Security Guides
What does GitLab SAST scan, and which languages does it cover?
GitLab SAST scans source code inside CI for vulnerabilities. Here is what it covers, which languages, what changes by tier, and where it stops.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What does GitLab DAST test, and where does it fit with SAST?
GitLab DAST runs simulated attacks on a running web app or API. Learn what it finds, how it runs, and how it differs from the static scanners.
Oct 18, 20264 min read
Security Guides
What does GitLab container scanning cover and what does it skip?
GitLab container scanning checks image OS packages by default, and language packages only if you turn them on. Here is the coverage, tiers and caveats.
Oct 18, 20263 min read
Security Guides
What does fix available mean in a vulnerability scan result?
Fix available means a patched version exists, not that upgrading is safe or easy. Here is how to read the label and decide what to do with it.
Oct 18, 20263 min read
Security Guides
What does end of life mean for software? EOL, deprecated, unmaintained
End of life means a vendor stops patching. Learn how it differs from deprecated, end of sale and unmaintained, and which one signals real security risk.
Oct 18, 20263 min read
Security Guides
What does Django DEBUG = True expose if you leave it on in production?
Django DEBUG = True leaks source excerpts, local variables, settings and library details on error pages. What it shows, how to check, and how to fix it.
Oct 18, 20264 min read
Security Guides
What does 'disputed' mean on a CVE record?
A disputed tag on a CVE record means one party disagrees that the issue is a vulnerability. What it does and does not tell you, and how to act on it.
Oct 18, 20263 min read
Security Guides
What does an open source AppSec stack look like, and what is missing?
A typical open source AppSec stack covers dependencies, code, secrets, IaC and images. See the pieces, the glue you must write, and the gaps that remain.
Oct 18, 20263 min read
Security Guides
What does a software composition analysis (SCA) tool do?
A plain answer to what an SCA tool does: it lists the open source components in your software and matches them to known vulnerabilities and licenses.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.