Tests to demand before merging AI-written code
Passing tests prove little when the same assistant wrote both. Here are the abuse, boundary and regression tests worth requiring before you merge.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Passing tests prove little when the same assistant wrote both. Here are the abuse, boundary and regression tests worth requiring before you merge.
Put each security test at the lowest level that can catch the problem. A guide to unit, integration, contract and end to end tests for security checks.
AI can generate tests at any level, but the test pyramid still says where they pay off. How to direct a model toward fast unit tests and a few broad ones.
The MCP Inspector lets you list tools, call them and watch messages before connecting a server to your coding agent. Commands for web, CLI and TUI modes.
Should you set a coverage target when AI writes tests? Why a hard number invites weak tests, and which signals to track next to coverage instead.
Terraform's S3 backend can lock state with a file in the bucket, and DynamoDB locking is deprecated. What to enable, permissions to grant, how to migrate.
prevent_destroy blocks plans that would destroy a resource, but not if you delete the block. How to use it with other safeguards for databases and state.
Renaming a Terraform resource normally plans a destroy and recreate. A moved block updates state instead. Why this matters for databases, keys and buckets.
Ephemeral values and write-only arguments keep secrets out of Terraform state and plan files. How each works, which versions, and where they stop.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.