# go-pillage-registries

go-pillage-registries is a Container Security product. It runs on-premises. Pricing is free.

A command-line tool that extracts manifest and configuration data from Docker registry images for security analysis and reconnaissance purposes.

Checked October 2026.

## What is go-pillage-registries?

go-pillage-registries is a command-line tool designed to extract and analyze Docker registry contents by retrieving manifest and configuration data for each image in a registry's catalog.

The tool utilizes Google's crane command package and follows Docker's keychain semantics for authentication. It provides functionality to enumerate repositories within a registry using the catalog API or allows users to specify particular repositories to scan.

Key capabilities include:
- Extracting image manifests and configurations from Docker registries
- Supporting both secure and insecure connections with TLS verification options
- Caching image layers locally when images are downloaded
- Storing results as JSON output to stdout or saving to specified directories
- Optional downloading and archiving of complete filesystem contents for discovered images
- Repository enumeration through catalog API or manual specification

The tool accepts various command-line flags to customize scanning behavior, including options for insecure connections, TLS certificate verification bypass, result storage paths, and image caching locations.

Tags: Enumeration, Configuration Management, Reconnaissance

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Cloud Security](https://cybersectools.com/categories/cloud-security) · [Container Security](https://cybersectools.com/categories/container-security)
- Deployment: On-Premises
- Company size fit: SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 114
- Website: github.com

## Where it ranks

go-pillage-registries is not a pick on the current [Best Container Security Solutions for Business](https://cybersectools.com/shortlists/best-container-security-solutions).

## go-pillage-registries FAQ

### What is go-pillage-registries?

go-pillage-registries is a product in the Container Security category. It covers Enumeration, Configuration Management and Reconnaissance.

### What is the pricing for go-pillage-registries?

go-pillage-registries is free. Download and setup instructions are at https://github.com/nccgroup/go-pillage-registries/.

### What are alternatives to go-pillage-registries?

Alternatives to go-pillage-registries listed on CybersecTools:

1. [Xcitium Kubernetes Security Posture Management](https://cybersectools.com/tools/xcitium-kubernetes-security-posture-management) - Kubernetes security posture management with compliance monitoring and risk assessment (Commercial)
2. [Anchore Enforce](https://cybersectools.com/tools/anchore-enforce) - Policy enforcement & compliance mgmt for container security across SDLC (Commercial)
3. [Chainguard VMs](https://cybersectools.com/tools/chainguard-vms) - Minimal, zero-CVE virtual machine images for container hosts and applications (Commercial)
4. [Plexicus Container Security](https://cybersectools.com/tools/plexicus-container-security) - Container security platform scanning images, enforcing K8s policies & runtime threats (Commercial)
5. [TrendAI Vision One Container Security](https://cybersectools.com/tools/trend-micro-container-security) - Container security platform with image scanning, admission control, and runtime (Commercial)

Compare all go-pillage-registries alternatives at [https://cybersectools.com/alternatives/go-pillage-registries](https://cybersectools.com/alternatives/go-pillage-registries)

### What deployment and organization size does go-pillage-registries fit?

go-pillage-registries is available as on-premises. It is listed for smb, mid-market and enterprise organizations. It is free.

## Compare go-pillage-registries with similar solutions

- [go-pillage-registries vs Xcitium Kubernetes Security Posture Management](https://cybersectools.com/compare/go-pillage-registries-vs-xcitium-kubernetes-security-posture-management)
- [go-pillage-registries vs Anchore Enforce](https://cybersectools.com/compare/anchore-enforce-vs-go-pillage-registries)
- [go-pillage-registries vs Chainguard VMs](https://cybersectools.com/compare/chainguard-vms-vs-go-pillage-registries)

All alternatives to go-pillage-registries: [/alternatives/go-pillage-registries](https://cybersectools.com/alternatives/go-pillage-registries)

---

Source: https://cybersectools.com/tools/go-pillage-registries

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on go-pillage-registries: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md