Repositories list

• melange

  Public

  chainguard-dev/melange’s past year of commit activity
  build APKs from source code

  Go

  •

  Apache License 2.0

  •168•560•162•79•Updated Feb 18, 2026Feb 18, 2026

• terraform-provider-cosign

  Public

  chainguard-dev/terraform-provider-cosign’s past year of commit activity
  Terraform provider for Sigstore Cosign

  Go

  •

  Mozilla Public License 2.0

  •16•12•4•0•Updated Feb 18, 2026Feb 18, 2026

• actions

  Public

  chainguard-dev/actions’s past year of commit activity
  A collection of reusable Github Actions workflows.

  TypeScript

  •

  Apache License 2.0

  •79•159•18•4•Updated Feb 18, 2026Feb 18, 2026

• terraform-provider-apko

  Public

  chainguard-dev/terraform-provider-apko’s past year of commit activity
  buildterraformterraform-provider+ 1container-image

  Go

  •

  Mozilla Public License 2.0

  •30•18•10•1•Updated Feb 18, 2026Feb 18, 2026

• ghaudit

  Public

  chainguard-dev/ghaudit’s past year of commit activity
  A simple CLI tool for checking GitHub organization and repository administration policies.

  Go

  •

  Apache License 2.0

  •7•9•3•0•Updated Feb 18, 2026Feb 18, 2026

• terraform-provider-imagetest

  Public

  chainguard-dev/terraform-provider-imagetest’s past year of commit activity
  Go

  •

  Mozilla Public License 2.0

  •29•5•3•9•Updated Feb 18, 2026Feb 18, 2026

• malcontent

  Public

  chainguard-dev/malcontent’s past year of commit activity
  #supply #chain #attack #detection

  macoslinuxbinary+ 3reverse-engineeringmalware-analysisno-ghaudit-default-permissions

  YARA

  •

  Apache License 2.0

  •60•645•6•1•Updated Feb 18, 2026Feb 18, 2026

• rules_apko

  Public

  chainguard-dev/rules_apko’s past year of commit activity
  Bazel rules for apko

  apkbazelbazel-rules+ 1no-ghaudit-default-permissions

  Starlark

  •

  Apache License 2.0

  •31•33•3•0•Updated Feb 18, 2026Feb 18, 2026

• edu

  Public

  chainguard-dev/edu’s past year of commit activity
  Docs and Tutorials for Chainguard

  SCSS

  •

  Other

  •105•88•29•7•Updated Feb 18, 2026Feb 18, 2026

• stigs

  Public
  HTML

  •

  Apache License 2.0

  •9•20•0•1•Updated Feb 18, 2026Feb 18, 2026

• image-comparison

  Public
  Comparison of Chainguard Images to others

  securitydatacontainers+ 1no-ghaudit-branch-protections

  HTML

  •

  Apache License 2.0

  •7•21•0•0•Updated Feb 18, 2026Feb 18, 2026

• .github

  Public
  Default files to be used for any public repository under the chainguard-dev organization.

  Apache License 2.0

  •22•3•0•3•Updated Feb 18, 2026Feb 18, 2026

• test-remediation-packages

  Public
  Wolfi package repository for testing CVE fixes

  Makefile

  •5•0•5•0•Updated Feb 18, 2026Feb 18, 2026

• homebrew-tap

  Public
  Chainguard Homebrew Tap

  homebrewtaphomebrew-formula+ 3homebrew-tapchainguardno-ghaudit-branch-protections

  Ruby

  •

  Apache License 2.0

  •11•5•0•1•Updated Feb 17, 2026Feb 17, 2026

• cgr-compliance

  Public
  Generate CVE related POA&Ms and FedRAMP KSIs

  nistcompliancefedramp

  0•0•0•0•Updated Feb 17, 2026Feb 17, 2026

• yam

  Public
  A sweet little formatter for YAML

  Go

  •

  Apache License 2.0

  •17•34•7•2•Updated Feb 17, 2026Feb 17, 2026

• tw

  Public
  Go

  •32•0•5•10•Updated Feb 17, 2026Feb 17, 2026

• apko

  Public
  Build OCI images from APK packages directly without Dockerfile

  dockercontainersoci

  Go

  •

  Apache License 2.0

  •203•1.5k•85•43•Updated Feb 17, 2026Feb 17, 2026

• terraform-provider-chainguard

  Public
  Go

  •

  Apache License 2.0

  •27•1•5•2•Updated Feb 17, 2026Feb 17, 2026

• terraform-provider-helm

  Public
  Go

  •

  Apache License 2.0

  •5•0•0•0•Updated Feb 17, 2026Feb 17, 2026

• vulnerability-scanner-support

  Public
  Resources to help vulnerability scanners

  Go

  •

  Apache License 2.0

  •13•11•0•3•Updated Feb 17, 2026Feb 17, 2026

• terraform-provider-oci

  Public

  chainguard-dev/terraform-provider-oci’s past year of commit activity
  Terraform provider to perform OCI image operations

  terraformocicontainer-registry+ 1container-image

  Go

  •

  Mozilla Public License 2.0

  •19•15•6•1•Updated Feb 16, 2026Feb 16, 2026

• exitdir

  Public
  Common packages.

  Go

  •

  Apache License 2.0

  •5•8•0•0•Updated Feb 16, 2026Feb 16, 2026

• terraform-publisher-apko

  Public

  chainguard-dev/terraform-publisher-apko’s past year of commit activity
  An experimental module for publishing images with tf-apko

  HCL

  •

  Apache License 2.0

  •14•7•1•7•Updated Feb 16, 2026Feb 16, 2026

• ghscan

  Public

  chainguard-dev/ghscan’s past year of commit activity
  Scan GitHub Actions Workflow logs for IOCs

  iocworkflowscanner+ 9detectionlogssupply-chainactionssecretsgithub-actionssupply-chain-security+ 2

  Go

  •

  Apache License 2.0

  •2•16•0•2•Updated Feb 16, 2026Feb 16, 2026

• malcontent-action

  Public
  Run malcontent security scanner on pull requests to detect malicious behavior changes between commits

  JavaScript

  •7•10•0•2•Updated Feb 13, 2026Feb 13, 2026

• terraform-infra-common

  Public
  A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

  Go

  •

  Apache License 2.0

  •42•28•22•0•Updated Feb 12, 2026Feb 12, 2026

• dfc

  Public
  (D)ocker(F)ile (C)onverter: CLI to convert Dockerfiles to use Chainguard Images and APKs in FROM and RUN lines etc.

  dockerclidockerfile+ 6dockerfilesconverterjsonconvertjqchainguard

  Go

  •

  Apache License 2.0

  •28•98•18•5•Updated Feb 11, 2026Feb 11, 2026

• sdk

  Public

  chainguard-dev/sdk’s past year of commit activity
  Public SDK for integrating with the Chainguard platform

  audit

  Go

  •

  Apache License 2.0

  •21•1•1•0•Updated Feb 10, 2026Feb 10, 2026

• cargobump

  Public
  Rust tool to declaratively bump dependencies using cargo

  Go

  •

  Apache License 2.0

  •8•3•0•0•Updated Feb 10, 2026Feb 10, 2026