Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.
Latest release v1.127.4 · 23 Oct 2026
14 files for Claude Code: PostToolUse, PreToolUse, SessionEnd, SessionStart and 10 more — 3,767 tokens loaded in every session.
CLAUDE.md B 3,767 tok .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/skills/custom-builtin-functions/SKILL.md A 19 tok .claude/skills/dependabot-pr-automation/SKILL.md A 54 tok .claude/skills/upgrading-chart/SKILL.md A 73 tok .claude/skills/upgrading-golang/SKILL.md A 79 tok .claude/skills/vulnerability-remediation/SKILL.md A 48 tok .claude/skills/trace-provider/SKILL.md A 91 tok These files are chainloop-dev/chainloop's own configuration — they tell Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.