chainloop-dev / chainloop
Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.
Why this job: says: coding agents, ai coding; topics: coding-agents
What it does
Every AI coding session, pull request, build, SBOM, scan, and test report becomes a signed, timestamped record in your own registry or bucket. Each record links to the commit and release it belongs to. Rules live in git. Break one and the pipeline fails. The job prints every failing policy and its reason where the agent reads it. The agent fixes the work and pushes again, until Chainloop is happy.
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit 2 days ago
- Stars
- 609
- On GitHub
- Licence
- Apache-2.0
- Allows business use
- Downloads for
- 2 systems
- Mac, Linux
- Latest version
- v1.133.0
- Released 3 days ago
- Built with
- Go
- 94% of the code
Is it looked after?
- Contributors
- 10
- Last 90 days
- Issues
- 96% closed
- 33 still open
- Pull requests
- 2,705 merged
- 13 waiting
- Releases
- 498
- 30+ in the last year
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| Brain0-ai / brain0 | 289 | 10 days ago | Apache-2.0 | Mac, Linux |
| moonrunnerkc / swarm-orchestrator | 114 | 3 days ago | ISC | No downloads |
More: download files, languages, topics and project record
Download files, v1.133.0
- Mac4 files, 13 downloads
- Linux4 files, 14 downloads
Languages
- Go 94%
- Go Template 4%
- SQL 1%
- JavaScript <1%
Topics
- compliance
- cyclonedx
- devsecops
- sbom
- spdx
- supply-chain-security
- attestation
- in-toto
- slsa
- agentic-sdlc
- ai-agents
- ai-governance
Project record
- JobCoding agents
- StatusListed
- Commits2,706
- Forks64
- Watching8
- Stars in 28 days+26
- CreatedMar 6, 2023
- First seen by usNov 7, 2026
- CheckedNov 9, 2026