Chainguard and Cursor Partner to Secure AI Coding Workflows

Chainguard and Cursor have announced a partnership to secure agentic software development with verified open source components, according to a press release. The collaboration introduces a trust layer for Cursor’s AI coding platform, ensuring that container images and language libraries are malware resistant and come from verifiable sources.

Through this integration, Cursor gains access to Chainguard’s catalog of more than 2,300 continuously rebuilt container images and millions of Python, JavaScript, and Java library versions. These artifacts are rebuilt from publicly verifiable source code and delivered with signed attestations. The system helps prevent malware in backdoored binaries and install-time scripts.

The partnership allows developers using Cursor to automatically source dependencies from Chainguard without manual configuration. Cursor handles project setup and credential management through natural language instructions, while Chainguard ensures that all dependencies are secure and maintained. Joint customers can now build and deploy AI-generated code with improved supply chain security and reduced exposure to malicious packages.