Developer Tools
In-depth guides and analysis on developer tools from the Safeguard engineering team.
100 articles
What can a lockfile tell you about a software company's engineering?
A committed lockfile with integrity hashes shows repeatable builds and reviewable changes. Here is how to read one during partner or acquisition review.
What is transitive pinning in NuGet central package management?
Transitive pinning lets one central file force a safe version of an indirect NuGet package. Learn how to enable it, its limits, and the pack side effect.
What is the NIST SARD and how can buyers use it to test tools?
The Software Assurance Reference Dataset is a NIST collection of test programs with known weaknesses. See what it holds and how to use it to test scanners.
What is the Integrity-Policy header and should you use it?
Integrity-Policy tells the browser to block scripts and styles that lack SRI metadata. Learn the syntax, the report-only rollout and the support caveat.
What is the Google Play SDK Index and how do you use it?
The Google Play SDK Index shows safety, permission and version data for popular commercial SDKs. What it covers, what it does not, and when to check it.
What is SNI, and why does my server show the wrong certificate?
SNI lets a client name the host it wants during the TLS handshake. Without it, a server returns its default certificate. How to diagnose and fix it.
What is snapshot.debian.org and when should you use it for builds?
snapshot.debian.org is an archive of past Debian packages by date. It helps rebuild old images exactly, but a frozen snapshot also freezes security fixes.
What is SARIF, and when do you need it in a security scan?
SARIF is a standard JSON format for static analysis results. You need it for code scanning dashboards or when merging output from several different tools.
What is pylock.toml, the standard Python lock file?
pylock.toml is the standard lock file format from PEP 751. Learn what it records, why hashes are built in, and how it differs from requirements.txt.
What is OSV, and how do you use it to check a dependency?
OSV aggregates open source vulnerability databases in one format and offers an API and scanner. What it is for and how to use it in a practice project.
What is NuGet package pruning and does it cut audit false positives?
Package pruning removes packages the .NET runtime already provides from the restore graph, shrinking lock files and reducing NuGet Audit false positives.
NuGetAuditMode: should I audit direct or all packages?
NuGetAuditMode decides whether restore checks only top-level packages or the whole graph. Learn the defaults by .NET version and when to pick all.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.