Security Guides
Does a leading space keep a secret out of your shell history?
A leading space can keep a command out of bash or zsh history, but only if a setting is on. Here is how it works, what it misses, and safer habits.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Does a GitHub star count show an open source scanner is healthy?
Stars measure interest, not upkeep. Here is what a star count tells a buyer about an open source scanner, and which signals to check instead.
Oct 19, 20264 min read
Security Guides
Does a faster patching target cause more outages?
A shorter patch deadline can raise change failures if teams rush. Pair time to patch with change fail rate and rework so speed does not cost stability.
Oct 19, 20264 min read
Security Guides
Does a falling pentest finding count mean security improved?
Fewer penetration test findings year over year can reflect scope, tester or time budget. Learn how to compare tests fairly before claiming progress.
Oct 19, 20263 min read
Security Guides
Does a dependency scanner check Node, Python or the JDK itself?
Most dependency scanners read manifests and lockfiles, so the language runtime is often missing from results. Here is how to check what yours covers.
Oct 19, 20264 min read
Security Guides
Does an open source dependency have a security response process?
Six questions to tell whether a project can respond to a vulnerability: reporting route, timely fixes, older releases, LTS, guidance and secure defaults.
Oct 19, 20263 min read
Security Guides
Does a CSP replace input sanitizing on a store? Myth vs fact
A Content Security Policy limits damage from injected scripts but does not fix the injection. Myth versus fact for store teams, with what to do in both layers.
Oct 19, 20264 min read
Security Guides
How do you document a vulnerability you have not fixed yet?
Write a short exception record: the finding, why it is acceptable for now, the compensating control, an owner and a review date. A template for startups.
Oct 19, 20264 min read
Security Guides
Which docker run flags harden a model inference container?
Run as a non-root user, mount the root filesystem read-only, drop capabilities, block new privileges and set limits. The flags and the tradeoffs to expect.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.