thespider/kaniko repository overview

⁠Kaniko Resurrected

⁠Quick reference

• Codebase Maintained by:
  Chainguard⁠ github⁠
• Original Archived Codebase:
  GoogleContainerTools/kaniko⁠

⁠Supported tags

• latest, latest-vX.X.X
  This is the latest kaniko executor release from Chainguard⁠.
• debug, debug-vX.X.X
  The kaniko executor image is based on scratch and doesn't contain a shell. The debug image consists of the kaniko executor image along with a busybox shell to enter.

⁠What is Kaniko?

Kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster with no required privileges.

⁠Why Rebuild?

The Kaniko project was originally created by Priya Wadhwa⁠, Dan Lorenc⁠, and others at Google and published at GoogleContainerTools/kaniko⁠.

The project was archived in June 2025 and forked by Chainguard, including Priya and Dan,⁠ to chainguard-dev/kaniko⁠ to continue upkeep with security patches and maintenance of the project.

Chainguard has put the kaniko container images behind a pay-wall to support active development. While it is perfectly reasonable for them to do, I still need the images myself. This repository builds the images from source and places them in a location anyone can use.

⁠Inclusion of Custom Root CA

This build includes a custom internal root certificate authority to trust custom internal resources. Realistically, this impact should be non-existent, as the certificates generated from this CA are not publicly used. However, this may be a valid concern/issue for you and/or your organization. If you have any issue with this, please don't use this image.