Developer Tools
How do you secure an AI coding assistant for a team?
Secure an AI coding assistant by limiting what it can read, what it can run, who approves its actions, and what checks run on its code before merge.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
How do I scan npm dependencies for vulnerabilities?
Run npm audit in a project that has a package-lock.json. It sends your dependency list to the registry and returns known vulnerabilities and fixes.
Oct 18, 20264 min read
Developer Tools
How do you scan a pull request for vulnerabilities before merge?
Run dependency, code, secret and config checks on each pull request and fail only on new high severity findings. Steps, gate rules and mistakes.
Oct 18, 20263 min read
Developer Tools
How do I scan a Maven project for vulnerable dependencies?
Add an SCA plugin such as OWASP Dependency-Check to your Maven build, inspect the dependency tree, and expect some false positives from name matching.
Oct 18, 20263 min read
Developer Tools
How do I scan a GPU inference container image for vulnerabilities?
Scan each layer of a GPU inference image: OS, GPU libraries, Python packages and your app. Build an SBOM at build time and rescan after release.
Oct 18, 20263 min read
Developer Tools
How do I run DAST in CI without slowing every build?
Run a short passive baseline on every merge, a deeper active scan nightly or pre-release, and decide up front which exit codes fail the pipeline.
Oct 18, 20263 min read
Developer Tools
How should you run apt-get in a Dockerfile?
Run apt-get update and install in one RUN step, skip recommended extras, and clear package lists. Here is why each choice matters for size and security.
Oct 18, 20264 min read
Developer Tools
How do you remove a Go dependency completely?
Delete the imports, run go mod tidy, and use go get module@none when needed. How to confirm a Go dependency is gone from go.mod, go.sum and the binary.
Oct 18, 20263 min read
Developer Tools
How do you read a Python wheel filename and its compatibility tags?
A wheel filename encodes name, version, Python tag, ABI tag and platform tag. Learn to decode py3-none-any and cp312 style names and spot a wrong wheel.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.