Developer Tools
How do you validate an OpenAPI spec before generating code in CI?
Add a validation step before client generation: run the validate command, fail on errors, then check server URLs and security schemes yourself.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
uvx or uv tool install: which should you use for Python tools?
uvx runs a tool in a temporary isolated environment, while uv tool install keeps it on PATH. Choose by how often you run it and how you update it.
Oct 19, 20263 min read
Developer Tools
Which uv index strategy is safe with an internal Python index?
uv defaults to first-index, which blocks dependency confusion. What the unsafe options do, and how explicit indexes and pins keep an internal index safe.
Oct 19, 20264 min read
Developer Tools
How do I use uv in a Dockerfile with locked installs and cache mounts?
Use uv sync with locked, set UV_NO_DEV for production, mount the cache, and copy the virtual environment into a clean stage. A step by step guide.
Oct 19, 20264 min read
Developer Tools
How do you turn an integration inventory into an egress allowlist?
Use your third-party API inventory as the source for outbound allow rules: observe, compare, enforce in stages, and review exceptions.
Oct 19, 20263 min read
Developer Tools
What does useUnknownInCatchVariables change in TypeScript?
useUnknownInCatchVariables types caught errors as unknown, forcing a check before use. Why that helps Node services avoid leaking or mishandling errors.
Oct 19, 20263 min read
Developer Tools
How do you use OWASP cheat sheets in developer security training?
Use OWASP cheat sheets as just in time references: map them to your stack, build a one page index, and pair each with a short exercise. A practical plan.
Oct 19, 20263 min read
Developer Tools
How do you use CODEOWNERS to review dependency changes?
Use a CODEOWNERS file so lockfile and manifest changes are reviewed by the people who own open source policy. Setup steps, pitfalls and a sample layout.
Oct 19, 20264 min read
Developer Tools
Can an SBOM help onboard a new engineer to a codebase?
A current SBOM is a fast map of what a service is built on. Here is how to use it in the first week to learn frameworks, data stores and risky corners.
Oct 19, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.