Security Guides
How do you test if your scanner finds a vendored library?
A 15 minute test to learn whether your scanner detects a copied library with no manifest entry, using an old jQuery file as the canary.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Should you test a clean install of your release before announcing it?
Yes. Install the exact file users get into an empty environment and run it. It catches missing files, wrong versions and stray content that tests miss.
Oct 19, 20263 min read
Security Guides
How do you test a scanner's suggested fix versions on your repositories?
A scanner's fix version is a claim. Apply ten suggested upgrades on a branch, run your tests and score each tool on how many builds stay green.
Oct 19, 20264 min read
Security Guides
Can you use real payment cards to test checkout in staging?
No. Use the payment provider's test mode and published test card numbers in staging. Real card details in a test system add risk and break provider terms.
Oct 19, 20264 min read
Security Guides
How do you test that log redaction actually works?
Plant fake secrets that look real, run them through your app, and search every log destination. A repeatable canary test for log redaction, with steps.
Oct 19, 20263 min read
Security Guides
What should I test after a dependency upgrade, and in what order?
A practical order for testing after a dependency security upgrade: resolver checks, build, unit and integration tests, runtime smoke test, then rescan.
Oct 19, 20264 min read
Security Guides
How do you test a regex or detection rule that an AI wrote?
AI-written regexes and detection rules often look right and fail on edge cases. A test plan with positive, negative and hostile samples, plus review steps.
Oct 19, 20263 min read
Security Guides
How do you test a container base image upgrade before rollout?
Base image upgrades change OS packages, libraries and sometimes libc. A step by step plan to compare, verify and roll out the new image safely.
Oct 19, 20264 min read
Security Guides
Terragrunt source: how to pin the module behind each unit
Terragrunt units fetch Terraform or OpenTofu modules from a source URL. Use a ref to pin each environment to a known version and promote on purpose.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.