Procedural

Use Policy Controller to limit pods to safe sysctls

Using Policy Controller to verify signed Chainguard Containers

Use Cosign to verify non-container software artifacts

Use Cosign to verify container signatures and attestations without outbound network access

How to map groups from a custom identity provider to Chainguard roles so access follows group membership.

.

Procedural tutorial outlining how to create a Chainguard identity that can be assumed by a GitLab CI/CD pipeline.