Repositories list

• apko

  Public
  Build OCI images from APK packages directly without Dockerfile

  dockercontainersoci

  dockercontainersoci

  Go

  •

  Apache License 2.0

  •213213 forks•1.6k1.6k stars•8787 issues•5050 pull requests•Updated Apr 18, 2026Apr 18, 2026

• image-comparison

  Public

  chainguard-dev/image-comparison’s past year of commit activity
  Comparison of Chainguard Images to others

  securitydatacontainers+ 1

  securitydatacontainersno-ghaudit-branch-protections

  HTML

  •

  Apache License 2.0

  •88 forks•2121 stars•00 issues•00 pull requests•Updated Apr 18, 2026Apr 18, 2026

• vulnerability-scanner-support

  Public

  chainguard-dev/vulnerability-scanner-support’s past year of commit activity
  Resources to help vulnerability scanners

  Go

  •

  Apache License 2.0

  •1515 forks•1212 stars•11 issue•55 pull requests•Updated Apr 18, 2026Apr 18, 2026

• sdk

  Public

  chainguard-dev/sdk’s past year of commit activity
  Public SDK for integrating with the Chainguard platform

  audit

  audit

  Go

  •

  Apache License 2.0

  •2424 forks•22 stars•11 issue•00 pull requests•Updated Apr 18, 2026Apr 18, 2026

• edu

  Public

  chainguard-dev/edu’s past year of commit activity
  Docs and Tutorials for Chainguard

  SCSS

  •

  Other

  •110110 forks•9292 stars•11 issue•1212 pull requests•Updated Apr 18, 2026Apr 18, 2026

• terraform-provider-chainguard

  Public

  chainguard-dev/terraform-provider-chainguard’s past year of commit activity
  Go

  •

  Apache License 2.0

  •2929 forks•11 star•11 issue•44 pull requests•Updated Apr 18, 2026Apr 18, 2026

• terraform-provider-helm

  Public

  chainguard-dev/terraform-provider-helm’s past year of commit activity
  Go

  •

  Apache License 2.0

  •77 forks•00 stars•00 issues•11 pull request•Updated Apr 17, 2026Apr 17, 2026

• terraform-provider-imagetest

  Public

  chainguard-dev/terraform-provider-imagetest’s past year of commit activity
  Go

  •

  Mozilla Public License 2.0

  •3434 forks•55 stars•33 issues•99 pull requests•Updated Apr 17, 2026Apr 17, 2026

• terraform-provider-apko

  Public

  chainguard-dev/terraform-provider-apko’s past year of commit activity
  buildterraformterraform-provider+ 1

  buildterraformterraform-providercontainer-image

  Go

  •

  Mozilla Public License 2.0

  •3030 forks•1919 stars•1010 issues•88 pull requests•Updated Apr 17, 2026Apr 17, 2026

• melange

  Public

  chainguard-dev/melange’s past year of commit activity
  build APKs from source code

  Go

  •

  Apache License 2.0

  •168168 forks•587587 stars•166166 issues•7878 pull requests•Updated Apr 17, 2026Apr 17, 2026

• stigs

  Public

  chainguard-dev/stigs’s past year of commit activity
  HTML

  •

  Apache License 2.0

  •1111 forks•2121 stars•00 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• digestabot

  Public

  chainguard-dev/digestabot’s past year of commit activity
  A Github Action to automatically update digests for container images.

  Shell

  •

  Apache License 2.0

  •2626 forks•8787 stars•55 issues•55 pull requests•Updated Apr 17, 2026Apr 17, 2026

• homebrew-tap

  Public

  chainguard-dev/homebrew-tap’s past year of commit activity
  Chainguard Homebrew Tap

  homebrewtaphomebrew-formula+ 3

  homebrewtaphomebrew-formulahomebrew-tapchainguardno-ghaudit-branch-protections

  Ruby

  •

  Apache License 2.0

  •1212 forks•55 stars•00 issues•11 pull request•Updated Apr 17, 2026Apr 17, 2026

• terraform-infra-common

  Public

  chainguard-dev/terraform-infra-common’s past year of commit activity
  A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

  HCL

  •

  Apache License 2.0

  •4444 forks•2828 stars•2222 issues•11 pull request•Updated Apr 17, 2026Apr 17, 2026

