https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/tags/product/Recent content in Product onHugo -- gohugo.ioen-USThu, 02 Apr 2026 15:31:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainguard-images/features/packages/package-model/Thu, 09 Oct 2025 00:00:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainguard-images/features/packages/package-model/Chainguard Containers are built using packages from the Wolfi and Chainguard OS Linux distributions. If you need to extend or customize an image, it can be useful to access these packages directly. Chainguard offers curated package repositories to support containerized workloads and simplify dependency management. These repositories ensure you can access trusted packages — whether building custom container images, working with Chainguard OS, or using Chainguard Containers in production. This article provides an overview of Chainguard’s package model, highlighting the different Chainguard package repositories available to customers.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/cloudevents/events-reference/Tue, 15 Nov 2022 12:05:04 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/cloudevents/events-reference/Chainguard generates and emits CloudEvents based on actions that occur within a Chainguard account, such as registering a Kubernetes cluster or creating an IAM invitation. Chainguard also emits events when workloads or policies are changed in a cluster. Check out this GitHub repository for some sample applications that demonstrate how to use events to create Slack notifications, open GitHub issues, and mirror images. To subscribe to Chainguard events for your account, use the chainctl command like this:https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/iam-organizations/roles-role-bindings/capabilities-reference/Thu, 14 Aug 2025 00:00:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/iam-organizations/roles-role-bindings/capabilities-reference/Chainguard provides customers with a set of built-in roles as part of its Identity and Access Management (IAM) system. These roles have different permissions and capabilities that allow them to serve specialized purposes, from general administrative access to access for specific resources like registries, APK packages, and programming language libraries. This reference provides an overview of all Chainguard IAM capabilities and shows which built-in roles include each capability. Each capability represents a specific permission or action that can be performed within the Chainguard platform.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/fips/tls-requirements/Sat, 15 Nov 2025 08:49:31 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/fips/tls-requirements/This document provides an overview of FIPS TLS connectivity requirements for using Chainguard FIPS products. These FIPS products have higher minimum TLS requirements, which complicates connecting them to insecure EOL non-FIPS systems, as well as FIPS systems with lapsed (historical) certification. Chainguard strives to ensure the broadest connectivity possible for its FIPS products. However, many obsolete systems are still widely used and may not be able to connect with Chainguard FIPS products.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainguard-images/how-to-use/use-chainguard-helm-charts/Fri, 11 Jul 2025 08:49:31 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainguard-images/how-to-use/use-chainguard-helm-charts/Helm is a package manager for Kubernetes that simplifies the installation and management of applications by automating the creation of Kubernetes resources. Helm charts are reusable, versioned packages that define a collection of Kubernetes resources required to run an application or service. You use Helm to define, install, and perform upgrades to your applications on Kubernetes. For organizations looking to deploy their Chainguard container images with Helm, Chainguard provides upstream-produced Helm charts.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainguard-images/how-to-use/use-chainguard-iamguarded-helm-charts/Fri, 11 Jul 2025 08:49:31 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainguard-images/how-to-use/use-chainguard-iamguarded-helm-charts/Helm is a package manager for Kubernetes that simplifies the installation and management of applications by automating the creation of Kubernetes resources. Helm charts are reusable, versioned packages that define a collection of Kubernetes resources required to run an application or service. You use Helm to define, install, and perform upgrades to your applications on Kubernetes. Chainguard offers this limited iamguarded set of Helm charts to go with a set of Chainguard-created containers labeled as iamguarded, designed specifically to support organizations migrating off of Bitnami.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainguard-images/how-to-use/proxy-and-cache/Mon, 14 Jul 2025 08:10:31 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainguard-images/how-to-use/proxy-and-cache/This page shows you how to set up and use Chainguard Helm Charts with Artifactory via remote Helm OCI repositories. Create and configure Helm OCI repository in Artifactory From the administration panel within Artifactory, create a remote repository, picking Helm as the repo type. we’ll call it iamguarded-charts To determine values for the User Name and Password / Access Token fields, run the following command: $ORGANIZATION=YOUR-ORGANIZATION chainctl auth configure-docker --pull-token --save --parent $ORGANIZATIONSet $ORGANIZATION to be the organization name you’re pulling Helm Charts from.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/software-security/trademark/Fri, 06 Dec 2024 15:21:01 +0200https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/software-security/trademark/Chainguard has a Trademark Use Policy for Chainguard™ and Wolfi™. The Trademark Use Policy for Chainguard™ is in connection with its software tools and platforms for container image registry services and related educational services. The Trademark Use Policy for Wolfi™ is in connection with software tools and related community services. This policy helps ensure that Chainguard’s trademarks remain reliable indicators of the qualities that they are meant to preserve. The Trademark Policy details:https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainctl/chainctl-docs/chainctl/Thu, 02 Apr 2026 15:31:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainctl/chainctl-docs/chainctl/chainctl Chainguard Control chainctl [flags] Options --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev") --audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev") --config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly. --console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev") --force-color Force color output even when stdout is not a TTY. -h, --help Help for chainctl --issuer string The url of the Chainguard STS endpoint.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainctl/chainctl-docs/chainctl_auth/Thu, 02 Apr 2026 15:31:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/chainctl/chainctl-docs/chainctl_auth/chainctl auth Auth related commands for the Chainguard platform. Options inherited from parent commands --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev") --audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev") --config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly. --console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev") --force-color Force color output even when stdout is not a TTY.