Procedural
How to set up an instance of Rekor locally
Create your own instance of the Rekor transparency log
How to sign an SBOM with CosignSigning software bills of materials with Cosign
Adding custom certificates with Custom AssemblyHow to add custom certificates to customized images with Custom Assembly.
Create an assumable identity for a Bitbucket pipelineProcedural tutorial outlining how to create a Chainguard identity that can be assumed by a Bitbucket workflow.
How to verify file signatures with CosignUse Cosign to verify non-container software artifacts
Use chainctl to create an assumable identity for a Jenkins pipelineHow to use chainctl to create a Chainguard identity that can be assumed by a Jenkins pipeline.
How to pull packages from Chainguard package repositories through NexusTutorial for setting up Sonatype Nexus raw repositories as pull-through caches for apk packages from Chainguard's package repositories.