Repositories list

• rules_apko

  Public
  Bazel rules for apko

  apkbazelbazel-rules+ 1

  apkbazelbazel-rulesno-ghaudit-default-permissions

  Starlark

  •

  Apache License 2.0

  •3636 forks•3535 stars•22 issues•22 pull requests•Updated May 7, 2026May 7, 2026

• go-pkgconfig

  Public
  Go package for wrangling pkg-config data

  Go

  •

  Apache License 2.0

  •66 forks•22 stars•00 issues•33 pull requests•Updated May 7, 2026May 7, 2026

• actions

  Public
  A collection of reusable Github Actions workflows.

  TypeScript

  •

  Apache License 2.0

  •8080 forks•167167 stars•1818 issues•33 pull requests•Updated May 7, 2026May 7, 2026

• image-comparison

  Public
  Comparison of Chainguard Images to others

  securitydatacontainers+ 1

  securitydatacontainersno-ghaudit-branch-protections

  HTML

  •

  Apache License 2.0

  •88 forks•2121 stars•00 issues•00 pull requests•Updated May 7, 2026May 7, 2026

• vulnerability-scanner-support

  Public
  Resources to help vulnerability scanners

  Go

  •

  Apache License 2.0

  •1717 forks•1313 stars•22 issues•44 pull requests•Updated May 7, 2026May 7, 2026

• stigs

  Public
  HTML

  •

  Apache License 2.0

  •1111 forks•2323 stars•00 issues•22 pull requests•Updated May 7, 2026May 7, 2026

• edu

  Public
  Docs and Tutorials for Chainguard

  SCSS

  •

  Other

  •112112 forks•9292 stars•11 issue•1414 pull requests•Updated May 7, 2026May 7, 2026

• chainguard-kiro-power

  Public
  Chainguard power for Kiro IDE — secure container images and hardened library dependencies in your AI workflow

  securitycontainersmcp+ 2

  securitycontainersmcpchainguardkiro

  00 forks•00 stars•00 issues•00 pull requests•Updated May 6, 2026May 6, 2026

• malcontent

  Public
  #supply #chain #attack #detection

  macoslinuxbinary+ 3

  macoslinuxbinaryreverse-engineeringmalware-analysisno-ghaudit-default-permissions

  YARA

  •

  Apache License 2.0

  •6161 forks•653653 stars•77 issues•00 pull requests•Updated May 6, 2026May 6, 2026

• terraform-infra-common

  Public
  A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

  HCL

  •

  Apache License 2.0

  •4444 forks•2828 stars•2222 issues•11 pull request•Updated May 6, 2026May 6, 2026

• chainguard-cursor-plugin

  Public
  Chainguard plugin for Cursor IDE — secure container images and hardened library dependencies in your AI workflow

  securitycontainersmcp+ 2

  securitycontainersmcpcursorchainguard

  Other

  •00 forks•00 stars•00 issues•00 pull requests•Updated May 6, 2026May 6, 2026

• digestabot

  Public
  A Github Action to automatically update digests for container images.

  Shell

  •

  Apache License 2.0

  •2525 forks•8989 stars•44 issues•00 pull requests•Updated May 6, 2026May 6, 2026

• malcontent-action

  Public
  Run malcontent security scanner on pull requests to detect malicious behavior changes between commits

  JavaScript

  •88 forks•1010 stars•00 issues•22 pull requests•Updated May 6, 2026May 6, 2026

• apko

  Public
  Build OCI images from APK packages directly without Dockerfile

  dockercontainersoci

  dockercontainersoci

  Go

  •

  Apache License 2.0

  •214214 forks•1.6k1.6k stars•8686 issues•5353 pull requests•Updated May 6, 2026May 6, 2026

• melange

  Public
  build APKs from source code

  Go

  •

  Apache License 2.0

  •170170 forks•593593 stars•166166 issues•8181 pull requests•Updated May 6, 2026May 6, 2026

• terraform-provider-imagetest

  Public
  Go

  •

  Mozilla Public License 2.0

  •3636 forks•55 stars•33 issues•1010 pull requests•Updated May 6, 2026May 6, 2026

• bazel-central-registry

  Public
  The central registry of Bazel modules for the Bzlmod external dependency system.

  no-ghaudit-branch-protections

  no-ghaudit-branch-protections

  Starlark

  •

  Apache License 2.0

  •751751 forks•00 stars•00 issues•00 pull requests•Updated May 6, 2026May 6, 2026

• omnibump

  Public
  Universal declarative depenency bump tool

  gogradlemaven+ 1

  gogradlemavencargo

  Go

  •

  Apache License 2.0

  •55 forks•22 stars•00 issues•55 pull requests•Updated May 6, 2026May 6, 2026

• .github

  Public
  Default files to be used for any public repository under the chainguard-dev organization.

  Apache License 2.0

  •3030 forks•33 stars•00 issues•44 pull requests•Updated May 6, 2026May 6, 2026

• homebrew-tap

  Public
  Chainguard Homebrew Tap

  homebrewtaphomebrew-formula+ 3

  homebrewtaphomebrew-formulahomebrew-tapchainguardno-ghaudit-branch-protections

  Ruby

  •

  Apache License 2.0

  •1212 forks•55 stars•00 issues•11 pull request•Updated May 6, 2026May 6, 2026

• courses-theme

  Public
  JavaScript

  •33 forks•00 stars•00 issues•66 pull requests•Updated May 6, 2026May 6, 2026

• terraform-provider-apko

  Public
  buildterraformterraform-provider+ 1

  buildterraformterraform-providercontainer-image

  Go

  •

  Mozilla Public License 2.0

  •3232 forks•1919 stars•1010 issues•55 pull requests•Updated May 6, 2026May 6, 2026

• terraform-provider-helm

  Public
  Go

  •

  Apache License 2.0

  •88 forks•00 stars•00 issues•11 pull request•Updated May 6, 2026May 6, 2026

• ghaudit

  Public
  A simple CLI tool for checking GitHub organization and repository administration policies.

  Go

  •

  Apache License 2.0

  •88 forks•1010 stars•33 issues•22 pull requests•Updated May 6, 2026May 6, 2026

• setup-chainctl

  Public
  GitHub Action to install chainctl in your workflow

  actionsci-cdgithub-actions+ 1

  actionsci-cdgithub-actionschainguard

  Apache License 2.0

  •1313 forks•44 stars•00 issues•11 pull request•Updated May 5, 2026May 5, 2026

• justtrustme

  Public
  Go

  •

  Apache License 2.0

  •1414 forks•5959 stars•11 issue•00 pull requests•Updated May 5, 2026May 5, 2026

• exitdir

  Public
  Common packages.

  Go

  •

  Apache License 2.0

  •66 forks•88 stars•00 issues•00 pull requests•Updated May 5, 2026May 5, 2026

• cargobump

  Public
  Rust tool to declaratively bump dependencies using cargo

  Go

  •

  Apache License 2.0

  •1111 forks•33 stars•00 issues•00 pull requests•Updated May 5, 2026May 5, 2026

• pombump

  Public
  Playing around with a tool for updating POM dependencies

  Go

  •1212 forks•11 star•55 issues•88 pull requests•Updated May 5, 2026May 5, 2026

• clog

  Public
  Context aware slog

  Go

  •

  Apache License 2.0

  •1212 forks•3131 stars•00 issues•55 pull requests•Updated May 5, 2026May 5, 2026