code-review
Safeguard articles tagged "code-review" — guides, analysis, and best practices for software supply chain and application security.
60 articles
How to Do a Secure Code Review: A Practical 2026 Guide
A practical 2026 walkthrough of secure code review — the process, the checklist, the real tools that automate it, how reachability prioritizes findings, and where Safeguard fits.
Python Code Review Tools: An Honest 2026 Buyer's Guide
A balanced look at the Python code review and static-analysis tools that actually matter in 2026 — Ruff, Bandit, Semgrep, CodeQL, SonarQube, and more — with honest tradeoffs and where Safeguard fits.
What Is a Claude Code Skill, and How Do You Secure One?
A Claude Code skill is a folder of Markdown instructions and scripts that an AI agent loads on demand. Because it can carry executable code, it deserves the same review as any dependency.
OWASP Secure Coding Practices: A Working Checklist
OWASP secure coding practices boil down to a handful of checks that catch most real-world vulnerabilities — here's the checklist teams actually use, not the full 200-item reference.
Can AI write secure code? Auditing AI-generated code
AI writes code fast, but studies from 2021 to 2025 show it also reproduces insecure patterns and invents fake dependencies. Here's what the data says.
GenAI Code Review Tools: A 2025 Field Test
We field-tested five GenAI code review tools against 240 seeded security defects to see which catch real issues and which hallucinate findings.
How 'Vibe Coding' Culture Is Reshaping Application Securi...
AI-assisted "vibe coding" is reshaping how much code ships and how little of it gets truly reviewed. Here's what the data shows and how AppSec teams should respond.
Do Code Review Practices Need to Change When Half the Cod...
AI now writes up to half of production code. Here is why traditional code review breaks down on AI output, and what teams need to change.
Code Guide Buzzardcoding: How to Read and Review Code for Security
A good code guide teaches you to read code, not just write it. This walkthrough covers how to review code for the security flaws that automated tools and casual readers miss.
The False Sense of Security Effect in AI-Assisted Develop...
AI coding assistants make developers write faster and trust more — even when the code is less secure. Here's what the data shows, and how to close the gap.
How to Check Code for Security Bugs Before You Ship
Learning to check code for security issues means layering the right tools in the right order. Here is a practical workflow that catches real bugs without drowning you in noise.
The Generational Divide in Attitudes Toward AI-Assisted C...
Younger developers trust AI-generated code far more than senior engineers do. That gap decides who reviews a PR before a vulnerability ships — and it's already showing up in real breaches.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.