ci-cd
Safeguard articles tagged "ci-cd" — guides, analysis, and best practices for software supply chain and application security.
205 articles
DevSecOps Pipeline Example: A Secure CI/CD Workflow
A concrete DevSecOps pipeline example, stage by stage, showing where SAST, SCA, secret scanning, and DAST fit into a real CI/CD workflow.
Shift-Left Without Friction: Dev Experience 2026
Shift-left only works when developers stop noticing it. A 2026 playbook for moving supply chain checks earlier without burning the people who ship code.
Code Quality Scan: What It Catches and Where It Stops
A code quality scan flags maintainability and reliability issues in your source, but it is not a security scan. Here is what each type finds and how to run both without noise.
How a Jenkins Scanner Catches Vulnerabilities in Your Pipeline
A Jenkins scanner is any security tool wired into a Jenkins job to inspect code, dependencies, or containers before they ship. Here is how to pick one and run it well.
Running DAST, SAST, and SCA in One Pipeline
Running sast dast sca as three separate checkpoints instead of one correlated pipeline is why most security backlogs are full of duplicate, unprioritized noise.
Web Vulnerability Scanning: How It Works and What It Finds
A practitioner's guide to web vulnerability scanning: what scanners actually test, where they fall short, and how to fit them into a delivery pipeline without drowning in noise.
Shift-Left Security Explained: Catching Vulnerabilities Before Production
Shift-left security means moving vulnerability detection into design, coding, and CI instead of waiting for a pre-release pen test. Here is what that looks like in practice.
IDE-Time Feedback Loop For Supply Chain
The editor is the highest-leverage place to catch supply chain risk. A design guide for building IDE-time feedback that developers actually want.
CircleCI Orb Trust and Pinning in 2026
How to manage CircleCI orb trust in 2026: certified versus uncertified orbs, version pinning, contexts, OIDC, and the controls that hold under real attacker pressure.
Web Application Scanning Tools: DAST Options Compared
Choosing a web application scanning tool means deciding between open-source scanners, proxy-based suites, and managed DAST platforms. Here is how the options actually differ.
SAST Testing Tools: How to Choose and Use Them Effectively
A practitioner's guide to SAST testing tools: what static analysis actually catches, where it falls short, and how to wire it into a pipeline without drowning developers in noise.
How to Find a GitHub Repository URL (and Why It Matters for Security)
A GitHub repository URL is more than a clone address. Here is how to find it, the three forms it takes, and why the wrong one leaks or breaks your pipeline.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.