Developer Tools
Stopping path traversal in Go with os.Root (Go 1.24)
os.Root opens files inside a directory and blocks escapes through dot dot or symlinks. How to use it, where it fits, and the limits the Go team lists.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
go mod vendor: when vendoring dependencies is worth it
What go mod vendor creates, how the vendor directory is used automatically, and the trade-offs of committing dependency source to your repository.
Oct 18, 20263 min read
Developer Tools
go mod vendor and modules.txt: fixing the inconsistent vendoring error
Go checks vendor/modules.txt against go.mod and fails when they differ. Learn when vendoring turns on, how to force or disable it, and the fix.
Oct 18, 20263 min read
Developer Tools
Go minimal version selection: why Go has no dependency lockfile
Go picks the minimum versions that satisfy every requirement, so the build list does not change when new releases appear. Here is what that means.
Oct 18, 20263 min read
Developer Tools
How govulncheck decides which Go vulnerabilities affect you
govulncheck reports a Go vulnerability only if your code calls the affected function. How it works, how to run it, and what its database leaves out.
Oct 18, 20263 min read
Developer Tools
GitHub merge queue: why required checks never report
Merge queue needs your workflows to trigger on merge_group. Without it the required check never reports and merges stall. Here is the fix and why it helps.
Oct 18, 20263 min read
Developer Tools
Git no-verify bypass: why local hooks need a CI backstop
Local Git hooks can be skipped with the no-verify flag. Here is what it bypasses, what it does not, and how to enforce the same checks on the server side.
Oct 18, 20264 min read
Developer Tools
Where Git Credential Manager stores your credentials on each OS
Git Credential Manager can store credentials in the OS keychain or in plaintext files. Here are the options on Windows, macOS and Linux, and which to skip.
Oct 18, 20263 min read
Developer Tools
Generate an Ed25519 SSH key and load it on macOS
Exact commands to create an Ed25519 SSH key, set a passphrase, configure the macOS keychain and fix the usekeychain error, based on GitHub's guide.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.