Sublime Security's Implementation of Chainguard Solutions

This case study details the collaboration between Sublime Security and Chainguard to enhance vulnerability management through the use of Chainguard container images. The document outlines the challenges faced by Sublime Security in managing Common Vulnerabilities and Exposures (CVEs) prior to adopting Chainguard, including the significant time and resources required for CVE triage. It describes the decision-making process that led to the selection of Chainguard, emphasizing the need for a solution that minimizes the attack surface and integrates seamlessly with existing engineering workflows. The results section highlights a near 100% reduction in base image CVEs and the subsequent freeing up of resources for more critical application-layer security tasks. Additionally, it discusses the improved relationship between security and engineering teams due to reduced friction from vulnerability management. Overall, the case study presents a comprehensive view of how Chainguard has transformed Sublime Security's approach to vulnerability management.