https://safeguard.sh/resources/blog/is-python-3-9-end-of-life-what-to-do-now 2026-10-18T19:55:16.803Z weekly 0.7 https://safeguard.sh/resources/blog/is-react-safe-from-xss-by-default 2026-10-18T19:55:16.911Z weekly 0.7 https://safeguard.sh/resources/blog/is-rolling-back-safe-if-the-old-version-has-known-vulnerabilities 2026-10-18T19:55:17.011Z weekly 0.7 https://safeguard.sh/resources/blog/is-ssdf-compliance-a-certification-myth-vs-fact 2026-10-18T19:55:17.113Z weekly 0.7 https://safeguard.sh/resources/blog/is-the-kubernetes-edit-role-safe-for-developers 2026-10-18T19:55:17.216Z weekly 0.7 https://safeguard.sh/resources/blog/is-the-vulnerable-code-reachable-triage-a-zero-day 2026-10-18T19:55:17.322Z weekly 0.7 https://safeguard.sh/resources/blog/is-there-a-hipaa-certification-for-software-vendors 2026-10-18T19:55:17.421Z weekly 0.7 https://safeguard.sh/resources/blog/is-this-docker-hub-image-safe-to-pull 2026-10-18T19:55:17.526Z weekly 0.7 https://safeguard.sh/resources/blog/is-this-fuzzer-crash-exploitable-severity-questions 2026-10-18T19:55:17.637Z weekly 0.7 https://safeguard.sh/resources/blog/is-this-report-a-vulnerability-triage-for-maintainers 2026-10-18T19:55:17.751Z weekly 0.7 https://safeguard.sh/resources/blog/is-this-the-official-package-or-an-impostor-fork-verify-authenticity 2026-10-18T19:55:17.856Z weekly 0.7 https://safeguard.sh/resources/blog/is-ubuntu-20-04-end-of-life-esm-and-upgrade-options 2026-10-18T19:55:17.959Z weekly 0.7 https://safeguard.sh/resources/blog/is-update-electronjs-org-the-right-update-source-for-your-app 2026-10-18T19:55:18.059Z weekly 0.7 https://safeguard.sh/resources/blog/is-vue-2-still-safe-to-use-after-end-of-life 2026-10-18T19:55:18.158Z weekly 0.7 https://safeguard.sh/resources/blog/is-webassembly-safe-if-the-c-library-inside-has-a-bug 2026-10-18T19:55:18.261Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-appsec-program-working-five-question-self-check 2026-10-18T19:55:18.361Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-bundler-plugin-trusted-code-front-end-build-tooling 2026-10-18T19:55:18.464Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-container-base-image-end-of-life-how-to-check 2026-10-18T19:55:18.561Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-nvidia-container-toolkit-version-affected-by-cve-2024-0132 2026-10-18T19:55:18.664Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-pen-test-just-a-scanner-report-how-to-tell 2026-10-18T19:55:18.765Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-phone-too-old-hardware-age-and-update-commitments 2026-10-18T19:55:18.868Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-secure-coding-training-current-owasp-top-10-check 2026-10-18T19:55:18.970Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-severity-threshold-actually-doing-anything 2026-10-18T19:55:19.087Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-5-21-ict-supply-chain-evidence-for-software-dependencies 2026-10-18T19:55:19.186Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-26-application-security-requirements-how-to-document 2026-10-18T19:55:19.285Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-27-secure-architecture-principles-what-to-write-down 2026-10-18T19:55:19.394Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-29-security-testing-evidence-before-release 2026-10-18T19:55:19.499Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-30-outsourced-development-evidence-contractors-agencies 2026-10-18T19:55:19.601Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-31-separate-dev-test-production-evidence 2026-10-18T19:55:19.701Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-33-test-information-using-production-data-safely 2026-10-18T19:55:19.804Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-34-protect-production-during-audit-scans 2026-10-18T19:55:19.904Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-4-source-code-access-evidence-what-auditors-check 2026-10-18T19:55:20.006Z weekly 0.7 https://safeguard.sh/resources/blog/isrg-root-x1-expiry-2030-what-developers-should-do 2026-10-18T19:55:20.107Z weekly 0.7 https://safeguard.sh/resources/blog/java-17-strong-encapsulation-add-opens-when-upgrading 2026-10-18T19:55:20.210Z weekly 0.7 https://safeguard.sh/resources/blog/java-24-security-manager-removed-check-your-app 2026-10-18T19:55:20.334Z weekly 0.7 https://safeguard.sh/resources/blog/java-critical-library-cve-response-runbook 2026-10-18T19:55:20.432Z weekly 0.7 https://safeguard.sh/resources/blog/java-lts-support-windows-8-11-17-21-25-compared 2026-10-18T19:55:20.538Z weekly 0.7 https://safeguard.sh/resources/blog/javascript-docs-site-crawlability-checklist 2026-10-18T19:55:20.646Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-api-tokens-vs-passwords-for-scripts-and-automation 2026-10-18T19:55:20.747Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-built-in-node-zero-executors-why-and-how 2026-10-18T19:55:20.847Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-cli-websocket-http-or-ssh-which-transport-is-safer 2026-10-18T19:55:20.946Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-configuration-as-code-security-benefits-and-cautions 2026-10-18T19:55:21.045Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-credential-scopes-system-global-folder-explained 2026-10-18T19:55:21.151Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-csrf-protection-crumbs-explained-for-admins 2026-10-18T19:55:21.254Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-hardening-checklist-controller-agents-credentials 2026-10-18T19:55:21.356Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-pinned-plugins-and-implied-dependencies-explained 2026-10-18T19:55:21.462Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-pipeline-credentials-withcredentials-without-leaks 2026-10-18T19:55:21.567Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-plugin-unfixed-vulnerability-what-happens-and-what-to-do 2026-10-18T19:55:21.670Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-reverse-proxy-setup-is-broken-warning-what-it-means 2026-10-18T19:55:21.783Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-script-security-sandbox-vs-script-approval 2026-10-18T19:55:21.886Z weekly 0.7 https://safeguard.sh/resources/blog/jenkins-trusted-vs-untrusted-shared-libraries-risk 2026-10-18T19:55:21.991Z weekly 0.7 https://safeguard.sh/resources/blog/json-ld-article-markup-for-technical-blog-posts 2026-10-18T19:55:22.094Z weekly 0.7 https://safeguard.sh/resources/blog/juice-jacking-public-usb-chargers-what-is-documented 2026-10-18T19:55:22.198Z weekly 0.7 https://safeguard.sh/resources/blog/jupyter-server-exposed-to-the-network-checklist 2026-10-18T19:55:22.295Z weekly 0.7 https://safeguard.sh/resources/blog/just-in-time-vs-annual-security-training-for-developers 2026-10-18T19:55:22.398Z weekly 0.7 https://safeguard.sh/resources/blog/jvm-and-android-build-supply-chain-checklist-ten-questions 2026-10-18T19:55:22.501Z weekly 0.7 https://safeguard.sh/resources/blog/k-anonymity-explained-for-developers 2026-10-18T19:55:22.606Z weekly 0.7 https://safeguard.sh/resources/blog/keep-agent-approvals-meaningful-avoid-rubber-stamping 2026-10-18T19:55:22.710Z weekly 0.7 https://safeguard.sh/resources/blog/keep-an-approved-package-list-from-going-stale 2026-10-18T19:55:22.814Z weekly 0.7 https://safeguard.sh/resources/blog/keep-audit-evidence-continuous-during-a-tool-migration 2026-10-18T19:55:22.913Z weekly 0.7 https://safeguard.sh/resources/blog/keep-broker-client-libraries-patched-dependency-inventory 2026-10-18T19:55:23.013Z weekly 0.7 https://safeguard.sh/resources/blog/keep-ci-container-scans-fast-practical-steps 2026-10-18T19:55:23.112Z weekly 0.7 https://safeguard.sh/resources/blog/keep-pinned-docker-image-digests-up-to-date-without-falling-behind 2026-10-18T19:55:23.212Z weekly 0.7 https://safeguard.sh/resources/blog/keep-security-settings-consistent-across-hundreds-of-repositories 2026-10-18T19:55:23.313Z weekly 0.7 https://safeguard.sh/resources/blog/kerberos-vs-ntlm-which-protocol-is-your-app-using 2026-10-18T19:55:23.412Z weekly 0.7 https://safeguard.sh/resources/blog/kernel-livepatch-what-it-fixes-and-what-still-needs-a-reboot 2026-10-18T19:55:23.513Z weekly 0.7 https://safeguard.sh/resources/blog/kev-additions-per-day-how-big-is-the-watch-job 2026-10-18T19:55:23.613Z weekly 0.7 https://safeguard.sh/resources/blog/kev-entries-that-flag-open-source-components 2026-10-18T19:55:23.720Z weekly 0.7 https://safeguard.sh/resources/blog/kev-entries-with-epss-under-one-percent 2026-10-18T19:55:23.820Z weekly 0.7 https://safeguard.sh/resources/blog/kev-entries-with-no-cwe-what-the-gap-means 2026-10-18T19:55:23.927Z weekly 0.7 https://safeguard.sh/resources/blog/kev-how-old-are-cves-when-cisa-adds-them 2026-10-18T19:55:24.029Z weekly 0.7 https://safeguard.sh/resources/blog/kev-network-edge-vendors-share-of-additions 2026-10-18T19:55:24.132Z weekly 0.7 https://safeguard.sh/resources/blog/kev-ransomware-flag-which-entries-carry-it 2026-10-18T19:55:24.230Z weekly 0.7 https://safeguard.sh/resources/blog/kev-recall-test-does-your-scanner-know-exploited-vulnerabilities 2026-10-18T19:55:24.343Z weekly 0.7 https://safeguard.sh/resources/blog/kev-vendor-concentration-long-tail 2026-10-18T19:55:24.442Z weekly 0.7 https://safeguard.sh/resources/blog/kev-vendor-concentration-nine-vendors-half-the-catalog 2026-10-18T19:55:24.542Z weekly 0.7 https://safeguard.sh/resources/blog/kev-weakness-classes-memory-injection-authentication 2026-10-18T19:55:24.648Z weekly 0.7 https://safeguard.sh/resources/blog/kev-weakness-types-what-attackers-exploit 2026-10-18T19:55:24.749Z weekly 0.7 https://safeguard.sh/resources/blog/keyless-kms-or-self-managed-key-which-cosign-signing-fits 2026-10-18T19:55:24.852Z weekly 0.7 https://safeguard.sh/resources/blog/knight-capital-97-emails-alert-routing-lesson 2026-10-18T19:55:24.960Z weekly 0.7 https://safeguard.sh/resources/blog/knight-capital-sec-order-deployment-lessons 2026-10-18T19:55:25.060Z weekly 0.7 https://safeguard.sh/resources/blog/kotlin-cocoapods-plugin-tools-and-risks-to-inventory 2026-10-18T19:55:25.169Z weekly 0.7 https://safeguard.sh/resources/blog/kotlin-multiplatform-dependencies-scan-each-source-set 2026-10-18T19:55:25.277Z weekly 0.7 