testing
Safeguard articles tagged "testing" — guides, analysis, and best practices for software supply chain and application security.
23 articles
mocha npm: Security Review and Safe Usage
The mocha npm test framework runs only code you write, so its direct risk is low, but its dependency tree generates npm audit noise worth understanding.
msw (npm): Mock Service Worker Without Leaking Mocks Into Production
The msw npm package is a superb API mocking tool, and its main security risk is operational: shipping a service worker or a mock server into production.
Python MagicMock Security: Keeping Test Doubles Honest
Python's MagicMock makes tests fast and isolated, but the same auto-magic that makes it convenient can hide security regressions. Here is how to use it without lying to yourself.
How to Test Your Signing Pipeline End to End
Build a repeatable end-to-end test harness for your signing pipeline that proves artifacts are signed correctly and that verification fails when tampered.
Disaster Recovery Testing Methods That Actually Prove You Can Recover
A walk through the disaster recovery testing methods teams rely on, from tabletop walkthroughs to full failover, and how to pick the right one for each system.
What Is an API Security Tool and How Do You Actually Choose One?
An API security tool inspects, tests, and monitors your APIs for the flaws attackers hunt for. Here is how the categories differ and how to pick the right one.
@angular-builders/jest: Setup and Dependency Security
@angular-builders/jest lets you run ng test with Jest instead of Karma. Here is how it works, the version-alignment rule that trips teams up, and how to keep its dependency tree secure.
eslint-plugin-jest-dom: What It Secures and What It Does Not
eslint-plugin-jest-dom enforces better jest-dom assertions, but as a dev dependency it also lives in your supply chain. Here is where its real security value and its real risk both sit.
IAST vs SAST in 2026: When to Use Which
A practical guide to when IAST adds value over SAST in 2026, with the workload characteristics that justify the operational cost of runtime instrumentation.
npm chai: A Security Review and Safe Usage Guide
Chai is a staple assertion library for JavaScript testing. Here is an honest look at the security profile of the npm chai package and how to keep it out of your production bundle.
IAST vs DAST Decision Guide 2026
When to choose IAST, when to choose DAST, and when to run both. A decision framework for 2026 with concrete coverage, cost, and integration tradeoffs.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.