Topic

Tools

In-depth guides and analysis on tools from the Safeguard engineering team.

50 articles

Syft v1.20 Release: Faster Scans, Smarter License Detection

Anchore's Syft v1.20 ships a refactored license cataloger, Bitnami SBOM passthrough, and a 2x speedup on filesystem scans. We tested the upgrade on five real codebases.

Sep 18, 20255 min read

Tools

CodeQL 2.22 Security Query Pack Review

GitHub's CodeQL 2.22.4 runs 478 security queries by default across 169 CWEs. We map the new queries added in 2025 and benchmark scan times on real repos.

Sep 9, 20256 min read