https://safeguard.sh/resources/blog/kotlin-multiplatform-swiftpm-import-lock-files-alpha 2026-10-18T19:55:25.378Z weekly 0.7 https://safeguard.sh/resources/blog/kotlin-multiplatform-where-dependencies-live-source-sets 2026-10-18T19:55:25.478Z weekly 0.7 https://safeguard.sh/resources/blog/kubectl-diff-before-apply-exit-codes-and-secret-masking 2026-10-18T19:55:25.582Z weekly 0.7 https://safeguard.sh/resources/blog/kubectl-dry-run-client-vs-server-which-catches-policy-errors 2026-10-18T19:55:25.692Z weekly 0.7 https://safeguard.sh/resources/blog/kubernetes-default-deny-network-policy-for-microservices 2026-10-18T19:55:25.794Z weekly 0.7 https://safeguard.sh/resources/blog/kubernetes-recommended-labels-for-security-ownership-and-version 2026-10-18T19:55:25.895Z weekly 0.7 https://safeguard.sh/resources/blog/kubernetes-secrets-encryption-at-rest-what-it-covers 2026-10-18T19:55:25.998Z weekly 0.7 https://safeguard.sh/resources/blog/kubernetes-upgrade-order-which-components-first 2026-10-18T19:55:26.100Z weekly 0.7 https://safeguard.sh/resources/blog/kuppingercole-compass-rating-categories-and-five-level-scale 2026-10-18T19:55:26.216Z weekly 0.7 https://safeguard.sh/resources/blog/lambda-runtime-update-modes-which-to-pick 2026-10-18T19:55:26.342Z weekly 0.7 https://safeguard.sh/resources/blog/lambda-snapstart-secrets-and-random-numbers-explained 2026-10-18T19:55:26.460Z weekly 0.7 https://safeguard.sh/resources/blog/lambda-zip-or-container-image-which-is-easier-to-keep-patched 2026-10-18T19:55:26.560Z weekly 0.7 https://safeguard.sh/resources/blog/laravel-app-debug-true-in-production-what-leaks 2026-10-18T19:55:26.657Z weekly 0.7 https://safeguard.sh/resources/blog/laravel-file-upload-validation-mimes-extensions-image 2026-10-18T19:55:26.759Z weekly 0.7 https://safeguard.sh/resources/blog/laravel-fillable-vs-guarded-which-protects-better 2026-10-18T19:55:26.860Z weekly 0.7 https://safeguard.sh/resources/blog/laravel-queue-workers-restart-after-deploy 2026-10-18T19:55:26.959Z weekly 0.7 https://safeguard.sh/resources/blog/laravel-signed-urls-what-they-protect 2026-10-18T19:55:27.063Z weekly 0.7 https://safeguard.sh/resources/blog/laravel-telescope-horizon-production-access 2026-10-18T19:55:27.162Z weekly 0.7 https://safeguard.sh/resources/blog/last-commit-two-years-ago-is-the-dependency-abandoned 2026-10-18T19:55:27.261Z weekly 0.7 https://safeguard.sh/resources/blog/layered-defenses-for-memory-bugs-chromium-and-android-approaches 2026-10-18T19:55:27.364Z weekly 0.7 https://safeguard.sh/resources/blog/leaked-registry-token-what-to-check-on-npm-and-pypi 2026-10-18T19:55:27.484Z weekly 0.7 https://safeguard.sh/resources/blog/leaked-secret-or-critical-cve-which-first 2026-10-18T19:55:27.595Z weekly 0.7 https://safeguard.sh/resources/blog/least-privilege-access-for-a-security-scanner-pilot 2026-10-18T19:55:27.695Z weekly 0.7 https://safeguard.sh/resources/blog/leaving-an-ai-code-review-tool-data-deletion-and-exit 2026-10-18T19:55:27.799Z weekly 0.7 https://safeguard.sh/resources/blog/legacy-contact-and-inactive-account-plan-for-executives 2026-10-18T19:55:27.900Z weekly 0.7 https://safeguard.sh/resources/blog/legacy-sast-debt-burn-down-plan-by-sprint 2026-10-18T19:55:27.998Z weekly 0.7 https://safeguard.sh/resources/blog/lets-encrypt-rate-limits-what-to-do-when-you-hit-one 2026-10-18T19:55:28.095Z weekly 0.7 https://safeguard.sh/resources/blog/lets-encrypt-staging-environment-test-issuance-safely 2026-10-18T19:55:28.194Z weekly 0.7 https://safeguard.sh/resources/blog/liability-should-sit-with-the-party-who-can-manage-the-risk 2026-10-18T19:55:28.293Z weekly 0.7 https://safeguard.sh/resources/blog/libcxx-hardening-modes-fast-extensive-debug-which-to-pick 2026-10-18T19:55:28.393Z weekly 0.7 https://safeguard.sh/resources/blog/license-detection-methods-manifest-file-text-snippet-compared 2026-10-18T19:55:28.494Z weekly 0.7 https://safeguard.sh/resources/blog/license-exception-waiver-process-with-expiry 2026-10-18T19:55:28.598Z weekly 0.7 https://safeguard.sh/resources/blog/license-metadata-by-ecosystem-npm-pypi-maven-cargo-nuget-composer-go 2026-10-18T19:55:28.698Z weekly 0.7 https://safeguard.sh/resources/blog/limit-scanner-comments-on-pull-requests 2026-10-18T19:55:28.794Z weekly 0.7 https://safeguard.sh/resources/blog/limitation-of-liability-in-security-tool-contracts 2026-10-18T19:55:28.895Z weekly 0.7 https://safeguard.sh/resources/blog/link-a-supplier-sbom-to-the-products-and-systems-you-run 2026-10-18T19:55:28.994Z weekly 0.7 https://safeguard.sh/resources/blog/list-every-container-image-running-in-your-cluster-kubectl 2026-10-18T19:55:29.094Z weekly 0.7 https://safeguard.sh/resources/blog/list-shared-libraries-a-binary-needs-safely 2026-10-18T19:55:29.204Z weekly 0.7 https://safeguard.sh/resources/blog/list-what-you-run-before-you-patch-small-team-inventory 2026-10-18T19:55:29.304Z weekly 0.7 https://safeguard.sh/resources/blog/litellm-pypi-compromise-march-2026-explained 2026-10-18T19:55:29.403Z weekly 0.7 https://safeguard.sh/resources/blog/lockfile-scan-or-built-artifact-scan-which-counts-for-release 2026-10-18T19:55:29.500Z weekly 0.7 https://safeguard.sh/resources/blog/log-admin-and-privileged-actions-checklist 2026-10-18T19:55:29.601Z weekly 0.7 https://safeguard.sh/resources/blog/log-authorization-failures-access-denied-events 2026-10-18T19:55:29.704Z weekly 0.7 https://safeguard.sh/resources/blog/log-configuration-and-feature-flag-changes 2026-10-18T19:55:29.807Z weekly 0.7 https://safeguard.sh/resources/blog/log-field-allow-list-vs-deny-list 2026-10-18T19:55:29.907Z weekly 0.7 https://safeguard.sh/resources/blog/log-levels-for-security-events-info-warn-error 2026-10-18T19:55:30.010Z weekly 0.7 https://safeguard.sh/resources/blog/log-rate-limit-and-throttling-events 2026-10-18T19:55:30.110Z weekly 0.7 https://safeguard.sh/resources/blog/logical-vs-physical-postgres-backups 2026-10-18T19:55:30.205Z weekly 0.7 https://safeguard.sh/resources/blog/maintainer-account-recovery-codes-and-backups 2026-10-18T19:55:30.297Z weekly 0.7 https://safeguard.sh/resources/blog/make-a-dotnet-build-fail-on-vulnerable-nuget-packages 2026-10-18T19:55:30.395Z weekly 0.7 https://safeguard.sh/resources/blog/make-developers-use-the-internal-registry-enforcement-steps 2026-10-18T19:55:30.494Z weekly 0.7 https://safeguard.sh/resources/blog/make-every-dashboard-number-traceable-to-evidence 2026-10-18T19:55:30.594Z weekly 0.7 https://safeguard.sh/resources/blog/make-invisible-security-work-visible-in-sprint-reviews 2026-10-18T19:55:30.695Z weekly 0.7 https://safeguard.sh/resources/blog/make-journald-logs-survive-a-reboot-persistent-storage 2026-10-18T19:55:30.796Z weekly 0.7 https://safeguard.sh/resources/blog/make-pip-installs-in-a-dockerfile-repeatable-with-hash-checking 2026-10-18T19:55:30.893Z weekly 0.7 https://safeguard.sh/resources/blog/make-the-business-case-for-an-sca-tool-without-invented-numbers 2026-10-18T19:55:30.993Z weekly 0.7 https://safeguard.sh/resources/blog/malicious-package-records-vs-vulnerability-advisories-by-ecosystem 2026-10-18T19:55:31.095Z weekly 0.7 https://safeguard.sh/resources/blog/malicious-package-reports-2026-bulk-days-versus-steady-rate 2026-10-18T19:55:31.195Z weekly 0.7 https://safeguard.sh/resources/blog/malicious-package-vs-vulnerable-package-difference 2026-10-18T19:55:31.296Z weekly 0.7 https://safeguard.sh/resources/blog/malicious-vendor-update-what-to-do-on-day-one 2026-10-18T19:55:31.398Z weekly 0.7 https://safeguard.sh/resources/blog/manifest-lockfile-or-build-time-sca-which-approach 2026-10-18T19:55:31.495Z weekly 0.7 https://safeguard.sh/resources/blog/manifest-version-ranges-vs-resolved-versions-scan-accuracy 2026-10-18T19:55:31.598Z weekly 0.7 https://safeguard.sh/resources/blog/manual-code-review-vs-sast-what-each-catches 2026-10-18T19:55:31.707Z weekly 0.7 https://safeguard.sh/resources/blog/map-scanner-findings-to-compliance-frameworks 2026-10-18T19:55:31.806Z weekly 0.7 https://safeguard.sh/resources/blog/map-severity-levels-between-old-and-new-scanner 2026-10-18T19:55:31.905Z weekly 0.7 https://safeguard.sh/resources/blog/map-what-data-each-vendor-holds-vendor-data-inventory 2026-10-18T19:55:32.007Z weekly 0.7 https://safeguard.sh/resources/blog/mas-cyber-hygiene-notice-six-controls-for-banks 2026-10-18T19:55:32.109Z weekly 0.7 https://safeguard.sh/resources/blog/mas-trm-guidelines-open-source-and-third-party-code-policy 2026-10-18T19:55:32.209Z weekly 0.7 https://safeguard.sh/resources/blog/masking-vs-row-level-security-vs-column-grants 2026-10-18T19:55:32.312Z weekly 0.7 https://safeguard.sh/resources/blog/mass-assignment-code-review-what-to-flag 2026-10-18T19:55:32.414Z weekly 0.7 https://safeguard.sh/resources/blog/maven-blocked-mirror-for-http-repository 2026-10-18T19:55:32.511Z weekly 0.7 https://safeguard.sh/resources/blog/maven-dependency-analyze-unused-dependencies 2026-10-18T19:55:32.612Z weekly 0.7 https://safeguard.sh/resources/blog/maven-dependency-scope-and-scan-findings-test-provided 2026-10-18T19:55:32.711Z weekly 0.7 https://safeguard.sh/resources/blog/maven-enforcer-rules-for-dependency-hygiene 2026-10-18T19:55:32.814Z weekly 0.7 https://safeguard.sh/resources/blog/maven-pom-licenses-element-what-it-does-and-does-not-tell-you 2026-10-18T19:55:32.908Z weekly 0.7 https://safeguard.sh/resources/blog/maven-relocated-artifacts-and-scanner-matching 2026-10-18T19:55:33.004Z weekly 0.7 https://safeguard.sh/resources/blog/maven-version-ranges-snapshots-checksum-policy-risk 2026-10-18T19:55:33.103Z weekly 0.7 https://safeguard.sh/resources/blog/maven-vs-gradle-dependency-pinning-decision-guide 2026-10-18T19:55:33.203Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-controls-compared-allowlist-proxy-client-prompts 2026-10-18T19:55:33.318Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-guardrail-buyer-questions-what-to-ask-a-vendor 2026-10-18T19:55:33.419Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-security-evaluation-test-cases-for-a-trial 2026-10-18T19:55:33.522Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-tool-security-what-the-spec-requires-versus-suggests 2026-10-18T19:55:33.625Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-vendor-questions-tokens-scopes-and-audit-logs 2026-10-18T19:55:33.726Z weekly 0.7 https://safeguard.sh/resources/blog/mcuboot-rollback-protection-test-swap-vs-security-counter 