Manage Custom Assembly Overlays with Terraform

Mon, 28 Sep 2026 16:33:22 +0000

Note: Custom Assembly Overlays is in beta.

This guide shows how to manage Custom Assembly Overlays with the Chainguard Terraform provider. You define overlays with the chainguard_image_overlay resource and bind them to repositories with the chainguard_image_overlay_binding resource.

For an explanation of overlays, bindings, and tag selectors, refer to Overview of Custom Assembly Overlays.

The provider doesn’t support all-repos bindings yet; each binding resource names one repository. To bind an overlay to every repository in your organization or a folder, use chainctl.

Guardener Hardened Actions

Wed, 08 Jul 2026 00:00:00 +0000

The Hardened Actions feature recommends and migrates your GitHub Actions to Chainguard’s hardened, SHA-pinned equivalents. Pinning actions to a specific commit SHA — rather than a mutable tag or branch — protects your workflows from supply chain attacks in which an upstream tag is moved to point at malicious code.

Note: Hardened Actions is in Early Access. It’s available to organizations that have installed and linked the Chainguard App.

Hardened Actions operates in two independent modes:

Automation on

Manage Custom Assembly Overlays with Terraform

Guardener Hardened Actions