Chainguard

CGR.DEV ↗ PAID / FREE TIER TOP 1

Registry namespace cgr.dev/chainguard · ranked #1 of publishers. Raw trust = (3·A + B − 0.5·F) ÷ scanned = +3.00. No shrinkage (13 projects served, broad enough).

PROJECTS
13
IMAGES TRACKED
13
SCANNED
10 / 13
AVG SCORE
100.0
REBUILT ≤90D
10 / 13
GRADE DISTRIBUTION (10 scanned images)
A 10

Images we track

13 total · 10 scanned · sorted by current score
Golang · golang
cgr.dev/chainguard/go:latest
· 286 MB · 2-arch · pushed today
NOW
A
100
FIRST SCAN
A
today
OPEN CVES
0 / 0 / 0
C / H / M
PULLS
—
repo-level
Pull →
▸ rubric breakdown (6 signals)
+10 · Rebuilt in last 90 days +5 · Cosign signature +5 · SLSA provenance +5 · SLSA subject matches digest +2 · Multi-arch +3 · Signed SBOM attestation
docker pull cgr.dev/chainguard/go:latest
Nginx · nginx
cgr.dev/chainguard/nginx:latest
· 8 MB · 2-arch · pushed today
NOW
A
100
FIRST SCAN
A
today
OPEN CVES
0 / 0 / 0
C / H / M
PULLS
—
repo-level
Pull →
▸ rubric breakdown (7 signals)
+10 · Runs as non-root +10 · Rebuilt in last 90 days +5 · Cosign signature +5 · SLSA provenance +5 · SLSA subject matches digest +2 · Multi-arch +3 · Signed SBOM attestation
docker pull cgr.dev/chainguard/nginx:latest
Nodejs · nodejs
cgr.dev/chainguard/node:latest
· 66 MB · 2-arch · pushed yesterday
NOW
A
100
FIRST SCAN
A
today
OPEN CVES
0 / 0 / 0
C / H / M
PULLS
—
repo-level
Pull →
▸ rubric breakdown (7 signals)
+10 · Runs as non-root +10 · Rebuilt in last 90 days +5 · Cosign signature +5 · SLSA provenance +5 · SLSA subject matches digest +2 · Multi-arch +3 · Signed SBOM attestation
docker pull cgr.dev/chainguard/node:latest
OpenJDK · openjdk
cgr.dev/chainguard/jre:latest
· 110 MB · 2-arch · pushed today
NOW
A
100
FIRST SCAN
A
yesterday
OPEN CVES
0 / 0 / 3
C / H / M
PULLS
—
repo-level
Pull →
▸ rubric breakdown (7 signals)
+10 · Runs as non-root +10 · Rebuilt in last 90 days +5 · Cosign signature +5 · SLSA provenance +5 · SLSA subject matches digest +2 · Multi-arch +3 · Signed SBOM attestation
docker pull cgr.dev/chainguard/jre:latest
PHP · php
cgr.dev/chainguard/php:latest
· 22 MB · 2-arch · pushed today
NOW
A
100
FIRST SCAN
A
today
OPEN CVES
0 / 0 / 0
C / H / M
PULLS
—
repo-level
Pull →
▸ rubric breakdown (7 signals)
+10 · Runs as non-root +10 · Rebuilt in last 90 days +5 · Cosign signature +5 · SLSA provenance +5 · SLSA subject matches digest +2 · Multi-arch +3 · Signed SBOM attestation
docker pull cgr.dev/chainguard/php:latest
Postgres · postgres
cgr.dev/chainguard/postgres:latest
· 144 MB · 2-arch · pushed today
NOW
A
100
FIRST SCAN
A
today
OPEN CVES
0 / 0 / 0
C / H / M
PULLS
—
repo-level
Pull →
▸ rubric breakdown (6 signals)
+10 · Rebuilt in last 90 days +5 · Cosign signature +5 · SLSA provenance +5 · SLSA subject matches digest +2 · Multi-arch +3 · Signed SBOM attestation
docker pull cgr.dev/chainguard/postgres:latest
Python · python
cgr.dev/chainguard/python:latest
· 27 MB · 2-arch · pushed yesterday
NOW
A
100
FIRST SCAN
A
today
OPEN CVES
0 / 0 / 2
C / H / M
PULLS
—
repo-level
Pull →
▸ rubric breakdown (7 signals)
+10 · Runs as non-root +10 · Rebuilt in last 90 days +5 · Cosign signature +5 · SLSA provenance +5 · SLSA subject matches digest +2 · Multi-arch +3 · Signed SBOM attestation
docker pull cgr.dev/chainguard/python:latest
Ruby · ruby
cgr.dev/chainguard/ruby:latest
· 27 MB · 2-arch · pushed yesterday
NOW
A
100
FIRST SCAN
A
today
OPEN CVES
0 / 0 / 0
C / H / M
PULLS
—
repo-level
Pull →
▸ rubric breakdown (7 signals)
+10 · Runs as non-root +10 · Rebuilt in last 90 days +5 · Cosign signature +5 · SLSA provenance +5 · SLSA subject matches digest +2 · Multi-arch +3 · Signed SBOM attestation
docker pull cgr.dev/chainguard/ruby:latest
Rust · rust
cgr.dev/chainguard/rust:latest
· 396 MB · 2-arch · pushed yesterday
NOW
A
100
FIRST SCAN
A
yesterday
OPEN CVES
0 / 0 / 0
C / H / M
PULLS
—
repo-level
Pull →
▸ rubric breakdown (7 signals)
+10 · Runs as non-root +10 · Rebuilt in last 90 days +5 · Cosign signature +5 · SLSA provenance +5 · SLSA subject matches digest +2 · Multi-arch +3 · Signed SBOM attestation
docker pull cgr.dev/chainguard/rust:latest
Valkey · valkey
cgr.dev/chainguard/valkey:latest
· 12 MB · 2-arch · pushed yesterday
NOW
A
100
FIRST SCAN
A
today
OPEN CVES
0 / 0 / 0
C / H / M
PULLS
—
repo-level
Pull →
▸ rubric breakdown (7 signals)
+10 · Runs as non-root +10 · Rebuilt in last 90 days +5 · Cosign signature +5 · SLSA provenance +5 · SLSA subject matches digest +2 · Multi-arch +3 · Signed SBOM attestation
docker pull cgr.dev/chainguard/valkey:latest
Caddy · caddy
cgr.dev/chainguard/caddy:latest
NOW
—
FIRST SCAN
—
OPEN CVES
—
C / H / M
PULLS
—
repo-level
Pull →
Memcached · memcached
cgr.dev/chainguard/memcached:latest
NOW
—
FIRST SCAN
—
OPEN CVES
—
C / H / M
PULLS
—
repo-level
Pull →
Traefik · traefik
cgr.dev/chainguard/traefik:latest
NOW
—
FIRST SCAN
—
OPEN CVES
—
C / H / M
PULLS
—
repo-level
Pull →