Chainguard Registry vs Cosmoner Container Registry

Chainguard Registry provides Chainguard Containers: minimal container images rebuilt from source daily. Its directory lists 3,115 projects and 735,898 images. Chainguard says images are continuously built in SLSA L3 hardened infrastructure with CVE patching, and lists Sigstore-signed artifacts with build-time SBOMs and digital attestations. The free offer allows up to five images per organization; the FAQ describes a freely available set of about 50 images, limited to:latest tags and without a CVE remediation SLA. Catalog plans include upstream-supported major and minor tags, contractual remediation timelines of seven days for critical vulnerabilities and 14 days for other listed severity levels, and requests for new images. Catalog features also include automated Custom Assembly tooling, a private APK repository with more than 10,000 packages, and STIG-hardened and FIPS-validated images. Images can be pulled from Chainguard or mirrored to listed artifact managers. Chainguard lists compatibility with multiple scanners. Free Images costs nothing; Catalog is priced on request. The product runs on Linux, self-hosted, and web environments.

Cosmoner Container Registry is a managed private registry backed by Amazon ECR for storing container images used by apps. Developers can push and pull images from a laptop or CI system with Docker and a Cosmoner API key. Images in a project registry appear in the Apps image deployment flow, where deployments authenticate without a pull secret. Scanning on push is enabled by default and checks images against known vulnerabilities. Images use AES256 encryption by default, with a customer KMS key available for repositories created afterward. Retention settings can keep a selected number of recent images and expire untagged images after a chosen number of days. Repositories are private by default; public repositories require a monthly egress cap and revert to private when it is reached. The product lists nine regions across North America, Europe, and Asia Pacific, and a registry’s region cannot be changed after creation. Uploads are not charged; egress, storage, and a registry fee are billed separately. The registry fee is $1 a month, prorated from creation; storage is $0.25 a month per GB, and egress is $0.15 a month per GB after the first 10 GB per organization per billing period.