Discover chainguard-dev/trusted-cert Open Source project

vexctl is a tool to attest VEX impact statements

vex

bom-shelter

A place to systematically store software bill of materials (SBOM) documents.

Python

darkfiles

Darkfiles finds orphaned files in container images and makes them to bad deeds

osqtool

Automated testing, generation & manipulation of #osquery packs

go-apk

native go library for installation and management of apk packages

registry-redirect

cosign-ecs-verify

Lambda function for verifying signed images in ECS

rules_apko

Bazel rules for apko

Starlark

crow-registry

TypeScript

clank

Simple tool that allows you to detect imposter commits in GitHub Actions workflows.

yam

A sweet little formatter for YAML

hakn

A High-Availability distribution of Knative.

policy-catalog

hello-melange-apko

Demo app duplicated in 5 languages (Go/JavaScript/Python/Ruby/Rust) showing how to go from source code to container image using melange+apko

Rust

tlogistry

Transparenty Immutable Container Image Tags

clog

Context aware slog

maxcve

terraform-provider-apko

image-comparison

Comparison of Chainguard Images to others

HTML

terraform-provider-oci

Terraform provider to perform OCI image operations

exitdir

Common packages.

go-oidctest

Library for creating fake OIDC providers in tests

nginx-image-demo

nginx image demo

terraform-provider-cosign

Terraform provider for Sigstore Cosign

yoloc

YOLO-level verifier

admission-sidecar

Generic webhook controller / proxy for ease of integration with Styra in particular.

terraform-infra-common

A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

Resources to help vulnerability scanners

pull-secret-updater

vulnerability-scanner-support

stigs

HTML

platform-examples

Example apps demonstrating Chainguard platform integrations

go-grpc-kit

Utility methods for gRPC.

kolide-google-matcher

Unearth host mismatches between Kolide & Google Workspace

learning-labs-static

Base code for Learning Labs: "Build Secure and Minimal Images with Chainguard Static Images"

tekton-demo

Tekton and Sigstore Demo

An experimental module for publishing images with tf-apko

terraform-publisher-apko

This project is now retired 👋

images-autodocs

Use this repo to submit your final project for the Painless Vulnerability Management With Chainguard course.

cve-bliss

ClusterImagePolicy demo for cve-2022-42889 text4shell

text4shell-policy

Java

melange-php-demos

PHP demos for Melange + Apko

Go tool to declaratively bump dependencies.

gobump

homebrew-tap

Chainguard Homebrew Tap

Ruby

source-integrity-demo

Shell

tekton-helm-charts

Helm charts for deploying Tekton Pipelines, Dashboard and Chains

Smarty

rumble

Data collection for base image CVEs etc.

sigstore-custom-policies

Repo to contain files demo'd on the CNCF Webinar on the Sigstore Policy Controller

CUE

terraform-google-cron

Terraform module for deploying cron jobs that run on a defined schedule

Filter scanner results by applying data from the Wolfi secdb

go-workqueue

fixfilter

edu-images-demos

Sample education demos for Chainguard Images

Sync Secureframe tests to GitHub issues (unofficial)

secureframe-issue-sync

terraform-aws-chainguard-account-association

Terraform module to connect Chainguard Enforce to your AWS Account

DEPRECATED. Moved to chainguard-dev/images-autodocs

deved-autodocs

Terraform module to connect Chainguard Enforce to your Google Cloud project

terraform-google-chainguard-account-association

Demo for the Hello Wolfi workshop

hello-wolfi-demo

Default files to be used for any public repository under the chainguard-dev organization.

terraform-provider-imagetest

.github

chainguard-weaveworks-gitops-demo

End to End Security & Operations with Chainguard & Weave GitOps

Makefile

terraform-cloudrun-dashboard

THIS HAS MOVED

Test that OpenSSL is configured to be FIPS-compliant

openssl-fips-test

ldso-cache

reading and writing of glibc /etc/ld.so.cache files

terraform-google-prober

A terraform module and Go library for deploying probers to Google Cloud Run

Collect ACLs from SaaS platforms for periodic user access reviews

acls-in-yaml

field-demos

Public repository of field demos and collaboration and other goodness - it's not pretty, but it's shared ❤️

Go package for wrangling pkg-config data

go-pkgconfig

go-demo

go demo app

cg-images-python-migration

Sample Flask application migrated to Chainguard Images