Cursor and Chainguard partner to lock down the AI agent supply chain

Cursor and Chainguard have partnered to steer AI coding agents toward verified open-source artifacts instead of raw public registries.

Cursor integrated Chainguard’s curated catalog of container images and language libraries into its coding workflow.

That means agents can fetch dependencies from a trusted artifact store inside the IDE or agent interface, reducing exposure to compromised packages and registry attacks.

The move is meant to make dependency selection safer at scale as AI agents generate more code and automate more software decisions.