Managing GitHub App Connections

Mon, 03 Aug 2026 00:00:00 +0000

Chainguard Guardener acts on your GitHub repositories on behalf of your Chainguard organization. The bridge between the two is a connection: a Guardener GitHub App installation on a GitHub organization, linked to a Chainguard organization. This page explains how connections work and how to set up, inspect, change, and remove them.

For a first-time walkthrough, refer to Getting Started. This page is the fuller reference for managing connections over time.

Note: Chainguard Guardener is in beta. Available to organizations that have installed and linked the Chainguard Guardener GitHub App.

Configuring Chainguard Guardener

Wed, 08 Jul 2026 00:00:00 +0000

Chainguard Guardener is configured entirely through files committed to a .chainguard/ directory — either in each repository, or once at the organization level in your .github repository. This page explains the configuration model that all the Guardener features share. For the specific options of each feature, refer to its dedicated page.

The `.chainguard/` directory

The Guardener reads its configuration from the .chainguard/ directory at the root of each repository. Every feature has its own file:

Configuration on

Managing GitHub App Connections

Configuring Chainguard Guardener

The .chainguard/ directory

The `.chainguard/` directory