Developer Tools
Fuzz a parser with Go's built-in fuzzing, step by step
A walkthrough of writing a Go fuzz test for a parser: the target function, seed corpus, running with the fuzz flag, and keeping failing inputs as tests.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
npm ci vs pnpm frozen-lockfile vs yarn immutable: how do they compare?
Each package manager has a CI install mode that fails when the lockfile is out of sync. Compare npm ci, pnpm frozen lockfile and yarn immutable defaults.
Oct 18, 20264 min read
Developer Tools
Free vulnerability scanner for repos: what free covers and misses
What a free repository vulnerability scanner usually covers, what it leaves out, and a quick test to tell whether free is enough for your team.
Oct 18, 20263 min read
Developer Tools
How do I force a patched transitive version in Gradle?
Use a Gradle constraint to raise a vulnerable transitive library to a patched version, add strictly only if needed, verify with dependencyInsight.
Oct 18, 20263 min read
Developer Tools
Flutter secure storage: how it behaves on each platform
flutter_secure_storage uses Keychain, Android crypto and a Linux keyring, with different guarantees on each. Check this before storing tokens in an app.
Oct 18, 20263 min read
Developer Tools
Flutter obfuscation: what it does and what it does not
Flutter's obfuscate flag renames symbols in release builds. It is not encryption and it is not a place for secrets. Know the flags, files and trade offs.
Oct 18, 20263 min read
Developer Tools
Flatpak filesystem=host or portals: which should your app use?
For a Flatpak you publish, portals usually beat broad filesystem access. A decision guide on host, home, narrow paths and file chooser portals.
Oct 18, 20263 min read
Developer Tools
Flat apt repository or dists layout for a small vendor?
A flat Debian repository puts indices in one directory, while the dists layout supports suites and components. Which to pick when you ship .deb packages.
Oct 18, 20263 min read
Developer Tools
Flaky security tests: why blind retries hide real bugs
Retrying a failed test until it passes can bury race conditions and auth bugs. See what Google reported about flakiness and a safer retry policy.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.