2026-10-18T19:55:33.828Z weekly 0.7 https://safeguard.sh/resources/blog/mcuboot-swap-vs-direct-xip-update-mode 2026-10-18T19:55:33.928Z weekly 0.7 https://safeguard.sh/resources/blog/measure-if-tool-consolidation-worked-without-roi-numbers 2026-10-18T19:55:34.030Z weekly 0.7 https://safeguard.sh/resources/blog/measure-security-scanner-coverage-across-all-repositories 2026-10-18T19:55:34.130Z weekly 0.7 https://safeguard.sh/resources/blog/measure-security-tool-adoption-without-vanity-metrics 2026-10-18T19:55:34.229Z weekly 0.7 https://safeguard.sh/resources/blog/measure-what-an-sca-tool-misses-with-seeded-packages 2026-10-18T19:55:34.325Z weekly 0.7 https://safeguard.sh/resources/blog/memory-safe-languages-for-firmware-adoption-plan 2026-10-18T19:55:34.421Z weekly 0.7 https://safeguard.sh/resources/blog/memory-safety-checks-in-ci-order-and-budget 2026-10-18T19:55:34.522Z weekly 0.7 https://safeguard.sh/resources/blog/memory-safety-in-the-2025-cwe-top-25-three-entries 2026-10-18T19:55:34.629Z weekly 0.7 https://safeguard.sh/resources/blog/memory-safety-roadmap-checklist-for-product-teams 2026-10-18T19:55:34.730Z weekly 0.7 https://safeguard.sh/resources/blog/merge-methods-and-commit-signatures-squash-rebase 2026-10-18T19:55:34.830Z weekly 0.7 https://safeguard.sh/resources/blog/messaging-app-takeover-fake-alerts-and-qr-group-invites 2026-10-18T19:55:34.929Z weekly 0.7 https://safeguard.sh/resources/blog/metrics-for-a-security-champions-program-leading-and-lagging 2026-10-18T19:55:35.029Z weekly 0.7 https://safeguard.sh/resources/blog/metrics-that-show-a-release-gate-is-working 2026-10-18T19:55:35.131Z weekly 0.7 https://safeguard.sh/resources/blog/metrics-that-show-ai-code-review-reduces-risk 2026-10-18T19:55:35.233Z weekly 0.7 https://safeguard.sh/resources/blog/mev-front-running-sandwich-attacks-for-developers 2026-10-18T19:55:35.328Z weekly 0.7 https://safeguard.sh/resources/blog/mfa-blocks-99-9-percent-of-attacks-what-the-claim-means 2026-10-18T19:55:35.427Z weekly 0.7 https://safeguard.sh/resources/blog/microservice-authorization-gateway-vs-each-service 2026-10-18T19:55:35.527Z weekly 0.7 https://safeguard.sh/resources/blog/microsoft-365-block-external-auto-forwarding 2026-10-18T19:55:35.629Z weekly 0.7 https://safeguard.sh/resources/blog/microsoft-share-of-cisa-kev-catalog-by-product 2026-10-18T19:55:35.731Z weekly 0.7 https://safeguard.sh/resources/blog/mid-market-appsec-when-free-tools-stop-being-enough 2026-10-18T19:55:35.835Z weekly 0.7 https://safeguard.sh/resources/blog/migrate-cocoapods-to-swiftpm-without-losing-dependency-visibility 2026-10-18T19:55:35.940Z weekly 0.7 https://safeguard.sh/resources/blog/migrate-inline-scripts-and-handlers-for-a-strict-csp 2026-10-18T19:55:36.042Z weekly 0.7 https://safeguard.sh/resources/blog/migrate-risk-acceptances-and-exceptions-to-a-new-tool 2026-10-18T19:55:36.145Z weekly 0.7 https://safeguard.sh/resources/blog/minimise-attack-surface-in-a-firmware-image-etsi-provision-5-6 2026-10-18T19:55:36.245Z weekly 0.7 https://safeguard.sh/resources/blog/minimum-dependency-security-setup-for-a-small-team 2026-10-18T19:55:36.340Z weekly 0.7 https://safeguard.sh/resources/blog/mirror-docker-hub-images-pull-through-cache 2026-10-18T19:55:36.442Z weekly 0.7 https://safeguard.sh/resources/blog/misconfiguration-vs-cve-fix-deadlines 2026-10-18T19:55:36.544Z weekly 0.7 https://safeguard.sh/resources/blog/mkcert-local-https-development-certificates 2026-10-18T19:55:36.656Z weekly 0.7 https://safeguard.sh/resources/blog/ml-data-lineage-what-to-record 2026-10-18T19:55:36.759Z weekly 0.7 https://safeguard.sh/resources/blog/ml-supply-chain-glossary-checkpoint-adapter-merge-quantized-and-more 2026-10-18T19:55:36.865Z weekly 0.7 https://safeguard.sh/resources/blog/mocks-hide-security-bugs-what-to-fake-and-what-to-keep-real 2026-10-18T19:55:36.962Z weekly 0.7 https://safeguard.sh/resources/blog/model-file-extensions-and-what-each-one-can-do-a-quick-risk-table 2026-10-18T19:55:37.073Z weekly 0.7 https://safeguard.sh/resources/blog/model-update-regression-test-for-ai-review-tools 2026-10-18T19:55:37.177Z weekly 0.7 https://safeguard.sh/resources/blog/monitor-a-health-software-vendor-between-annual-reviews 2026-10-18T19:55:37.277Z weekly 0.7 https://safeguard.sh/resources/blog/monitor-your-security-gate-health-metrics-and-alerts 2026-10-18T19:55:37.380Z weekly 0.7 https://safeguard.sh/resources/blog/monorepo-or-separate-repos-security-decision-guide 2026-10-18T19:55:37.476Z weekly 0.7 https://safeguard.sh/resources/blog/monthly-security-checklist-for-a-small-software-team 2026-10-18T19:55:37.578Z weekly 0.7 https://safeguard.sh/resources/blog/morgan-stanley-sec-order-decommissioned-devices-customer-data 2026-10-18T19:55:37.678Z weekly 0.7 https://safeguard.sh/resources/blog/move-a-security-policy-from-warn-mode-to-enforce-mode 2026-10-18T19:55:37.782Z weekly 0.7 https://safeguard.sh/resources/blog/move-from-spreadsheet-to-vulnerability-management-tool 2026-10-18T19:55:37.888Z weekly 0.7 https://safeguard.sh/resources/blog/msix-or-a-classic-installer-which-to-ship-for-a-windows-desktop-app 2026-10-18T19:55:37.995Z weekly 0.7 https://safeguard.sh/resources/blog/mte-sync-async-asymm-modes-which-to-use 2026-10-18T19:55:38.095Z weekly 0.7 https://safeguard.sh/resources/blog/mtls-or-service-tokens-between-microservices-decision-guide 2026-10-18T19:55:38.196Z weekly 0.7 https://safeguard.sh/resources/blog/must-the-public-key-in-a-device-be-unique-per-device 2026-10-18T19:55:38.299Z weekly 0.7 https://safeguard.sh/resources/blog/mutual-nda-for-a-security-tool-evaluation 2026-10-18T19:55:38.408Z weekly 0.7 https://safeguard.sh/resources/blog/mysql-load-data-local-infile-risk-and-defaults 2026-10-18T19:55:38.507Z weekly 0.7 https://safeguard.sh/resources/blog/mysql-require-secure-transport-ssl-mode-verify-identity 2026-10-18T19:55:38.604Z weekly 0.7 https://safeguard.sh/resources/blog/myth-critical-infrastructure-is-run-by-the-government 2026-10-18T19:55:38.715Z weekly 0.7 https://safeguard.sh/resources/blog/myth-or-fact-analyst-leader-is-the-safest-security-purchase 2026-10-18T19:55:38.848Z weekly 0.7 https://safeguard.sh/resources/blog/myths-vs-facts-rankings-badges-and-listings 2026-10-18T19:55:38.943Z weekly 0.7 https://safeguard.sh/resources/blog/name-constraints-private-ca-limit-what-it-can-sign 2026-10-18T19:55:39.043Z weekly 0.7 https://safeguard.sh/resources/blog/nao-government-cyber-resilience-2025-legacy-it-findings 2026-10-18T19:55:39.140Z weekly 0.7 https://safeguard.sh/resources/blog/nats-authentication-options-token-nkey-tls-jwt 2026-10-18T19:55:39.237Z weekly 0.7 https://safeguard.sh/resources/blog/ncsc-caf-who-uses-the-cyber-assessment-framework 2026-10-18T19:55:39.331Z weekly 0.7 https://safeguard.sh/resources/blog/ncsc-four-stages-ai-security-buying-map 2026-10-18T19:55:39.431Z weekly 0.7 https://safeguard.sh/resources/blog/ncsc-prompt-injection-is-not-sql-injection-what-to-do 2026-10-18T19:55:39.538Z weekly 0.7 https://safeguard.sh/resources/blog/nda-gated-vs-public-trust-center-documents 2026-10-18T19:55:39.640Z weekly 0.7 https://safeguard.sh/resources/blog/negative-tests-what-your-security-suite-should-prove-fails 2026-10-18T19:55:39.743Z weekly 0.7 https://safeguard.sh/resources/blog/nested-sboms-and-external-references-how-to-resolve-them 2026-10-18T19:55:39.848Z weekly 0.7 https://safeguard.sh/resources/blog/next-public-env-vars-are-public-what-gets-inlined 2026-10-18T19:55:39.945Z weekly 0.7 https://safeguard.sh/resources/blog/nftables-default-drop-server-ruleset-without-locking-yourself-out 2026-10-18T19:55:40.045Z weekly 0.7 https://safeguard.sh/resources/blog/nginx-add-header-inheritance-and-always-gotcha 2026-10-18T19:55:40.192Z weekly 0.7 https://safeguard.sh/resources/blog/nginx-apache-caddy-security-defaults-compared 2026-10-18T19:55:40.344Z weekly 0.7 https://safeguard.sh/resources/blog/nginx-default-server-catch-all-host-header-and-sni 2026-10-18T19:55:40.442Z weekly 0.7 https://safeguard.sh/resources/blog/nginx-limit-conn-vs-limit-req-which-to-use 2026-10-18T19:55:40.544Z weekly 0.7 https://safeguard.sh/resources/blog/nginx-limit-req-burst-nodelay-explained 2026-10-18T19:55:40.644Z weekly 0.7 https://safeguard.sh/resources/blog/nginx-proxy-ssl-verify-default-off-upstream-tls 2026-10-18T19:55:40.748Z weekly 0.7 https://safeguard.sh/resources/blog/nginx-real-ip-module-trusting-x-forwarded-for 2026-10-18T19:55:40.845Z weekly 0.7 https://safeguard.sh/resources/blog/nginx-server-tokens-off-hide-version-myth-vs-fact 2026-10-18T19:55:40.947Z weekly 0.7 https://safeguard.sh/resources/blog/nginx-ssl-directive-defaults-tickets-stapling-early-data 2026-10-18T19:55:41.044Z weekly 0.7 https://safeguard.sh/resources/blog/nginx-stub-status-lock-down-the-status-page 2026-10-18T19:55:41.146Z weekly 0.7 https://safeguard.sh/resources/blog/nginx-timeouts-and-body-limits-for-slow-and-large-requests 2026-10-18T19:55:41.252Z weekly 0.7 https://safeguard.sh/resources/blog/nine-one-one-depends-on-the-communications-sector 2026-10-18T19:55:41.346Z weekly 0.7 https://safeguard.sh/resources/blog/nist-agent-hijacking-test-results-repeat-attacks 2026-10-18T19:55:41.460Z weekly 0.7 https://safeguard.sh/resources/blog/nist-csf-2-0-govern-function-what-each-category-asks 2026-10-18T19:55:41.564Z weekly 0.7 https://safeguard.sh/resources/blog/nist-csf-2-0-organizational-profile-five-steps 2026-10-18T19:55:41.670Z weekly 0.7 https://safeguard.sh/resources/blog/nist-csf-2-0-tiers-are-not-maturity-scores 2026-10-18T19:55:41.774Z weekly 0.7 https://safeguard.sh/resources/blog/nist-sp-800-193-protect-detect-recover-explained 2026-10-18T19:55:41.879Z weekly 0.7 https://safeguard.sh/resources/blog/nist-sp-800-218a-do-ai-model-developers-need-a-separate-ssdf 2026-10-18T19:55:41.979Z weekly 0.7 https://safeguard.sh/resources/blog/nodejs-27-annual-release-schedule-what-changes-for-upgrades 2026-10-18T19:55:42.081Z weekly 0.7 https://safeguard.sh/resources/blog/normalize-messy-license-names-to-spdx-identifiers 2026-10-18T19:55:42.184Z weekly 0.7 https://safeguard.sh/resources/blog/nosuid-nodev-noexec-mount-options-for-tmp-and-data 2026-10-18T19:55:42.286Z weekly 0.7 https://safeguard.sh/resources/blog/notarization-is-not-app-review-myth-vs-fact 2026-10-18T19:55:42.387Z