Partner Sales Engineer

Chainguard launches secure Workspaces and checks for AI coding agents. * Matt Saunders DevOps, DevEx, Platform Engineering, Fast Flow at Adaptavist Follow InfoQ on. Software supply chain security company Chainguard has announced two beta products for running and testing code written by developers and AI agents. Chainguard Workspaces provides remote development environments based on hardened microVMs, while Chainguard Checks moves continuous integration into the development loop. The company announced both products at its Assemble London event. The releases respond to a practical problem with coding agents. Agents need permission to install packages, run shell commands and edit configuration. They may also run several tasks in parallel. Doing this on a developer laptop puts corporate credentials and local services within reach of generated or third-party code. Sending each change to a conventional CI service can instead create queues and repeatedly download the same dependencies. Workspaces gives each developer or agent a dedicated remote microVM. The chainctl develop command synchronises a local working tree, including uncommitted changes, into the environment. A session is snapshotted when the user detaches and can resume with its files, processes and shell context. Teams can also create several isolated Workspaces for one repository so agents can try different solutions without sharing ports, caches or process state. Chainguard says that a host-side proxy adds short-lived credentials to approved outbound requests, rather than placing long-lived secrets in the guest. Optional egress rules can block and record connections to endpoints that a team has not allowed. The company also records commands, code changes and network calls in what it describes as a tamper-proof log. Paxton and Phillips say this is intended to limit damage from a compromised dependency or a prompt-injected agent. Checks runs CI steps in separate warm microVMs built from Chainguard packages. Dependencies are prepared from the project's lockfile and the snapshot pool is rebuilt when that file changes. Developers can invoke the same checks through the command line, a pre-commit hook or the GitHub App. Agents can call them through an MCP server or SDK. Paxton and Phillips describe the aim as letting developers and agents "test, fail, and fix code safely without waiting on slow CI". When Checks and Workspaces are used together, a Workspace suspends while tests run. A failed check returns structured logs to the resumed session, allowing the agent to try another change without reconstructing its environment. A successful run creates an attestation tied to the environment, result and commit. The proposed merge gate can verify that evidence instead of running the test suite again. "Every run produces a signed attestation binding the environment, verdict, and commit SHA, so merge gates can verify a passing result instead of re-running tests." Sam Katzen This design depends on the attested inputs remaining unchanged and on repositories trusting Chainguard's execution and signing system. The announcement does not publish performance data comparing Checks with established CI services. It also does not give details of how customers should validate the claimed tamper resistance of the logs. Workspaces currently supports Claude, with other agents planned, and is priced according to consumed compute. Both products are available as 30-day beta trials. Chainguard made two other announcements relevant to build pipelines. Chainguard Actions is now generally available, with more than 1,000 rebuilt and continuously maintained GitHub Actions. Chainguard Libraries for Go and .NET has entered early access. The Libraries service scans dependencies for malware and greyware, applies a configurable delay before new packages become available, and backports selected vulnerability fixes. Chainguard reports that its beta scanner returned verdicts on more than 5,000 Go and .NET packages, and that over 10% had no match in public sources when detected. Chainguard is entering markets with established alternatives. E2B runs agent sessions in Firecracker microVMs, controls egress and resolves credentials outside the guest. StepSecurity Harden-Runner monitors network, file and process activity on GitHub Actions runners and can enforce outbound network policies. For dependencies, Sonatype Repository Firewall blocks or quarantines malicious and vulnerable packages before builds, while JFrog Curation applies security, licence and package-age policies at download time. Chainguard's offer combines these areas with signed test results, rebuilt actions and remediated dependencies. The use of microVMs for untrusted build and agent workloads is already established. InfoQ's guidance on securing AI-accelerated development recommends isolated microVMs or tightly restricted containers for agent-generated code, along with short-lived credentials and default-deny network access. Amazon Bedrock AgentCore gives each user session isolated CPU, memory and filesystem resources, while Vercel's Hive build system uses Firecracker microVMs and short-lived WireGuard tunnels. Chainguard's distinction is the way it combines this isolation with its own package catalogue, CI attestations and agent loop. Matt Saunders. I am VP DevOps at Adaptavist. I help teams use DevOps, platform engineering and cloud-native tools and technologies to deliver reliable quality software quickly and efficiently and with minimal stress. I've worked with complex enterprises, small start-ups, SMEs and everything in between. I also co-organise the London DevOps meetup group, which has over 10,000 members, hosting a hugely popular monthly industry event.

