Reference

Rego Policies
Writing Rego-based policies for Sigstore Policy Controller
CISA Secure Software Development Attestation Form (Draft)
Ubuntu Compatibility
Differences between Chainguard Containers and Ubuntu third-party images
Secure Software Development Framework (SSDF) Table, NIST SP 800-218
Red Hat UBI Compatibility
Differences between Chainguard Containers and Red Hat UBI third-party images
Minimum Attestation References
Verify that Chainguard FIPS Containers are Configured to Use FIPS Modules
Learn how to verify that Chainguard FIPS Containers are properly configured to use various FIPS modules.