Chainguard opened a beta for Workspaces: Chainguard-hardened microVMs where developers and agents work via chainctl develop, with working-tree sync, warm snapshots, host-side short-lived credential injection, and optional egress policies—so agents never touch local corporate secrets. Claude is supported today; pairs optionally with Chainguard Checks as a CI gate before PRs.
Chainguard opened a beta waitlist for Harness: it rebuilds your app from source in an isolated, no egress microVM, lets Claude Mythos 5.1 probe the live instance for exploitable vulns, and ships only findings that replay plus fixes that stop them—each reviewed by a Chainguard engineer. Buy it through Anthropic’s Claude Marketplace and apply existing Anthropic commitments…
A new repository creation:write permission lets an app, agent, or fine grained PAT create repositories without repository administration:write (which also allows delete and transfer), and installation repositories:write lets automation add or remove repos from app installations without a classic PAT. GitHub Apps also gain offline access for refresh tokens, easing a move back to expiring user tokens…
Secret scanning now detects anthropic service api key and anthropic user api key , and push protection blocks commits containing them by default on any repo with secret scanning on, free public repos included. Salesforce also joined as a revocation partner and Cloudsmith API keys are now detected…
Now in beta, Checks lets coding agents run CI mid session in credential free, egress restricted microVMs from warm dependency snapshots, with failure logs fed back into the agent's context. Each passing run emits a signed attestation that merge gates can verify instead of re running the test suite…
NinjaOne launched Katana AI (early access), an in console agentic technician that summarizes device health and recommends fixes technicians must approve, plus a NinjaOne MCP server so external AI agents can reach NinjaOne data and actions under existing RBAC and OAuth…
Spotted something we missed? Start a thread.
