--- title: CNCF Announces Graduation of Cloud Native Buildpacks,... description: Cloud Native Buildpacks (CNB) has officially graduated from the Cloud Native Computing Foundation (CNCF), marking its maturity as a production-ready,... canonical: https://daily.dev/posts/cncf-announces-graduation-of-cloud-native-buildpacks-advancing-the-standard-for-container-builds-osbp0kt1u twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: CNCF Announces Graduation of Cloud Native Buildpacks, Advancing the Standard for Container Builds | daily.dev og:description: Cloud Native Buildpacks (CNB) has officially graduated from the Cloud Native Computing Foundation (CNCF), marking its maturity as a production-ready,... og:url: https://daily.dev/posts/cncf-announces-graduation-of-cloud-native-buildpacks-advancing-the-standard-for-container-builds-osbp0kt1u og:image: https://api.daily.dev/og/posts/osBP0KT1U.png og:image:alt: CNCF Announces Graduation of Cloud Native Buildpacks, Advancing the Standard for Container Builds og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # CNCF Announces Graduation of Cloud Native Buildpacks, Advancing the Standard for Container Builds **[CNCF](https://daily.dev/sources/cncf)** · 8 min read · 0 upvotes · 0 comments ## Summary Cloud Native Buildpacks (CNB) has officially graduated from the Cloud Native Computing Foundation (CNCF), marking its maturity as a production-ready, vendor-neutral open source toolkit for building OCI-compliant container images directly from application source code. The project automatically detects languages (Java, Python, Go, Node.js, Ruby), handles dependency installation, and manages image layering without manual Dockerfiles. It has grown to 535 contributors across 164 organizations, with adopters including Bloomberg, DigitalOcean, GitLab, Google, HashiCorp, Spring, and VMware. To achieve graduation, the project completed a third-party security audit with Quarkslab/OSTIF and earned an OpenSSF Best Practices badge. In enterprise deployments spanning 500+ applications, teams reduced vulnerability resolution times from weeks to hours via centralized buildpack patches. The roadmap includes expanded OCI Artifacts support, stronger SBOM workflows, and WebAssembly compatibility. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What did Cloud Native Buildpacks have to do to graduate from the CNCF? To reach CNCF graduation, Cloud Native Buildpacks completed a third-party security review conducted by Quarkslab and the Open Source Technology Improvement Fund (OSTIF), received an OpenSSF Best Practices passing badge, adopted the CNCF Code of Conduct, and sustained a broad contributor community across many organizations. _Teams evaluating CNCF-graduated projects for their build pipelines track security and governance milestones like these on daily.dev._ ### How many contributors and adopters does Cloud Native Buildpacks have? Cloud Native Buildpacks has grown to 535 contributors across 164 organizations, with more than 20 documented adopters including DigitalOcean, GitLab, Google, HashiCorp, Spring, and VMware by Broadcom. Bloomberg and Heroku by Salesforce are among the most active contributors, participating in code, reviews, and pull request activity. _Platform engineers choosing a container build standard can follow CNB adoption and ecosystem growth on daily.dev._ ### What is on the Cloud Native Buildpacks roadmap after CNCF graduation? The Cloud Native Buildpacks roadmap focuses on three areas: expanding support for OCI Artifacts, strengthening software bill of materials (SBOM) workflows, and enhancing compatibility with next-generation workload formats including WebAssembly. These priorities reflect the project's push toward broader supply chain security and emerging runtime support. _Developers building on CNB can stay ahead of breaking changes and new capabilities on daily.dev._ ## Similar posts on daily.dev - [Behind the Scenes: How Maintaining Cloud Native Buildpacks Powers Platforms Like Heroku](https://daily.dev/posts/behind-the-scenes-how-maintaining-cloud-native-buildpacks-powers-platforms-like-heroku-bp1iimdub) · Heroku · 0 upvotes · 0 comments - [How buildpacks help enterprises finally operate container security controls at scale](https://daily.dev/posts/how-buildpacks-help-enterprises-finally-operate-container-security-controls-at-scale-eoev0kpfp) · The New Stack · 0 upvotes · 0 comments - [Kubeflow Has Graduated from CNCF](https://daily.dev/posts/kubeflow-has-graduated-from-cncf-wwjcdqj76) · Kubeflow · 3 upvotes · 1 comments --- Tags: [#containers](https://daily.dev/tags/containers), [#cncf](https://daily.dev/tags/cncf) [View this post on daily.dev](https://daily.dev/posts/cncf-announces-graduation-of-cloud-native-buildpacks-advancing-the-standard-for-container-builds-osbp0kt1u) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"CNCF Announces Graduation of Cloud Native Buildpacks, Advancing the Standard for Container Builds","url":"https://daily.dev/posts/cncf-announces-graduation-of-cloud-native-buildpacks-advancing-the-standard-for-container-builds-osbp0kt1u","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cncf-announces-graduation-of-cloud-native-buildpacks-advancing-the-standard-for-container-builds-osbp0kt1u"},"datePublished":"2026-08-11T16:04:38.808Z","dateModified":"2026-08-11T16:06:10.832Z","description":"Cloud Native Buildpacks (CNB) has officially graduated from the Cloud Native Computing Foundation (CNCF), marking its maturity as a production-ready,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/61431945c084e72b6919cc245756d66b?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/61431945c084e72b6919cc245756d66b?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"CNCF","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"CNCF","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/55536a03390741eebd96d2f9b74d2d8d","url":"https://daily.dev/sources/cncf"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cncf-announces-graduation-of-cloud-native-buildpacks-advancing-the-standard-for-container-builds-osbp0kt1u","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"containers,cncf","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"CNCF","item":"https://daily.dev/sources/cncf"},{"@type":"ListItem","position":3,"name":"CNCF Announces Graduation of Cloud Native Buildpacks, Advancing the Standard for Container Builds"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/cncf-announces-graduation-of-cloud-native-buildpacks-advancing-the-standard-for-container-builds-osbp0kt1u#faq","mainEntity":[{"@type":"Question","name":"What did Cloud Native Buildpacks have to do to graduate from the CNCF?","acceptedAnswer":{"@type":"Answer","text":"To reach CNCF graduation, Cloud Native Buildpacks completed a third-party security review conducted by Quarkslab and the Open Source Technology Improvement Fund (OSTIF), received an OpenSSF Best Practices passing badge, adopted the CNCF Code of Conduct, and sustained a broad contributor community across many organizations. Teams evaluating CNCF-graduated projects for their build pipelines track security and governance milestones like these on daily.dev."}},{"@type":"Question","name":"How many contributors and adopters does Cloud Native Buildpacks have?","acceptedAnswer":{"@type":"Answer","text":"Cloud Native Buildpacks has grown to 535 contributors across 164 organizations, with more than 20 documented adopters including DigitalOcean, GitLab, Google, HashiCorp, Spring, and VMware by Broadcom. Bloomberg and Heroku by Salesforce are among the most active contributors, participating in code, reviews, and pull request activity. Platform engineers choosing a container build standard can follow CNB adoption and ecosystem growth on daily.dev."}},{"@type":"Question","name":"What is on the Cloud Native Buildpacks roadmap after CNCF graduation?","acceptedAnswer":{"@type":"Answer","text":"The Cloud Native Buildpacks roadmap focuses on three areas: expanding support for OCI Artifacts, strengthening software bill of materials (SBOM) workflows, and enhancing compatibility with next-generation workload formats including WebAssembly. These priorities reflect the project's push toward broader supply chain security and emerging runtime support. Developers building on CNB can stay ahead of breaking changes and new capabilities on daily.dev."}}]} ```