chainguard-libraries-java

This repository contains tools and example projects for Chainguard Libraries for Java.

Available directories:

• cve-2024-38819 - Spring Framework application to showcase how to fix CVE-2024-38819
• cve-2026-22732 - Spring Security application to showcase how to fix CVE-2026-22732
• tools - collection of scripts and example configuration files

Prerequisites

• A Chainguard account with a Java libraries entitlement
• chainctl installed and authenticated
• JDK 17 or later
• Apache Maven — required only for tools/download-dependency-tree-maven.sh; the demo projects use the bundled Maven wrapper (./mvnw) and need no separate install

Getting started

Configure access to Chainguard Libraries, either directly or through a repository manager, using the example settings and commands in tools. Then follow each demo's README to run it.

Resources

• Chainguard Libraries product page
• Chainguard Libraries documentation
• Chainguard Libraries for Java documentation
• Chainguard learning labs with more demos

Videos

• Chainguard Libraries fallback to upstream and policies
• Chainguard Libraries for Java - CVE remediation and browsing
• Chainguard Libraries for Java - CVE remediation example projects