Owner

chainguard-dev

32 indexed repositories · View on GitHub

apko
Build OCI images from APK packages directly without Dockerfile

Go · 1677 stars
malcontent
#supply #chain #attack #detection

YARA · 675 stars
osquery-defense-kit
Production-ready detection & response queries for osquery

Makefile · 643 stars
melange
build APKs from source code

Go · 628 stars
incert
Add CA certificates into containers

Go · 174 stars
actions
A collection of reusable Github Actions workflows.

TypeScript · 173 stars
dfc
(D)ocker(F)ile (C)onverter: CLI to convert Dockerfiles to use Chainguard Images and APKs in FROM and RUN lines etc.

Go · 103 stars
digestabot
A Github Action to automatically update digests for container images.

Shell · 96 stars
edu
Docs and Tutorials for Chainguard

SCSS · 95 stars
justtrustme

Go · 59 stars
rules_apko
Bazel rules for apko

Starlark · 36 stars
yam
A sweet little formatter for YAML

Go · 34 stars
terraform-infra-common
A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

HCL · 29 stars
stigs

HTML · 25 stars
terraform-provider-apko

Go · 20 stars
omnibump
Universal declarative dependency bump tool

Go · 15 stars
terraform-provider-oci
Terraform provider to perform OCI image operations

Go · 14 stars
vulnerability-scanner-support
Resources to help vulnerability scanners

Go · 14 stars
ghaudit
A simple CLI tool for checking GitHub organization and repository administration policies.

Go · 12 stars
terraform-provider-cosign
Terraform provider for Sigstore Cosign

Go · 12 stars
12 more repositories live on View on GitHub

Beginner friendly Everything

Open All

duplex: Shutdown can return before the listener closes Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

chainguard-dev/go-grpc-kit#668 · Opened Sep 16, 2026
[chainlink] check links on edu.chainguard.dev Open

automated

chainguard-dev/edu#3994 · 2 assignees · Opened Sep 12, 2026
types: ImageContents.MarshalYAML redacts the caller's config in place Open

Difficulty 2/5 1-3 hours Newbie friendliness 86/100

chainguard-dev/apko#2496 · Opened Sep 11, 2026
tarfs: DirEntry.Type returns the full mode instead of the type bits Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

chainguard-dev/apko#2495 · Opened Sep 10, 2026
tarfs: Open fails on hardlinks and on absolute symlinks Open

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

chainguard-dev/apko#2494 · Opened Sep 10, 2026
tarfs: Entry retains a full tar.Header per file; store a compact record Open

Difficulty 4/5 3-5 days Newbie friendliness 65/100

chainguard-dev/apko#2492 · Opened Sep 10, 2026
resolver cache retains a full package map per index combination; bound it by size or share the entries Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

chainguard-dev/apko#2491 · Opened Sep 10, 2026
Close the mirror gate's last hole, add reference-integrity and oval_pattern guards Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

chainguard-dev/stigs#177 · 1 comment · Opened Sep 9, 2026
Measure compressionCache effectiveness; if it does not pay, revert to single-pass layer writes Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

chainguard-dev/apko#2485 · 2 comments · Opened Sep 9, 2026
TestSplitLayersDirectoryCreation: foundDirs accumulates across layers, so later layers can never fail Open

Difficulty 1/5 Under an hour Newbie friendliness 92/100

chainguard-dev/apko#2484 · Opened Sep 8, 2026
ImageLayoutToLayer leaves its partial output file behind on build failure Open

Difficulty 2/5 Half a day Newbie friendliness 76/100

chainguard-dev/apko#2483 · Opened Sep 8, 2026
Data race in layer.Digest/layer.Size on the compression-cache hit path Open

Difficulty 3/5 1-2 days Newbie friendliness 82/100

chainguard-dev/apko#2481 · Opened Sep 8, 2026
erofs: layered builds materialize every hardlink as a full copy Open

Difficulty 4/5 3-5 days Newbie friendliness 67/100

chainguard-dev/apko#2451 · Opened Sep 1, 2026
Support cooldown policy: resolve digests older than a minimum age Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

chainguard-dev/digestabot#127 · Opened Sep 1, 2026
Migrate to Publish to BCR actions workflow Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

chainguard-dev/rules_apko#388 · Opened Aug 30, 2026
fetch pipeline without extract cannot use `expected-sha256`? Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

chainguard-dev/melange#2633 · Opened Aug 28, 2026
build: NewOptions returns an unvalidated ImageConfiguration, so an invalid layer format silently builds a tar Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

chainguard-dev/apko#2423 · Opened Aug 20, 2026
EROFS follow-ups: mount/umount hardening, layer splitting, go-erofs bump Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

chainguard-dev/apko#2408 · 1 comment · Opened Aug 18, 2026
Guidance request: how to handle build-time secrets without leaking them into the APK Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

chainguard-dev/melange#2624 · Opened Aug 17, 2026
DRAFT: RSA SHA1 signature support is insecure Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

chainguard-dev/apko#2399 · 3 comments · Opened Aug 16, 2026
[Feature Request] Support IDP Group Mappings Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

chainguard-dev/terraform-provider-chainguard#623 · Opened Aug 14, 2026
proposal: add a `${{package.date}}` substitution for build pipeline Open

