Skip to content
@chainguard-dev

Chainguard

Making the software supply chain secure by default.

Pinned Loading

  1. apko apko Public

    Build OCI images from APK packages directly without Dockerfile

    Go 1.5k 194

  2. actions actions Public

    A collection of reusable Github Actions workflows.

    Go 154 72

  3. cosign-ecs-verify cosign-ecs-verify Public archive

    Lambda function for verifying signed images in ECS

    Go 36 8

Repositories

Showing 10 of 147 repositories
  • apko Public

    Build OCI images from APK packages directly without Dockerfile

    chainguard-dev/apko’s past year of commit activity
    Go 1,502 Apache-2.0 194 90 41 Updated Jan 13, 2026
  • rules_apko Public

    Bazel rules for apko

    chainguard-dev/rules_apko’s past year of commit activity
    Starlark 32 Apache-2.0 31 3 0 Updated Jan 13, 2026
  • melange Public

    build APKs from source code

    chainguard-dev/melange’s past year of commit activity
    Go 551 Apache-2.0 160 162 (1 issue needs help) 74 Updated Jan 13, 2026
  • image-comparison Public

    Comparison of Chainguard Images to others

    chainguard-dev/image-comparison’s past year of commit activity
    HTML 20 Apache-2.0 6 0 0 Updated Jan 13, 2026
  • actions Public

    A collection of reusable Github Actions workflows.

    chainguard-dev/actions’s past year of commit activity
    Go 154 Apache-2.0 72 18 2 Updated Jan 13, 2026
  • terraform-infra-common Public

    A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

    chainguard-dev/terraform-infra-common’s past year of commit activity
    Go 28 Apache-2.0 42 22 0 Updated Jan 13, 2026
  • malcontent Public

    #supply #chain #attack #detection

    chainguard-dev/malcontent’s past year of commit activity
    YARA 638 Apache-2.0 59 6 (1 issue needs help) 0 Updated Jan 13, 2026
  • ghscan Public

    Scan GitHub Actions Workflow logs for IOCs

    chainguard-dev/ghscan’s past year of commit activity
    Go 16 Apache-2.0 2 0 1 Updated Jan 13, 2026
  • cargobump Public

    Rust tool to declaratively bump dependencies using cargo

    chainguard-dev/cargobump’s past year of commit activity
    Go 3 Apache-2.0 7 0 0 Updated Jan 13, 2026
  • test-remediation-packages Public

    Wolfi package repository for testing CVE fixes

    chainguard-dev/test-remediation-packages’s past year of commit activity
    Makefile 0 5 4 21 Updated Jan 13, 2026
View all repositories