code-provenance
Safeguard articles tagged "code-provenance" — guides, analysis, and best practices for software supply chain and application security.
4 articles
The AI Code Percentage On Your Dashboard Is a Floor, Not a Measurement
Commit-level attribution answers 'lines added by commits an assistant co-authored'. That is a different sentence from 'lines an AI wrote', and the gap between them is where governance metrics go wrong.
Your Git History Already Knows Which AI Wrote Your Code
Coding assistants sign their own work in the commit trailer block. That makes 'how much of this was AI-written' a parsing problem, not a heuristic one — as long as your tooling reads the commit body, which most of it does not.
Secure AI-Assisted Development: A Best-Practices Guide
Samsung banned ChatGPT company-wide in May 2023 after engineers pasted proprietary source code into it three times in 20 days. Here's how to adopt AI coding assistants without repeating that mistake.
AI Code Detector: How It Works and Where It Fails
An AI code detector estimates whether source code was machine-generated. Here is how these tools work, why they misfire, and where security teams should and should not rely on them.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.