• terraform-provider-cosign

  Public
  Terraform provider for Sigstore Cosign

  Go

  •

  Mozilla Public License 2.0

  •1919 forks•1212 stars•44 issues•77 pull requests•Updated Apr 17, 2026Apr 17, 2026

• malcontent

  Public

  chainguard-dev/malcontent’s past year of commit activity
  #supply #chain #attack #detection

  macoslinuxbinary+ 3

  macoslinuxbinaryreverse-engineeringmalware-analysisno-ghaudit-default-permissions

  YARA

  •

  Apache License 2.0

  •6060 forks•650650 stars•77 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• courses-theme

  Public

  chainguard-dev/courses-theme’s past year of commit activity
  JavaScript

  •33 forks•00 stars•00 issues•22 pull requests•Updated Apr 17, 2026Apr 17, 2026

• test-remediation-packages

  Public

  chainguard-dev/test-remediation-packages’s past year of commit activity
  Wolfi package repository for testing CVE fixes

  Makefile

  •77 forks•00 stars•55 issues•00 pull requests•Updated Apr 16, 2026Apr 16, 2026

• omnibump

  Public
  Universal declarative depenency bump tool

  gogradlemaven+ 1

  gogradlemavencargo

  Go

  •

  Apache License 2.0

  •55 forks•22 stars•00 issues•88 pull requests•Updated Apr 16, 2026Apr 16, 2026

• yam

  Public
  A sweet little formatter for YAML

  Go

  •

  Apache License 2.0

  •1919 forks•3434 stars•77 issues•22 pull requests•Updated Apr 16, 2026Apr 16, 2026

• policy-catalog

  Public
  Go

  •

  Apache License 2.0

  •1010 forks•2020 stars•22 issues•1212 pull requests•Updated Apr 16, 2026Apr 16, 2026

• actions

  Public
  A collection of reusable Github Actions workflows.

  TypeScript

  •

  Apache License 2.0

  •7878 forks•164164 stars•1818 issues•22 pull requests•Updated Apr 16, 2026Apr 16, 2026

• go-pkgconfig

  Public
  Go package for wrangling pkg-config data

  Go

  •

  Apache License 2.0

  •66 forks•22 stars•00 issues•22 pull requests•Updated Apr 16, 2026Apr 16, 2026

• ghaudit

  Public
  A simple CLI tool for checking GitHub organization and repository administration policies.

  Go

  •

  Apache License 2.0

  •88 forks•99 stars•33 issues•22 pull requests•Updated Apr 16, 2026Apr 16, 2026

• ghscan

  Public

  chainguard-dev/ghscan’s past year of commit activity
  Scan GitHub Actions Workflow logs for IOCs

  iocworkflowscanner+ 9

  iocworkflowscannerdetectionlogssupply-chainactionssecretsgithub-actionssupply-chain-security+ 2

  Go

  •

  Apache License 2.0

  •33 forks•1717 stars•00 issues•00 pull requests•Updated Apr 16, 2026Apr 16, 2026

• malcontent-action

  Public

  chainguard-dev/malcontent-action’s past year of commit activity
  Run malcontent security scanner on pull requests to detect malicious behavior changes between commits

  JavaScript

  •88 forks•1010 stars•00 issues•22 pull requests•Updated Apr 15, 2026Apr 15, 2026

• .github

  Public
  Default files to be used for any public repository under the chainguard-dev organization.

  Apache License 2.0

  •2929 forks•33 stars•00 issues•44 pull requests•Updated Apr 15, 2026Apr 15, 2026

• rules_apko

  Public

  chainguard-dev/rules_apko’s past year of commit activity
  Bazel rules for apko

  apkbazelbazel-rules+ 1

  apkbazelbazel-rulesno-ghaudit-default-permissions

  Starlark

  •

  Apache License 2.0

  •3434 forks•3535 stars•22 issues•66 pull requests•Updated Apr 14, 2026Apr 14, 2026

• terraform-provider-oci

  Public
  Terraform provider to perform OCI image operations

  terraformocicontainer-registry+ 1

  terraformocicontainer-registrycontainer-image

  Go

  •

  Mozilla Public License 2.0

  •2020 forks•1414 stars•66 issues•11 pull request•Updated Apr 14, 2026Apr 14, 2026

• cargobump

  Public
  Rust tool to declaratively bump dependencies using cargo

  Go

  •

  Apache License 2.0

  •99 forks•33 stars•00 issues•22 pull requests•Updated Apr 14, 2026Apr 14, 2026