# Building Chainguard's container image registry

DevFeed: [Building Chainguard's container image registry](<https://devfeed.tech/articles/building-chainguard-s-container-image-registry-12903.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/building-chainguards-container-image-registry>)

Published: 2023-05-23T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [Cloudflare](<https://devfeed.tech/topics/cloudflare.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-image-registry](<https://devfeed.tech/tags/chainguard-image-registry.md>), [cloudflare](<https://devfeed.tech/tags/cloudflare.md>), [container](<https://devfeed.tech/tags/container.md>), [container-image](<https://devfeed.tech/tags/container-image.md>), [container-image-registry](<https://devfeed.tech/tags/container-image-registry.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [github-container-registry](<https://devfeed.tech/tags/github-container-registry.md>), [hardened-image](<https://devfeed.tech/tags/hardened-image.md>), [minimal-image](<https://devfeed.tech/tags/minimal-image.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [registry](<https://devfeed.tech/tags/registry.md>), [secure-by-design](<https://devfeed.tech/tags/secure-by-design.md>), [secure-container-images](<https://devfeed.tech/tags/secure-container-images.md>), [secure-images](<https://devfeed.tech/tags/secure-images.md>), [secure-minimal-image](<https://devfeed.tech/tags/secure-minimal-image.md>), [security](<https://devfeed.tech/tags/security.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>)

## AI overview

Chainguard explains why it built its own passwordless container image registry to improve security, control distribution, and manage costs. The registry is built on Cloudflare R2, uses short-lived OIDC credentials, and allows GitHub Actions workflows--not individual employees--to push images.

## Source excerpt

We built a passwordless container image registry with a focus on security to sustain the foundation for ongoing product growth & feature additions for our users.