Lineaje Gold Open Source (GOS) is an enterprise-grade solution that replaces vulnerable open-source components with fixed, transparent versions. GOS maintains a vetted, safe and registry of secure open-source packages and images. It integrates directly into build and dev environments to automate component replacement, and provides provenance, SLA-backed support and compatibility. It also enables organizations to set policies around open-source licenses, geo-provenance, provenance, code quality and security posture using more than 100 attributes tracked by Lineaje.
The catalog size consists of over 3 million production-ready Gold and Premium Open Source packages and provides access to a comprehensive library of over 3,000+ production-ready OCI compliant Gold Open Source container images that are pre-vetted, hardened, and free of critical vulnerabilities, complete with full SBOMs and attestations. Every package and image is cryptographically signed to provide an immutable guarantee of its authenticity and integrity.
GOS includes hardened and compliance-Ready Images. Lineaje uses AI to create hardened images that are minimal, security-enhanced versions of standard container images. They are created by removing non-essential packages, applying security patches, disabling unnecessary services, and configuring strict file permissions and user access controls.
Compliance-ready images are created to meet specific compliance standards required by regulatory or industry frameworks, such as FIPS , PCI DSS, or HIPAA.
Supported languages include npm, Maven, PyPI (Python), and Go, allowing diverse development teams to build with secure components.
Supported base images include hardened, vulnerability-free base images, including popular minimal distributions like Alpine, Debian, Ubuntu, Suse, RedHat, AmazonLinux, Amazon Corretto.
Supported application images include Nginx, Redis, Postgres, WordPress, kubectl, k3s.
Integrations include Jfrog Artifactory, Sonatype Nexus and Cloudsmith.
Highlights
On Demand Gold Package Creation: Request a Gold version of any open-source package not already in the curated catalog. Lineaje uses AI to vet, secure, attest, and rebuild the requested package and its dependencies into a vulnerability free, compatible version.
On Demand Gold Image and App-Aware Image Creation: Request the creation of a Gold Open Source Image for any publicly available image. Lineaje uses AI to automatically generate vulnerability-free version of the input image, which is then added to the GOS catalog.
Premium Gold Fixes and Backports: Premium Gold service addresses unfixed or unmaintained OSS risks. Lineaje will create fixes for vulnerabilities that have no official fix (or backport fixes to older versions for compatibility) and provide those as premium Gold package updates.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing offers two pricing options based on project volume. The Number of Projects dimension charges per 100 projects you create, so your cost scales with usage as your project count grows. The Unlimited Projects dimension covers the OSM Global Enterprise Edition and lets you create any number of projects for a set price. You pick the option that matches your expected scale: pay in blocks of 100 projects, or choose the flat unlimited plan. Both are billed under a contract term. The product provides access to vetted open-source packages and images.
Top-of-mind questions for buyers
What counts as one project for the per-100-projects dimension?
A project is a unit of open-source software you create and track within the platform. The Number of Projects dimension bills in blocks of 100 projects created. Once you create up to 100 projects, one block applies. Creating more projects adds another block of 100.
How do the two pricing dimensions differ mechanically for my bill?
The Number of Projects dimension meters your usage in blocks of 100 projects created, so cost rises as you add projects. The Unlimited Projects dimension charges a flat price for the OSM Global Enterprise Edition, with no per-project metering. Flat pricing suits high project volumes; block pricing suits lower, predictable counts.
Do these dimensions combine on one bill, or do I pick one?
You choose one dimension that matches your expected scale. The Number of Projects dimension bills per 100 projects created. The Unlimited Projects dimension covers any number of projects for a set contract price. They represent separate purchasing paths, not charges that add together.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Lineaje SCA360 is a cloud-native, contextual risk assessment tool that unifies all appsec findings with Lineaje software crawling and analysis engines, and scans source code, artifact repositories, and containers.
SBOM360 Hub is the industry first SBOM Exchange for the complex software distribution chain. SBOM360 Hub connects software producers, software consumers, and the software distribution channel to publish, share and use SBOMs and related compliance artifacts privately, collaboratively enabling frictionless sales and software consumption.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.