Repositories list

• omnibump

  Public
  Universal declarative depenency bump tool

  gogradlemaven+ 1

  gogradlemavencargo

  Go

  •

  Apache License 2.0

  •55 forks•22 stars•00 issues•55 pull requests•Updated May 4, 2026May 4, 2026

• yam

  Public
  A sweet little formatter for YAML

  Go

  •

  Apache License 2.0

  •1919 forks•3434 stars•77 issues•44 pull requests•Updated May 4, 2026May 4, 2026

• digestabot

  Public
  A Github Action to automatically update digests for container images.

  Shell

  •

  Apache License 2.0

  •2525 forks•8888 stars•44 issues•11 pull request•Updated May 4, 2026May 4, 2026

• malcontent

  Public
  #supply #chain #attack #detection

  macoslinuxbinary+ 3

  macoslinuxbinaryreverse-engineeringmalware-analysisno-ghaudit-default-permissions

  YARA

  •

  Apache License 2.0

  •6161 forks•653653 stars•66 issues•22 pull requests•Updated May 4, 2026May 4, 2026

• malcontent-action

  Public
  Run malcontent security scanner on pull requests to detect malicious behavior changes between commits

  JavaScript

  •88 forks•1010 stars•00 issues•22 pull requests•Updated May 4, 2026May 4, 2026

• apko

  Public
  Build OCI images from APK packages directly without Dockerfile

  dockercontainersoci

  dockercontainersoci

  Go

  •

  Apache License 2.0

  •214214 forks•1.6k1.6k stars•8686 issues•5858 pull requests•Updated May 4, 2026May 4, 2026

• melange

  Public
  build APKs from source code

  Go

  •

  Apache License 2.0

  •170170 forks•593593 stars•166166 issues•8282 pull requests•Updated May 4, 2026May 4, 2026

• edu

  Public
  Docs and Tutorials for Chainguard

  SCSS

  •

  Other

  •112112 forks•9292 stars•11 issue•99 pull requests•Updated May 4, 2026May 4, 2026

• terraform-provider-chainguard

  Public
  Go

  •

  Apache License 2.0

  •3030 forks•11 star•11 issue•66 pull requests•Updated May 4, 2026May 4, 2026

• vulnerability-scanner-support

  Public
  Resources to help vulnerability scanners

  Go

  •

  Apache License 2.0

  •1717 forks•1313 stars•22 issues•44 pull requests•Updated May 4, 2026May 4, 2026

• tw

  Public
  Go

  •3535 forks•11 star•66 issues•1515 pull requests•Updated May 4, 2026May 4, 2026

• rules_apko

  Public
  Bazel rules for apko

  apkbazelbazel-rules+ 1

  apkbazelbazel-rulesno-ghaudit-default-permissions

  Starlark

  •

  Apache License 2.0

  •3535 forks•3535 stars•44 issues•55 pull requests•Updated May 4, 2026May 4, 2026

• homebrew-tap

  Public
  Chainguard Homebrew Tap

  homebrewtaphomebrew-formula+ 3

  homebrewtaphomebrew-formulahomebrew-tapchainguardno-ghaudit-branch-protections

  Ruby

  •

  Apache License 2.0

  •1212 forks•55 stars•00 issues•11 pull request•Updated May 4, 2026May 4, 2026

• chainguard-cursor-plugin

  Public

  chainguard-dev/chainguard-cursor-plugin’s past year of commit activity
  Chainguard plugin for Cursor IDE — secure container images and hardened library dependencies in your AI workflow

  securitycontainersmcp+ 2

  securitycontainersmcpcursorchainguard

  00 forks•00 stars•00 issues•00 pull requests•Updated May 4, 2026May 4, 2026

• cargobump

  Public
  Rust tool to declaratively bump dependencies using cargo

  Go

  •

  Apache License 2.0

  •1111 forks•33 stars•00 issues•00 pull requests•Updated May 4, 2026May 4, 2026

• terraform-provider-imagetest

  Public
  Go

  •

  Mozilla Public License 2.0

  •3636 forks•55 stars•33 issues•1111 pull requests•Updated May 4, 2026May 4, 2026

• actions

  Public
  A collection of reusable Github Actions workflows.

  TypeScript

  •

  Apache License 2.0

  •8080 forks•167167 stars•1818 issues•22 pull requests•Updated May 4, 2026May 4, 2026

• terraform-provider-helm

  Public
  Go

  •

  Apache License 2.0

  •88 forks•00 stars•00 issues•00 pull requests•Updated May 4, 2026May 4, 2026

• terraform-infra-common

  Public
  A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

  HCL

  •

  Apache License 2.0

  •4444 forks•2828 stars•2222 issues•11 pull request•Updated May 4, 2026May 4, 2026

• image-comparison

  Public
  Comparison of Chainguard Images to others

  securitydatacontainers+ 1

  securitydatacontainersno-ghaudit-branch-protections

  HTML

  •

  Apache License 2.0

  •88 forks•2121 stars•00 issues•00 pull requests•Updated May 4, 2026May 4, 2026

• terraform-provider-cosign

  Public
  Terraform provider for Sigstore Cosign

  Go

  •

  Mozilla Public License 2.0

  •2121 forks•1212 stars•44 issues•00 pull requests•Updated May 4, 2026May 4, 2026

• terraform-provider-oci

  Public
  Terraform provider to perform OCI image operations

  terraformocicontainer-registry+ 1

  terraformocicontainer-registrycontainer-image

  Go

  •

  Mozilla Public License 2.0

  •2020 forks•1414 stars•66 issues•11 pull request•Updated May 4, 2026May 4, 2026

• ghscan

  Public
  Scan GitHub Actions Workflow logs for IOCs

  iocworkflowscanner+ 9

  iocworkflowscannerdetectionlogssupply-chainactionssecretsgithub-actionssupply-chain-security+ 2

  Go

  •

  Apache License 2.0

  •33 forks•1717 stars•00 issues•00 pull requests•Updated May 4, 2026May 4, 2026

• terraform-provider-apko

  Public
  buildterraformterraform-provider+ 1

  buildterraformterraform-providercontainer-image

  Go

  •

  Mozilla Public License 2.0

  •3232 forks•1919 stars•1010 issues•88 pull requests•Updated May 4, 2026May 4, 2026

• go-pkgconfig

  Public
  Go package for wrangling pkg-config data

  Go

  •

  Apache License 2.0

  •66 forks•22 stars•00 issues•22 pull requests•Updated May 4, 2026May 4, 2026

• exitdir

  Public
  Common packages.

  Go

  •

  Apache License 2.0

  •66 forks•88 stars•00 issues•00 pull requests•Updated May 4, 2026May 4, 2026

• justtrustme

  Public
  Go

  •

  Apache License 2.0

  •1414 forks•5959 stars•11 issue•00 pull requests•Updated May 4, 2026May 4, 2026

• courses-theme

  Public
  JavaScript

  •33 forks•00 stars•00 issues•55 pull requests•Updated May 4, 2026May 4, 2026

• terraform-publisher-apko

  Public
  An experimental module for publishing images with tf-apko

  HCL

  •

  Apache License 2.0

  •1515 forks•77 stars•11 issue•88 pull requests•Updated May 4, 2026May 4, 2026

• policy-catalog

  Public
  Go

  •

  Apache License 2.0

  •1010 forks•2020 stars•22 issues•1313 pull requests•Updated May 4, 2026May 4, 2026