Getting Started with the GitLab Chainguard Containers
Learn how to deploy GitLab using Chainguard's security-hardened container images with reduced vulnerabilities, …
For the complete documentation index, see llms.txt.
This page logs Chainguard product updates week by week, newest first: product announcements, breaking changes, container images that reached end-of-life or are no longer available, and images newly added to the catalog. Each event is listed once, in the week it first appeared.
Launched July 24, 2026.
SUSE’s NeuVector vulnerability scanner now natively supports Chainguard Containers and ingests Chainguard’s OSV advisory feed, which includes recent data-quality improvements. Scans of Chainguard images suppress false positives and report more accurate results.
Launched July 22, 2026.
Administrators can map identity provider groups — Okta or Microsoft Entra ID, for example — directly to Chainguard roles, instead of assigning roles one user at a time. Anyone who authenticates with a mapped group in their token receives that role for the session.
For more information, including setup steps, refer to Grant Chainguard Roles from Identity Provider Groups.
EOLChainguard offers a grace period for eligible end-of-life images: up to six months of continued rebuilds and security updates while you complete your upgrade.
The following container images reached the end of their grace period and are no longer available:
| Image | End-of-life | Grace period ended |
|---|---|---|
knative-eventing:1.19 | 2026-01-28 | 2026-07-28 |
knative-serving:1.19 | 2026-01-28 | 2026-07-28 |
net-kourier:1.19 | 2026-01-28 | 2026-07-28 |
The following container images reached end-of-life and entered their grace period:
| Image | End-of-life | Grace period ends |
|---|---|---|
dnsdist:1.9 | 2026-07-21 | 2027-01-21 |
longhorn-backing-image-manager:1.8 | 2026-07-22 | 2027-01-22 |
longhorn-instance-manager:1.8 | 2026-07-22 | 2027-01-22 |
envoy:1.35 | 2026-07-23 | 2027-01-23 |
Chainguard built 16 new container images this week, including both standard and FIPS variants.
| Image | Tier | Added |
|---|---|---|
coder | application +fips | 2026-07-22 |
flink-kubernetes-operator | application | 2026-07-22 |
pghero | application +fips | 2026-07-22 |
kargo | application | 2026-07-23 |
nuclio-controller | application +fips | 2026-07-23 |
phpmyadmin | application +fips | 2026-07-23 |
apache-exporter-iamguarded | application | 2026-07-24 |
rpi-server-bootc | base | 2026-07-25 |
glab | application +fips | 2026-07-27 |
metabase | application | 2026-07-27 |
crossplane-azure-relay | application | 2026-07-28 |
Last updated: 2026-07-28 00:00