T17:42:18+00:00
draft: false
tags: ["Chainguard Libraries", "JavaScript", "Overview"]
menu:
Expand Down Expand Up @@ -91,6 +91,10 @@ You can continue to use additional registries alongside Chainguard for needs out

Configure this endpoint [globally through a repository manager](/chainguard/libraries/javascript/global-configuration/) for centralized access control across your organization, or use it for [direct access](/chainguard/libraries/javascript/build-configuration/) from individual build tools. If you prefer to manage your own npm fallback rather than using the built-in upstream fallback, refer to the [global configuration documentation](/chainguard/libraries/javascript/global-configuration/) for setup guides per repository manager.

## CVE remediation

{{% blurb/athena %}}

## Updating lockfile hashes

Existing JavaScript lockfiles usually contain upstream integrity hashes. Because Chainguard rebuilds packages from verified source, those hashes must be updated before reinstalling. Use `chainctl libraries update-hashes` to update them in place. Learn more in [Build configuration](/chainguard/libraries/javascript/build-configuration/#updating-lockfile-hashes/).
Expand Down
4 changes: 3 additions & 1 deletion content/chainguard/libraries/python/overview.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ linktitle: "Python overview"
description: "Learn about Chainguard Libraries for Python, providing enhanced security for PyPI packages through automated vulnerability patching and supply chain protection"
type: "article"
date: 2025-04-09T04:00:00+00:00
lastmod: 2026-10-08T23:13:51+00:00
lastmod: 2026-10-09T17:42:18+00:00
draft: false
tags: ["Chainguard Libraries", "Python", "Overview"]
menu:
Expand Down Expand Up @@ -89,6 +89,8 @@ Python wheel files for standard and remediated package version.

## CVE remediation

{{% blurb/athena %}}

Chainguard Libraries for Python includes the [CVE
Remediation](/chainguard/libraries/policies-and-security/cve-remediation/) feature. Remediated
libraries include an appended local version identifier of `+cgr.N`. Python
Expand Down
3 changes: 3 additions & 0 deletions layouts/shortcodes/blurb/athena.html
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
Frontier AI models are uncovering vulnerabilities in open source software before traditional security tools can detect them. Chainguard Libraries helps reduce that exposure by delivering remediated artifacts through the [Athena](https://www.chainguard.dev/athena) coalition.

Chainguard validates, patches, rebuilds, and tests affected packages, then makes the fixed artifacts available through Chainguard Libraries. Customers can continue using supported package versions while receiving verifiable provenance and SBOM metadata for the remediation.
Loading