Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
The future of container development
What do you like best about the product?
Chainguard's open source tooling allows developers, and opportunity to package their projects in secure, efficient containers. When working on my personal projects, I now default to using melange and apko for all of my containers.
What do you dislike about the product?
Sometimes documentation is lacking for advanced features or portions of their open source tooling.
What problems is the product solving and how is that benefiting you?
Chainguard has released their alternative values for Big Bang, addressing over 2000 CVEs and massively reducing the footprint of the image deployment bundle.
- Leave a Comment |
- Mark review as helpful
Secure software supply chain
What do you like best about the product?
Chainguard has a rock solid product offering that's allowed our teams to build on top of a secure foundation. Chainguard's Linux (un)distro and vast library of language runtimes and open source building blocks allowed us to compose a secure software catalog of first and third party software to distribute to our customers. On top of this, all of Chainguard's engineering and customer success staff have been a great pleasure to work with! All our collab is over Slack and they feel like an extended part of the team.
What do you dislike about the product?
This falls more to us than Chainguard, but ways to better track all the places we're making use of their base images would be helpful.
What problems is the product solving and how is that benefiting you?
Chainguard helps our engineering teams secure our software supply chain and build on top of "sanitized" open source.
Best in the business
What do you like best about the product?
Removes the complexity from dealing with CVEs from the development process, allowing teams to ship high quality software without compromising security or speed.
What do you dislike about the product?
Nothing - they are my go-to recommendation when teams are struggling in the process.
What problems is the product solving and how is that benefiting you?
Chainguard buys down time and complexity in the container security and CVE process, allowing software to rapidly achieve security requirements and deploy into secure environments
Spend less time talking about CVEs
What do you like best about the product?
We've all seen a ton of projects that will detect CVEs but then you have the secondary problem of deciding where the CVE originated from (base image or first party code), how to patch or upgrade, when to patch so not to impact customers, who should own the updates, what to tell customers and compliance...
Chainguard Images removes the CVEs -- no debate, no CVSS, no triaging, no work tickets. It's done. Enterprises that appreciate this problem will see an ROI in weeks if not days. Not to mention that enterprise customers get an SLA for patches -- I challenge anyone to do what they are doing internally without spending millions on a team who does this as a full time job.
Then for the orgs that are investing in the software supply chain risks, they provide provenance, signing, and an accurate SBOM out-of-The box to start your journey in managing a secure software supply chain.
Chainguard Images removes the CVEs -- no debate, no CVSS, no triaging, no work tickets. It's done. Enterprises that appreciate this problem will see an ROI in weeks if not days. Not to mention that enterprise customers get an SLA for patches -- I challenge anyone to do what they are doing internally without spending millions on a team who does this as a full time job.
Then for the orgs that are investing in the software supply chain risks, they provide provenance, signing, and an accurate SBOM out-of-The box to start your journey in managing a secure software supply chain.
What do you dislike about the product?
The free offering is (reasonably) only the :latest tag which might be fine for personal projects but not most production environments. I don't know the costs for individuals or small orgs (I'm an enterprise customer) but its not free.
What problems is the product solving and how is that benefiting you?
This solves a major piece of our compliance story. We need to demonstrate to compliance that we are properly managing CVEs that are impacting our customers. It's also planned to rolled out everywhere in our org as part of a Gold Image project.
Chainguard’s container images, towards effortless and strong security posture
What do you like best about the product?
I was looking for replacing my base images with more a secure approach (i.e. distroless), Chainguard images were a great fit because easy to use and well maintained. The other aspect is the customer support that the Chainguard team is providing, even with the free container images. As an example, they took my feedback, answered my questions as well as educated around the different concepts.
What do you dislike about the product?
Not yet widely used out there, but it's coming as more awareness and education are provided and shared. I haven't built my own container image with wolfi, melange and apko yet, as I will to spend more time to get started with them.
What problems is the product solving and how is that benefiting you?
Chainguard is helping by default and effortless to improve my security posture with my container images.
Great base images
What do you like best about the product?
There's not much to say, and I mean that in a good way. Their base images are small, and almost always have a significant amount of less surface area and vulnerabilities than containers based on traditional distributions. I like that the build process is on github so you can open up their merge queue and watch the updates go in in real time. It's also great that they can be as small as Alpine images but with glibc so you don't have to worry about dealing with musl.
What do you dislike about the product?
I don't have experience with their commercial support.
What problems is the product solving and how is that benefiting you?
Smaller base images - a drop in replacement for Alpine/Ubuntu.
Critical for SBOM and supply chain security
What do you like best about the product?
Chainguard does the hard work of building secure containers, and ensuring that things are kept up to date. They are experts in the field and provide both a balanced approach with best in class security.
What do you dislike about the product?
Containers are often challenging to adopt, and with many common tools not present (because they have security vulnerabilities), existing tools may not work inside of Chainguard images. That's not Chainguard's fault, it just is an adaptation the entire ecosystem needs to make to get secure.
What problems is the product solving and how is that benefiting you?
Ensuring that the containers we use for our applications are secure, minimal, and well structured.
Provenance Data!
What do you like best about the product?
Their images come with great attestation data that alows us to indepedently verify provnance.
What do you dislike about the product?
Not enough places are using it yet. It would be great of more OSS used it so vuln would be reduced for the OSS we consume.
What problems is the product solving and how is that benefiting you?
It lowers the number of vulnrubiities.
Chainguard is a game changer for your SBOM and security
What do you like best about the product?
Backed in security, hardening and ease of use
What do you dislike about the product?
Pricing model is a tad high but worth it for me
What problems is the product solving and how is that benefiting you?
Hardens our containers, fix CVEs and SBOM.
Small, up-to-date and secure base images
What do you like best about the product?
We've replaced our usage of alpine as a base image with the "wolfi-base" image, it's almost the same experience - using apk to install packages for example - but with an always up-to-date distribution and no CVEs.
The investment is minimal, but the value is huge for us, as we don't have to manage old alpine releases anymore.
The investment is minimal, but the value is huge for us, as we don't have to manage old alpine releases anymore.
What do you dislike about the product?
Not all the chainguard images are drop-in replacements for "official" images you might be using today. Some require a bit of work to integrate properly in your setup.
What problems is the product solving and how is that benefiting you?
easy to use and secure-by-default base images. In case of newly detected vulnerability, we can always count on chainguard to be the first to provide patched images.
showing 11 - 20