CHAINGUARD has reported a dramatic scaling of its container build system, announcing that in the last six months it has increased build manifests from about 500 million to over 1 billion, alongside a catalog of more than 3,000 unique container images and around 675,000 image versions. The article explains that these figures reflect not just volume but the underlying system allowing the catalog to stay secure on the day of pull and secure every day thereafter. The emphasis is on a robust, continuously refreshed supply chain rather than periodic releases.
The push behind this growth is Chainguard OS and Chainguard Factory, a rolling-release, cloud-native stack designed for rapid updates and rebuilds. The Factory 2.0 initiative adds DriftlessAF, a self-correcting, agentic framework that uses AI-assisted reconciliation to keep state in line with policy and CVE remediation. Features include a continuous work queue of reconcilers, a state-compare loop to close gaps when new CVEs or upstream changes arise, and redundant design so failed tasks can be retried or dropped.
The approach aims to accelerate rebuild velocity while maintaining verifiable provenance (SLSA, Sigstore, SBOMs) and reducing human-in-the-loop intervention, positioning the team to respond swiftly to an increasingly fast threat landscape.
The article notes that the DriftlessAF core is open source and intends to inspire other teams facing large-scale automation challenges. It also points readers to the container image catalog and the DriftlessAF repository for technical details.