Procedural
Disallowing run as root user
Using Policy Controller to prevent running pods as root
Maximum container image ageMaximum container image age with Policy Controller
Disallowing unsafe sysctlsUse Policy Controller to limit pods to safe sysctls
Verify signed Chainguard ContainersUsing Policy Controller to verify signed Chainguard Containers
How to install Sigstore Policy ControllerInstall the Sigstore Policy Controller into a Kubernetes cluster
How to keyless sign a container image with SigstoreUse Cosign and GitHub Actions to keyless sign a Django container image
Get started with Chainguard ChecksSign up for Chainguard Checks, add a .chainguard/ci.yaml file to a repository, and see your first checks run on a GitHub pull request.