Procedural

Maximum container image age with Policy Controller

Use Policy Controller to limit pods to safe sysctls

Using Policy Controller to verify signed Chainguard Containers

Install the Sigstore Policy Controller into a Kubernetes cluster

Use Cosign and GitHub Actions to keyless sign a Django container image

Example Custom Assembly manifests that use Guarded Entrypoint to inject secrets, wait for a dependency, override a command, and fail open.

How to install the Octo STS GitHub App, write trust policies, exchange OIDC tokens for short-lived GitHub tokens, migrate from personal access tokens, and troubleshoot failed exchanges