Chainguard Launches Checks to Secure AI-Driven Software Development

Traditional CI pipelines, built for manual developer commits, struggle to handle the constant, high-frequency iteration of AI agents. This delay often causes agents to lose context while forcing teams to pay for repetitive setup cycles. Chainguard Checks addresses this by acting as a tool call that runs identical verifications, providing signed, trusted proof of code integrity within seconds. The platform pairs with the company's Workspaces, allowing agent sessions to pause during verification and resume with structured logs if a failure occurs.

Technically, the system utilizes warm snapshots to eliminate redundant dependency installation and executes workflows within hardware-isolated microVMs. These environments are built from zero-CVE Chainguard OS packages and lack long-lived credentials, mitigating risks from prompt injection or malicious scripts. Every successful run generates a signed attestation, enabling downstream merge gates to approve code without re-running test suites. Early adopters like Australia-based Cuscal are utilizing the platform to scale digital payment infrastructure, while analysts note that the system provides a necessary shift-left security model to prevent CI from stalling under current AI workloads. The tool is currently available in beta.