luhring

reach

A static network verification tool for AWS

apko

Build OCI images using APK directly without Dockerfile

chainguard-images

Public Chainguard Images

cosign

Container Signing

grype

A vulnerability scanner for container images and filesystems

melange

build APKs from source code

nginx

Distroless NGINX image

sbom-action

GitHub Action for creating software bill of materials using Syft.

scan-action

Anchore container analysis and scan provided as a GitHub Action

sget

stereoscope

go library for processing container images and simulating a squash filesystem

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

trivy-db

trivy-vuln-list-update

vex

vexctl is a tool to attest VEX impact statements

wolfi-busybox

Busybox

wolfi-dag

Generate DAGs of Melange packages

wolfi-git

A distroless image containing only git and related utilities.

wolfi-go

Lightweight container image for building Go applications

wolfi-hello-world

A simple hello-world example using apko and melange.

wolfi-jdk

Distroless Images for Building Java Applications

wolfi-ko

Development environment for using ko/cgo with distroless target images

wolfi-os

Main package repository for production Wolfi images

wolfi-php

PHP Apko Image

wolfi-python

Python Apko Image

wolfi-secdb

Tool for generating Wolfi security databases

wolfi-static

Base image with just enough files to run static binaries!

wolfi-template

Template repository for new images

wolfictl

A CLI used to work with the Wolfi OSS project