Chainguard says AWS Security Hub Extended now includes Chainguard Libraries

By Atlas Watchline Staff · Corporate · August 4, 2026

Chainguard said AWS Security Hub Extended now includes Chainguard Libraries in a new Supply Chain category for AWS customers.

Chainguard said on Aug. 4, 2026, that AWS Security Hub Extended now includes Chainguard Libraries in a new Supply Chain category for AWS customers.

The company said the service is intended to help reduce software supply chain risk by replacing public open source dependencies with secure-by-default alternatives inside existing AWS security operations workflows.

In a release from Kirkland, Washington, Chainguard said organizations face supply chain risk from compromised open source packages and AI-assisted attacks. The company said more than 98% of malware ships as a pre-built package with no matching source code, and said malicious packages can enter builds within hours before scanners detect them.

Chainguard said it rebuilds packages from verified source code in its isolated Chainguard Factory environment before they reach customer systems. The company said Chainguard Libraries is a catalog of language dependencies and replaces reliance on public registries such as PyPI, Maven Central and npm.

The release said packages are rebuilt in Chainguard’s SLSA Level 3 build environment and delivered with signed provenance and software bills of materials, or SBOMs, which are records of what is inside a piece of software.

Patrick Donahue, senior vice president of product at Chainguard, said open source is foundational to modern software and that AWS adding Chainguard as a supply chain security partner signals industry seriousness about the issue.

AWS customers can access Chainguard Libraries through the AWS Security Hub console by selecting the Extended plan, choosing Chainguard and following a guided onboarding process to subscribe and configure the service, according to the release.

The company did not disclose pricing in the release.

Sources

• PR Newswire release

Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.

This is the AMP version of the article. Read the full article on Atlas Watchline.