Procedural
Create an assumable identity for a Kubernetes pod
Procedural tutorial outlining how to create a Chainguard identity that can be assumed by a Kubernetes pod.
Authenticating with the Chainguard SDKTutorial with examples showing how you can authenticate with the Chainguard SDK's auth and auth/ggcr packages.
Creating Wolfi images with DockerfilesThis tutorial demonstrates how to build a Wolfi Python image from scratch, using a Dockerfile workflow.
How to sign and upload metadata to RekorUse the Rekor CLI to sign and upload metadata to the Sigstore transparency log
How to sign blobs and standard files with CosignUse Cosign to sign non-container software artifacts
Run checks before you push with Chainguard WorkspacesRun your repository's checks against uncommitted changes in a Chainguard Workspaces session, and validate your Chainguard Checks configuration offline before you push.
Enable PKCE for OAuth token exchangeHow to add PKCE to your custom identity provider's OAuth token exchange with Chainguard, either alongside a client secret or as a secret-free public client.