weekly 0.7 https://safeguard.sh/resources/blog/notify-customers-if-bad-package-never-ran-in-production 2026-10-18T19:55:42.492Z weekly 0.7 https://safeguard.sh/resources/blog/notify-downstream-before-disclosure-small-project 2026-10-18T19:55:42.601Z weekly 0.7 https://safeguard.sh/resources/blog/notpetya-war-exclusion-mondelez-zurich-lessons-for-buyers 2026-10-18T19:55:42.710Z weekly 0.7 https://safeguard.sh/resources/blog/npm-audit-flags-a-dev-dependency-do-i-need-to-fix-it 2026-10-18T19:55:42.811Z weekly 0.7 https://safeguard.sh/resources/blog/npm-audit-in-workspaces-which-packages-it-covers 2026-10-18T19:55:42.919Z weekly 0.7 https://safeguard.sh/resources/blog/npm-bundledependencies-what-it-is-and-scanner-blind-spots 2026-10-18T19:55:43.031Z weekly 0.7 https://safeguard.sh/resources/blog/npm-ci-and-cache-keep-installing-during-registry-outage 2026-10-18T19:55:43.128Z weekly 0.7 https://safeguard.sh/resources/blog/npm-ci-or-npm-install-in-a-dockerfile 2026-10-18T19:55:43.228Z weekly 0.7 https://safeguard.sh/resources/blog/npm-disallow-tokens-what-the-publishing-access-setting-does 2026-10-18T19:55:43.328Z weekly 0.7 https://safeguard.sh/resources/blog/npm-dist-tags-what-latest-means-for-your-installs 2026-10-18T19:55:43.426Z weekly 0.7 https://safeguard.sh/resources/blog/npm-explain-why-is-this-package-installed 2026-10-18T19:55:43.525Z weekly 0.7 https://safeguard.sh/resources/blog/npm-files-field-allowlist-vs-npmignore-which-wins 2026-10-18T19:55:43.630Z weekly 0.7 https://safeguard.sh/resources/blog/npm-ignore-scripts-in-ci-what-it-stops-and-what-breaks 2026-10-18T19:55:43.731Z weekly 0.7 https://safeguard.sh/resources/blog/npm-install-vs-npm-ci-which-is-safer-for-builds 2026-10-18T19:55:43.830Z weekly 0.7 https://safeguard.sh/resources/blog/npm-integrity-mismatch-error-what-it-means-and-what-to-do 2026-10-18T19:55:43.933Z weekly 0.7 https://safeguard.sh/resources/blog/npm-lockfile-versions-1-2-3-what-a-scanner-must-parse 2026-10-18T19:55:44.031Z weekly 0.7 https://safeguard.sh/resources/blog/npm-optionaldependencies-what-happens-when-install-fails 2026-10-18T19:55:44.134Z weekly 0.7 https://safeguard.sh/resources/blog/npm-overrides-aliases-and-optional-dependencies-in-scan-results 2026-10-18T19:55:44.235Z weekly 0.7 https://safeguard.sh/resources/blog/npm-pack-dry-run-check-what-you-are-about-to-publish 2026-10-18T19:55:44.332Z weekly 0.7 https://safeguard.sh/resources/blog/npm-package-json-license-field-spdx-unlicensed-see-license-in 2026-10-18T19:55:44.430Z weekly 0.7 https://safeguard.sh/resources/blog/npm-publish-with-provenance-steps-for-github-actions 2026-10-18T19:55:44.541Z weekly 0.7 https://safeguard.sh/resources/blog/npm-publishing-changes-after-shai-hulud-maintainer-checklist 2026-10-18T19:55:44.644Z weekly 0.7 https://safeguard.sh/resources/blog/npm-shrinkwrap-vs-package-lock-which-to-publish 2026-10-18T19:55:44.748Z weekly 0.7 https://safeguard.sh/resources/blog/npm-staged-publishing-ci-stages-maintainer-approves 2026-10-18T19:55:44.848Z weekly 0.7 https://safeguard.sh/resources/blog/npm-trusted-publishing-setup-and-common-errors 2026-10-18T19:55:44.951Z weekly 0.7 https://safeguard.sh/resources/blog/nrc-73-54-nuclear-cyber-security-plan-explained 2026-10-18T19:55:45.054Z weekly 0.7 https://safeguard.sh/resources/blog/nsm-22-replaced-ppd-21-what-changed 2026-10-18T19:55:45.154Z weekly 0.7 https://safeguard.sh/resources/blog/nuget-audit-packages-config-projects-support 2026-10-18T19:55:45.256Z weekly 0.7 https://safeguard.sh/resources/blog/nuget-deprecated-vs-unlisted-vs-vulnerable-package 2026-10-18T19:55:45.350Z weekly 0.7 https://safeguard.sh/resources/blog/nuget-license-expression-or-file-what-nuspec-says 2026-10-18T19:55:45.449Z weekly 0.7 https://safeguard.sh/resources/blog/nuget-package-source-mapping-step-by-step 2026-10-18T19:55:45.548Z weekly 0.7 https://safeguard.sh/resources/blog/nuget-packages-config-or-packagereference-scan-coverage 2026-10-18T19:55:45.648Z weekly 0.7 https://safeguard.sh/resources/blog/nvd-cve-publication-volume-2016-to-2026 2026-10-18T19:55:45.749Z weekly 0.7 https://safeguard.sh/resources/blog/nx-s1ngularity-august-2025-pull-request-title-injection-explained 2026-10-18T19:55:45.849Z weekly 0.7 https://safeguard.sh/resources/blog/old-federal-attestation-after-m-26-05-keep-revise-or-retire 2026-10-18T19:55:45.949Z weekly 0.7 https://safeguard.sh/resources/blog/old-lambda-versions-and-aliases-still-run-vulnerable-code 2026-10-18T19:55:46.048Z weekly 0.7 https://safeguard.sh/resources/blog/old-version-and-no-cve-listed-does-that-make-it-safe 2026-10-18T19:55:46.147Z weekly 0.7 https://safeguard.sh/resources/blog/omb-m-26-05-what-changed-for-software-suppliers 2026-10-18T19:55:46.249Z weekly 0.7 https://safeguard.sh/resources/blog/on-prem-saas-or-self-hosted-security-tool-deployment-questions 2026-10-18T19:55:46.350Z weekly 0.7 https://safeguard.sh/resources/blog/onboard-a-new-service-to-security-scanning-checklist 2026-10-18T19:55:46.452Z weekly 0.7 https://safeguard.sh/resources/blog/onboard-hundreds-of-repos-to-vulnerability-scanning-in-waves 2026-10-18T19:55:46.561Z weekly 0.7 https://safeguard.sh/resources/blog/onc-back-to-the-building-blocks-report-explained 2026-10-18T19:55:46.666Z weekly 0.7 https://safeguard.sh/resources/blog/one-connection-per-automation-limit-the-blast-radius 2026-10-18T19:55:46.766Z weekly 0.7 https://safeguard.sh/resources/blog/one-control-set-for-soc-2-iso-27001-and-nist-ai-rmf-for-ai-startups 2026-10-18T19:55:46.867Z weekly 0.7 https://safeguard.sh/resources/blog/one-evidence-set-many-frameworks-how-to-map-controls 2026-10-18T19:55:46.972Z weekly 0.7 https://safeguard.sh/resources/blog/one-npm-campaign-skews-malicious-package-counts 2026-10-18T19:55:47.072Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-business-case-for-a-security-tool 2026-10-18T19:55:47.183Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-incident-plan-for-a-two-person-team 2026-10-18T19:55:47.284Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-release-security-sign-off-template 2026-10-18T19:55:47.384Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-secrets-policy-for-developers-what-to-include 2026-10-18T19:55:47.485Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-security-playbook-for-a-development-team 2026-10-18T19:55:47.599Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-supply-chain-incident-summary-for-leadership 2026-10-18T19:55:47.702Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-supply-chain-posture-summary-for-the-board 2026-10-18T19:55:47.796Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-vulnerability-prioritization-policy-contents 2026-10-18T19:55:47.898Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-weekly-appsec-report-for-engineering-managers 2026-10-18T19:55:47.995Z weekly 0.7 https://safeguard.sh/resources/blog/one-person-open-source-project-security-weekend-plan 2026-10-18T19:55:48.088Z weekly 0.7 https://safeguard.sh/resources/blog/one-platform-or-separate-tools-for-dependency-security 2026-10-18T19:55:48.187Z weekly 0.7 https://safeguard.sh/resources/blog/one-policy-for-open-source-license-and-security-rules 2026-10-18T19:55:48.288Z weekly 0.7 https://safeguard.sh/resources/blog/one-vulnerable-shared-library-which-services-are-affected 2026-10-18T19:55:48.384Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-evidence-pack-index-what-to-include 2026-10-18T19:55:48.482Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-heavy-teams-and-analyst-research-on-supply-chain-tools 2026-10-18T19:55:48.580Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-intake-request-form-fields-to-ask 2026-10-18T19:55:48.688Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-license-myths-vs-facts-for-acquirers 2026-10-18T19:55:48.791Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-policy-for-acquirers-what-to-define 2026-10-18T19:55:48.893Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-scanner-or-commercial-platform-how-to-decide 2026-10-18T19:55:49.000Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-underfunding-tragedy-of-the-commons-heartbleed 2026-10-18T19:55:49.096Z weekly 0.7 https://safeguard.sh/resources/blog/open-standards-for-your-rfp-instead-of-analyst-feature-lists 2026-10-18T19:55:49.195Z weekly 0.7 https://safeguard.sh/resources/blog/openapi-spec-drift-how-to-detect-and-fix-it 2026-10-18T19:55:49.296Z weekly 0.7 https://safeguard.sh/resources/blog/openchain-iso-iec-5230-what-it-is-and-when-buyers-ask 2026-10-18T19:55:49.396Z weekly 0.7 https://safeguard.sh/resources/blog/openlineage-basics-datasets-jobs-runs 2026-10-18T19:55:49.487Z weekly 0.7 https://safeguard.sh/resources/blog/openssf-badge-scorecard-baseline-three-signals-compared 2026-10-18T19:55:49.579Z weekly 0.7 https://safeguard.sh/resources/blog/openssf-guide-for-evaluating-open-source-software-seven-sections 2026-10-18T19:55:49.671Z weekly 0.7 https://safeguard.sh/resources/blog/openssf-scorecard-for-a-targets-open-source-dependencies 2026-10-18T19:55:49.768Z weekly 0.7 https://safeguard.sh/resources/blog/opt-out-delete-or-incognito-which-protects-what 2026-10-18T19:55:49.860Z weekly 0.7 https://safeguard.sh/resources/blog/organization-defined-parameters-in-nist-controls-who-fills-them 2026-10-18T19:55:49.959Z weekly 0.7 https://safeguard.sh/resources/blog/orphaned-vulnerability-exceptions-when-the-owner-leaves 2026-10-18T19:55:50.055Z weekly 0.7 https://safeguard.sh/resources/blog/oss-fuzz-project-files-explained-dockerfile-build-sh 2026-10-18T19:55:50.141Z weekly 0.7 https://safeguard.sh/resources/blog/osv-advisory-records-vs-unique-vulnerabilities 2026-10-18T19:55:50.236Z weekly 0.7 https://safeguard.sh/resources/blog/osv-aliases-upstream-related-which-field-links-advisories 2026-10-18T19:55:50.330Z weekly 0.7 https://safeguard.sh/resources/blog/osv-bulk-dumps-or-api-which-to-use-for-vulnerability-data 2026-10-18T19:55:50.426Z weekly 0.7 https://safeguard.sh/resources/blog/osv-fixed-vs-last-affected-which-event-to-use 2026-10-18T19:55:50.524Z weekly 0.7 https://safeguard.sh/resources/blog/osv-querybatch-check-many-packages-in-one-request 2026-10-18T19:55:50.622Z weekly 0.7 https://safeguard.sh/resources/blog/osv-severity-fields-which-advisories-carry-a-rating 2026-10-18T19:55:50.718Z weekly 0.7 