Chainguard Plugins for Claude Code
Official Chainguard plugins for Claude Code - bringing supply chain security and secure container images to your development workflow.
Available Plugins
Access Chainguard's complete documentation library through a Model Context Protocol (MCP) server.
Features:
- Search across all Chainguard documentation
- Get detailed container image information
- Access security guides and CVE management docs
- Learn about Wolfi, apko, melange, and chainctl
- Real-time documentation updates
Perfect for:
- Learning about Chainguard products and services
- Finding the right container image for your project
- Understanding supply chain security concepts
- Looking up tool documentation
Generate secure code and configurations using Chainguard Containers and tools.
Features:
- Generate secure Dockerfiles with Chainguard Containers
- Migrate existing Dockerfiles to Chainguard
- Create apko/melange configurations
- Apply security best practices automatically
- Multi-stage build optimization
Perfect for:
- Creating new containerized applications
- Migrating existing projects to Chainguard
- Building custom Wolfi-based images
- Implementing security best practices
Installation
Add the Chainguard Marketplace
/plugin marketplace add github.com/chainguard-demo/claude-plugins
Install Both Plugins
/plugin install chainguard-docs@chainguard-plugins
/plugin install chainguard-codegen@chainguard-plugins
Or Install Individually
Documentation only:
/plugin install chainguard-docs@chainguard-plugins
Code generation only:
/plugin install chainguard-codegen@chainguard-plugins
Quick Start
Once installed, try these example prompts:
Using chainguard-docs
"What Chainguard images are available for Python?"
"How does Chainguard handle CVE management?"
"Show me the nginx image documentation"
"Search Chainguard docs for SBOM generation"
Using chainguard-codegen
"Generate a Dockerfile for a Python Flask app using Chainguard Containers"
"Migrate this Dockerfile to use Chainguard Containers"
"Create an apko config for a Node.js application"
"Generate a secure multi-stage Dockerfile for Go"
Requirements
chainguard-docs
- Docker installed and running (for MCP server)
- Internet connection
chainguard-codegen
- No additional requirements
Plugin Architecture
chainguard-docs
This plugin wraps Chainguard's MCP server (ghcr.io/chainguard-dev/ai-docs:latest) which provides:
- Full-text search across documentation
- Structured access to container image docs
- Security and tool reference materials
- Weekly automated updates
chainguard-codegen
This plugin includes specialized AI skills that help Claude Code:
- Generate secure Dockerfiles following best practices
- Migrate legacy Dockerfiles to Chainguard Containers
- Create apko configurations for custom Wolfi images
- Apply security defaults and multi-stage builds
What are Chainguard Containers?
Chainguard Containers are secure, minimal container images designed for production use:
- Zero CVEs: No known vulnerabilities, regularly updated
- Minimal: Only includes what's necessary, reducing attack surface
- SBOM: Complete software bill of materials included
- Signed: Cryptographically signed with Sigstore
- Non-root: Run as non-root user by default
- Variants: Production (
:latest) and development (:latest-dev) variants
Learn more at images.chainguard.dev
Examples
Example 1: Learning About Images
You: What Chainguard images are available for Python development?
Claude Code: [Uses chainguard-docs MCP server]
Based on Chainguard documentation, here are the Python images:
- cgr.dev/chainguard/python:latest - Minimal production runtime
- cgr.dev/chainguard/python:latest-dev - Development variant with pip and build tools
...
Example 2: Generating a Dockerfile
You: Generate a secure Dockerfile for a Django application
Claude Code: [Uses chainguard-codegen skills]
I'll create a secure multi-stage Dockerfile using Chainguard's Python image:
FROM cgr.dev/chainguard/python:latest-dev AS builder
WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt --user
FROM cgr.dev/chainguard/python:latest
WORKDIR /app
COPY --from=builder /home/nonroot/.local /home/nonroot/.local
COPY --chown=nonroot:nonroot . .
ENV PATH=/home/nonroot/.local/bin:$PATH
EXPOSE 8000
CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]
Example 3: Migrating Existing Code
You: Can you migrate this Dockerfile to use Chainguard Containers?
FROM python:3.12-slim
WORKDIR /app
COPY requirements.txt .
RUN pip install -r requirements.txt
COPY . .
CMD ["python", "app.py"]
chainguard-demo