Chainguard logo

Chainguard

Chainguard builds, secures, and maintains a catalog of hardened, minimal container images and software supply chain security tools. Its flagship Chainguard Images rebuild open source software from source daily on a zero-known-CVE promise, signed with Sigstore, and distributed through the cgr.dev registry. The Chainguard platform exposes REST APIs, a command- line tool (chainctl), a Terraform provider, and an SDK for managing organizations, IAM, image repositories, registries, vulnerabilities, and event subscriptions. Chainguard Libraries extends the model to language ecosystems (Java, Python, Go, Node.js).

6 APIs 26 Features
Cloud NativeContainer ImagesContainersDevSecOpsKubernetesRegistrySecuritySoftware Supply ChainVulnerability Management

APIs

Chainguard API v2

Chainguard API v2 is the current REST API for the Chainguard platform. Endpoints cover Identity and Access Management (IAM), image registry operations, and vulnerability data un...

Chainguard API v1

Chainguard API v1 is the legacy REST API for the Chainguard platform, covering the same broad surface as v2 (IAM, registry, vulnerabilities) and remaining available for existing...

Chainguard Unified API Spec

The unified Chainguard API specification combines API v1 and v2 definitions in a single reference, useful for tool builders and readers who need a consolidated view of the platf...

Chainguard chainctl CLI

chainctl is the official command-line interface for the Chainguard platform. It provides commands for authentication, IAM, image management, registry operations, event subscript...

Chainguard Terraform Provider

The chainguard-dev/chainguard Terraform provider lets platform engineers provision and manage Chainguard resources (organizations, groups, identities, roles, subscriptions, and ...

Chainguard Images Registry (cgr.dev)

cgr.dev is the OCI-compliant distribution endpoint for Chainguard Images. Standard OCI and Docker tooling (docker pull, cosign verify, oras, crane, etc.) can authenticate with a...

Features

Hardened Images
Minimal Images
Distroless
Zero-Known-CVE
SBOMs
SLSA Attestations
Sigstore Signatures
Cosign Verification
Daily Rebuilds
Wolfi OS Base
OCI Registry
IAM
RBAC
Audit Logs
Event Subscriptions
Vulnerability Feed
Custom Assembly
FIPS Images
STIG Hardening
Libraries for Java
Libraries for Python
Libraries for Go
Libraries for Node.js
Terraform Provider
CLI (chainctl)
REST API

Use Cases

Software Supply Chain Security
Container Hardening
CVE Remediation
Compliance (FedRAMP, FIPS, PCI, HIPAA)
Open Source Dependency Security
Secure Base Images
Air-Gapped Distribution
Kubernetes Workload Security
CI/CD Integration
Image Signing and Verification
Vulnerability Scanning Reduction

Integrations

Kubernetes
Docker
OCI
Sigstore
Cosign
SLSA
Terraform
GitHub Actions
GitLab CI
Jenkins
Argo CD
Tekton
Harbor
Quay
Amazon ECR
Google Artifact Registry
Azure Container Registry
Snyk
Prisma Cloud
Wiz
Trivy
Grype
Syft
AWS
Google Cloud
Azure

Resources

🔗
Website
Website
🔗
Documentation
Documentation
🌐
DeveloperPortal
DeveloperPortal
🎓
Academy
Academy
📰
Blog
Blog
👥
GitHub
GitHub
💰
Pricing
Pricing
📝
SignUp
SignUp
🌐
Console
Console
🔗
Contact
Contact
🔗
Careers
Careers
🔗
Security
Security
🟢
StatusPage
StatusPage
📜
TermsOfService
TermsOfService
📜
PrivacyPolicy
PrivacyPolicy
🔗
X
X
🔗
LinkedIn
LinkedIn
👥
YouTube
YouTube