Chainguard FIPS Images by Chainguard is designed to help organizations achieve and maintain compliance with stringent cybersecurity frameworks such as CMMC 2.0 and FedRAMP. These container images are FIPS-enabled and STIG-hardened, ensuring that all cryptographic operations within the container and its services use FIPS-validated cryptographic modules. Chainguard FIPS Images are built from the ground up with only the essential services needed to operate, minimizing the attack surface and reducing vulnerabilities. They are updated daily to ensure zero-to-low CVEs and include Software Bill of Materials (SBOMs) in SPDX format for supply chain security. These images are suitable for enterprises selling software to the federal government and those needing to protect Controlled Unclassified Information (CUI). Chainguard FIPS Images also support Bouncy Castle FIPS Java API 140-2 and 140-3, providing comprehensive cryptographic support.
