Repositories list

• melange

  Public

  chainguard-dev/melange’s past year of commit activity
  build APKs from source code

  Go

  •

  Apache License 2.0

  •182182 forks•629629 stars•170170 issues•9595 pull requests•Updated Oct 15, 2026Oct 15, 2026

• sdk

  Public

  chainguard-dev/sdk’s past year of commit activity
  Public SDK for integrating with the Chainguard platform

  audit

  audit

  Go

  •

  Apache License 2.0

  •2626 forks•22 stars•11 issue•00 pull requests•Updated Oct 15, 2026Oct 15, 2026

• edu

  Public
  Docs and Tutorials for Chainguard

  SCSS

  •

  Other

  •128128 forks•9696 stars•22 issues•1717 pull requests•Updated Oct 15, 2026Oct 15, 2026

• terraform-provider-imagetest

  Public

  chainguard-dev/terraform-provider-imagetest’s past year of commit activity
  Go

  •

  Mozilla Public License 2.0

  •3838 forks•55 stars•33 issues•77 pull requests•Updated Oct 15, 2026Oct 15, 2026

• terraform-provider-chainguard

  Public

  chainguard-dev/terraform-provider-chainguard’s past year of commit activity
  Go

  •

  Apache License 2.0

  •3737 forks•11 star•33 issues•55 pull requests•Updated Oct 15, 2026Oct 15, 2026

• omnibump

  Public
  Universal declarative dependency bump tool

  gogradlemaven+ 1

  gogradlemavencargo

  Go

  •

  Apache License 2.0

  •1010 forks•1515 stars•33 issues•1212 pull requests•Updated Oct 15, 2026Oct 15, 2026

• terraform-infra-common

  Public

  chainguard-dev/terraform-infra-common’s past year of commit activity
  A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

  HCL

  •

  Apache License 2.0

  •4545 forks•2929 stars•2222 issues•11 pull request•Updated Oct 15, 2026Oct 15, 2026

• apko

  Public
  Build OCI images from APK packages directly without Dockerfile

  dockercontainersoci

  dockercontainersoci

  Go

  •

  Apache License 2.0

  •233233 forks•1.7k1.7k stars•3939 issues•5050 pull requests•Updated Oct 15, 2026Oct 15, 2026

• image-comparison

  Public
  Comparison of Chainguard Images to others

  securitydatacontainers+ 1

  securitydatacontainersno-ghaudit-branch-protections

  HTML

  •

  Apache License 2.0

  •88 forks•2121 stars•00 issues•00 pull requests•Updated Oct 15, 2026Oct 15, 2026

• go-grpc-kit

  Public

  chainguard-dev/go-grpc-kit’s past year of commit activity
  Utility methods for gRPC.

  Go

  •

  Apache License 2.0

  •2020 forks•1212 stars•11 issue•22 pull requests•Updated Oct 15, 2026Oct 15, 2026

• homebrew-tap

  Public
  Chainguard Homebrew Tap

  homebrewtaphomebrew-formula+ 3

  homebrewtaphomebrew-formulahomebrew-tapchainguardno-ghaudit-branch-protections

  Ruby

  •

  Apache License 2.0

  •1313 forks•66 stars•00 issues•55 pull requests•Updated Oct 15, 2026Oct 15, 2026

• terraform-publisher-apko

  Public
  An experimental module for publishing images with tf-apko

  HCL

  •

  Apache License 2.0

  •1616 forks•88 stars•11 issue•66 pull requests•Updated Oct 15, 2026Oct 15, 2026

• justtrustme

  Public
  Go

  •

  Apache License 2.0

  •1414 forks•5959 stars•11 issue•33 pull requests•Updated Oct 15, 2026Oct 15, 2026

• terraform-provider-helm

  Public
  Go

  •

  Apache License 2.0

  •1010 forks•00 stars•00 issues•22 pull requests•Updated Oct 15, 2026Oct 15, 2026

• terraform-provider-cosign

  Public
  Terraform provider for Sigstore Cosign

  Go

  •

  Mozilla Public License 2.0

  •2222 forks•1212 stars•44 issues•22 pull requests•Updated Oct 15, 2026Oct 15, 2026

• terraform-provider-oci

  Public
  Terraform provider to perform OCI image operations

  terraformocicontainer-registry+ 1

  terraformocicontainer-registrycontainer-image

  Go

  •

  Mozilla Public License 2.0

  •2121 forks•1414 stars•66 issues•22 pull requests•Updated Oct 15, 2026Oct 15, 2026

• actions

  Public

  chainguard-dev/actions’s past year of commit activity
  A collection of reusable Github Actions workflows.

