Developer Tools
systemd timers vs cron for security sensitive jobs
A systemd timer runs a service unit, so sandbox settings apply to the job. Timers vs cron for backups, scans and rotation, with settings to know.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
Which SwiftPM version requirement: from, exact, branch or revision?
Swift Package Manager offers five ways to state a dependency version. Here is what each allows, what each risks, and which one to default to.
Oct 18, 20263 min read
Developer Tools
Swift package requirements: from, exact, revision or branch?
Which SwiftPM requirement to use and what each means for updates and security: from, upToNextMinor, exact, range, revision and branch compared.
Oct 18, 20263 min read
Developer Tools
Which file locks versions: SwiftPM, CocoaPods, Carthage or Gradle?
Mobile dependency managers record resolved versions in different files. A comparison of what each tool writes, what to commit, and how to audit it.
Oct 18, 20263 min read
Developer Tools
What can a SwiftPM build tool plugin access on your machine?
SwiftPM build tool plugins run in a sandbox with no network and limited file access. See what they can read and write, and what risk remains for teams.
Oct 18, 20263 min read
Developer Tools
Are Swift macros sandboxed? What a macro can and cannot touch
Swift macros are separate programs that rewrite syntax. The design proposal says they run sandboxed, with no file or network access. Here is what that means.
Oct 18, 20263 min read
Developer Tools
Supported languages page: myth vs fact for security scanners
A long supported languages list does not prove a scanner works on your code. Myths and facts about language coverage, and what to test before you trust it.
Oct 18, 20263 min read
Developer Tools
Structure-aware fuzzing: when random bytes never get past the parser
Checksums, length fields and compressed data block plain mutation. Structure-aware fuzzing builds valid inputs first. Three approaches compared.
Oct 18, 20263 min read
Developer Tools
A vulnerable library in your storefront: patch, mitigate or replace?
When a storefront dependency gets an advisory, the move depends on whether a patch exists and can be tested. A decision flow for small teams.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.