Repositories list

• image-comparison

  Public

  chainguard-dev/image-comparison’s past year of commit activity
  Comparison of Chainguard Images to others

  securitydatacontainers+ 1no-ghaudit-branch-protections

  HTML

  •

  Apache License 2.0

  •6•20•0•0•Updated Dec 29, 2025Dec 29, 2025

• malcontent

  Public
  #supply #chain #attack #detection

  macoslinuxbinary+ 3reverse-engineeringmalware-analysisno-ghaudit-default-permissions

  YARA

  •

  Apache License 2.0

  •59•635•7•2•Updated Dec 29, 2025Dec 29, 2025

• test-remediation-packages

  Public
  Wolfi package repository for testing CVE fixes

  Makefile

  •5•0•4•12•Updated Dec 29, 2025Dec 29, 2025

• melange

  Public

  chainguard-dev/melange’s past year of commit activity
  build APKs from source code

  Go

  •

  Apache License 2.0

  •160•543•162•74•Updated Dec 29, 2025Dec 29, 2025

• digestabot-examples

  Public

  chainguard-dev/digestabot-examples’s past year of commit activity
  Examples of Github Actions workflows that extend the functionality of digestabot.

  Dockerfile

  •

  Apache License 2.0

  •3•0•0•7•Updated Dec 28, 2025Dec 28, 2025

• edu

  Public

  chainguard-dev/edu’s past year of commit activity
  Docs and Tutorials for Chainguard

  SCSS

  •

  Other

  •104•87•19•15•Updated Dec 27, 2025Dec 27, 2025

• terraform-provider-apko

  Public

  chainguard-dev/terraform-provider-apko’s past year of commit activity
  buildterraformterraform-provider+ 1container-image

  Go

  •

  Mozilla Public License 2.0

  •28•18•10•2•Updated Dec 23, 2025Dec 23, 2025

• terraform-provider-imagetest

  Public
  Go

  •

  Mozilla Public License 2.0

  •27•5•3•5•Updated Dec 23, 2025Dec 23, 2025

• go-grpc-kit

  Public
  Utility methods for gRPC.

  Go

  •

  Apache License 2.0

  •16•11•1•16•Updated Dec 22, 2025Dec 22, 2025

• gobump

  Public
  Go tool to declaratively bump dependencies.

  Go

  •

  Apache License 2.0

  •17•11•4•8•Updated Dec 22, 2025Dec 22, 2025

• courses-theme

  Public
  JavaScript

  •2•0•0•0•Updated Dec 22, 2025Dec 22, 2025

• terraform-provider-helm

  Public
  Go

  •

  Apache License 2.0

  •4•0•0•0•Updated Dec 22, 2025Dec 22, 2025

• tw

  Public
  Go

  •26•0•4•12•Updated Dec 22, 2025Dec 22, 2025

• bazel-central-registry

  Public
  The central registry of Bazel modules for the Bzlmod external dependency system.

  no-ghaudit-branch-protections

  Starlark

  •

  Apache License 2.0

  •629•0•0•0•Updated Dec 21, 2025Dec 21, 2025

• rules_apko

  Public

  chainguard-dev/rules_apko’s past year of commit activity
  Bazel rules for apko

  apkbazelbazel-rules+ 1no-ghaudit-default-permissions

  Starlark

  •

  Apache License 2.0

  •31•32•3•1•Updated Dec 21, 2025Dec 21, 2025

• vulnerability-scanner-support

  Public
  Resources to help vulnerability scanners

  Go

  •

  Apache License 2.0

  •10•11•0•3•Updated Dec 21, 2025Dec 21, 2025

• cookbook

  Public
  Recipes for interacting with Chainguard and other resources

  Shell

  •

  Apache License 2.0

  •9•9•1•1•Updated Dec 19, 2025Dec 19, 2025

• terraform-infra-common

  Public

  chainguard-dev/terraform-infra-common’s past year of commit activity
  A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

  Go

  •

  Apache License 2.0

  •42•28•22•0•Updated Dec 19, 2025Dec 19, 2025

• apko

  Public
  Build OCI images from APK packages directly without Dockerfile

  dockercontainersoci

  Go

  •

  Apache License 2.0

  •192•1.5k•91•46•Updated Dec 19, 2025Dec 19, 2025

• cargobump

  Public
  Rust tool to declaratively bump dependencies using cargo

  Go

  •

  Apache License 2.0

  •7•3•0•0•Updated Dec 19, 2025Dec 19, 2025

• digestabot

  Public
  A Github Action to automatically update digests for container images.

  Shell

  •

  Apache License 2.0

  •21•83•8•2•Updated Dec 19, 2025Dec 19, 2025

• ghscan

  Public
  Scan GitHub Actions Workflow logs for IOCs

  iocworkflowscanner+ 9detectionlogssupply-chainactionssecretsgithub-actionssupply-chain-security+ 2

  Go

  •

  Apache License 2.0

  •2•16•0•1•Updated Dec 18, 2025Dec 18, 2025

• exitdir

  Public
  Common packages.

  Go

  •

  Apache License 2.0

  •5•8•0•0•Updated Dec 18, 2025Dec 18, 2025

• terraform-provider-chainguard

  Public
  Go

  •

  Apache License 2.0

  •24•2•4•2•Updated Dec 18, 2025Dec 18, 2025

• homebrew-tap

  Public
  Chainguard Homebrew Tap

  homebrewtaphomebrew-formula+ 3homebrew-tapchainguardno-ghaudit-branch-protections

  Ruby

  •

  Apache License 2.0

  •11•5•0•1•Updated Dec 18, 2025Dec 18, 2025

• platform-examples

  Public
  Example apps demonstrating Chainguard platform integrations

  apiscloudeventschainguard

  Go

  •

  Apache License 2.0

  •24•13•1•9•Updated Dec 18, 2025Dec 18, 2025

• auto-deploy-demo

  Public
  MIT License

  •5•3•1•0•Updated Dec 18, 2025Dec 18, 2025

• ghaudit

  Public
  A simple CLI tool for checking GitHub organization and repository administration policies.

  Go

  •

  Apache License 2.0

  •7•9•3•1•Updated Dec 18, 2025Dec 18, 2025

• malcontent-action

  Public
  Run malcontent security scanner on pull requests to detect malicious behavior changes between commits

  JavaScript

  •3•10•0•2•Updated Dec 17, 2025Dec 17, 2025

• terraform-provider-cosign

  Public

  chainguard-dev/terraform-provider-cosign’s past year of commit activity
  Terraform provider for Sigstore Cosign

  Go

  •

  Mozilla Public License 2.0

  •16•12•4•4•Updated Dec 17, 2025Dec 17, 2025