Disallowing Unsafe sysctls

Use Policy Controller to limit pods to safe sysctls

Verify Signed Chainguard Images

Using Policy Controller to Verify Signed Chainguard Images

Rego Policies

Writing Rego-based policies for Chainguard Enforce

Using Enforce to Detect the Log4Shell Vulnerability

Use chainctl to create a policy and apply it to a cluster to detect vulnerable versions of Log4J

Example Policies

Chainguard Enforce for Kubernetes policy recipes

• ««
• «
• 1
• 2
• »
• »»