Security Guides
How do you set up dnf-automatic for security updates?
Set the upgrade type to security, choose notify, download or install, and decide on reboots. Here is how dnf-automatic works on Fedora and RHEL hosts.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How narrow should a vulnerability exception be? Scope it tightly
Scope an exception to one finding on one asset, one version and one environment. Why org-wide CVE waivers go wrong, and the fields that bound scope.
Oct 18, 20263 min read
Security Guides
How do you scan Terraform for security problems before apply?
Scan Terraform in two places: the files in the pull request and the plan JSON before apply. Steps, what each catches and a warning on plan output.
Oct 18, 20263 min read
Security Guides
How do you scan Kubernetes manifests before you deploy them?
Scan Kubernetes YAML in the pull request against the Pod Security Standards, so privileged pods, host mounts and root containers are caught first.
Oct 18, 20263 min read
Security Guides
How do you scan git history for leaked secrets?
Scan every commit on every branch, not just current files, then revoke what you find. Steps, what else to scan and the mistakes that waste time.
Oct 18, 20263 min read
Security Guides
How do you scan the full git history of a repository for secrets?
Scan every branch, tag and past commit for secrets, not just the latest files. Steps, a quick manual search, and what a history scan can still miss.
Oct 18, 20264 min read
Security Guides
How do you scan AI-generated code for vulnerabilities?
Scan AI-generated code like any other code: static analysis, dependency checks for new packages, secret scanning and tests, all run before merge.
Oct 18, 20264 min read
Security Guides
How do I scan a web app for vulnerabilities? A step by step guide
Scan a web app by getting permission, using a staging copy, running a passive scan, then an authenticated active scan, and triaging what the scanner finds.
Oct 18, 20264 min read
Security Guides
How do you scan a Helm chart for misconfigurations?
Render the chart with helm template using your real values, then scan the output YAML. Raw templates miss what values change. Steps and a table.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.