Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Use docker compose config `--images` to list declared images and docker compose images for those in use, then pin tags to digests before you scan.
pnpm sbom can drop peer dependencies with `--exclude-peers`. What that removes, when automatic peer installation makes it useful, and when to leave it off.
How to decide which DAST rules fail a build, which only warn, and which to ignore, using a config file and a staged rollout that keeps developers on side.
IAST works per service, so microservices multiply agents, pipelines and findings. What to plan for in coverage, ownership and rollout across many services.
Two ways to put Safeguard in CI: connect the repo, or run the CLI in a job. Learn how gates block risky pull requests and how to roll them out gently.
Scan pull request branches to catch new risk early, scan the default and release branches for the record. Skip long dead branches to avoid noise.
A useful AI coding agent log records who, which session, which tool, what input, what result, and what changed. Here are the fields and retention rules.
A fixed version exists, but is it safe to merge? Six checks on version jump, changelog, tests, new dependencies, and rollback before you upgrade.
Install the Safeguard CLI with one command, sign in, and scan a folder on your own machine. Plain steps for macOS, Linux and Windows, plus what to expect.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
