Guardener on

Guardener overview

Wed, 08 Jul 2026 00:00:00 +0000

Guardener is a tool for managing and hardening your source code. Rather than adding a separate integration for every task, Guardener provides a growing suite of capabilities that you opt into independently. Some capabilities run through the Chainguard App, a hardened GitHub App, and are configured per repository through files committed to your codebase; others, such as Dockerfile migration, run locally through chainctl.

Optional Features

Each Guardener capability is an Optional Feature: it stays off until you turn it on. Guardener and its Optional Features are subject to the Guardener and Code Analysis Terms. Under those terms, the offerings are Technology Previews, including the Optional Features in Early Access.

Guardener on GitHub

Mon, 13 Jul 2026 00:00:00 +0000

Guardener Dockerfile migration

Mon, 13 Jul 2026 00:00:00 +0000

The Dockerfile migration feature converts your Dockerfiles to use Chainguard Containers. It uses AI to iteratively translate instructions, build images, compare results, and fix issues until the migrated Dockerfile works as expected.

Unlike Guardener’s Hardened Actions and Commit Verification features, Dockerfile migration does not run through the Chainguard App or the .chainguard/ configuration directory. Instead, you drive it locally through chainctl agent dockerfile commands. The AI runs server-side and scans your workspace to perform its analysis, while Docker builds and file access remain local to your machine.