Launching Gold Open Source, Agentic AI for Containers, and End-to-End Risk Visibility

FeatureHub Release April 2025

May 8, 2025

‍

This month’s release focuses on helping organizations reduce risk faster, gain deeper visibility into their software supply chain, and adopt safer open source. With the introduction of Gold Open Source, Agentic AI for Containers, SCA360, and enhanced risk visualization across products and organizations, teams can now better prioritize, act, and scale remediation workflows.

These updates are purpose-built to improve security posture, reduce noise, and streamline how software is developed, secured, and maintained.

Gold Open Source: Source high-integrity, safe, transparent open-source packages and images

Open-source adoption is growing, but so is the risk from unmaintained, vulnerable, or opaque components. Gold Open Source mitigates this by providing secure, pre-vetted packages and images—each evaluated against more than 100 attributes covering security, provenance, licensing, and maintainability.

‍

Over 3 million vulnerability-free Gold Open-Source Packages

Over 2,000 hardened, pre-vetted Gold Open-Source Images

Gold Open Source Packages and Images are safe, transparent, and production-ready—allowing teams to reduce risk without sacrificing velocity.

‍

Browse the Gold Open Source Catalog

Agentic AI for Containers:

Lineaje’s Agentic AI capabilities now extend to container security. This enables automatic vulnerability remediation within containers, even when no official fix exists.

‍

Fixes vulnerabilities in applications, language runtime and base images

Maintains compatibility with your environment and app stack

Reduces developer effort while improving container security

This expands our AI-driven remediation beyond source packages to containerized applications, helping teams fix what they didn’t build.

‍

SCA360: Full-Context Software Supply Chain Risk Detection

Lineaje SCA360 enables organizations to unify risk visibility across the software lifecycle—integrating with existing scanners and detecting threats others miss.

‍

Analyze source code, artifacts, and container images within your own environment

Detect tampered components and highlight packages of dubious origin

Uncover deep dependency chains and reachable vulnerabilities

Lineaje SCA360 (PAYG) helps teams prioritize and act on the risks that matter, without compromising on data privacy or visibility.

Lineaje SCA360 (PAYG) is available at AWS Marketplace.

Product Map and Risk Visibility Enhancements

Managing risk across multiple projects and product versions is now easier and more actionable.

‍

View and group projects by product or organization, across multiple versions

Create and manage products with related projects, and generate NTIA Compliant SBOM (in both SPDX and CycloneDX formats), VEX and CSAF artifacts at the product level

Compare versions to understand how risk posture evolves over time

Apply risk-based filters to find projects or products with the highest vulnerabilities or findings

View exact file paths of vulnerable components for faster root cause identification

Support for APK and MSI package formats expands risk visibility across Android and Windows environments

Want to see these features in action? Request a demo today and discover how Lineaje can transform your software supply chain security.

Lineaje FeatureHub

Launching Gold Open Source, Agentic AI for Containers, and End-to-End Risk Visibility