Chainguard

Chainguard Containers are hardened container images from Chainguard, built from source and rebuilt daily. The images include verified manifests and provenance information, attached software bills of materials, and vulnerability remediation commitments; Chainguard says its catalog contains more than 3,000 images with substantially fewer CVEs than public alternatives. The images are distributed through Chainguard's registry and are intended to reduce the vulnerability and malware exposure of containerized applications.

Chainguard Actions are hardened, drop-in replacements for GitHub Actions CI/CD steps. They are designed to protect CI/CD pipelines and privileged code from supply-chain risks; Chainguard's site describes a catalog of more than 1,000 CI/CD actions as part of its trusted open-source artifact offerings.

Chainguard Libraries is a trusted catalog of language dependencies for Python, Java, JavaScript, Go, and .NET. It provides replacement repositories for public package registries such as PyPI, npm, and Maven Central; Chainguard takes upstream source, builds and scans the resulting artifacts, and serves them for use instead of relying on live access to public registries. Chainguard says its packages are detonated in a sandbox to identify suspicious behavior and are supplied as hardened artifacts intended to reduce malware and vulnerability risk in software dependencies. The service is developed and hosted by Chainguard.

Chainguard Agent Skills is a Chainguard service for distributing hardened versions of third-party AI-agent skills. Chainguard processes upstream skills through deterministic and agentic hardening steps; organizations can also submit their own skills for hardening and internal sharing. Chainguard’s homepage describes the offering as a collection of more than 1,000 hardened community skills intended to protect against malicious instructions.

Wolfi is Chainguard's minimal, rolling-release Linux distribution, built from the ground up for software supply-chain security. It follows upstream code closely, with Chainguard rebuilding its images frequently rather than maintaining long-lived stable versions. Wolfi is part of Chainguard's broader catalog of trusted open-source artifacts and container images, which the company says are rebuilt from source daily and supplied with provenance verification and software bills of materials.