Procedural
Disallowing unsafe sysctls
Use Policy Controller to limit pods to safe sysctls
Verify signed Chainguard ContainersUsing Policy Controller to verify signed Chainguard Containers
How to install Sigstore Policy ControllerInstall the Sigstore Policy Controller into a Kubernetes cluster
How to keyless sign a container image with SigstoreUse Cosign and GitHub Actions to keyless sign a Django container image
Check whether a reported CVE affects your containerUse chainctl images advisories list to compare a scanner's CVE findings with Chainguard's advisories for the APK packages in an image.
How to provision users into Chainguard from Okta with SCIMProcedural tutorial on how to set up SCIM provisioning from Okta to the Chainguard platform.
SCIM user provisioning