Chainguard Guardener Actions Security

Wed, 08 Jul 2026 00:00:00 +0000

The Actions Security feature recommends and migrates your GitHub Actions to Chainguard’s hardened, SHA-pinned equivalents. Pinning actions to a specific commit SHA — rather than a mutable tag or branch — protects your workflows from supply chain attacks in which an upstream tag is moved to point at malicious code.

Actions Security operates in two independent modes:

Pull request recommendations — non-blocking review comments that suggest hardened action alternatives, with one-click suggestion blocks.
Automated migration pull requests — a periodically maintained pull request that updates workflows across your repository.

You can enable either mode on its own or both together.

Automation on

Chainguard Guardener Actions Security