Security Guides
How do you reserve capacity for unplanned security upgrades?
Keep planned upgrade work from collapsing every time an advisory lands: size a separate buffer, set trigger rules, and review how much it was used.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What should I check before releasing research software with a paper?
A ten item pre-release checklist for research code: license, lockfile, secrets, scan, citation file, archive and DOI, written so you can run it in an hour.
Oct 19, 20263 min read
Security Guides
How do I check the exploit status of one CVE in ten minutes?
A ten minute worksheet for one CVE: KEV, EPSS now and over 30 days, public exploit sources, vendor notice, then your own exposure. With a record template.
Oct 19, 20264 min read
Security Guides
How do you rescan after an AI fix and read closed, new and unchanged?
A rescan after an AI fix should show the target finding closed and nothing new. Learn to read closed, new and unchanged results and what each means.
Oct 19, 20263 min read
Security Guides
How do you prove a vulnerability fix worked? Re-run the exploit
A fix is safe to call done only when the original exploit input fails. How to keep, re-run and record the proof of concept as a regression test.
Oct 19, 20264 min read
Security Guides
Does Rust's reqwest client time out by default?
No. reqwest's ClientBuilder defaults to no total, connect or read timeout, and follows up to 10 redirects. Here is how to set safe limits for a service.
Oct 19, 20264 min read
Security Guides
What required checks should external contributor pull requests pass?
A checklist of required checks for pull requests from forks and outside contributors: tests, dependency review, code scanning and a summary gate.
Oct 19, 20264 min read
Security Guides
What happens when you require 2FA in a GitHub organization?
Members lose access until they enable 2FA, outside collaborators and bots are removed, and a three month window exists to reinstate. Steps and prep.
Oct 19, 20263 min read
Security Guides
What happens when you require 2FA for contractors on GitHub?
Turning on required 2FA removes outside collaborators who have not enabled it, including bots. Here is the safe rollout order for contractor accounts.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.