https://safeguard.sh/resources/blog/osv-version-ranges-semver-ecosystem-git-and-false-negatives 2026-10-18T19:55:50.815Z weekly 0.7 https://safeguard.sh/resources/blog/out-of-band-incident-communications-lessons-lapsus-solarwinds 2026-10-18T19:55:50.912Z weekly 0.7 https://safeguard.sh/resources/blog/outdated-vs-vulnerable-dependencies-what-is-the-difference 2026-10-18T19:55:51.014Z weekly 0.7 https://safeguard.sh/resources/blog/outside-collaborators-and-org-base-permissions-github 2026-10-18T19:55:51.108Z weekly 0.7 https://safeguard.sh/resources/blog/override-spring-boot-managed-dependency-version 2026-10-18T19:55:51.204Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-a03-software-supply-chain-failures-and-sca 2026-10-18T19:55:51.304Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-api-top-10-2023-what-a-scanner-can-and-cannot-find 2026-10-18T19:55:51.403Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-asvs-as-your-answer-to-what-standard-do-you-build-to 2026-10-18T19:55:51.495Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-asvs-vs-samm-which-resource-answers-which-question 2026-10-18T19:55:51.602Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-llm-top-10-2025-what-a-tool-claim-should-mean 2026-10-18T19:55:51.706Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-llm-top-10-vs-agentic-top-10-which-to-map 2026-10-18T19:55:51.804Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-smart-contract-top-10-2025-plain-guide 2026-10-18T19:55:51.902Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-ten-principles-for-security-champions-programs 2026-10-18T19:55:51.999Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-top-10-2025-how-the-list-is-built 2026-10-18T19:55:52.097Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-top-10-2025-testing-map-dast-and-manual-checks 2026-10-18T19:55:52.197Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-top-10-ci-cd-security-risks-explained-in-plain-words 2026-10-18T19:55:52.291Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-top-10-vs-asvs-vs-wstg-which-to-use 2026-10-18T19:55:52.386Z weekly 0.7 https://safeguard.sh/resources/blog/own-product-security-advisory-template-fields 2026-10-18T19:55:52.477Z weekly 0.7 https://safeguard.sh/resources/blog/ownable-vs-accesscontrol-who-should-hold-admin 2026-10-18T19:55:52.577Z weekly 0.7 https://safeguard.sh/resources/blog/package-python-lambda-dependencies-for-the-right-architecture 2026-10-18T19:55:52.679Z weekly 0.7 https://safeguard.sh/resources/blog/page-titles-and-meta-descriptions-for-technical-pages 2026-10-18T19:55:52.774Z weekly 0.7 https://safeguard.sh/resources/blog/pam-faillock-lock-accounts-after-failed-logins-settings 2026-10-18T19:55:52.871Z weekly 0.7 https://safeguard.sh/resources/blog/parental-controls-are-enough-myth-vs-fact 2026-10-18T19:55:52.967Z weekly 0.7 https://safeguard.sh/resources/blog/passphrase-protected-keys-the-kek-and-dek-pattern 2026-10-18T19:55:53.059Z weekly 0.7 https://safeguard.sh/resources/blog/password-manager-master-passphrase-how-long-and-how-to-store-it 2026-10-18T19:55:53.150Z weekly 0.7 https://safeguard.sh/resources/blog/password-manager-or-secrets-manager-for-shared-credentials 2026-10-18T19:55:53.248Z weekly 0.7 https://safeguard.sh/resources/blog/password-reset-account-recovery-events-to-log 2026-10-18T19:55:53.342Z weekly 0.7 https://safeguard.sh/resources/blog/pasted-a-secret-into-an-ai-assistant-what-to-do 2026-10-18T19:55:53.440Z weekly 0.7 https://safeguard.sh/resources/blog/patch-a-compromised-shared-action-across-every-repo-in-a-day 2026-10-18T19:55:53.535Z weekly 0.7 https://safeguard.sh/resources/blog/patch-a-vcpkg-library-with-an-overlay-port 2026-10-18T19:55:53.628Z weekly 0.7 https://safeguard.sh/resources/blog/patch-maintenance-groups-explained 2026-10-18T19:55:53.732Z weekly 0.7 https://safeguard.sh/resources/blog/patch-or-mitigate-a-zero-day-decision-table 2026-10-18T19:55:53.828Z weekly 0.7 https://safeguard.sh/resources/blog/patching-as-preventive-maintenance-nist-for-small-teams 2026-10-18T19:55:53.927Z weekly 0.7 https://safeguard.sh/resources/blog/path-traversal-code-review-how-to-spot-it 2026-10-18T19:55:54.026Z weekly 0.7 https://safeguard.sh/resources/blog/pause-dependency-updates-before-a-release-freeze 2026-10-18T19:55:54.126Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-11-3-quarterly-scans-who-can-run-them-and-passing 2026-10-18T19:55:54.222Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-11-4-penetration-test-requirements-in-plain-terms 2026-10-18T19:55:54.319Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-11-6-1-payment-page-tamper-detection-every-seven-days 2026-10-18T19:55:54.415Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-12-3-1-targeted-risk-analysis-what-to-write 2026-10-18T19:55:54.511Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-12-3-4-review-technologies-and-end-of-life-software 2026-10-18T19:55:54.614Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-12-5-2-scope-confirmation-after-code-changes 2026-10-18T19:55:54.730Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-12-8-do-sdks-and-saas-tools-count-as-third-party-providers 2026-10-18T19:55:54.828Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-2-2-secure-configuration-for-container-images-and-defaults 2026-10-18T19:55:54.928Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-4-2-1-tls-for-card-data-in-transit-developer-checklist 2026-10-18T19:55:55.026Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-4-do-rules-cover-code-you-write-and-libraries-you-use 2026-10-18T19:55:55.123Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-4-patch-deadline-critical-high-one-month-6-3-3 2026-10-18T19:55:55.219Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-6-2-3-code-review-manual-or-automated 2026-10-18T19:55:55.313Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-6-3-2-software-inventory-fields-to-record 2026-10-18T19:55:55.410Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-6-4-2-waf-or-annual-assessment-for-public-web-apps 2026-10-18T19:55:55.520Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-6-5-1-change-control-what-every-change-needs 2026-10-18T19:55:55.616Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-6-5-5-live-card-numbers-in-test-environments 2026-10-18T19:55:55.714Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-8-6-2-can-you-hard-code-passwords-in-source 2026-10-18T19:55:55.810Z weekly 0.7 https://safeguard.sh/resources/blog/pci-dss-scans-pen-tests-and-app-assessments-how-they-differ 2026-10-18T19:55:55.906Z weekly 0.7 https://safeguard.sh/resources/blog/peer-dependency-conflicts-in-update-prs-what-to-do 2026-10-18T19:55:56.004Z weekly 0.7 https://safeguard.sh/resources/blog/pem-der-pkcs12-certificate-formats-explained 2026-10-18T19:55:56.107Z weekly 0.7 https://safeguard.sh/resources/blog/pen-test-myths-vs-facts 2026-10-18T19:55:56.209Z weekly 0.7 https://safeguard.sh/resources/blog/pen-tester-found-what-your-scanner-missed-close-the-gap 2026-10-18T19:55:56.306Z weekly 0.7 https://safeguard.sh/resources/blog/pen-testing-vs-vulnerability-scanning-in-nist-800-53-ca-8-and-ra-5 2026-10-18T19:55:56.404Z weekly 0.7 https://safeguard.sh/resources/blog/pen-tests-never-retested-capita-ico-lesson 2026-10-18T19:55:56.498Z weekly 0.7 https://safeguard.sh/resources/blog/per-package-scan-report-fields-for-a-monorepo 2026-10-18T19:55:56.601Z weekly 0.7 https://safeguard.sh/resources/blog/per-request-feature-flag-overrides-useful-and-risky 2026-10-18T19:55:56.702Z weekly 0.7 https://safeguard.sh/resources/blog/per-service-security-scorecard-metrics-that-matter 2026-10-18T19:55:56.799Z weekly 0.7 https://safeguard.sh/resources/blog/persist-credentials-false-in-actions-checkout-explained 2026-10-18T19:55:56.891Z weekly 0.7 https://safeguard.sh/resources/blog/personal-ai-accounts-at-work-how-to-enforce-company-accounts 2026-10-18T19:55:56.988Z weekly 0.7 https://safeguard.sh/resources/blog/personal-login-or-service-account-for-an-automation-connection 2026-10-18T19:55:57.085Z weekly 0.7 https://safeguard.sh/resources/blog/phantom-dependencies-what-they-are-and-how-pnpm-blocks-them 2026-10-18T19:55:57.175Z weekly 0.7 https://safeguard.sh/resources/blog/phased-rollout-as-an-alternative-to-saying-no-to-risky-features 2026-10-18T19:55:57.273Z weekly 0.7 https://safeguard.sh/resources/blog/pick-a-healthy-open-source-project-for-a-first-security-pr 2026-10-18T19:55:57.371Z weekly 0.7 https://safeguard.sh/resources/blog/pick-a-safe-version-after-a-package-compromise 2026-10-18T19:55:57.466Z weekly 0.7 https://safeguard.sh/resources/blog/pilot-agreement-what-to-put-in-writing 2026-10-18T19:55:57.561Z weekly 0.7 https://safeguard.sh/resources/blog/pilot-to-contract-what-to-freeze-before-the-pilot-ends 2026-10-18T19:55:57.657Z weekly 0.7 https://safeguard.sh/resources/blog/pilot-vs-proof-of-value-vs-proof-of-concept 2026-10-18T19:55:57.754Z weekly 0.7 https://safeguard.sh/resources/blog/pin-a-pip-git-dependency-to-a-commit 2026-10-18T19:55:57.909Z weekly 0.7 https://safeguard.sh/resources/blog/pin-an-ai-api-to-a-region-checklist-for-eu-data 2026-10-18T19:55:58.300Z weekly 0.7 https://safeguard.sh/resources/blog/pin-base-images-by-digest-for-repeatable-rebuilds 2026-10-18T19:55:58.399Z weekly 0.7 https://safeguard.sh/resources/blog/pin-c-dependencies-with-a-conan-lockfile 2026-10-18T19:55:58.517Z weekly 0.7 https://safeguard.sh/resources/blog/pin-cmake-fetchcontent-to-a-commit-hash-not-a-tag 2026-10-18T19:55:58.640Z weekly 0.7 https://safeguard.sh/resources/blog/pin-cuda-and-ml-base-images-by-digest-without-losing-patches 2026-10-18T19:55:58.739Z weekly 0.7 https://safeguard.sh/resources/blog/pin-exact-version-or-allow-a-range-in-a-fix-pr 2026-10-18T19:55:58.834Z weekly 0.7 https://safeguard.sh/resources/blog/pin-github-actions-to-commit-sha-after-tag-repointing 2026-10-18T19:55:58.934Z weekly 0.7 https://safeguard.sh/resources/blog/pin-github-actions-to-sha-or-tag-decision-guide 2026-10-18T19:55:59.031Z weekly 0.7 https://safeguard.sh/resources/blog/pin-gitlab-ci-images-and-tool-installs-by-digest-and-version 2026-10-18T19:55:59.130Z weekly 0.7 https://safeguard.sh/resources/blog/pin-python-dependencies-in-data-projects 2026-10-18T19:55:59.228Z weekly 0.7 