sca
Safeguard articles tagged "sca" — guides, analysis, and best practices for software supply chain and application security.
464 articles
Snyk Supported Languages and Ecosystems: A Reference
A practical reference for Snyk supported languages across SCA and SAST, how Snyk opensource scanning compares to Snyk Code, and what to check before assuming your stack is covered.
npm crypto-js: A Security Review and Safe Usage Guide
The npm crypto-js library is widely used but has a documented cryptographic weakness before 4.2.0. Here is what to check and how to use it safely.
Security Testing in the Software Development Lifecycle
Security testing for software development only works when it's distributed across the SDLC, not bolted on as a single pre-release gate — here's where each test type actually belongs.
Is the Busboy npm Package Safe? A Security Review
The busboy npm package parses multipart form data in Node.js. Here is its current security status, the dicer history that once bit it, and how to use it safely.
What Is Checkmarx One? A Practical Look at the AppSec Platform
Checkmarx One is Checkmarx's cloud application security platform, bundling SAST, SCA, IaC, and more into a single console. Here is what it covers and where it fits.
PHP Code Check: A Security Guide
A PHP code check should catch injection, unsafe deserialization, and vulnerable Composer packages before they ship. Here is a layered approach that fits a normal PHP workflow.
An SCA Tools List That Matches How You Actually Ship
A candid SCA tools list for teams that need dependency and license scanning wired into CI, covering open-source scanners and commercial platforms and how to tell them apart.
MIT-Lizenz: Was sie erlaubt und was kommerzielle Nutzung bedeutet
Die MIT-Lizenz ist eine der freizuegigsten Open-Source-Lizenzen und erlaubt auch die kommerzielle Nutzung. Wir erklaeren Pflichten, Grenzen und Risiken.
How Do You Pronounce Snyk? The Definitive Answer
Snyk is pronounced sneak, like the verb. Here is where the name comes from, why people get it wrong, and what the tool actually does.
Application Security Scanning: How the Pieces Fit Together
Application security scanning spans SAST, DAST, SCA, and secrets detection. Here is what each type finds, where it fits in CI, and how to avoid alert fatigue.
react-native-loading-spinner-overlay: Is It Still Safe to Use?
A security look at react-native-loading-spinner-overlay: its maintenance status, dependency footprint, and how to reason about an unmaintained UI package.
Snyk Advisor: What It Is and How to Read Its Score
Snyk Advisor is a free package health tool that rates open source packages from 0 to 100 across popularity, maintenance, security, and community. Here is how to use it well.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.