Product
Safeguard articles tagged "Product" — guides, analysis, and best practices for software supply chain and application security.
100 articles
How to read your SBOMs in ChatGPT with the Safeguard MCP server
Connect ChatGPT to the Safeguard MCP server with OAuth or an MCP key, then ask it to list SBOMs, inspect components and diff builds. Setup steps inside.
Reading an SBOM with the Safeguard Chrome extension beside it
The Safeguard Chrome extension opens Griffin search in a side panel while you read an SBOM. How to read one, and where SBOMs are generated and exported.
Pulling audit evidence into Claude with the Safeguard MCP server
Connect Claude to the Safeguard MCP server, ask about findings, SBOMs and compliance in plain language, and file each answer with its source as evidence.
How do you prepare audit evidence with the Safeguard local runner?
The local runner scans on your machine and pushes only the SBOM and findings. Run dated scans, keep outputs and map them to controls. Steps and limits.
How do you prepare audit evidence with the Safeguard CLI?
Use the Safeguard CLI to scan, validate the SBOM, and run a report from the scan result, so you hand an auditor files that came from your own build.
Can the Safeguard local runner review a vendor SBOM?
The runner scans code on your machine and uploads only the SBOM and findings. For a vendor SBOM file, the CLI is the documented route. Here is the split.
What does Safeguard do when it finds a leaked secret?
Safeguard scans code, history, images and logs for leaked keys, checks if they are live, and guides revoke and rotate. Mobile beta is not covered.
Can the Safeguard JetBrains plugin run scheduled scans?
The plugin scans on demand and on save or project open. Scheduled scans live in the platform and CLI. Here is how to set up each and what to expect.
What does the Safeguard JetBrains plugin show for a vulnerable package?
The JetBrains plugin shows a package to CVE tree, CVSS and CWE detail and an AI fix. Its docs do not mention reachability. Where to look for that instead.
What the Safeguard JetBrains plugin can add to audit evidence
The JetBrains plugin shows vulnerabilities as you code. Here is what that contributes to audit evidence, what it cannot, and where the rest comes from.
Can the Safeguard JetBrains plugin generate an SBOM?
The JetBrains plugin scans manifests and fixes vulnerabilities in the IDE, but its docs list no SBOM export. What it does and where to export one instead.
Catch dependency risk in JetBrains before you open a pull request
The Safeguard JetBrains plugin scans manifests, shows CVEs in a tool window and offers reviewed fixes. It is a pre-pull-request check, not a merge gate.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.