https://safeguard.sh/resources/blog/pin-runtime-and-sdk-versions-engines-global-json-go-mod 2026-10-18T19:55:59.326Z weekly 0.7 https://safeguard.sh/resources/blog/pip-install-wheel-or-source-what-runs-on-your-machine 2026-10-18T19:55:59.425Z weekly 0.7 https://safeguard.sh/resources/blog/pip-wheelhouse-offline-python-installs 2026-10-18T19:56:00.098Z weekly 0.7 https://safeguard.sh/resources/blog/pipx-or-pip-for-python-command-line-tools 2026-10-18T19:56:01.644Z weekly 0.7 https://safeguard.sh/resources/blog/pnpm-blocks-dependency-build-scripts-allowbuilds-explained 2026-10-18T19:56:04.386Z weekly 0.7 https://safeguard.sh/resources/blog/pnpm-ignored-build-scripts-how-to-approve-safely 2026-10-18T19:56:06.722Z weekly 0.7 https://safeguard.sh/resources/blog/pnpm-workspace-one-lockfile-what-scanners-read 2026-10-18T19:56:09.978Z weekly 0.7 https://safeguard.sh/resources/blog/poam-instead-of-attestation-how-omb-m-23-16-worked 2026-10-18T19:56:10.082Z weekly 0.7 https://safeguard.sh/resources/blog/pod-disruption-budgets-for-your-product-when-customers-patch-nodes 2026-10-18T19:56:11.696Z weekly 0.7 https://safeguard.sh/resources/blog/pod-install-vs-pod-update-which-is-safe-in-ci 2026-10-18T19:56:11.797Z weekly 0.7 https://safeguard.sh/resources/blog/podfile-tilde-arrow-operator-and-git-sources-risks 2026-10-18T19:56:11.899Z weekly 0.7 https://safeguard.sh/resources/blog/point-in-time-vs-continuous-checks-why-a-yearly-review-goes-stale 2026-10-18T19:56:11.991Z weekly 0.7 https://safeguard.sh/resources/blog/policy-gate-override-rate-what-it-tells-you 2026-10-18T19:56:12.088Z weekly 0.7 https://safeguard.sh/resources/blog/policy-gate-vs-guardrail-for-ai-generated-changes 2026-10-18T19:56:12.196Z weekly 0.7 https://safeguard.sh/resources/blog/polyfill-io-domain-change-lessons-for-third-party-scripts 2026-10-18T19:56:12.291Z weekly 0.7 https://safeguard.sh/resources/blog/postgresql-pgaudit-session-vs-object-audit-logging 2026-10-18T19:56:12.383Z weekly 0.7 https://safeguard.sh/resources/blog/precision-vs-recall-for-an-ai-security-reviewer 2026-10-18T19:56:12.477Z weekly 0.7 https://safeguard.sh/resources/blog/precision-vs-recall-which-scanner-accuracy-number-to-ask-for 2026-10-18T19:56:12.574Z weekly 0.7 https://safeguard.sh/resources/blog/prepare-for-a-smart-contract-audit-checklist 2026-10-18T19:56:12.674Z weekly 0.7 https://safeguard.sh/resources/blog/prepare-open-source-license-inventory-before-selling-your-company 2026-10-18T19:56:12.771Z weekly 0.7 https://safeguard.sh/resources/blog/preserve-evidence-before-cleaning-up-a-supply-chain-incident 2026-10-18T19:56:12.869Z weekly 0.7 https://safeguard.sh/resources/blog/presigned-urls-are-bearer-tokens-safe-use-rules 2026-10-18T19:56:12.968Z weekly 0.7 https://safeguard.sh/resources/blog/press-and-social-media-questions-during-an-incident 2026-10-18T19:56:13.076Z weekly 0.7 https://safeguard.sh/resources/blog/prevent-overlapping-security-scans-with-concurrency-groups 2026-10-18T19:56:13.177Z weekly 0.7 https://safeguard.sh/resources/blog/preview-a-pip-install-before-you-run-it 2026-10-18T19:56:13.276Z weekly 0.7 https://safeguard.sh/resources/blog/prioritize-supplier-sbom-findings-without-source-code 2026-10-18T19:56:13.372Z weekly 0.7 https://safeguard.sh/resources/blog/prisoners-dilemma-security-information-sharing 2026-10-18T19:56:13.468Z weekly 0.7 https://safeguard.sh/resources/blog/privacy-review-checklist-for-schema-and-pull-requests 2026-10-18T19:56:13.571Z weekly 0.7 https://safeguard.sh/resources/blog/procurement-contract-checklist-for-an-appsec-tool 2026-10-18T19:56:13.895Z weekly 0.7 https://safeguard.sh/resources/blog/procurement-security-questionnaire-for-ai-vendors-what-to-include 2026-10-18T19:56:15.145Z weekly 0.7 https://safeguard.sh/resources/blog/product-manager-dependency-questions-before-launch 2026-10-18T19:56:15.879Z weekly 0.7 https://safeguard.sh/resources/blog/production-pii-in-staging-and-test-data 2026-10-18T19:56:15.986Z weekly 0.7 https://safeguard.sh/resources/blog/promote-releases-through-a-quarantine-repository 2026-10-18T19:56:16.082Z weekly 0.7 https://safeguard.sh/resources/blog/prompt-injection-policy-controls-for-coding-agents 2026-10-18T19:56:16.176Z weekly 0.7 https://safeguard.sh/resources/blog/prompt-rules-vs-deterministic-controls-for-ai-agents 2026-10-18T19:56:18.360Z weekly 0.7 https://safeguard.sh/resources/blog/propagate-user-identity-between-microservices-safely 2026-10-18T19:56:18.468Z weekly 0.7 https://safeguard.sh/resources/blog/property-based-testing-input-validation-invariants 2026-10-18T19:56:19.577Z weekly 0.7 https://safeguard.sh/resources/blog/protect-release-tags-with-a-ruleset 2026-10-18T19:56:20.994Z weekly 0.7 https://safeguard.sh/resources/blog/prove-a-sast-finding-is-real-with-a-failing-test 2026-10-18T19:56:21.095Z weekly 0.7 https://safeguard.sh/resources/blog/prove-whether-a-bad-package-version-reached-production 2026-10-18T19:56:21.195Z weekly 0.7 https://safeguard.sh/resources/blog/provenance-vs-build-log-whats-the-difference 2026-10-18T19:56:21.292Z weekly 0.7 https://safeguard.sh/resources/blog/pseudonymisation-vs-anonymisation-for-analytics-teams 2026-10-18T19:56:21.389Z weekly 0.7 https://safeguard.sh/resources/blog/public-postmortem-for-customers-what-to-publish-and-withhold 2026-10-18T19:56:21.744Z weekly 0.7 https://safeguard.sh/resources/blog/public-sector-appsec-tool-buying-questions-hosting-and-sbom 2026-10-18T19:56:22.093Z weekly 0.7 https://safeguard.sh/resources/blog/publish-a-version-skew-policy-for-your-self-hosted-product 2026-10-18T19:56:22.186Z weekly 0.7 https://safeguard.sh/resources/blog/publish-an-sbom-with-a-github-release-steps 2026-10-18T19:56:22.284Z weekly 0.7 https://safeguard.sh/resources/blog/publish-from-ci-or-your-laptop-which-is-safer 2026-10-18T19:56:22.383Z weekly 0.7 https://safeguard.sh/resources/blog/publish-sbom-publicly-or-share-on-request 2026-10-18T19:56:22.479Z weekly 0.7 https://safeguard.sh/resources/blog/publish-your-product-advisories-in-osv-format-what-vendors-need 2026-10-18T19:56:22.581Z weekly 0.7 https://safeguard.sh/resources/blog/publishable-vs-secret-vs-restricted-payment-api-keys 2026-10-18T19:56:22.681Z weekly 0.7 https://safeguard.sh/resources/blog/pull-request-feedback-as-security-training-a-gate-that-teaches 2026-10-18T19:56:22.777Z weekly 0.7 https://safeguard.sh/resources/blog/pull-request-target-risks-for-open-source-maintainers 2026-10-18T19:56:22.871Z weekly 0.7 https://safeguard.sh/resources/blog/purge-ci-caches-after-a-compromise 2026-10-18T19:56:22.969Z weekly 0.7 https://safeguard.sh/resources/blog/purl-for-container-images-oci-or-docker-type 2026-10-18T19:56:23.067Z weekly 0.7 https://safeguard.sh/resources/blog/purl-for-debian-packages-distro-and-arch-qualifiers 2026-10-18T19:56:23.164Z weekly 0.7 https://safeguard.sh/resources/blog/purl-or-cpe-which-identifier-should-an-sbom-use 2026-10-18T19:56:23.264Z weekly 0.7 https://safeguard.sh/resources/blog/purl-qualifiers-checksum-vers-repository-url-what-they-mean 2026-10-18T19:56:23.358Z weekly 0.7 https://safeguard.sh/resources/blog/purpose-limitation-tag-data-by-purpose 2026-10-18T19:56:23.449Z weekly 0.7 https://safeguard.sh/resources/blog/purview-audit-log-retention-180-days-what-to-export 2026-10-18T19:56:23.549Z weekly 0.7 https://safeguard.sh/resources/blog/push-rulesets-block-large-files-and-risky-paths 2026-10-18T19:56:23.662Z weekly 0.7 https://safeguard.sh/resources/blog/pypi-archived-and-deprecated-status-what-installers-do 2026-10-18T19:56:23.774Z weekly 0.7 https://safeguard.sh/resources/blog/pypi-attestations-pep-740-what-they-prove 2026-10-18T19:56:23.881Z weekly 0.7 https://safeguard.sh/resources/blog/pypi-filename-has-been-previously-used-error-explained 2026-10-18T19:56:23.971Z weekly 0.7 https://safeguard.sh/resources/blog/pypi-package-name-normalization-does-your-scanner-match-it 2026-10-18T19:56:24.054Z weekly 0.7 https://safeguard.sh/resources/blog/pypi-trusted-publisher-github-actions-setup-steps 2026-10-18T19:56:24.147Z weekly 0.7 https://safeguard.sh/resources/blog/pypi-upload-says-file-too-large-size-limits-and-fixes 2026-10-18T19:56:24.244Z weekly 0.7 https://safeguard.sh/resources/blog/python-3-10-end-of-life-october-2026-what-to-do 2026-10-18T19:56:24.436Z weekly 0.7 https://safeguard.sh/resources/blog/python-3-15-upgrade-checklist-utf-8-default-and-removals 2026-10-18T19:56:24.533Z weekly 0.7 https://safeguard.sh/resources/blog/python-extras-and-environment-markers-what-a-scan-reports 2026-10-18T19:56:24.632Z weekly 0.7 https://safeguard.sh/resources/blog/python-extras-vs-dependency-groups-in-pyproject 2026-10-18T19:56:24.727Z weekly 0.7 https://safeguard.sh/resources/blog/python-monorepo-requirements-vs-constraints-files-for-scanning 2026-10-18T19:56:24.902Z weekly 0.7 https://safeguard.sh/resources/blog/python-package-license-metadata-pep-639-explained 2026-10-18T19:56:24.998Z weekly 0.7 https://safeguard.sh/resources/blog/python-post-release-or-new-patch-version-for-a-packaging-fix 2026-10-18T19:56:25.095Z weekly 0.7 https://safeguard.sh/resources/blog/python-pre-releases-and-local-versions-what-pypi-and-pip-do 2026-10-18T19:56:25.199Z weekly 0.7 https://safeguard.sh/resources/blog/python-pth-files-startup-code-check-your-environment 2026-10-18T19:56:25.293Z weekly 0.7 https://safeguard.sh/resources/blog/python-release-phases-bugfix-vs-security-only-explained 2026-10-18T19:56:25.392Z weekly 0.7 https://safeguard.sh/resources/blog/python-version-specifiers-compatible-release-vs-exact-match 2026-10-18T19:56:25.486Z weekly 0.7 https://safeguard.sh/resources/blog/pytorch-torchtriton-december-2022-dependency-confusion-explained 2026-10-18T19:56:25.584Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-git-hosting-access-review-checklist 2026-10-18T19:56:25.683Z weekly 0.7 https://safeguard.sh/resources/blog/questions-about-compliance-evidence-export-from-a-security-tool 2026-10-18T19:56:25.779Z weekly 0.7 https://safeguard.sh/resources/blog/questions-before-embedding-a-third-party-sdk-in-your-product 2026-10-18T19:56:25.878Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-a-compliance-automation-vendor 2026-10-18T19:56:25.974Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-a-vendor-about-reachability-claims 