Developer Tools
Does a security upgrade slow your app? Check before you merge
A vulnerability fix can change speed, memory and startup time. Here is a short before and after check to run on a fix pull request before it merges.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
How do you check certificate expiry with openssl in a cron job?
Use openssl x509 with the checkend option to exit nonzero when a certificate expires within N seconds. A cron script, its limits and a better probe.
Oct 19, 20264 min read
Developer Tools
How do you verify a downloaded Hugging Face model against the Hub?
Run hf cache verify to compare cached files with the checksums on the Hub, then record your own hashes. What this catches and what it cannot.
Oct 19, 20264 min read
Developer Tools
ChatGPT and Codex scheduled tasks: triggers, sandboxes and limits
What OpenAI's documentation says about scheduled tasks and automations: where to create them, event triggers, sandbox levels, worktrees and admin controls.
Oct 19, 20266 min read
Developer Tools
What is a characterization test, and when do you write one?
A characterization test records what code does today so an upgrade can be checked against it. When to write one, how, and what to do with surprises.
Oct 19, 20264 min read
Developer Tools
How do I find security fixes in a changelog before upgrading?
Scan the changelog for a Security heading, Deprecated and Removed entries, and yanked versions, then match each fix to your version before you upgrade.
Oct 19, 20263 min read
Developer Tools
Changelog says 'internal improvements': how to check what changed
A vague changelog entry on a security release is not enough to merge on. Three quick ways to find out what really changed, and when to ask the maintainers.
Oct 19, 20264 min read
Developer Tools
How do you change a live CI gate policy without surprising developers?
Treat a gate rule change like a code release: replay it on recent pull requests, run it in evaluate mode, announce it, and keep a rollback ready.
Oct 19, 20264 min read
Developer Tools
Certbot deploy hook or post hook: which one reloads your server?
Certbot pre, post and deploy hooks differ in when they run. Use a deploy hook to reload a server only after a successful renewal. Steps and a checklist.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.