Product
Seeing dependency risk and getting an SBOM from VS Code
What the Safeguard VS Code extension shows while you code, and which surface generates the SBOM: the CLI or the web app. Commands and steps from docs.
Oct 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedProduct
How to read your SBOMs in ChatGPT with the Safeguard MCP server
Connect ChatGPT to the Safeguard MCP server with OAuth or an MCP key, then ask it to list SBOMs, inspect components and diff builds. Setup steps inside.
Oct 18, 20264 min read
Product
Reading an SBOM with the Safeguard Chrome extension beside it
The Safeguard Chrome extension opens Griffin search in a side panel while you read an SBOM. How to read one, and where SBOMs are generated and exported.
Oct 18, 20264 min read
Product
Pulling audit evidence into Claude with the Safeguard MCP server
Connect Claude to the Safeguard MCP server, ask about findings, SBOMs and compliance in plain language, and file each answer with its source as evidence.
Oct 18, 20264 min read
Product
How do you prepare audit evidence with the Safeguard local runner?
The local runner scans on your machine and pushes only the SBOM and findings. Run dated scans, keep outputs and map them to controls. Steps and limits.
Oct 18, 20264 min read
Product
How do you prepare audit evidence with the Safeguard CLI?
Use the Safeguard CLI to scan, validate the SBOM, and run a report from the scan result, so you hand an auditor files that came from your own build.
Oct 18, 20265 min read
Product
Can the Safeguard local runner review a vendor SBOM?
The runner scans code on your machine and uploads only the SBOM and findings. For a vendor SBOM file, the CLI is the documented route. Here is the split.
Oct 18, 20264 min read
Product
What does Safeguard do when it finds a leaked secret?
Safeguard scans code, history, images and logs for leaked keys, checks if they are live, and guides revoke and rotate. Mobile beta is not covered.
Oct 18, 20264 min read
Product
Can the Safeguard JetBrains plugin run scheduled scans?
The plugin scans on demand and on save or project open. Scheduled scans live in the platform and CLI. Here is how to set up each and what to expect.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.