2026-10-18T19:56:26.071Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-about-ai-coding-assistants-adding-dependencies 2026-10-18T19:56:26.173Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-about-automatic-fix-pull-requests 2026-10-18T19:56:26.273Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-about-zero-day-discovery-claims 2026-10-18T19:56:26.372Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-before-a-tool-opens-fix-pull-requests 2026-10-18T19:56:26.469Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-before-choosing-between-diy-scanners-and-a-platform 2026-10-18T19:56:26.563Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-before-running-a-vendor-container-image 2026-10-18T19:56:26.664Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-before-turning-on-automated-fix-pull-requests 2026-10-18T19:56:26.763Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-chip-module-supplier-firmware-security 2026-10-18T19:56:26.866Z weekly 0.7 https://safeguard.sh/resources/blog/rails-credentials-vs-env-vars-where-to-keep-secrets 2026-10-18T19:56:26.960Z weekly 0.7 https://safeguard.sh/resources/blog/rails-host-authorization-config-hosts-production 2026-10-18T19:56:27.057Z weekly 0.7 https://safeguard.sh/resources/blog/rails-master-key-leaked-what-to-do 2026-10-18T19:56:27.155Z weekly 0.7 https://safeguard.sh/resources/blog/rank-license-findings-for-review-triage-order 2026-10-18T19:56:27.257Z weekly 0.7 https://safeguard.sh/resources/blog/rate-limiter-store-outage-fail-open-or-fail-closed 2026-10-18T19:56:27.351Z weekly 0.7 https://safeguard.sh/resources/blog/rate-threats-high-medium-low-instead-of-numeric-scores 2026-10-18T19:56:27.446Z weekly 0.7 https://safeguard.sh/resources/blog/rbac-roles-to-ask-for-in-an-appsec-tool 2026-10-18T19:56:27.544Z weekly 0.7 https://safeguard.sh/resources/blog/rbi-disaster-recovery-drills-backups-engineering-teams 2026-10-18T19:56:27.646Z weekly 0.7 https://safeguard.sh/resources/blog/rbi-it-governance-master-direction-who-it-covers 2026-10-18T19:56:27.881Z weekly 0.7 https://safeguard.sh/resources/blog/rbi-vendor-written-confirmation-free-of-known-vulnerabilities 2026-10-18T19:56:27.973Z weekly 0.7 https://safeguard.sh/resources/blog/rbi-vulnerability-assessment-and-penetration-testing-schedule 2026-10-18T19:56:28.063Z weekly 0.7 https://safeguard.sh/resources/blog/reachability-across-internal-packages-in-a-monorepo 2026-10-18T19:56:28.153Z weekly 0.7 https://safeguard.sh/resources/blog/reachable-vs-exploitable-which-question-comes-first 2026-10-18T19:56:28.248Z weekly 0.7 https://safeguard.sh/resources/blog/reachable-vs-present-java-vulnerability 2026-10-18T19:56:28.338Z weekly 0.7 https://safeguard.sh/resources/blog/react-native-deep-links-and-oauth-pkce 2026-10-18T19:56:28.433Z weekly 0.7 https://safeguard.sh/resources/blog/react-native-hermes-bytecode-is-not-protection 2026-10-18T19:56:28.524Z weekly 0.7 https://safeguard.sh/resources/blog/react-native-where-to-keep-secrets-and-tokens 2026-10-18T19:56:28.614Z weekly 0.7 https://safeguard.sh/resources/blog/read-an-addresssanitizer-report-step-by-step 2026-10-18T19:56:28.703Z weekly 0.7 https://safeguard.sh/resources/blog/read-an-x509-certificate-with-openssl-fields-that-matter 2026-10-18T19:56:28.797Z weekly 0.7 https://safeguard.sh/resources/blog/read-systemd-analyze-security-exposure-score 2026-10-18T19:56:28.891Z weekly 0.7 https://safeguard.sh/resources/blog/reading-crypto-hack-reports-why-the-numbers-differ 2026-10-18T19:56:28.993Z weekly 0.7 https://safeguard.sh/resources/blog/reading-spikes-in-malicious-package-feeds-rate-vs-total 2026-10-18T19:56:29.091Z weekly 0.7 https://safeguard.sh/resources/blog/rebuild-a-release-from-two-years-ago 2026-10-18T19:56:29.190Z weekly 0.7 https://safeguard.sh/resources/blog/rebuild-ci-gates-on-a-new-scanner-report-only-first 2026-10-18T19:56:29.285Z weekly 0.7 https://safeguard.sh/resources/blog/rectification-requests-propagate-corrections 2026-10-18T19:56:29.374Z weekly 0.7 https://safeguard.sh/resources/blog/recurring-vulnerability-rate-regression-metric 2026-10-18T19:56:29.468Z weekly 0.7 https://safeguard.sh/resources/blog/red-flags-when-skimming-a-dependencys-source-code 2026-10-18T19:56:29.564Z weekly 0.7 https://safeguard.sh/resources/blog/red-yellow-green-scoring-for-supply-chain-findings-in-diligence 2026-10-18T19:56:29.662Z weekly 0.7 https://safeguard.sh/resources/blog/redirects-and-status-codes-for-moved-or-deleted-docs 2026-10-18T19:56:29.759Z weekly 0.7 https://safeguard.sh/resources/blog/reference-calls-for-security-tools-questions-that-reveal-the-truth 2026-10-18T19:56:29.853Z weekly 0.7 https://safeguard.sh/resources/blog/reflected-stored-dom-xss-differences-and-what-scanners-catch 2026-10-18T19:56:29.952Z weekly 0.7 https://safeguard.sh/resources/blog/regional-stack-patterns-for-data-residency-decision-guide 2026-10-18T19:56:30.047Z weekly 0.7 https://safeguard.sh/resources/blog/register-lookalike-package-names-defensive-registration 2026-10-18T19:56:30.144Z weekly 0.7 https://safeguard.sh/resources/blog/regulation-s-p-service-provider-oversight-72-hour-notice-explained 2026-10-18T19:56:30.243Z weekly 0.7 https://safeguard.sh/resources/blog/release-gate-failed-and-no-fix-exists-what-now 2026-10-18T19:56:30.383Z weekly 0.7 https://safeguard.sh/resources/blog/releasing-md-a-one-page-release-runbook-for-small-projects 2026-10-18T19:56:30.483Z weekly 0.7 https://safeguard.sh/resources/blog/reload-tls-certificate-nginx-without-downtime 2026-10-18T19:56:30.722Z weekly 0.7 https://safeguard.sh/resources/blog/remediation-pipeline-stage-times-find-to-deploy 2026-10-18T19:56:30.818Z weekly 0.7 https://safeguard.sh/resources/blog/remote-support-access-from-another-country-is-a-transfer 2026-10-18T19:56:30.909Z weekly 0.7 https://safeguard.sh/resources/blog/remove-a-maintainer-access-offboarding-checklist 2026-10-18T19:56:31.004Z weekly 0.7 https://safeguard.sh/resources/blog/remove-an-unused-jenkins-plugin-safely-uninstall-disable-clean-up 2026-10-18T19:56:31.097Z weekly 0.7 https://safeguard.sh/resources/blog/repeatability-test-run-the-same-scan-three-times 2026-10-18T19:56:31.195Z weekly 0.7 https://safeguard.sh/resources/blog/replace-a-security-tool-parallel-run-and-cutover 2026-10-18T19:56:31.288Z weekly 0.7 https://safeguard.sh/resources/blog/replace-legacy-vulnerability-scanner-migration-checklist 2026-10-18T19:56:31.384Z weekly 0.7 https://safeguard.sh/resources/blog/report-a-scanner-false-positive-to-the-tool-maker 2026-10-18T19:56:31.477Z weekly 0.7 https://safeguard.sh/resources/blog/reporter-asks-for-payment-or-threatens-disclosure 2026-10-18T19:56:31.575Z weekly 0.7 https://safeguard.sh/resources/blog/reproduce-an-osv-ecosystem-analysis-in-forty-lines 2026-10-18T19:56:31.669Z weekly 0.7 https://safeguard.sh/resources/blog/reproduce-kev-analysis-in-thirty-lines-of-python 2026-10-18T19:56:31.763Z weekly 0.7 https://safeguard.sh/resources/blog/reproduce-kev-epss-and-osv-analyses-curl-and-python 2026-10-18T19:56:31.859Z weekly 0.7 https://safeguard.sh/resources/blog/reproducible-builds-for-firmware-why-bit-for-bit 2026-10-18T19:56:31.954Z weekly 0.7 https://safeguard.sh/resources/blog/reproducible-builds-for-small-projects-what-to-aim-for 2026-10-18T19:56:32.047Z weekly 0.7 https://safeguard.sh/resources/blog/require-image-digests-with-validating-admission-policy 2026-10-18T19:56:32.139Z weekly 0.7 https://safeguard.sh/resources/blog/required-status-check-stuck-pending-path-filter-security-gap 2026-10-18T19:56:32.236Z weekly 0.7 https://safeguard.sh/resources/blog/requirements-txt-or-project-dependencies-abstract-vs-concrete 2026-10-18T19:56:32.333Z weekly 0.7 https://safeguard.sh/resources/blog/rescan-a-stored-sbom-without-rebuilding 2026-10-18T19:56:32.430Z weekly 0.7 https://safeguard.sh/resources/blog/rescan-stored-sboms-when-a-new-advisory-lands 2026-10-18T19:56:32.524Z weekly 0.7 https://safeguard.sh/resources/blog/research-a-package-in-five-minutes-with-deps-dev 2026-10-18T19:56:32.622Z weekly 0.7 https://safeguard.sh/resources/blog/restrict-an-ssh-key-to-one-job-authorized-keys-options 2026-10-18T19:56:32.718Z weekly 0.7 https://safeguard.sh/resources/blog/restrict-which-github-actions-your-organization-can-run 2026-10-18T19:56:32.815Z weekly 0.7 https://safeguard.sh/resources/blog/retro-prompts-for-security-after-an-incident-or-scare 2026-10-18T19:56:32.901Z weekly 0.7 https://safeguard.sh/resources/blog/reusable-workflow-or-composite-action-for-shared-security-steps 2026-10-18T19:56:32.991Z weekly 0.7 https://safeguard.sh/resources/blog/reuse-private-key-on-certificate-renewal-pros-and-cons 2026-10-18T19:56:33.082Z weekly 0.7 https://safeguard.sh/resources/blog/reuse-specification-mark-licenses-in-every-file 2026-10-18T19:56:33.175Z weekly 0.7 https://safeguard.sh/resources/blog/reverse-proxy-caching-authenticated-responses-cache-control 2026-10-18T19:56:33.280Z weekly 0.7 https://safeguard.sh/resources/blog/reverse-proxy-security-review-checklist 2026-10-18T19:56:33.431Z weekly 0.7 https://safeguard.sh/resources/blog/review-a-build-rs-in-ten-minutes-checklist 2026-10-18T19:56:33.525Z weekly 0.7 https://safeguard.sh/resources/blog/review-a-first-time-contributor-pull-request-checklist 2026-10-18T19:56:33.622Z weekly 0.7 https://safeguard.sh/resources/blog/review-a-lambda-extension-before-you-add-it 2026-10-18T19:56:33.727Z weekly 0.7 https://safeguard.sh/resources/blog/review-a-pull-request-that-changes-ci-config-checklist 2026-10-18T19:56:33.904Z weekly 0.7 https://safeguard.sh/resources/blog/review-github-app-permissions-before-installing 2026-10-18T19:56:34.093Z weekly 0.7 https://safeguard.sh/resources/blog/review-gradle-convention-plugins-and-buildsrc-as-code 2026-10-18T19:56:34.190Z weekly 0.7 https://safeguard.sh/resources/blog/review-rendered-kustomize-output-not-just-the-patch 2026-10-18T19:56:34.286Z weekly 0.7 https://safeguard.sh/resources/blog/reviews-analyst-reports-or-a-trial-which-evidence-first 2026-10-18T19:56:34.383Z weekly 0.7 https://safeguard.sh/resources/blog/revoke-all-access-for-a-compromised-third-party-app-runbook 2026-10-18T19:56:34.476Z weekly 0.7 https://safeguard.sh/resources/blog/revoking-oauth-app-access-does-it-delete-copied-data 2026-10-18T19:56:34.570Z weekly 0.7 https://safeguard.sh/resources/blog/rewrite-in-rust-or-harden-c-decision-guide 