[WIP, DO NOT MERGE] [IA option 1] Balanced Get Started on-ramp

.github/actions/integrate-platform-docs/action.yaml

@@ -28,7 +28,7 @@ runs:
         STORAGE_BUCKET: ${{ inputs.storage_bucket }}
       run: |
         gcloud --quiet storage cp --project="${PROJECT_ID}" \
-          "${STORAGE_BUCKET}/enforce-events/events.md" content/chainguard/administration/cloudevents/events-reference.md
+          "${STORAGE_BUCKET}/enforce-events/events.md" content/platform/administration/cloudevents/events-reference.md
 
     - name: download chainctl docs from cloud storage
       shell: bash
@@ -43,19 +43,19 @@ runs:
       shell: bash
       run: |
         rsync -av --delete --exclude="_index.md" \
-          "/tmp/chainctl-docs/" "content/chainguard/chainctl/"
+          "/tmp/chainctl-docs/" "content/platform/chainctl/"
 
     - name: add tags to chainctl docs by inserting line with sed
       shell: bash
       run: |
         sed '/draft: false/a tags: ["chainctl", "Reference", "Product"]' \
-          -i content/chainguard/chainctl/chainctl-docs/*.md
+          -i content/platform/chainctl/chainctl-docs/*.md
 
     - name: add tags to cloudevents by inserting line with sed
       shell: bash
       run: |
         sed '/draft: false/a tags: ["Platform", "Reference", "Product"]' \
-          -i content/chainguard/administration/cloudevents/events-reference.md
+          -i content/platform/administration/cloudevents/events-reference.md
 
     - name: download domains.md from cloud storage
       shell: bash

assets/scss/common/_custom.scss

@@ -491,8 +491,8 @@ h2[id^="chainctl"] {
     text-align: left;
     color: var(--sidebar-category-color);
     padding: 0 12px;
-    margin-top: 36px;
-    margin-bottom: 12px;
+    margin-top: 20px;
+    margin-bottom: 8px;
 }
 
 .sidebar-subcategory {
@@ -1239,7 +1239,16 @@ header .search-container {
 // Beat <a> tag
 .sidebar-item.sidebar-item>button,
 .sidebar-subcategory.sidebar-subcategory {
-    padding: 12px;
+    padding: 6px 12px;
+}
+
+// Leaf entries pick up the content-typography `.content ul li` bottom margin
+// (--docs-list-spacing), while expandable entries cancel it with `my-0`
+// (!important). Override it for every sidebar nav item so leaf and expandable
+// entries share one rhythm (spacing comes from the link padding). !important is
+// needed to beat `.content ul li`, matching how `my-0` already does this.
+.btn-toggle-nav li {
+    margin-bottom: 0 !important;
 }
 
 .sidebar-item.sidebar-item>button {

config/_default/menus/menus.en.toml

@@ -1,9 +1,21 @@
 [[docs]]
-  name = "Chainguard"
+  name = "Get Started"
+  identifier = "get-started"
+  url = "/get-started/"
+  weight = 5
+
+[[docs]]
+  name = "Products"
   identifier = "chainguard"
   url = "/chainguard/"
   weight = 10
 
+[[docs]]
+  name = "Platform & Tools"
+  identifier = "platform"
+  url = "/platform/"
+  weight = 15
+
 [[docs]]
   name = "Open Source"
   identifier = "open-source"
@@ -23,10 +35,20 @@
   weight = 40
 
 [[main]]
-  name = "Product Docs"
+  name = "Get Started"
+  identifier = "menu-getstarted"
+  weight = 5
+
+[[main]]
+  name = "Products"
   identifier = "menu-chainguard"
   weight = 10
 
+[[main]]
+  name = "Platform & Tools"
+  identifier = "menu-platform"
+  weight = 15
+
 [[main]]
   name = "Open Source"
   identifier = "menu-oss"
@@ -39,8 +61,8 @@
 
 [[main]]
   name = "API Reference"
-  url = "/chainguard/api/"
-  parent = "menu-chainguard"
+  url = "/platform/api/"
+  parent = "menu-platform"
   weight = 10
 
 [[main]]
@@ -52,8 +74,8 @@
 
 [[main]]
   name = "chainctl"
-  url = "/chainguard/chainctl/"
-  parent = "menu-chainguard"
+  url = "/platform/chainctl/"
+  parent = "menu-platform"
   weight = 20
 
