Chainguard Registry vs Cloudfleet Container Registry

Chainguard Registry provides Chainguard Containers: minimal container images rebuilt from source daily. Its directory lists 3,115 projects and 735,898 images. Chainguard says images are continuously built in SLSA L3 hardened infrastructure with CVE patching, and lists Sigstore-signed artifacts with build-time SBOMs and digital attestations. The free offer allows up to five images per organization; the FAQ describes a freely available set of about 50 images, limited to:latest tags and without a CVE remediation SLA. Catalog plans include upstream-supported major and minor tags, contractual remediation timelines of seven days for critical vulnerabilities and 14 days for other listed severity levels, and requests for new images. Catalog features also include automated Custom Assembly tooling, a private APK repository with more than 10,000 packages, and STIG-hardened and FIPS-validated images. Images can be pulled from Chainguard or mirrored to listed artifact managers. Chainguard lists compatibility with multiple scanners. Free Images costs nothing; Catalog is priced on request. The product runs on Linux, self-hosted, and web environments.

Cloudfleet Container Registry, or CFCR, is a managed OCI-compliant registry for storing, sharing, and managing container images. It supports Docker images, multi-architecture images, Helm charts, and other OCI artifacts, and is included with every Cloudfleet organization without extra provisioning. Regions are available in Europe, North America, and Asia Pacific; the European region uses EU-based infrastructure. Teams can push and pull through the standard Docker CLI or Docker Registry HTTP API V2. Cloudfleet Kubernetes Engine clusters authenticate automatically with short-lived credentials, avoiding image pull secrets or service accounts. CI/CD examples cover GitHub Actions, GitLab CI, Jenkins, CircleCI, and Azure DevOps. Each organization receives an isolated namespace, with administrators able to push and pull while users have pull-only access. Authenticated users and Cloudfleet Kubernetes Engine clusters have no pull rate limits. The first 5 GB of storage is free, unlimited data transfer is listed as free, and Kubernetes Engine pulls have no egress fees.