PROCEDURAL

Procedural tutorial outlining how to create a Chainguard Enforce identity that can be assumed by a GitHub Actions workflow.

Use Rekor or curl to verify non-container software artifacts

Create your own instance of the Rekor transparency log

Signing software bills of materials with Cosign

Using Policy Controller to prevent running pods with extra capabilities

Using Policy Controller to prevent running privileged pods

Using Policy Controller to prevent running pods as root