Chainguard Unveils Factory 2.0 to Automate Hardening the Software Supply Chain

Chainguard announced Factory 2.0, a revamped platform that uses a controller/reconciler model, AI-enabled agentic frameworks, and continuously hardened catalogs of GitHub Actions and agent skills to automate and secure software supply chains; the announcement highlights features like Chainguard Actions, Agent Skills, and the Guardener for converting and maintaining secure artifacts. The article frames the release against recent supply-chain threats—such as a hijacked GitHub Action that leaked secrets from thousands of repositories and malicious agent skills distributing an infostealer—positioning Factory 2.0 as a mitigation to reduce pipeline risk and automate secure artifact maintenance.