Repositories list

• edu

  Public
  Docs and Tutorials for Chainguard

  SCSS

  •

  Other

  •112112 forks•9292 stars•00 issues•1111 pull requests•Updated May 1, 2026May 1, 2026

• image-comparison

  Public
  Comparison of Chainguard Images to others

  securitydatacontainers+ 1

  securitydatacontainersno-ghaudit-branch-protections

  HTML

  •

  Apache License 2.0

  •88 forks•2121 stars•00 issues•00 pull requests•Updated May 1, 2026May 1, 2026

• terraform-provider-cosign

  Public

  chainguard-dev/terraform-provider-cosign’s past year of commit activity
  Terraform provider for Sigstore Cosign

  Go

  •

  Mozilla Public License 2.0

  •2121 forks•1212 stars•44 issues•66 pull requests•Updated May 1, 2026May 1, 2026

• malcontent

  Public
  #supply #chain #attack #detection

  macoslinuxbinary+ 3

  macoslinuxbinaryreverse-engineeringmalware-analysisno-ghaudit-default-permissions

  YARA

  •

  Apache License 2.0

  •6060 forks•652652 stars•77 issues•88 pull requests•Updated May 1, 2026May 1, 2026

• vulnerability-scanner-support

  Public
  Resources to help vulnerability scanners

  Go

  •

  Apache License 2.0

  •1717 forks•1313 stars•22 issues•44 pull requests•Updated May 1, 2026May 1, 2026

• stigs

  Public
  HTML

  •

  Apache License 2.0

  •1111 forks•2222 stars•00 issues•22 pull requests•Updated May 1, 2026May 1, 2026

• terraform-provider-oci

  Public
  Terraform provider to perform OCI image operations

  terraformocicontainer-registry+ 1

  terraformocicontainer-registrycontainer-image

  Go

  •

  Mozilla Public License 2.0

  •2020 forks•1414 stars•66 issues•55 pull requests•Updated Apr 30, 2026Apr 30, 2026

• terraform-provider-apko

  Public
  buildterraformterraform-provider+ 1

  buildterraformterraform-providercontainer-image

  Go

  •

  Mozilla Public License 2.0

  •3232 forks•1919 stars•1010 issues•99 pull requests•Updated Apr 30, 2026Apr 30, 2026

• digestabot

  Public
  A Github Action to automatically update digests for container images.

  Shell

  •

  Apache License 2.0

  •2626 forks•8888 stars•44 issues•11 pull request•Updated Apr 30, 2026Apr 30, 2026

• homebrew-tap

  Public
  Chainguard Homebrew Tap

  homebrewtaphomebrew-formula+ 3

  homebrewtaphomebrew-formulahomebrew-tapchainguardno-ghaudit-branch-protections

  Ruby

  •

  Apache License 2.0

  •1212 forks•55 stars•00 issues•11 pull request•Updated Apr 30, 2026Apr 30, 2026

• omnibump

  Public
  Universal declarative depenency bump tool

  gogradlemaven+ 1

  gogradlemavencargo

  Go

  •

  Apache License 2.0

  •55 forks•22 stars•00 issues•88 pull requests•Updated Apr 30, 2026Apr 30, 2026

• actions

  Public
  A collection of reusable Github Actions workflows.

  TypeScript

  •

  Apache License 2.0

  •8080 forks•167167 stars•1818 issues•33 pull requests•Updated Apr 30, 2026Apr 30, 2026

• terraform-publisher-apko

  Public
  An experimental module for publishing images with tf-apko

  HCL

  •

  Apache License 2.0

  •1515 forks•77 stars•11 issue•77 pull requests•Updated Apr 30, 2026Apr 30, 2026

• policy-catalog

  Public
  Go

  •

  Apache License 2.0

  •1010 forks•2020 stars•22 issues•1212 pull requests•Updated Apr 30, 2026Apr 30, 2026

• go-pkgconfig

  Public
  Go package for wrangling pkg-config data

  Go

  •

  Apache License 2.0

  •66 forks•22 stars•00 issues•22 pull requests•Updated Apr 30, 2026Apr 30, 2026

• yam

  Public
  A sweet little formatter for YAML

  Go

  •

  Apache License 2.0

  •1919 forks•3434 stars•77 issues•22 pull requests•Updated Apr 29, 2026Apr 29, 2026

• courses-theme

  Public
  JavaScript

  •33 forks•00 stars•00 issues•44 pull requests•Updated Apr 29, 2026Apr 29, 2026

• apko

  Public
  Build OCI images from APK packages directly without Dockerfile

  dockercontainersoci

  dockercontainersoci

  Go

  •

  Apache License 2.0

  •213213 forks•1.6k1.6k stars•8787 issues•5454 pull requests•Updated Apr 29, 2026Apr 29, 2026

• rules_apko

  Public
  Bazel rules for apko

  apkbazelbazel-rules+ 1

  apkbazelbazel-rulesno-ghaudit-default-permissions

  Starlark

  •

  Apache License 2.0

  •3535 forks•3535 stars•33 issues•22 pull requests•Updated Apr 29, 2026Apr 29, 2026

• .github

  Public
  Default files to be used for any public repository under the chainguard-dev organization.

  Apache License 2.0

  •3030 forks•33 stars•00 issues•33 pull requests•Updated Apr 29, 2026Apr 29, 2026

• bazel-central-registry

  Public
  The central registry of Bazel modules for the Bzlmod external dependency system.

  no-ghaudit-branch-protections

  no-ghaudit-branch-protections

  Starlark

  •

  Apache License 2.0

  •746746 forks•00 stars•00 issues•00 pull requests•Updated Apr 29, 2026Apr 29, 2026

• tw

  Public
  Go

  •3535 forks•11 star•66 issues•1515 pull requests•Updated Apr 29, 2026Apr 29, 2026

• terraform-provider-imagetest

  Public
  Go

  •

  Mozilla Public License 2.0

  •3636 forks•55 stars•33 issues•1818 pull requests•Updated Apr 29, 2026Apr 29, 2026

• terraform-provider-helm

  Public
  Go

  •

  Apache License 2.0

  •88 forks•00 stars•00 issues•66 pull requests•Updated Apr 28, 2026Apr 28, 2026

• terraform-provider-chainguard

  Public
  Go

  •

  Apache License 2.0

  •3030 forks•11 star•11 issue•22 pull requests•Updated Apr 28, 2026Apr 28, 2026

• melange

  Public
  build APKs from source code

  Go

  •

  Apache License 2.0

  •169169 forks•590590 stars•166166 issues•8080 pull requests•Updated Apr 28, 2026Apr 28, 2026

• cargobump

  Public
  Rust tool to declaratively bump dependencies using cargo

  Go

  •

  Apache License 2.0

  •1111 forks•33 stars•00 issues•00 pull requests•Updated Apr 28, 2026Apr 28, 2026

• incert

  Public
  Add CA certificates into containers

  golangcontainerca-certificates

  golangcontainerca-certificates

  Go

  •

  Apache License 2.0

  •2525 forks•168168 stars•66 issues•00 pull requests•Updated Apr 28, 2026Apr 28, 2026

• go-grpc-kit

  Public
  Utility methods for gRPC.

  Go

  •

  Apache License 2.0

  •1616 forks•1111 stars•00 issues•99 pull requests•Updated Apr 27, 2026Apr 27, 2026

• gobump

  Public
  Go tool to declaratively bump dependencies.

  Go

  •

  Apache License 2.0

  •1717 forks•1212 stars•44 issues•77 pull requests•Updated Apr 27, 2026Apr 27, 2026