Developer Tools
What is a webhook and how do security tools use it?
A webhook is an HTTP call a system sends when an event happens. How security tools use webhooks for tickets and chat, and what to secure on the receiver.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
What is a SWHID, and how is it different from a DOI for software?
A SWHID is a permanent identifier derived from the code itself, standardised as ISO/IEC 18670. A DOI points to a record. Here is when to use each.
Oct 19, 20263 min read
Developer Tools
What is an Apple provisioning profile and what does it authorize?
A provisioning profile tells Apple devices who may sign an app, which app, where and when it runs, and which entitlements it gets. Here is how to read one.
Oct 19, 20264 min read
Developer Tools
What is a plugin permission manifest and what should it declare?
A plugin permission manifest lists what a plugin may touch before it runs. Learn what to declare, why optional grants help, and how to enforce it.
Oct 19, 20264 min read
Developer Tools
What is a plugin kill switch and how do marketplace blocklists work?
A plugin kill switch disables a bad plugin everywhere, fast. See how marketplaces use block lists, takedowns and auto disable, and what to build.
Oct 19, 20264 min read
Developer Tools
What is a meta-vulnerability in npm audit output?
A meta-vulnerability is a package flagged only because it depends on a vulnerable version of another package. How to read the chain and where to fix it.
Oct 19, 20265 min read
Developer Tools
What is a libyear, and should you set a quarterly target?
A libyear measures how far behind your dependencies are. Learn how it is calculated, what it misses, and whether to set a quarterly target as a manager.
Oct 19, 20264 min read
Developer Tools
What is a just-in-time CI runner and why use one?
A just-in-time runner takes at most one job, then is removed. It limits carry-over between jobs on self-hosted CI. How it works and what it does not fix.
Oct 19, 20264 min read
Developer Tools
What is a Helm library chart, and who should own it?
A Helm library chart holds shared templates and cannot be installed on its own. Why a shared one needs strict ownership and how consumers should pin it.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.