Chainguard Workspaces
Set up Chainguard Checks and Chainguard Workspaces
How Chainguard Checks and Chainguard Workspaces work together, and how to sign up for both with chainctl develop init and give teammates access.
Chainguard Workspaces overviewLearn how Chainguard Workspaces runs your repository and your coding agents in a remote microVM session without putting your credentials in the session.
How Chainguard Checks and Chainguard Workspaces isolate your codeThe security model of Chainguard Checks and Chainguard Workspaces in one place: microVM isolation, credentials kept outside the VM, network allowlists, trust rings, and the run and session lifecycles.
Get started with Chainguard WorkspacesSign up for Chainguard Workspaces, open your first development session, and learn how to detach from it and return.
Manage Chainguard Workspaces sessionsOpen, detach from, return to, list, rename, and delete Chainguard Workspaces sessions, run several terminals in one, and keep a session running while you're away.
Configure a Chainguard Workspaces session's environmentChoose the packages, tools, and network access a Chainguard Workspaces session gets, from your repository's .chainguard/develop.yaml or .chainguard/ci.yaml file, a file of your own, or the default environment.
Manage Chainguard Workspaces session credentialsLearn how a Chainguard Workspaces session reaches GitHub, Claude, and Chainguard without holding credentials, and how to approve, review, and revoke what it can reach.