  TypeScript

  •

  Apache License 2.0

  •8383 forks•178178 stars•22 issues•77 pull requests•Updated Oct 15, 2026Oct 15, 2026

• test-remediation-packages

  Public
  Wolfi package repository for testing CVE fixes

  Makefile

  •88 forks•00 stars•55 issues•00 pull requests•Updated Oct 15, 2026Oct 15, 2026

• malcontent

  Public
  #supply #chain #attack #detection

  macoslinuxbinary+ 3

  macoslinuxbinaryreverse-engineeringmalware-analysisno-ghaudit-default-permissions

  Go

  •

  Apache License 2.0

  •6262 forks•678678 stars•55 issues•11 pull request•Updated Oct 15, 2026Oct 15, 2026

• vulnerability-scanner-support

  Public
  Resources to help vulnerability scanners

  Go

  •

  Apache License 2.0

  •2020 forks•1414 stars•22 issues•77 pull requests•Updated Oct 15, 2026Oct 15, 2026

• terraform-provider-apko

  Public
  buildterraformterraform-provider+ 1

  buildterraformterraform-providercontainer-image

  Go

  •

  Mozilla Public License 2.0

  •3232 forks•2020 stars•1010 issues•33 pull requests•Updated Oct 15, 2026Oct 15, 2026

• chainguard-inspec

  Public
  InSpec profile for Chainguard container images

  Ruby

  •

  Apache License 2.0

  •33 forks•00 stars•11 issue•11 pull request•Updated Oct 15, 2026Oct 15, 2026

• digestabot

  Public
  A Github Action to automatically update digests for container images.

  Shell

  •

  Apache License 2.0

  •2727 forks•9696 stars•00 issues•44 pull requests•Updated Oct 14, 2026Oct 14, 2026

• .github

  Public
  Default files to be used for any public repository under the chainguard-dev organization.

  Apache License 2.0

  •4040 forks•33 stars•00 issues•44 pull requests•Updated Oct 14, 2026Oct 14, 2026

• stigs

  Public
  HTML

  •

  Apache License 2.0

  •1515 forks•2525 stars•11 issue•00 pull requests•Updated Oct 14, 2026Oct 14, 2026

• ghscan

  Public
  Scan GitHub Actions Workflow logs for IOCs

  iocworkflowscanner+ 9

  iocworkflowscannerdetectionlogssupply-chainactionssecretsgithub-actionssupply-chain-security+ 2

  Go

  •

  Apache License 2.0

  •33 forks•1919 stars•00 issues•00 pull requests•Updated Oct 14, 2026Oct 14, 2026

• yam

  Public
  A sweet little formatter for YAML

  Go

  •

  Apache License 2.0

  •2121 forks•3434 stars•1111 issues•22 pull requests•Updated Oct 13, 2026Oct 13, 2026

• malcontent-action

  Public
  Run malcontent security scanner on pull requests to detect malicious behavior changes between commits

  JavaScript

  •88 forks•99 stars•00 issues•22 pull requests•Updated Oct 13, 2026Oct 13, 2026

• terraform-google-chainguard-account-association

  Public
  Terraform module to connect Chainguard Enforce to your Google Cloud project

  HCL

  •

  Apache License 2.0

  •1010 forks•33 stars•11 issue•33 pull requests•Updated Oct 12, 2026Oct 12, 2026

• chainguard-cursor-plugin

  Public
  Chainguard plugin for Cursor IDE — secure container images and hardened library dependencies in your AI workflow

  securitycontainersmcp+ 2

  securitycontainersmcpcursorchainguard

  Other

  •22 forks•11 star•00 issues•22 pull requests•Updated Oct 12, 2026Oct 12, 2026