Procedural

Procedural tutorial outlining how to create a Chainguard Enforce identity that can be assumed by a GitHub Actions workflow.

Use Cosign to verify non-container software artifacts

Use Rekor or curl to verify non-container software artifacts

Create your own instance of the Rekor transparency log

Signing software bills of materials with Cosign

Using Policy Controller to prevent running pods with extra capabilities

Using Policy Controller to prevent running privileged pods