Introducing Chainguard Libraries for Go and .NET: secure endpoints to protect organizations from supply chain attacks. Oct 14, 2026, 01:00 ET Chainguard Libraries now includes CVE remediation for JavaScript and Go; customers also receive protections from frontier AI-discovered zero-days once they are made public SEATTLE, Oct. 14, 2026 /PRNewswire/ - Chainguard, the trusted source for open source, today announced Chainguard Libraries for Go and Chainguard Libraries for .NET, adding coverage for two new language ecosystems that allow engineering teams and AI agents to safely pull Go and .NET dependencies without being exposed to the next supply chain attack. Chainguard Libraries also now offers CVE remediation for JavaScript and Go, which backports upstream fixes for critical- and high-severity vulnerabilities, helping teams where upgrading to the next version is not always immediately possible. Finally, Chainguard Libraries now protects customers from zero-day vulnerabilities, with fixes available the day a vulnerability is made public. Through Athena's crowdsourced threat intelligence, Chainguard Libraries customers receive novel patches for zero-day vulnerabilities that have been discovered by the world's largest institutions pointing frontier AI models at their applications. Malware poses an increasing threat to open source dependencies AI has escalated problems that have plagued open source language libraries for years, and malware is at the front of that shift. According to Chainguard's AI Exploit Gap report, 76% of cybersecurity leaders say their organization has experienced, or suspects it has experienced, an AI-driven attack in the last 12 months. Within open source registries, attackers are publishing malicious packages, hijacking trusted packages, and registering the names of packages that do not exist yet, knowing developers and AI agents will install them without a second look. At the same time, AI makes it possible for anyone to build and publish malicious packages, or find a way to gain improper access to internal systems by exploiting CVEs or newly discovered zero-day vulnerabilities. The risks are not new, but they are increasingly impossible to manage at scale as models become more capable and widely available. "Attackers are counting on your developers and AI agents to trust every package they install," said Patrick Donahue, SVP of Product, Chainguard. "Chainguard Libraries removes the need for that trust. No malware gets in, CVEs get fixed even if you can't upgrade, and zero-days are patched on disclosure day. Prevention is the only defense that scales." Protecting organizations from AI-level threats to open source software Preventing malware from dependencies is only one part of a three-part problem. Organizations still need to worry about CVEs and zero-days that are becoming easier to discover and exploit as the capabilities of frontier AI models improve. Teams often pin dependencies to specific versions for stability, and CVEs build up in those versions over time. Meanwhile, frontier AI models are uncovering zero-days faster than open source maintainers can fix them. With today's announcement, Chainguard Libraries protects against all three threats across more of the languages organizations depend on: * Introducing Chainguard Libraries for Go with CVE remediation: Chainguard Libraries for Go gives cloud and infrastructure development teams a secure endpoint to pull Go packages, limiting their organization's exposure to malicious modules and reducing the number of CVEs they need to remediate. Go Libraries come with built-in scanning for malware and greyware, a class of nefarious open source packages that traditional malware scanners miss. They also include configurable policies that allow teams to block packages that don't meet their security or compliance standards, and CVE remediation. * Introducing Chainguard Libraries for .NET: Chainguard Libraries for .NET allows organizations building on top of the Microsoft and Azure ecosystems to trade NuGet for a secure-by-default Chainguard-managed endpoint, allowing them to safely pull dependencies without risking being compromised by the next supply chain attack...NET libraries come with configurable policies and malware and greyware scanning. * Enhancing JavaScript libraries with CVE remediation: Adding CVE remediation to Chainguard Libraries for JavaScript provides another layer of defense that reduces CVE risk. Backported fixes for critical- and high-severity CVEs allow engineering teams to shrink known vulnerability risk while strategically planning their next major version upgrade. The capability is built into the same endpoint that has blocked every malware attack that has hit npm this year. * Providing zero-day protection for Chainguard Libraries for Java and Python: Chainguard Libraries for Python and Java now have artifacts that are remediated from frontier AI model-discovered vulnerabilities on the day they are publicly disclosed. This protection is powered by the crowdsourced threat intelligence of Athena, Chainguard's industry coalition for the orchestrated defense of open source software. These advancements make Chainguard Libraries the most secure way to consume open source language dependencies. Chainguard Libraries helps organizations defend against the threats frontier AI models pose to open source software and to the AI software development lifecycle. "Chainguard Libraries has shifted us from reacting to supply chain attacks to preventing them. We have immediate visibility into what's coming into our environment, but more importantly, malicious packages never reach us in the first place," said Kevin Fuller, CISO, Propio. "It's not just detection, it's prevention. With constant attacks on open source, that has given our team a world of peace." Chainguard Libraries for Go and .NET are now available in Early Access. For more information, visit chainguard.dev/libraries. About Chainguard Chainguard is the trusted source for open source. By providing engineers and AI agents with hardened, trusted, and production-ready artifacts, Chainguard helps organizations prevent AI supply chain attacks, increase engineering velocity while reducing toil, and maintain continuous compliance. Customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, DocuSign, OpenAI, Public Storage, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. For more information, visit: https://www.chainguard.dev/ SOURCE Chainguard

Chainguard, a Seattle-based open source security company, has launched Chainguard Harness, a tool that uses frontier AI models such as Anthropic's Claude Mythos 5.1 to find and fix exploitable vulnerabilities in application code. Harness builds an app from a customer's source code in an isolated microVM and has the model probe the running instance. It reproduces each finding before delivering a fix reviewed by a Chainguard engineer, so teams act only on proven flaws. Customers can buy Harness through the Claude Marketplace and use part of their existing Anthropic commitment. At launch, Chainguard engineers run the tool on customers' behalf, and access is through a beta waitlist. "Every time we've pointed Harness at code, it has found serious, exploitable vulnerabilities," said chief executive officer Dan Lorenc.