Custom Assembly
Guarded Entrypoint for Custom Assembly
How Guarded Entrypoint lets a Custom Assembly image resolve secrets, run preflight checks, and override its command at container start, and how to turn it on.
Overview of Custom Assembly OverlaysHow Custom Assembly Overlays use overlays and bindings to apply customizations to a subset of a repository's tags, or to every repository in an organization or folder.
How Guarded Entrypoint worksWhat the Guarded Entrypoint wrapper does at container start: secret references, fail mode, preflight checks, command override, and variable expansion.
Manage Custom Assembly Overlays with chainctlHow to use chainctl to create overlays and bind them to specific tags of a repository, or to every repository in an organization or folder.
Adding a package to a Chainguard ContainerChoose how to add a package to a Chainguard Container, find the package name, apply the change, and confirm the package reached the finished image.
Overview of Chainguard Custom AssemblyHow to use Chainguard's Custom Assembly tool
Guarded Entrypoint examplesExample Custom Assembly manifests that use Guarded Entrypoint to inject secrets, wait for a dependency, override a command, and fail open.