Vigilance vs Chainguard
Chainguard. Builds container images that hold almost nothing, so there is almost nothing in them to go wrong.
Vigilance. Compares two saved containers and says what changed between them.
Side by side
| Question | Chainguard | Vigilance |
|---|---|---|
| Gives you a clean base container | Yes | No |
| Proves who built the container | Yes | No |
| Covers the code your own team adds on top | No | Yes |
| Compares your container today against last week | No | Yes |
| Spots a container that starts a different program on boot | No | Yes |
| Covers anything that is not a container | No | Yes |
Which one do you need?
Use both. Chainguard shrinks what you start from. Vigilance watches what you add on top.
Try it on your own software.
Show it the version you run today and the one you are about to install.