Skip to content
@chainguard-dev

Chainguard

Making the software supply chain secure by default.

Pinned Loading

  1. apko apko Public

    Build OCI images from APK packages directly without Dockerfile

    Go 1.6k 211

  2. actions actions Public

    A collection of reusable Github Actions workflows.

    TypeScript 159 78

  3. cosign-ecs-verify cosign-ecs-verify Public archive

    Lambda function for verifying signed images in ECS

    Go 37 9

Repositories

Showing 10 of 112 repositories
  • rules_apko Public

    Bazel rules for apko

    chainguard-dev/rules_apko’s past year of commit activity
    Starlark 34 Apache-2.0 33 3 2 Updated Mar 11, 2026
  • stigs Public
    chainguard-dev/stigs’s past year of commit activity
    HTML 20 Apache-2.0 9 0 1 Updated Mar 11, 2026
  • image-comparison Public

    Comparison of Chainguard Images to others

    chainguard-dev/image-comparison’s past year of commit activity
    HTML 21 Apache-2.0 7 0 0 Updated Mar 11, 2026
  • chainguard-dev/terraform-provider-apko’s past year of commit activity
    Go 18 MPL-2.0 30 10 8 Updated Mar 11, 2026
  • vulnerability-scanner-support Public

    Resources to help vulnerability scanners

    chainguard-dev/vulnerability-scanner-support’s past year of commit activity
    Go 11 Apache-2.0 13 1 4 Updated Mar 11, 2026
  • melange Public

    build APKs from source code

    chainguard-dev/melange’s past year of commit activity
    Go 577 Apache-2.0 168 161 (1 issue needs help) 80 Updated Mar 10, 2026
  • terraform-provider-oci Public

    Terraform provider to perform OCI image operations

    chainguard-dev/terraform-provider-oci’s past year of commit activity
    Go 14 MPL-2.0 19 6 6 Updated Mar 10, 2026
  • malcontent Public

    #supply #chain #attack #detection

    chainguard-dev/malcontent’s past year of commit activity
    YARA 646 Apache-2.0 60 7 (1 issue needs help) 0 Updated Mar 10, 2026
  • apko Public

    Build OCI images from APK packages directly without Dockerfile

    chainguard-dev/apko’s past year of commit activity
    Go 1,564 Apache-2.0 211 87 57 Updated Mar 10, 2026
  • omnibump Public

    Universal declarative depenency bump tool

    chainguard-dev/omnibump’s past year of commit activity
    Go 1 Apache-2.0 3 0 2 Updated Mar 10, 2026