CHAINGUARD REPOSITORY

Last Update: November 5, 2026

Chainguard Repository is a software artifact management service that enables Customer to proxy, store, and distribute software artifacts (e.g., software libraries, container images, Helm charts, and operating system packages) across supported package ecosystems. In connection with Customer's use of Chainguard Repository, Customer may publish or upload Customer's own software artifacts (“Secured Platform Inputs”) to a Chainguard registry. Customer is solely responsible for Secured Platform Inputs, including its content, security, and compliance with applicable licenses, and represents that it has all rights necessary to upload them. 

Optional Features

Customer may also enable certain Optional Features, as described in the Documentation at https://www.chainguard.dev/docs/chainguard/chainguard-repository. Certain Optional Features may scan artifacts for malware and other security signals. They then apply Customer-configurable policies to decide whether to serve, block, or quarantine an artifact (“Secured Platform Outputs”). AI tools may make these serving decisions without human review at every step and Secured Platform Outputs may include false positives, such as blocking a benign artifact or failing to detect a malicious artifact. Customer should always independently review and validate any Secured Platform Output before deploying in production. 

Chainguard Repository is subject to the Secured Platform Terms: https://www.chainguard.dev/legal/secure-platform-terms  as a Technology Preview and is not a generally available Product or Service.