 [[main]]

content/chainguard/_index.md

@@ -1,10 +1,11 @@
 ---
-title : "Product Docs"
+title : "Chainguard Products"
+linktitle: "Products"
 lead: ""
 description: "Chainguard product documentation: enterprise container security platform with zero CVE images, SBOMs, SLSA compliance, and comprehensive supply chain protection"
 date: 2020-10-06T08:48:23+00:00
 lastmod: 2020-10-06T08:48:23+00:00
 draft: false
 images: []
-weight: 1
+weight: 2
 ---

content/chainguard/agent-skills/_index.md

@@ -1,13 +1,13 @@
 ---
 title: "Chainguard Agent Skills"
-linkTitle: "Chainguard Agent Skills"
+linktitle: "Chainguard Agent Skills"
 description: "Hardened AI agent skills that Chainguard reviews, scopes, and publishes with a full audit trail."
 type: "article"
 date: 2026-06-05T08:48:45+00:00
 lastmod: 2026-06-05T08:48:45+00:00
 draft: false
 images: []
-weight: 025
+weight: 010
 ---
 
 Chainguard Agent Skills is a catalog of hardened AI agent skills that Chainguard reviews, scopes, and publishes with a full audit trail. It lets teams extend their AI agents without extending their attack surface.

content/chainguard/chainguard-images/_index.md

@@ -1,13 +1,13 @@
 ---
 title: "Chainguard Containers"
-linkTitle: "Chainguard Containers"
+linktitle: "Chainguard Containers"
 description: "Chainguard provides the most secure container images with zero known CVEs, minimal attack surface, SBOMs, and daily updates - the enterprise choice for container security"
 type: "article"
 date: 2022-09-05T08:49:15+00:00
 lastmod: 2025-07-10T08:49:15+00:00
 draft: false
 images: []
-weight: 010
+weight: 020
 topic: true
 banner: {
     image: "/icon-box-fill.svg",

content/chainguard/chainguard-images/about/versions.md

@@ -78,7 +78,7 @@ In rare cases, a project may not follow a defined release pattern at all.
 
 There are several scenarios that define what Chainguard agrees to maintain
 regarding software versions in the [Chainguard Containers
-Directory](/chainguard/chainguard-images/how-to-use/images-directory/). All
+Directory](/platform/console/images-directory/). All
 container images that Chainguard currently supports are those with upstream
 software that is still supported and maintained, and Chainguard patches and
 rebuilds these Containers daily. If you have purchased a container image during

content/chainguard/chainguard-images/features/cve_visualizations/index.md

@@ -95,4 +95,4 @@ Some container images do not currently have a comparative alternative. In these
 
 The CVE data used in these reports is from the [Grype vulnerability scanner](/chainguard/chainguard-images/staying-secure/working-with-scanners/grype-tutorial/). Vulnerability data is constantly evolving, so we scan container images each day and store the results. The results shown are the vulnerabilities found on the day in question; scanning the container images again with a newer database will show different results.
 
-For more information on CVEs see [What Are Software Vulnerabilities and CVEs](/software-security/cves/cve-intro/). You may also find our guide on [Using the Chainguard Directory and Console](/chainguard/chainguard-images/how-to-use/images-directory/) to be of interest.
+For more information on CVEs see [What Are Software Vulnerabilities and CVEs](/software-security/cves/cve-intro/). You may also find our guide on [Using the Chainguard Directory and Console](/platform/console/images-directory/) to be of interest.

content/chainguard/chainguard-images/how-to-use/_index.md

@@ -20,7 +20,7 @@ tutorials: [
   {
     title: "Chainguard Containers Directory",
     description: "",
-    url: "/chainguard/chainguard-images/how-to-use/images-directory/"
+    url: "/platform/console/images-directory/"
   },
   {
     title: "How to Retrieve SBOMs",

content/chainguard/chainguard-images/how-to-use/chainguard-directory/index.md

@@ -19,7 +19,7 @@ toc: true
 
 There are hundreds of Chainguard Containers available for use. To help users explore and better understand all of these container images, we've developed the Chainguard Directory. This is a free to access web portal that does not require signing in from which you can view information about container images in the Chainguard catalog. This is great for quick searches or while exploring Chainguard's offerings.
 
-If you want more specific information about what is available to your organization, take a look at the Chainguard Console. You'll first need to [create an account and log in](https://console.chainguard.dev/auth/login) but there you can interact in a clearer, organization-specific way. If you use the *Sign In* link in the directory, it brings you to the console. Learn more about the [Chainguard Console](/chainguard/chainguard-images/how-to-use/images-directory/) in the related docs page.
+If you want more specific information about what is available to your organization, take a look at the Chainguard Console. You'll first need to [create an account and log in](https://console.chainguard.dev/auth/login) but there you can interact in a clearer, organization-specific way. If you use the *Sign In* link in the directory, it brings you to the console. Learn more about the [Chainguard Console](/platform/console/images-directory/) in the related docs page.
 
