Procedural

Signing software bills of materials with Cosign

This overview serves as a collection of information and resources on migrating to Chainguard Images.

Tutorial outlining how to set up a Google Artifact Registry repository to pull Images through from the Chainguard Registry.

Procedural tutorial outlining how to create a Chainguard Enforce identity that can be assumed by a GitHub Actions workflow.

Use Rekor or curl to verify non-container software artifacts

Create your own instance of the Rekor transparency log

Using Policy Controller to prevent running pods with extra capabilities