
A command-line tool that extracts manifest and configuration data from Docker registry images for security analysis and reconnaissance purposes.
Checked October 2026.
go-pillage-registries is a command-line tool designed to extract and analyze Docker registry contents by retrieving manifest and configuration data for each image in a registry's catalog.
The tool utilizes Google's crane command package and follows Docker's keychain semantics for authentication. It provides functionality to enumerate repositories within a registry using the catalog API or allows users to specify particular repositories to scan.
Key capabilities include:
The tool accepts various command-line flags to customize scanning behavior, including options for insecure connections, TLS certificate verification bypass, result storage paths, and image caching locations.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about go-pillage-registries: features, pricing and alternatives.
go-pillage-registries is a product in the Container Security category. It covers Enumeration, Configuration Management and Reconnaissance.
go-pillage-registries is free. Download and setup instructions are at https://github.com/nccgroup/go-pillage-registries/.
Alternatives to go-pillage-registries listed on CybersecTools:
Compare all go-pillage-registries alternatives at https://cybersectools.com/alternatives/go-pillage-registries
go-pillage-registries is available as on-premises. It is listed for smb, mid-market and enterprise organizations. It is free.
Side by side: features, pricing model and the company behind each one.
Runtime container security platform providing workload isolation via microVMs
Istio-based service mesh for 5G microservices & cloud-native deployments
Gatekeeper is a policy management tool for Kubernetes that provides an extensible, parameterized policy library and native Kubernetes CRDs for instantiating and extending the policy library.
Grype is a vulnerability scanner for container images and filesystems that scans for known vulnerabilities and supports various image formats.
Agentless AI platform for real-time container attack detection and containment.
gVisor is a Go-based application kernel that provides enhanced container isolation by implementing Linux system calls and limiting host kernel exposure through its runsc OCI runtime.
On our shortlist?
go-pillage-registries is not a pick on the current Best Container Security Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,025 products.
Connect your AI