Repositories list

• test-remediation-packages

  Public
  Wolfi package repository for testing CVE fixes

  Makefile

  •5•0•5•19•Updated Feb 15, 2026Feb 15, 2026

• image-comparison

  Public
  Comparison of Chainguard Images to others

  securitydatacontainers+ 1no-ghaudit-branch-protections

  HTML

  •

  Apache License 2.0

  •7•21•0•0•Updated Feb 15, 2026Feb 15, 2026

• vulnerability-scanner-support

  Public
  Resources to help vulnerability scanners

  Go

  •

  Apache License 2.0

  •13•11•0•3•Updated Feb 15, 2026Feb 15, 2026

• malcontent

  Public
  #supply #chain #attack #detection

  macoslinuxbinary+ 3reverse-engineeringmalware-analysisno-ghaudit-default-permissions

  YARA

  •

  Apache License 2.0

  •60•643•6•2•Updated Feb 14, 2026Feb 14, 2026

• edu

  Public
  Docs and Tutorials for Chainguard

  SCSS

  •

  Other

  •105•88•27•8•Updated Feb 14, 2026Feb 14, 2026

• homebrew-tap

  Public
  Chainguard Homebrew Tap

  homebrewtaphomebrew-formula+ 3homebrew-tapchainguardno-ghaudit-branch-protections

  Ruby

  •

  Apache License 2.0

  •11•5•0•1•Updated Feb 13, 2026Feb 13, 2026

• actions

  Public
  A collection of reusable Github Actions workflows.

  TypeScript

  •

  Apache License 2.0

  •79•158•18•3•Updated Feb 13, 2026Feb 13, 2026

• malcontent-action

  Public

  chainguard-dev/malcontent-action’s past year of commit activity
  Run malcontent security scanner on pull requests to detect malicious behavior changes between commits

  JavaScript

  •7•10•0•2•Updated Feb 13, 2026Feb 13, 2026

• apko

  Public
  Build OCI images from APK packages directly without Dockerfile

  dockercontainersoci

  Go

  •

  Apache License 2.0

  •202•1.5k•85•47•Updated Feb 13, 2026Feb 13, 2026

• stigs

  Public
  HTML

  •

  Apache License 2.0

  •9•20•0•0•Updated Feb 12, 2026Feb 12, 2026

• tw

  Public
  Go

  •32•0•5•6•Updated Feb 12, 2026Feb 12, 2026

• terraform-infra-common

  Public
  A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

  Go

  •

  Apache License 2.0

  •42•28•22•0•Updated Feb 12, 2026Feb 12, 2026

• terraform-publisher-apko

  Public
  An experimental module for publishing images with tf-apko

  HCL

  •

  Apache License 2.0

  •14•7•1•7•Updated Feb 12, 2026Feb 12, 2026

• ghaudit

  Public
  A simple CLI tool for checking GitHub organization and repository administration policies.

  Go

  •

  Apache License 2.0

  •7•9•3•0•Updated Feb 12, 2026Feb 12, 2026

• terraform-provider-cosign

  Public
  Terraform provider for Sigstore Cosign

  Go

  •

  Mozilla Public License 2.0

  •16•12•4•0•Updated Feb 12, 2026Feb 12, 2026

• yam

  Public
  A sweet little formatter for YAML

  Go

  •

  Apache License 2.0

  •17•34•7•2•Updated Feb 11, 2026Feb 11, 2026

• dfc

  Public
  (D)ocker(F)ile (C)onverter: CLI to convert Dockerfiles to use Chainguard Images and APKs in FROM and RUN lines etc.

  dockerclidockerfile+ 6dockerfilesconverterjsonconvertjqchainguard

  Go

  •

  Apache License 2.0

  •28•98•18•5•Updated Feb 11, 2026Feb 11, 2026

• rules_apko

  Public
  Bazel rules for apko

  apkbazelbazel-rules+ 1no-ghaudit-default-permissions

  Starlark

  •

  Apache License 2.0

  •31•33•3•2•Updated Feb 11, 2026Feb 11, 2026

• terraform-provider-chainguard

  Public
  Go

  •

  Apache License 2.0

  •27•1•5•2•Updated Feb 11, 2026Feb 11, 2026

• terraform-provider-apko

  Public
  buildterraformterraform-provider+ 1container-image

  Go

  •

  Mozilla Public License 2.0

  •30•18•10•1•Updated Feb 11, 2026Feb 11, 2026

• terraform-provider-imagetest

  Public
  Go

  •

  Mozilla Public License 2.0

  •29•5•3•10•Updated Feb 11, 2026Feb 11, 2026

• melange

  Public
  build APKs from source code

  Go

  •

  Apache License 2.0

  •167•561•162•76•Updated Feb 10, 2026Feb 10, 2026

• sdk

  Public
  Public SDK for integrating with the Chainguard platform

  audit

  Go

  •

  Apache License 2.0

  •21•1•1•0•Updated Feb 10, 2026Feb 10, 2026

• cargobump

  Public
  Rust tool to declaratively bump dependencies using cargo

  Go

  •

  Apache License 2.0

  •8•3•0•0•Updated Feb 10, 2026Feb 10, 2026

• setup-chainctl

  Public
  GitHub Action to install chainctl in your workflow

  actionsci-cdgithub-actions+ 1chainguard

  Apache License 2.0

  •11•4•0•0•Updated Feb 10, 2026Feb 10, 2026

• terraform-provider-helm

  Public
  Go

  •

  Apache License 2.0

  •5•0•0•0•Updated Feb 10, 2026Feb 10, 2026

• incert

  Public
  Add CA certificates into containers

  golangcontainerca-certificates

  Go

  •

  Apache License 2.0

  •24•165•6•0•Updated Feb 10, 2026Feb 10, 2026

• terraform-provider-oci

  Public
  Terraform provider to perform OCI image operations

  terraformocicontainer-registry+ 1container-image

  Go

  •

  Mozilla Public License 2.0

  •19•15•6•2•Updated Feb 10, 2026Feb 10, 2026

• .github

  Public
  Default files to be used for any public repository under the chainguard-dev organization.

  Apache License 2.0

  •22•3•0•2•Updated Feb 10, 2026Feb 10, 2026

• exitdir

  Public
  Common packages.

  Go

  •

  Apache License 2.0

  •5•8•0•0•Updated Feb 9, 2026Feb 9, 2026