For the complete documentation index, see llms.txt.

Chainguard Containers

Resolve a scanner finding for a CVE Chainguard has fixed
What to check when the Chainguard Console or a security advisory says a CVE is fixed, but your vulnerability scanner still reports it.
Troubleshoot a wrapped container
How to recover a container that fails to start under Guarded Entrypoint, what the wrapper's exit codes mean, and how a refused build appears in chainctl.
Grant Chainguard roles from identity provider groups
How to map groups from a custom identity provider to Chainguard roles so access follows group membership.
Getting started with the Chainguard Spark FIPS container
Learn how to run Apache Spark workloads with FIPS 140-3 cryptography using Chainguard's Spark FIPS container, including BCFKS keystore setup and Kubernetes cluster-mode deployment with the Spark Operator
Create an assumable identity to authenticate from Azure
Procedural tutorial outlining how to create a Chainguard identity that can be assumed by an Azure workload using a managed identity.
Create an assumable identity to authenticate from AWS
Tutorial outlining how to create a Chainguard identity that can be assumed by an AWS user or role using outbound identity federation.
Create an assumable identity to authenticate from AWS (legacy)
Tutorial outlining how to create a Chainguard identity that can be assumed by an AWS user or role.