Open Source
Limit High or Critical CVEs in your Images Workloads
How to use the vulnerability attestation with no High or Critical CVEs Policy
Rego Policies
Writing Rego-based policies for Sigstore Policy Controller
Dockerfile Converter
User Guide for Chainguard's Dockerfile Converter (dfc)
Example Policies
Policy recipes