Domino Data Lab secures container supply chains at scale using Chainguard on AWS

This article details how Domino Data Lab partnered with Chainguard and AWS to secure container supply chains at scale, particularly for regulated industries.

• Average software container has 604 known vulnerabilities in underlying components
• Domino needed to secure hundreds of data science container images while maintaining deployment velocity
• Chainguard provides hardened, production-ready container images built from source and continuously updated
• Solution deployed on AWS GovCloud (US) with multi-layered security scanning and compliance automation
• Architecture uses EKS, VPC segmentation, EFS, S3, and ECR for secure containerized workloads
• 95% reduction in critical vulnerabilities achieved post-implementation
• 50% faster security reviews through automated compliance reporting and attestation
• 40% improvement in deployment velocity with streamlined security processes
• Zero security incidents after implementation

Domino Data Lab successfully eliminated the traditional trade-off between container security and development velocity by combining Chainguard's supply chain controls with AWS infrastructure, delivering measurable security and compliance improvements.