Chainguard Expands Secure Dependency Libraries to Go and .NET

The expansion addresses a fundamental shift in software supply chain risks where attackers utilize frontier AI models to identify vulnerabilities faster than human maintainers can patch them. By replacing standard public registries with Chainguard-managed endpoints, engineering teams gain a secure pipeline that filters for malware and greyware—nefarious packages often ignored by traditional scanners.

Beyond basic blocking, the platform now offers backported fixes for critical and high-severity vulnerabilities in JavaScript and Go. This allows organizations to maintain security without the immediate burden of performing major version upgrades. For Java and Python users, the service leverages the Athena threat intelligence coalition to provide zero-day patches the same day a vulnerability is disclosed. According to Patrick Donahue, SVP of Product at Chainguard, the goal is to remove the burden of trust from developers and AI agents by ensuring that prevention occurs at the source.