 
 ## Accessing the Chainguard Directory

content/chainguard/chainguard-images/how-to-use/retrieve-image-sboms/index.md

@@ -63,15 +63,15 @@ You can include the following flags when retrieving attestations:
 
 ### Retrieve a container image attestation in the Chainguard Console
 
-You can also find container image SBOMs in the [Chainguard Console](https://console.chainguard.dev). After signing in to the Console and clicking either the **Public images** or, if available, **Organization images** you'll be presented with a list of images. Click on any of these to navigate that image's landing page. From there, navigate to the [**SBOM** tab](/chainguard/chainguard-images/how-to-use/images-directory/#sbom-tab) to find and download the SBOM for the given image. 
+You can also find container image SBOMs in the [Chainguard Console](https://console.chainguard.dev). After signing in to the Console and clicking either the **Public images** or, if available, **Organization images** you'll be presented with a list of images. Click on any of these to navigate that image's landing page. From there, navigate to the [**SBOM** tab](/platform/console/images-directory/#sbom-tab) to find and download the SBOM for the given image. 
 
 You can use the drop-down menus above the table to select which version and architecture of the image you want to view. You can also use the search box to find specific packages in the SBOM or use the button to the right of the search box to download the SBOM to your machine.
 
 Clicking **Download** reveals a drop-down menu where you can choose to download the image's SBOM in either the SPDX or CycloneDX SBOM formats. The following example shows the **SBOM** tab for the `nginx` container image, with the **Download** drop-down menu open:
 
 ![Screenshot of the nginx image's "SBOM" tab, showing the Download button and drop-down menu options (SPDX and CyclonedDX) highlighted in a yellow box.](img-dir-5.png)
 
-Check out our guide on [using the Chainguard Containers Directory](/chainguard/chainguard-images/how-to-use/images-directory/) for more details.
+Check out our guide on [using the Chainguard Containers Directory](/platform/console/images-directory/) for more details.
 
 ## Available attestation types
 

content/chainguard/chainguard-images/how-to-use/use-chainguard-helm-charts/index.md

@@ -30,7 +30,7 @@ The community charts have been tested by Chainguard to confirm they produce expe
 
 Chainguard makes the provenance of these charts clear. Helm charts are packaged as [OCI artifacts](/open-source/oci/what-are-oci-artifacts/) using the upstream version adding an appended revision suffix for updates that include material changes to the chart; otherwise, tags will float based as their dependent images update. The OCI artifacts are signed and generate provenance attestations that link to the exact image digests used to ensure that all artifacts are cryptographically verifiable end-to-end for integrity and origin.
 
-You can find Helm charts in the [Chainguard Console](/chainguard/chainguard-images/how-to-use/images-directory/#find-helm-charts-in-the-chainguard-console) and in the [Chainguard Directory](/chainguard/chainguard-images/how-to-use/chainguard-directory/#find-helm-charts-in-the-chainguard-directory).
+You can find Helm charts in the [Chainguard Console](/platform/console/images-directory/#find-helm-charts-in-the-chainguard-console) and in the [Chainguard Directory](/chainguard/chainguard-images/how-to-use/chainguard-directory/#find-helm-charts-in-the-chainguard-directory).
 
 The following is an instructional guide for Chainguard users that are looking for Helm charts to use with their Chainguard container images.
 

content/chainguard/chainguard-images/how-to-use/use-chainguard-iamguarded-helm-charts/index.md

@@ -29,7 +29,7 @@ These iamguarded charts have been tested by Chainguard to confirm they produce e
 
 Chainguard makes the provenance of these charts clear. Helm charts are packaged as [OCI artifacts](/open-source/oci/what-are-oci-artifacts/) using the upstream version adding an appended revision suffix for updates that include material changes to the chart; otherwise, tags will float based as their dependent images update. The OCI artifacts are signed and generate provenance attestations that link to the exact image digests used to ensure that all artifacts are cryptographically verifiable end-to-end for integrity and origin.
 
-You can find iamguarded Helm charts in the [Chainguard Console](/chainguard/chainguard-images/how-to-use/images-directory/#find-helm-charts-in-the-chainguard-console) and in the [Chainguard Directory](/chainguard/chainguard-images/how-to-use/chainguard-directory/#find-helm-charts-in-the-chainguard-directory).
+You can find iamguarded Helm charts in the [Chainguard Console](/platform/console/images-directory/#find-helm-charts-in-the-chainguard-console) and in the [Chainguard Directory](/chainguard/chainguard-images/how-to-use/chainguard-directory/#find-helm-charts-in-the-chainguard-directory).
 
