Case Study: Chainguard strengthens GitHub Actions security with StepSecurity

Chainguard saves time securing GitHub Actions with StepSecurity's 9-point workflow automation

Chainguard, a company building a secure source for open source software, faced the challenge of securely leveraging GitHub Actions at scale. Their security philosophy required applying the principle of least privilege and gaining comprehensive visibility into hundreds of daily workflow runs, a complex task that is difficult to manage manually. To address this, they implemented the StepSecurity platform.

StepSecurity provided an automated solution to enforce least privilege by recommending minimal GitHub token permissions, limiting network egress, and disabling sudo. The platform also delivered critical visibility by monitoring for anomalous behavior and alerting on potential secret leaks. This enabled Chainguard to save a significant amount of time on security reviews, improve their security posture, and confidently run their GitHub Actions workflows at scale. StepSecurity provided the foundational security and confidence needed to treat GitHub as a production system.

Chainguard