Chainguard Registry vs Volcengine Container Registry

Chainguard Registry provides Chainguard Containers: minimal container images rebuilt from source daily. Its directory lists 3,115 projects and 735,898 images. Chainguard says images are continuously built in SLSA L3 hardened infrastructure with CVE patching, and lists Sigstore-signed artifacts with build-time SBOMs and digital attestations. The free offer allows up to five images per organization; the FAQ describes a freely available set of about 50 images, limited to:latest tags and without a CVE remediation SLA. Catalog plans include upstream-supported major and minor tags, contractual remediation timelines of seven days for critical vulnerabilities and 14 days for other listed severity levels, and requests for new images. Catalog features also include automated Custom Assembly tooling, a private APK repository with more than 10,000 packages, and STIG-hardened and FIPS-validated images. Images can be pulled from Chainguard or mirrored to listed artifact managers. Chainguard lists compatibility with multiple scanners. Free Images costs nothing; Catalog is priced on request. The product runs on Linux, self-hosted, and web environments.

Volcengine Container Registry stores OCI-compliant artifacts, including container images and Helm charts, and provides tools to manage their lifecycle. Users can push, pull, and clean up images with Docker, Nerdctl, or Helm. Image scans can report vulnerabilities, malicious or unexpected files, and possible remediation. The service also supports IAM policies for user authorization and resource-level permissions. Standard Edition instances can use server-side image encryption when enabled at creation. Standard Edition can replicate images and Helm charts across instances, regions, and repositories, with up to five enabled rules per account. Proxy caches can draw from Docker Hub, GHCR, and self-hosted Docker registries. The registry integrates with Volcengine Kubernetes Engine for internal-network image pulls, and Standard Edition supports P2P acceleration for large cluster pulls. Micro Edition provides five namespaces and 500 GiB of storage; Standard Edition provides 50 namespaces and unlimited namespace storage by default. A free Trial Edition costs nothing, but is quota-limited and cannot expand its quota. Subscription prices listed for Chinese mainland are 50 CNY a month for Micro Edition and 1,349 CNY a month for Standard Edition, per instance.