Canonical, the publisher of Ubuntu, is pleased to announce a new partnership with developer-focused cybersecurity company Snyk. Snyk Container, Snyk’s container security solution, now offers native support for scanning chiseled Ubuntu containers. This partnership will create a path to a more secure container ecosystem, where developers wi […]

The Ubuntu Blog provides updates, tutorials, and insights on the Ubuntu operating system and related projects. Covering topics such as Linux desktops, server administration, and cloud computing, the blog offers resources for developers and sysadmins working with Ubuntu. Developers can learn how to set up, configure, and optimize Ubuntu systems for development, deployment, and production environments by following the Ubuntu Blog.

Ubuntu

Canonical has partnered with Snyk to bring native scanning support for chiseled Ubuntu containers to Snyk Container. Chiseled Ubuntu images are minimal, distroless containers built bottom-up using the Chisel package manager, retaining package metadata needed for accurate CVE scanning. Unlike typical distroless images that often omit metadata and cause false negatives, chiseled Ubuntu images allow Snyk to correctly identify slices and report vulnerabilities accurately. The integration requires no extra configuration, works with existing Snyk commands, and results in reduced vulnerability noise and faster CI/CD pipelines.

Canonical partners with Snyk for scanning chiseled Ubuntu containers

Get production-ready, securely-maintained container images