chainloop-dev/chainloop
Chainloop is an open-source attestation platform that records and verifies what AI coding agents and CI/CD pipelines did, enforcing policies as code.
Collecting fresh signals — velocity needs a few days of history.
collecting data…
star history
Chainloop collects signed records of actions taken by AI coding agents and CI/CD pipelines, including AI session logs, SBOMs, VEX, SARIF findings, and SLSA provenance. Attestations are built on Sigstore and in-toto and checked against policies as code, with enforcement loops closed in CI/CD. It is written in Go and licensed under Apache 2.0.
Frequently asked
- What is chainloop-dev/chainloop?
- Chainloop is an open-source attestation platform that records and verifies what AI coding agents and CI/CD pipelines did, enforcing policies as code.
- Is chainloop open source?
- Yes — chainloop-dev/chainloop is open source, released under the Apache-2.0 license.
- What language is chainloop written in?
- chainloop-dev/chainloop is primarily written in Go.
- How popular is chainloop?
- chainloop-dev/chainloop has 583 stars on GitHub.
- Where can I find chainloop?
- chainloop-dev/chainloop is on GitHub at https://github.com/chainloop-dev/chainloop.