Configuration

How Guarded Entrypoint lets a Custom Assembly image resolve secrets, write a Java truststore, run preflight checks, and override its command at container start, and how to turn it on.

Example Custom Assembly manifests that use Guarded Entrypoint to inject secrets, wait for a dependency, override a command, fail open, and trust a mounted CA in a Java service.

Set up, inspect, and remove the connections between your Chainguard organization and your GitHub organizations for Guardener.

Reference for the .chainguard/ci.yaml file that defines Chainguard Checks: file layouts, packages, commands, network access, conditions, triggers, resources, and environment variables.

Understand Guardener's .chainguard/ configuration model and how to enable features per repository.

Run a Chainguard Checks check once per variation, pass files between checks, check out another repository, start services such as a database or Docker, run checks as another user, and reuse Go build output with caches.

Complete Chainguard Checks configurations for Java with Maven, Rust, container image builds with Docker, a monorepo, and checks that use Postgres and Redis.