# References

> Source: https://www.ymotongpoo.com/books/chainguard-image-toolchain/99-references/


The resources referenced while writing this book, in the order chapters introduce them.

## Repositories and official documentation

- [chainguard-dev/melange](https://github.com/chainguard-dev/melange)
- [melange CLI reference (melange_build.md)](https://raw.githubusercontent.com/chainguard-dev/melange/main/docs/md/melange_build.md)
- [melange CLI reference (melange.md)](https://github.com/chainguard-dev/melange/blob/main/docs/md/melange.md)
- [Chainguard Academy: melange overview](https://edu.chainguard.dev/open-source/build-tools/melange/overview/)
- [Chainguard Academy: Getting started with melange](https://edu.chainguard.dev/open-source/build-tools/melange/getting-started-with-melange/)
- [wolfi-dev/os](https://github.com/wolfi-dev/os)
- [chainguard-dev/apko](https://github.com/chainguard-dev/apko)
- [apko: apko_file.md](https://github.com/chainguard-dev/apko/blob/main/docs/apko_file.md)
- [apko: build-process.md](https://github.com/chainguard-dev/apko/blob/main/docs/build-process.md)
- [apko: sbom-composition.md](https://github.com/chainguard-dev/apko/blob/main/docs/sbom-composition.md)
- [Chainguard Academy: apko](https://edu.chainguard.dev/open-source/build-tools/apko/)
- [chainguard-dev/rules_apko](https://github.com/chainguard-dev/rules_apko)
- [chainguard-images (GitHub organization)](https://github.com/chainguard-images)
- [melange golden file (sed-4.9-r8.spdx.json)](https://github.com/chainguard-dev/melange/blob/main/pkg/build/testdata/goldenfiles/sboms/sed-4.9-r8.spdx.json)
- [melange examples/test-xcover.yaml](https://github.com/chainguard-dev/melange/blob/main/examples/test-xcover.yaml)
- [wolfi-dev/os wolfi-base.yaml](https://github.com/wolfi-dev/os/blob/main/wolfi-base.yaml)
- [s6](https://skarnet.org/software/s6/index.html)
- [just-containers/s6-overlay](https://github.com/just-containers/s6-overlay)
- [melange pkg/build/pipelines](https://github.com/chainguard-dev/melange/tree/main/pkg/build/pipelines)
- [melange examples/go-build.yaml](https://github.com/chainguard-dev/melange/blob/main/examples/go-build.yaml)
- [anchore/syft binary cataloger](https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/binary/classifiers.go)
- [grafana/xk6 Dockerfile](https://github.com/grafana/xk6/blob/3b5a796179b8f5e714fe25d9806e6ab44ea75e50/Dockerfile#L3)

## Blog posts and articles

- [Introducing: Chainguard, Inc. (Chainguard Unchained)](https://www.chainguard.dev/unchained/introducing-chainguard-inc)
- [About Chainguard](https://www.chainguard.dev/about-us)
- [Reimagining the Linux distro with Wolfi (Chainguard Unchained)](https://www.chainguard.dev/unchained/reimagining-the-linux-distro-with-wolfi)
- [Secure your software factory with melange and apko (Chainguard Unchained)](https://www.chainguard.dev/unchained/secure-your-software-factory-with-melange-and-apko)
- [2021 State of the Software Supply Chain (Sonatype)](https://www.sonatype.com/blog/2021-state-of-the-software-supply-chain)

## Other

- [GoogleContainerTools/distroless](https://github.com/GoogleContainerTools/distroless)
- [SLSA (Supply-chain Levels for Software Artifacts)](https://slsa.dev/)
- [CISA: Software Bill of Materials (SBOM)](https://www.cisa.gov/sbom)
- [google/go-containerregistry](https://github.com/google/go-containerregistry)
- [ED 21-01: Mitigate SolarWinds Orion Code Compromise (CISA)](https://www.cisa.gov/news-events/directives/ed-21-01-mitigate-solarwinds-orion-code-compromise-closed)
- [Apache Log4j Security Vulnerabilities](https://logging.apache.org/log4j/2.x/security.html)
- [Executive Order 14028: Improving the Nation's Cybersecurity (Federal Register)](https://www.federalregister.gov/documents/2021/05/17/2021-10460/improving-the-nations-cybersecurity)