Chainguard

Check CVEs and security advisories for a Chainguard image or APK package. Use when the user asks about vulnerabilities, CVEs, or the security status of an image.

Compare versions of a Chainguard image, show changelogs, and identify the latest digest. Use when the user asks what changed between image versions or wants to pin to a specific digest.

Find the right Chainguard container image for a given language, framework, or tool. Use when the user asks which cgr.dev image to use, or wants to replace a Docker Hub base image.

Inspect a Chainguard image's packages, SBOM, entrypoint, and configuration. Use when the user wants to know what is inside a cgr.dev image or needs an SBOM summary.

Configure a Java/Maven or Gradle project to use Chainguard Libraries for hardened Java dependencies. Use when the user wants to set up Chainguard Libraries for Maven or Gradle, or asks about hardened Java packages.

Configure an npm/Node.js project to use Chainguard Libraries for hardened JavaScript packages. Use when the user wants to set up Chainguard Libraries for npm, Yarn, or pnpm, or asks about hardened Node.js packages.

Configure a Python project to use Chainguard Libraries for hardened PyPI packages. Use when the user wants to set up Chainguard Libraries for pip, uv, or Poetry, or asks about hardened Python packages.

Migrate an existing Dockerfile to use a Chainguard base image. Use when the user wants to harden a Dockerfile, replace a Docker Hub base image, or apply a multi-stage build pattern with cgr.dev images.

Verify and set up Chainguard authentication using chainctl. Use when the user asks how to log in, check auth status, or when Chainguard commands are failing due to missing credentials.