Bitwarden's dedicated self-hosted release repository. This holds the installation scripts and container images for our self-host project.
For any issues regarding a specific client application, please visit bitwarden/clients
Bitwarden provides OCI-Compliant container images in our ghcr.io repository.
All images published to ghcr.io are
signed by using Cosign's keyless signing. The images can be
verified with the following command (where $IMAGE_NAME is set to an image in our repository):
$ cosign verify ghcr.io/bitwarden/$IMAGE_NAME:latest --certificate-identity-regexp="https://github\.com/bitwarden/deploy/\.github/workflows/release-self-host\.yml@.*" --certificate-oidc-issuer="https://token.actions.githubusercontent.com"Images released before 2026.4.1 were signed by a release workflow that lived in this repository. To verify those, use
--certificate-identity-regexp="https://github\.com/bitwarden/self-host/\.github/workflows/release\.yml@.*" instead.