Difficulty 5/5 Over a week Newbie friendliness 38/100

chainguard-dev/melange#2614 · Opened Aug 7, 2026
Required check `CI test with auth` provides no PR assurance (tests base, not the PR) — please do not fix by checking out PR head Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

chainguard-dev/keyrings-chainguard-libraries#52 · Opened Aug 7, 2026
How to create a package only containing files (i.e. no binaries etc.) using the fetch pipeline? Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

chainguard-dev/melange#2592 · 5 comments · Opened Jul 10, 2026
AI-agent skill / MCP-server malware lane Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

chainguard-dev/malcontent#1584 · Opened Jun 29, 2026
feat: Gradle: Support Palantir consistent-versions versions.props Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

chainguard-dev/omnibump#134 · Opened Jun 28, 2026
[FEATURE REQUEST]: credential_process support for terraform-provider-chainguard Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

chainguard-dev/terraform-provider-chainguard#569 · Opened Jun 24, 2026
npm EOVERRIDE error due to override for direct dependency Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

chainguard-dev/omnibump#118 · Opened Jun 16, 2026
Warn about unsupported image tags Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

chainguard-dev/digestabot#103 · Opened Jun 12, 2026
Maven: Downgrade prevention guard not implemented (docs claim it exists) Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

chainguard-dev/omnibump#112 · Opened Jun 11, 2026
Scan scripts: first-class input-override and argument passthrough to cinc-auditor Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

chainguard-dev/chainguard-inspec#56 · Opened Jun 10, 2026
proposal: support offline builds Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

chainguard-dev/melange#2559 · Opened Jun 5, 2026
FR: optionally auto-generate a `bazel test` target for apko lock staleness Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

chainguard-dev/rules_apko#328 · Opened Jun 2, 2026
apko does not follow content-disposition headers when fetching key files Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

chainguard-dev/apko#2252 · Opened May 30, 2026
Package index fetches fail if APKINDEX.tar.gz doesn't support HEAD requests (e.g. Gitea/Forgejo package repositories) Open

Difficulty 3/5 1-2 days Newbie friendliness 58/100

chainguard-dev/apko#2251 · Opened May 30, 2026
ELF notes not applied w/ QEMU runner when using `lld` Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

chainguard-dev/melange#2550 · Opened May 29, 2026
Feature Request: "build --name deps" Open

Difficulty 3/5 1-2 days Newbie friendliness 62/100

chainguard-dev/melange#2494 · Opened Apr 20, 2026
Unable to use persistent workspace Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

chainguard-dev/melange#2484 · Opened Apr 14, 2026
Provide a chainguard organization data source Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

chainguard-dev/terraform-provider-chainguard#506 · 8 reactions · Opened Apr 8, 2026
We should have target-archtiecutre for subpackages Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

chainguard-dev/melange#2444 · 1 comment · 1 reaction · Opened Mar 26, 2026
Appended epoch uses the wrong separator for semver Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

chainguard-dev/melange#2437 · 1 comment · Opened Mar 25, 2026
It doesn't run. Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

chainguard-dev/vulnerability-scanner-support#115 · Opened Feb 27, 2026
shell-deps-check should have a way to ignore specific deps Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

chainguard-dev/tw#336 · Opened Feb 26, 2026
feature request: lockfile support for minirootfs and cpio Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

chainguard-dev/apko#2085 · Opened Feb 22, 2026
SBOM does not get built for minirootfs Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

chainguard-dev/apko#2084 · Opened Feb 22, 2026
Ill-formed package index emitted Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

chainguard-dev/apko#2059 · 1 comment · Opened Feb 5, 2026
Example fails to build Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

chainguard-dev/melange#2329 · Opened Feb 5, 2026
help-check does not see failures Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

chainguard-dev/tw#281 · 4 comments · Opened Jan 27, 2026
cramjam/2.6.1: RebuilderErrorBuildFailed Open

cramjam failed pypi

Difficulty 3/5 1-2 days Newbie friendliness 45/100

chainguard-dev/test-remediation-packages#6642 · Opened Jan 15, 2026
Feature Request: Behavior Category Filtering for Diff Command Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

chainguard-dev/malcontent#1290 · Opened Dec 31, 2025

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

chainguard-dev

Showing the newest 100

Get new issues in your inbox