#USA #Seattle #Chainguard #Continuous Integration #API Innovations

Chainguard Checks: A New Era of Software Development

In an exciting announcement that could change the software development landscape, Chainguard has introduced Chainguard Checks, a groundbreaking continuous verification engine designed to reshape continuous integration (CI) within the ever-evolving realm of agentic development. This innovation signals a pivotal shift from traditional methods that often delay verification until after the code has been written and submitted, allowing developers and AI agents to receive trusted results almost instantaneously.

The Need for Speed in Code Verification

As the content of software applications becomes ever more complex with the incorporation of AI, traditional CI processes risk becoming bottlenecks that slow down development. Historically, these systems were crafted for developers pushing updates several times a day; however, AI agents are capable of generating code continuously. This discrepancy means that as the speed of coding increases, so too does the queue for verification, leading to loss of context and repeated setups. As a result, CI has morphed into a significant obstacle in agile development environments.

Chainguard Checks aims to address these shortcomings by embedding verification seamlessly into the development loop. This innovative approach allows verification to occur while agents are still actively working on code, promoting an efficient and secure workflow. As Dan Lorenc, CEO and Co-founder of Chainguard, stated, “Agents shouldn’t just write code faster. They should be able to prove it works.”

Enhancements to the CI Process

One of the standout features of Chainguard Checks is its ability to provide a signed attestation every time code passes a verification test. This attestation accompanies the code as it moves through the development process, offering a layer of trust and reliability. Such mechanisms ensure that each step of the CI process is embedded with security, reducing concerns about the vulnerabilities associated with traditional CI workflows.

Additionally, paired with the newly launched Chainguard Workspaces, agent sessions can suspend during check execution, minimizing compute consumption and allowing the system to resume quickly. This functionality provides structured failure logs that agents can analyze to iterate and correct issues without losing precious context.

Key Features of Chainguard Checks

• - Warm Snapshots: Each CI run starts from a warm snapshot, meaning that dependencies are pre-installed. This efficiency reduces repeated setup costs by maintaining an updated background process.
• - MicroVM Execution Environments: Every workflow step operates in its own isolated microVM environment, built from secure Chainguard OS Packages, which mitigates risks from untrusted code.
• - No Long-Lived Credentials: Runners do not hold on to long-lived credentials, instead utilizing short-lived credentials that are added dynamically, preventing potential security breaches during execution.
• - Declarative Network Policies: Only approved connections are allowed, enhancing security against data exfiltration and unauthorized access.
• - Immediate Merging Capability: Merge gates can verify the signed attestations without re-running extensive test suites, facilitating faster merging processes while maintaining security.

Looking Ahead

Prominent firms across various sectors, including finance and technology, have stepped forward to support the integration of Chainguard Checks into their workflows. Brad McCoy, Senior Manager of Cloud Platforms at Cuscal, expressed excitement over collaborating with Chainguard, highlighting how traditional CI has revealed vulnerabilities that must be addressed to foster faster innovation.

Analysts like James Governor from RedMonk have also pointed out that existing CI platforms are struggling to keep pace with the demands created by rapid agentic software development, leading to downtime and inhibiting productivity. Chainguard Checks could very well be the answer to sustaining efficiency in modern development.

As Chainguard Checks rolls out in Beta, software engineers and organizations alike are keenly awaiting its integration into their workflows. With this pioneering approach to CI, Chainguard is poised to transform the way developers and AI agents operate, ensuring not only rapid development but also fortified security protocols. For further details, visit Chainguard’s official website.