Chainguard Images: Minimal and Signed Images

Updated: 2026-07-07

Chainguard^[1] is the company founded by Sigstore’s creators, focused on practical supply chain security. Its main product is Chainguard Images: Docker images built with extreme rigour, with zero known CVEs, signed SBOMs and reproducible builds out of the box. For enterprises with strict compliance or wanting to reduce attack surface, they are a serious alternative to debian:latest or alpine:latest.

Key takeaways

• Zero known CVEs at publication time: images are rebuilt daily.

• Sigstore/Cosign-signed SBOMs included out of the box: cryptographic verification without extra steps.

• Based on Wolfi, Chainguard’s own glibc distribution, avoiding Alpine’s musl incompatibilities.

• The free tier covers the most popular latest images; pinned versions and SLA support are enterprise.

• Distroless without a shell is the production variant; the -dev variant adds build tools for multi-stage use.

What they offer

Every Chainguard image has traits that set it apart from official Docker Hub images:

• Minimal: only what the application needs to run. No bash, no package manager, no debugging utilities that widen the attack surface.

• Zero known CVEs: rebuilt daily; when a vulnerability appears, the fix lands in hours, not months. This complements (it does not replace) continuous scanning with tools such as Trivy or Grype.

• Signed with Sigstore: any CI system can verify the signature before using the image.

• Automatic, signed SBOMs: you know exactly which packages are inside and at which version.

• Reproducible builds: given the same input, the output hash is deterministic, in line with the provenance levels defined by SLSA.

Typical usage: multi-stage Dockerfile

FROM cgr.dev/chainguard/node:latest-dev AS builder
WORKDIR /app
COPY package*.json ./
RUN npm ci && npm run build

FROM cgr.dev/chainguard/node:latest
WORKDIR /app
COPY --from=builder /app/dist ./dist
COPY --from=builder /app/node_modules ./node_modules
CMD ["node", "dist/index.js"]

Result: ~100 MB runtime vs ~200-300 MB official Node. No shell, no npm, no wget, no curl in production.

Verification with cosign

cosign verify cgr.dev/chainguard/node:latest 
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com 
  --certificate-identity-regexp='.*chainguard.*'

This cryptographic verification closes the loop between who built the image and which pipeline was used. It is compatible with Kubernetes admission-control policies via Kyverno or Gatekeeper. To integrate this verification into the full pipeline, see also practical DevSecOps with Sigstore and cosign.

Size comparison

Comparable in size to Google’s Distroless, but with active daily CVE management and SBOMs included.

Chainguard vs Alpine

Alpine uses musl libc, which occasionally causes subtle incompatibilities with apps designed for glibc: DNS resolution issues, locale handling, threading quirks. Chainguard uses Wolfi with standard glibc, which eliminates that whole class of incidents.

When it makes sense to adopt Chainguard

It makes sense to adopt when:

• The organisation has strict compliance requirements (PCI-DSS, HIPAA, FedRAMP) and needs auditable pipelines.

• Supply chain security is a high priority on the security roadmap.

• CVE reduction is an ESG reporting or audit metric.

• Production workloads handle sensitive data where the blast radius of a compromise matters.

It makes less sense when:

• These are personal projects or experiments where the overhead is not worth it.

• The app has legacy dependencies specific to glibc that are not covered by the Wolfi catalogue.

• The team lacks the capacity to manage the lifecycle of pinned images.

Pricing and tiers

The free public tier covers the latest images of the most popular stacks with daily updates. The enterprise tier adds:

• Pinned-version images (cgr.dev/chainguard/node:20).

• SLA-backed support.

• Custom images for internal stacks.

• FIPS-certified variants for government environments.

For most teams, the free tier is enough to get started and evaluate the impact on CVE count.

Conclusion

Chainguard Images represent where the enterprise container ecosystem is heading: minimal, signed, updatable, auditable. For companies with compliance requirements or that value serious supply chain security, the cost of migrating pays for itself quickly in reduced audit work and better risk metrics. The free public tier allows commitment-free evaluation. Against Docker Hub’s official "latest" images, the difference in CVE count and risk profile is measurable from the first scan.

Sources

1. Chainguard