 The following is an instructional guide for Chainguard users that are looking for Helm charts to use with their iamguarded Chainguard container images.
 

content/chainguard/chainguard-os/_index.md

@@ -1,10 +1,11 @@
 ---
 title : "Chainguard OS"
+linktitle: "Chainguard OS"
 lead: ""
 description: "Chainguard OS Documentation"
 type: "article"
 date: 2025-07-03T08:48:23+00:00
 lastmod: 2025-07-03T08:48:23+00:00
 draft: false
-weight: 030
+weight: 040
 ---

content/chainguard/chainguard-repository/_index.md

@@ -1,10 +1,11 @@
 ---
 title : "Chainguard Repository"
+linktitle: "Chainguard Repository"
 lead: ""
 description: "Chainguard Repository Documentation"
 type: "article"
 date: 2026-03-16T08:48:23+00:00
 lastmod: 2026-03-24T00:48:23+00:00
 draft: false
-weight: 032
+weight: 050
 ---

content/chainguard/chainguard-repository/overview.md

@@ -71,7 +71,7 @@ See [Policies](/chainguard/administration/policies/) for more information.
 
 ## Management
 
-The Chainguard Console and `chainctl` can be used for configuring and managing policies across your organization. Learn more in [Using the Chainguard Console](/chainguard/chainguard-images/how-to-use/images-directory/) and [Get Started with chainctl](/chainguard/chainctl-usage/getting-started-with-chainctl/).
+The Chainguard Console and `chainctl` can be used for configuring and managing policies across your organization. Learn more in [Using the Chainguard Console](/platform/console/images-directory/) and [Get Started with chainctl](/get-started/getting-started-with-chainctl/).
 
 Access the Console at [console.chainguard.dev](https://console.chainguard.dev).
 

content/chainguard/libraries/_index.md

@@ -1,10 +1,10 @@
 ---
 title: "Chainguard Libraries"
-linkTitle: "Chainguard Libraries"
+linktitle: "Chainguard Libraries"
 description: "Chainguard Libraries provide enhanced security for Java and Python dependencies with automated vulnerability patching and supply chain protection"
 type: "article"
 date: 2025-03-25T08:04:00+00:00
 lastmod: 2025-07-23T15:09:59+00:00
 draft: false
-weight: 020
+weight: 030
 ---

content/chainguard/libraries/faq.md

@@ -167,7 +167,7 @@ build and distribution channel security.
 
 Malware‑hardened libraries are the baseline Chainguard Libraries experience:
 Chainguard rebuilds open source Java, JavaScript, and Python dependencies from
-upstream source in the [Chainguard Factory](/chainguard/factory/), a controlled,
+upstream source in the [Chainguard Factory](/platform/factory/), a controlled,
 SLSA‑aligned build environment, and publishes them to hardened registries for
 customers to consume. This closes off most supply chain malware vectors compared
 to pulling directly from public registries like Maven Central, npm, and PyPI.

content/chainguard/vms/_index.md

@@ -1,10 +1,10 @@
 ---
 title: "Chainguard VMs"
-linkTitle: "Chainguard VMs"
+linktitle: "Chainguard VMs"
 description: "Chainguard VMs offer a minimal and verifiable foundation for running ephemeral workloads in cloud and on-prem hypervisor deployments, designed to complement and extend the same secure-by-default philosophy found in Chainguard Containers"
 type: "article"
 date: 2025-10-21T08:04:00+00:00
 lastmod: 2025-10-21T15:09:59+00:00
 draft: false
-weight: 021
+weight: 060
 ---

content/chainguard/vms/faq.md

@@ -41,7 +41,7 @@ Chainguard VMs are based on [Chainguard OS](https://get.chainguard.dev/chainguar
 
 ## Which Linux kernel is used in Chainguard VMs?
 
-The [Chainguard Factory](/chainguard/factory/overview/) tracks both the stable upstream and the latest LTS (for FIPS) versions of the kernel, building from source to provide the most up-to-date and patched versions.
+The [Chainguard Factory](/platform/factory/overview/) tracks both the stable upstream and the latest LTS (for FIPS) versions of the kernel, building from source to provide the most up-to-date and patched versions.
 
 ## Do Chainguard VMs support in-place upgrades?
 

content/compliance/_index.md

@@ -8,6 +8,9 @@ draft: false
 aliases:
 - /software-security/compliance/
 images: []
-weight: 003
+weight: 4
+crosslinks:
+- title: "Selecting a Base Image"
+  url: "/software-security/selecting-a-base-image/"
 ---