Procedural

An overview of how to instal rekor-cli to query the Sigstore transparency log

Tutorial on how to generate a certificate with Fulcio for software security

Confirming the authenticity of a Fulcio certificate for a more secure software supply chain

melange is a declarative apk builder

Using identity and access management in Chainguard

Details for installing Cosign across operating systems

What to check when the Chainguard Console or a security advisory says a CVE is fixed, but your vulnerability scanner still reports it.