Procedural
How to sign blobs and standard files with Cosign
Use Cosign to sign non-container software artifacts
Run checks before you push with Chainguard WorkspacesRun your repository's checks against uncommitted changes in a Chainguard Workspaces session, and validate your Chainguard Checks configuration offline before you push.
Enable PKCE for OAuth token exchangeHow to add PKCE to your custom identity provider's OAuth token exchange with Chainguard, either alongside a client secret or as a secret-free public client.
Using the Chainguard API to manage Custom Assembly resourcesHow to use the Chainguard API to manage Custom Assembly resources.
Bazel rules for apkoBuild secure, minimal Wolfi-based container images using Bazel
Create an assumable identity for a Buildkite pipelineProcedural tutorial outlining how to create a Chainguard identity that can be assumed by a Buildkite workflow.
How to set up an instance of Rekor locallyCreate your own instance of the Rekor transparency log