Quenchworks

Compare

QuenchWorks vs Bitnami vs Chainguard

All three build hardened images from source on Wolfi, sign them, and ship SBOMs. The real difference is access. Bitnami moved its free community catalog to a paid Tanzu offering and left a legacy registry behind. Chainguard is a commercial subscription. QuenchWorks is free and independent: public images, signed charts pinned by digest, and build workflows anyone can read. Here are the facts, side by side.

Price

QuenchWorks
Free
Bitnami
Paid Free community catalog moved to a paid Tanzu offering; a legacy registry remains
Chainguard
Paid Commercial subscription

Built from source on Wolfi

QuenchWorks
Yes
Bitnami
Yes
Chainguard
Yes

0-CVE goal with daily rebuilds

QuenchWorks
Yes Hard Trivy gate; a fixable CVE fails the build
Bitnami
Yes
Chainguard
Yes

Signed (cosign keyless)

QuenchWorks
Yes
Bitnami
Yes
Chainguard
Yes

SBOM (SPDX)

QuenchWorks
Yes
Bitnami
Yes
Chainguard
Yes

SLSA build provenance

QuenchWorks
Yes
Bitnami
Partial Varies by offering
Chainguard
Yes

Multi-arch (amd64 + arm64)

QuenchWorks
Yes
Bitnami
Yes
Chainguard
Yes

Helm charts included

QuenchWorks
Yes
Bitnami
Yes Behind the paid catalog
Chainguard
No Images focused

Charts pin images by digest

QuenchWorks
Yes
Bitnami
Yes
Chainguard
n/a

License transparency, clean alternatives flagged

QuenchWorks
Yes Source-available apps are labeled, with an OSI-clean alternative named
Bitnami
Partial
Chainguard
Partial

Open and free to verify

QuenchWorks
Yes Public images, charts, and build workflows
Bitnami
Partial Gated behind a subscription
Chainguard
Partial Gated behind a subscription

Bitnami and Chainguard are solid engineering. This page is not a knock on either one. It exists because the free, no-account path that many teams relied on is now a paid path, and QuenchWorks keeps that path open. Verify any claim here against the public images and workflows.

Free, hardened, and yours to verify.

Browse the catalog or read the source. No account, no registry to add.