Chainguard Containers

How Guarded Entrypoint lets a Custom Assembly image resolve secrets, run preflight checks, and override its command at container start, and how to turn it on.

Scan a repository for container image references and see which Chainguard container images replace them, and whether your organization can pull them today.

How Custom Assembly Overlays use overlays and bindings to apply customizations to a subset of a repository's tags, or to every repository in an organization or folder.

What the Guarded Entrypoint wrapper does at container start: secret references, fail mode, preflight checks, command override, and variable expansion.

How to use chainctl to create overlays and bind them to specific tags of a repository, or to every repository in an organization or folder.

Choose how to add a package to a Chainguard Container, find the package name, apply the change, and confirm the package reached the finished image.

When a container or version isn't available to you: how to identify which situation you're in, what to do about each, and when to open a support request.