Repositories list

• .github

  Public
  Default files to be used for any public repository under the chainguard-dev organization.

  Apache License 2.0

  •29•3•0•3•Updated Mar 26, 2026Mar 26, 2026

• malcontent

  Public

  chainguard-dev/malcontent’s past year of commit activity
  #supply #chain #attack #detection

  macoslinuxbinary+ 3

  macoslinuxbinaryreverse-engineeringmalware-analysisno-ghaudit-default-permissions

  YARA

  •

  Apache License 2.0

  •60•646•7•1•Updated Mar 26, 2026Mar 26, 2026

• actions

  Public
  A collection of reusable Github Actions workflows.

  TypeScript

  •

  Apache License 2.0

  •78•159•18•2•Updated Mar 26, 2026Mar 26, 2026

• melange

  Public
  build APKs from source code

  Go

  •

  Apache License 2.0

  •168•579•162•74•Updated Mar 26, 2026Mar 26, 2026

• image-comparison

  Public
  Comparison of Chainguard Images to others

  securitydatacontainers+ 1

  securitydatacontainersno-ghaudit-branch-protections

  HTML

  •

  Apache License 2.0

  •7•21•0•0•Updated Mar 26, 2026Mar 26, 2026

• vulnerability-scanner-support

  Public
  Resources to help vulnerability scanners

  Go

  •

  Apache License 2.0

  •13•11•1•4•Updated Mar 26, 2026Mar 26, 2026

• edu

  Public
  Docs and Tutorials for Chainguard

  SCSS

  •

  Other

  •108•92•1•15•Updated Mar 26, 2026Mar 26, 2026

• sdk

  Public
  Public SDK for integrating with the Chainguard platform

  audit

  audit

  Go

  •

  Apache License 2.0

  •23•2•1•0•Updated Mar 25, 2026Mar 25, 2026

• terraform-infra-common

  Public
  A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

  HCL

  •

  Apache License 2.0

  •42•28•22•0•Updated Mar 25, 2026Mar 25, 2026

• homebrew-tap

  Public
  Chainguard Homebrew Tap

  homebrewtaphomebrew-formula+ 3

  homebrewtaphomebrew-formulahomebrew-tapchainguardno-ghaudit-branch-protections

  Ruby

  •

  Apache License 2.0

  •11•5•0•1•Updated Mar 25, 2026Mar 25, 2026

• apko

  Public
  Build OCI images from APK packages directly without Dockerfile

  dockercontainersoci

  dockercontainersoci

  Go

  •

  Apache License 2.0

  •212•1.6k•87•50•Updated Mar 25, 2026Mar 25, 2026

• ghaudit

  Public
  A simple CLI tool for checking GitHub organization and repository administration policies.

  Go

  •

  Apache License 2.0

  •7•9•3•0•Updated Mar 25, 2026Mar 25, 2026

• terraform-provider-imagetest

  Public
  Go

  •

  Mozilla Public License 2.0

  •31•5•3•14•Updated Mar 25, 2026Mar 25, 2026

• tw

  Public
  Go

  •32•2•6•14•Updated Mar 25, 2026Mar 25, 2026

• setup-chainctl

  Public
  GitHub Action to install chainctl in your workflow

  actionsci-cdgithub-actions+ 1

  actionsci-cdgithub-actionschainguard

  Apache License 2.0

  •12•4•0•1•Updated Mar 24, 2026Mar 24, 2026

• terraform-provider-chainguard

  Public
  Go

  •

  Apache License 2.0

  •27•1•0•0•Updated Mar 24, 2026Mar 24, 2026

• yam

  Public
  A sweet little formatter for YAML

  Go

  •

  Apache License 2.0

  •18•34•7•2•Updated Mar 24, 2026Mar 24, 2026

• terraform-provider-cosign

  Public
  Terraform provider for Sigstore Cosign

  Go

  •

  Mozilla Public License 2.0

  •17•12•4•1•Updated Mar 24, 2026Mar 24, 2026

• rules_apko

  Public
  Bazel rules for apko

  apkbazelbazel-rules+ 1

  apkbazelbazel-rulesno-ghaudit-default-permissions

  Starlark

  •

  Apache License 2.0

  •33•34•3•3•Updated Mar 24, 2026Mar 24, 2026

• terraform-provider-apko

  Public
  buildterraformterraform-provider+ 1

  buildterraformterraform-providercontainer-image

  Go

  •

  Mozilla Public License 2.0

  •30•19•10•1•Updated Mar 24, 2026Mar 24, 2026

• go-grpc-kit

  Public
  Utility methods for gRPC.

  Go

  •

  Apache License 2.0

  •16•11•0•10•Updated Mar 24, 2026Mar 24, 2026

• incert

  Public
  Add CA certificates into containers

  golangcontainerca-certificates

  golangcontainerca-certificates

  Go

  •

  Apache License 2.0

  •24•167•6•0•Updated Mar 24, 2026Mar 24, 2026

• terraform-provider-helm

  Public
  Go

  •

  Apache License 2.0

  •5•0•0•0•Updated Mar 24, 2026Mar 24, 2026

• malcontent-action

  Public
  Run malcontent security scanner on pull requests to detect malicious behavior changes between commits

  JavaScript

  •7•10•0•2•Updated Mar 23, 2026Mar 23, 2026

• exitdir

  Public
  Common packages.

  Go

  •

  Apache License 2.0

  •5•8•0•0•Updated Mar 23, 2026Mar 23, 2026

• stigs

  Public
  HTML

  •

  Apache License 2.0

  •9•20•0•1•Updated Mar 23, 2026Mar 23, 2026

• courses-theme

  Public
  JavaScript

  •2•0•0•3•Updated Mar 21, 2026Mar 21, 2026

• gobump

  Public
  Go tool to declaratively bump dependencies.

  Go

  •

  Apache License 2.0

  •16•11•4•8•Updated Mar 20, 2026Mar 20, 2026

• omnibump

  Public
  Universal declarative depenency bump tool

  gogradlemaven+ 1

  gogradlemavencargo

  Go

  •

  Apache License 2.0

  •3•1•0•5•Updated Mar 20, 2026Mar 20, 2026

• terraform-provider-oci

  Public
  Terraform provider to perform OCI image operations

  terraformocicontainer-registry+ 1

  terraformocicontainer-registrycontainer-image

  Go

  •

  Mozilla Public License 2.0

  •19•14•6•1•Updated Mar 19, 2026Mar 19, 2026