Developer Tools
Required status checks: skipped results and strict mode
A required GitHub check passes when skipped, so a path filter can bypass a security job. Strict mode forces up to date branches. What each setting means.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
Required status checks for automated fix PRs: what to enforce
Which status checks to require on automated fix pull requests, how branch protection and merge queues enforce them, and a gotcha with bot triggered runs.
Oct 18, 20263 min read
Developer Tools
Required status checks for AI assisted pull requests, step by step
Set up required status checks, stale approval dismissal and code owner review on GitHub so AI assisted pull requests face the same bar as any other.
Oct 18, 20263 min read
Developer Tools
How to require a key and a second factor for SSH logins
OpenSSH AuthenticationMethods lets you demand a public key plus a second step. Learn the syntax, the lockout risks and how to test a change safely.
Oct 18, 20264 min read
Developer Tools
Requiring 2FA on your GitHub organization without locking people out
What happens to members, outside collaborators and bots when you require 2FA on a GitHub organization, and how to roll it out in a day without surprises.
Oct 18, 20263 min read
Developer Tools
Renovate's Dependency Dashboard: what it shows and how to enable it
The Renovate Dependency Dashboard is an issue listing update status, deprecated packages and deferred updates, with optional approval before PRs open.
Oct 18, 20263 min read
Developer Tools
Remove unused dependencies before you triage their vulnerabilities
Reachability flags code you never call, but deleting an unused dependency removes its findings for good. Find unused packages and remove them safely.
Oct 18, 20263 min read
Developer Tools
The remotely hosted code rule for browser extensions explained
Chrome and Firefox both ban extensions from running code fetched from a server. Here is what the rule covers, what it allows, and where it falls short.
Oct 18, 20263 min read
Developer Tools
Remote dev environment or local laptop: a security decision guide
Should your team code in a cloud environment or on local laptops? Compare isolation, secrets, lost device risk and repository trust in a quick guide.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.