code-scanning
Safeguard articles tagged "code-scanning" — guides, analysis, and best practices for software supply chain and application security.
16 articles
Semgrep Open Source: What It Scans and How to Use It Well
Semgrep open source is a fast, rule-based static analysis engine for finding bugs and security issues. Here is what the free CLI covers and where its limits are.
GitHub Advanced Security 2026: Copilot Autofix Goes GA
GHAS in 2026 made Copilot Autofix generally available, opened secret scanning to Team plans, and shipped extended secret metadata. We walked the upgrade for an org with 800 repos.
GitHub's Supply Chain Security Features
A comprehensive look at GitHub's evolving supply chain security toolkit, from Dependabot to code scanning, and how these features are reshaping how developers manage dependency risk.
What is Abstract Syntax Tree (AST) Analysis
AST analysis parses code into a tree to catch what regex scanning misses — here's how it works, its limits, and how reachability fixes the gap.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.