Security
What is the Chainguard Factory?
Dustin Kirkland explains the concept and purpose of the Chainguard Factory
How Chainguard Checks and Chainguard Workspaces isolate your codeThe security model of Chainguard Checks and Chainguard Workspaces in one place: microVM isolation, credentials kept outside the VM, network allowlists, trust rings, and the run and session lifecycles.
Set up and use Octo STSHow to install the Octo STS GitHub App, write trust policies, exchange OIDC tokens for short-lived GitHub tokens, migrate from personal access tokens, and troubleshoot failed exchanges
Workload identities and trust in Chainguard ChecksLearn how a Chainguard Checks check gets short-lived Google Cloud or Chainguard credentials through a workload identity, how to limit which pull requests get one, and how to revoke access.
Manage Chainguard Workspaces session credentialsLearn how a Chainguard Workspaces session reaches GitHub, Claude, and Chainguard without holding credentials, and how to approve, review, and revoke what it can reach.
Guardener Commit VerificationConfigure Guardener to verify that every commit in a pull request is cryptographically signed by an authorized signer.
Let Chainguard Workspaces sessions act on GitHub as youConnect your GitHub account so that the Chainguard Workspaces sessions you create act on GitHub as you through the Chainguard Develop GitHub App, and learn how to limit what those sessions can do.