2026-10-18T19:56:34.669Z weekly 0.7 https://safeguard.sh/resources/blog/risk-acceptance-tolerance-appetite-exception-waiver-terms-explained 2026-10-18T19:56:34.766Z weekly 0.7 https://safeguard.sh/resources/blog/risk-acceptance-vs-vex-not-affected-whats-the-difference 2026-10-18T19:56:34.860Z weekly 0.7 https://safeguard.sh/resources/blog/rmf-seven-steps-what-a-software-team-produces-at-each-step 2026-10-18T19:56:34.955Z weekly 0.7 https://safeguard.sh/resources/blog/roadmap-promises-in-appsec-sales-ga-versus-early-access 2026-10-18T19:56:35.054Z weekly 0.7 https://safeguard.sh/resources/blog/robots-txt-search-bots-vs-training-bots-decision-guide 2026-10-18T19:56:35.153Z weekly 0.7 https://safeguard.sh/resources/blog/robots-txt-vs-noindex-which-one-keeps-a-page-out 2026-10-18T19:56:35.252Z weekly 0.7 https://safeguard.sh/resources/blog/roll-forward-or-roll-back-when-artifacts-are-immutable 2026-10-18T19:56:35.342Z weekly 0.7 https://safeguard.sh/resources/blog/roll-out-a-patched-base-image-across-many-services 2026-10-18T19:56:35.437Z weekly 0.7 https://safeguard.sh/resources/blog/roll-out-a-security-gate-in-four-stages 2026-10-18T19:56:35.534Z weekly 0.7 https://safeguard.sh/resources/blog/roll-out-a-security-tool-to-engineering-teams-in-waves 2026-10-18T19:56:35.628Z weekly 0.7 https://safeguard.sh/resources/blog/roll-out-security-gates-without-angering-developers 2026-10-18T19:56:35.727Z weekly 0.7 https://safeguard.sh/resources/blog/roll-out-security-scanning-across-500-repositories-in-waves 2026-10-18T19:56:35.825Z weekly 0.7 https://safeguard.sh/resources/blog/rollback-criteria-for-a-scanner-migration 2026-10-18T19:56:35.923Z weekly 0.7 https://safeguard.sh/resources/blog/rollback-plan-for-an-emergency-patch 2026-10-18T19:56:36.020Z weekly 0.7 https://safeguard.sh/resources/blog/rollout-plan-for-autonomous-remediation-in-90-days 2026-10-18T19:56:36.116Z weekly 0.7 https://safeguard.sh/resources/blog/romance-and-investment-scam-red-flags-for-busy-professionals 2026-10-18T19:56:36.211Z weekly 0.7 https://safeguard.sh/resources/blog/romance-scam-warning-signs-when-a-relative-is-involved 2026-10-18T19:56:36.307Z weekly 0.7 https://safeguard.sh/resources/blog/ropa-article-30-fields-engineering-view 2026-10-18T19:56:36.402Z weekly 0.7 https://safeguard.sh/resources/blog/rotate-a-webhook-signing-secret-without-missing-events 2026-10-18T19:56:36.497Z weekly 0.7 https://safeguard.sh/resources/blog/rotate-an-integration-api-key-with-zero-downtime-overlap 2026-10-18T19:56:36.593Z weekly 0.7 https://safeguard.sh/resources/blog/rotate-laravel-app-key-without-logging-everyone-out 2026-10-18T19:56:36.693Z weekly 0.7 https://safeguard.sh/resources/blog/rotate-secrets-after-a-platform-secret-store-incident 2026-10-18T19:56:36.971Z weekly 0.7 https://safeguard.sh/resources/blog/rotate-secrets-in-order-after-malicious-package-ran-in-ci 2026-10-18T19:56:37.062Z weekly 0.7 https://safeguard.sh/resources/blog/route-monorepo-vulnerability-findings-to-the-right-team 2026-10-18T19:56:37.178Z weekly 0.7 https://safeguard.sh/resources/blog/route-sast-findings-to-code-owners 2026-10-18T19:56:37.275Z weekly 0.7 https://safeguard.sh/resources/blog/route-security-findings-to-the-right-engineering-team 2026-10-18T19:56:37.371Z weekly 0.7 https://safeguard.sh/resources/blog/route-vulnerability-findings-to-right-team-evaluation 2026-10-18T19:56:37.460Z weekly 0.7 https://safeguard.sh/resources/blog/row-access-policies-in-a-data-warehouse-explained 2026-10-18T19:56:37.558Z weekly 0.7 https://safeguard.sh/resources/blog/rsa-oaep-vs-pkcs1-v1-5-encryption-padding 2026-10-18T19:56:37.656Z weekly 0.7 https://safeguard.sh/resources/blog/rto-vs-rpo-what-they-mean-for-software-teams 2026-10-18T19:56:37.890Z weekly 0.7 https://safeguard.sh/resources/blog/rubygems-mfa-and-trusted-publishing-what-they-change-for-consumers 2026-10-18T19:56:37.991Z weekly 0.7 https://safeguard.sh/resources/blog/rubygems-mfa-required-metadata-for-gem-owners 2026-10-18T19:56:38.090Z weekly 0.7 https://safeguard.sh/resources/blog/rubygems-trusted-publishing-setup-steps 2026-10-18T19:56:38.183Z weekly 0.7 https://safeguard.sh/resources/blog/run-a-30-minute-weekly-vulnerability-triage-meeting 2026-10-18T19:56:38.280Z weekly 0.7 https://safeguard.sh/resources/blog/run-a-pre-mortem-for-a-risky-feature 2026-10-18T19:56:38.376Z weekly 0.7 https://safeguard.sh/resources/blog/run-a-secret-rotation-game-day 2026-10-18T19:56:38.474Z weekly 0.7 https://safeguard.sh/resources/blog/run-a-vendor-security-review-for-a-new-clinical-software-purchase 2026-10-18T19:56:38.570Z weekly 0.7 https://safeguard.sh/resources/blog/run-an-untrusted-script-in-a-throwaway-container-flag-checklist 2026-10-18T19:56:38.669Z weekly 0.7 https://safeguard.sh/resources/blog/run-bundler-audit-in-ci-rails-steps 2026-10-18T19:56:38.767Z weekly 0.7 https://safeguard.sh/resources/blog/run-your-first-osv-scanner-scan-five-minutes 2026-10-18T19:56:38.863Z weekly 0.7 https://safeguard.sh/resources/blog/run-your-own-independent-scanner-bake-off-step-by-step 2026-10-18T19:56:38.961Z weekly 0.7 https://safeguard.sh/resources/blog/running-vs-registry-container-vulnerabilities-priority 2026-10-18T19:56:39.072Z weekly 0.7 https://safeguard.sh/resources/blog/runtime-end-of-support-dates-to-watch-before-end-of-2026 2026-10-18T19:56:39.169Z weekly 0.7 https://safeguard.sh/resources/blog/runtime-support-windows-compared-node-java-python-dotnet-go 2026-10-18T19:56:39.265Z weekly 0.7 https://safeguard.sh/resources/blog/rust-ownership-rules-and-the-bugs-they-prevent 2026-10-18T19:56:39.432Z weekly 0.7 https://safeguard.sh/resources/blog/s3-object-lock-vs-versioning-for-backups 2026-10-18T19:56:39.526Z weekly 0.7 https://safeguard.sh/resources/blog/sa-11-developer-testing-evidence-what-to-keep 2026-10-18T19:56:39.624Z weekly 0.7 https://safeguard.sh/resources/blog/sa-22-unsupported-components-end-of-life-dependencies 2026-10-18T19:56:39.722Z weekly 0.7 https://safeguard.sh/resources/blog/sa-4-acquisition-clauses-what-to-ask-software-suppliers 2026-10-18T19:56:39.820Z weekly 0.7 https://safeguard.sh/resources/blog/saas-admin-settings-baseline-checklist-small-company 2026-10-18T19:56:39.914Z weekly 0.7 https://safeguard.sh/resources/blog/saas-admin-settings-myths-versus-facts 2026-10-18T19:56:40.011Z weekly 0.7 https://safeguard.sh/resources/blog/safe-dependency-updates-when-test-coverage-is-thin 2026-10-18T19:56:40.111Z weekly 0.7 https://safeguard.sh/resources/blog/same-vulnerability-two-ids-duplicate-advisories-in-osv 2026-10-18T19:56:40.211Z weekly 0.7 https://safeguard.sh/resources/blog/sarif-fields-that-matter-when-choosing-a-sast-tool 2026-10-18T19:56:40.309Z weekly 0.7 https://safeguard.sh/resources/blog/sarif-partial-fingerprints-why-duplicate-alerts-appear 2026-10-18T19:56:40.405Z weekly 0.7 https://safeguard.sh/resources/blog/sarif-security-severity-how-github-maps-scores-to-levels 2026-10-18T19:56:40.497Z weekly 0.7 https://safeguard.sh/resources/blog/sarif-upload-limits-github-what-gets-truncated 2026-10-18T19:56:40.594Z weekly 0.7 https://safeguard.sh/resources/blog/sast-autofix-suggestions-how-to-judge-them 2026-10-18T19:56:40.694Z weekly 0.7 https://safeguard.sh/resources/blog/sast-block-or-warn-pull-request-gating-decision-guide 2026-10-18T19:56:40.792Z weekly 0.7 https://safeguard.sh/resources/blog/sast-coverage-metrics-how-to-know-what-is-scanned 2026-10-18T19:56:40.888Z weekly 0.7 https://safeguard.sh/resources/blog/sast-custom-rules-questions-to-ask-before-you-buy 2026-10-18T19:56:40.978Z weekly 0.7 https://safeguard.sh/resources/blog/sast-dast-and-sca-practice-lab-what-each-one-teaches-a-beginner 2026-10-18T19:56:41.075Z weekly 0.7 https://safeguard.sh/resources/blog/sast-data-flow-depth-test-cases-to-write-yourself 2026-10-18T19:56:41.171Z weekly 0.7 https://safeguard.sh/resources/blog/sast-evidence-for-auditors-what-a-tool-should-export 2026-10-18T19:56:41.267Z weekly 0.7 https://safeguard.sh/resources/blog/sast-exclusions-tests-generated-and-vendored-code 2026-10-18T19:56:41.363Z weekly 0.7 https://safeguard.sh/resources/blog/sast-for-ai-generated-code-what-to-test-in-an-evaluation 2026-10-18T19:56:41.464Z weekly 0.7 https://safeguard.sh/resources/blog/sast-for-go-how-to-scan-and-read-the-results 2026-10-18T19:56:41.568Z weekly 0.7 https://safeguard.sh/resources/blog/sast-for-java-why-the-build-matters 2026-10-18T19:56:41.665Z weekly 0.7 https://safeguard.sh/resources/blog/sast-for-javascript-and-typescript-linter-or-scanner 2026-10-18T19:56:41.766Z weekly 0.7 https://safeguard.sh/resources/blog/sast-for-python-what-to-expect-and-how-to-start 2026-10-18T19:56:41.860Z weekly 0.7 https://safeguard.sh/resources/blog/sast-for-rust-what-static-analysis-covers-and-what-it-cannot 2026-10-18T19:56:41.966Z weekly 0.7 https://safeguard.sh/resources/blog/sast-ide-plugin-developer-experience-test 2026-10-18T19:56:42.117Z weekly 0.7 https://safeguard.sh/resources/blog/sast-legacy-backlog-how-tools-handle-thousands-of-old-findings 2026-10-18T19:56:42.228Z weekly 0.7 https://safeguard.sh/resources/blog/sast-monorepo-evaluation-checklist 2026-10-18T19:56:42.318Z weekly 0.7 https://safeguard.sh/resources/blog/sast-on-pull-requests-diff-only-or-full-scan 2026-10-18T19:56:42.417Z weekly 0.7 https://safeguard.sh/resources/blog/sast-pilot-developer-survey-five-questions 2026-10-18T19:56:42.518Z weekly 0.7 https://safeguard.sh/resources/blog/sast-pilot-readout-template-for-leadership 2026-10-18T19:56:42.616Z weekly 0.7 https://safeguard.sh/resources/blog/sast-rule-matching-vs-data-flow-vs-ai-assisted-approaches 2026-10-18T19:56:42.711Z weekly 0.7 https://safeguard.sh/resources/blog/sast-sca-or-dast-which-to-start-with 2026-10-18T19:56:42.810Z weekly 0.7 https://safeguard.sh/resources/blog/sast-scan-time-budget-what-to-measure-for-ci 2026-10-18T19:56:42.909Z weekly 0.7 https://safeguard.sh/resources/blog/sast-severity-vs-confidence-how-to-read-ratings 2026-10-18T19:56:43.012Z weekly 0.7 https://safeguard.sh/resources/blog/sast-switching-tools-keep-baselines-suppressions-and-history 2026-10-18T19:56:43.113Z weekly 0.7 https://safeguard.sh/resources/blog/sast-triage-metrics-that-show-the-process-works 2026-10-18T19:56:43.211Z weekly 0.7 https://safeguard.sh/resources/blog/sast-vendor-accuracy-claims-how-to-read-benchmarks 2026-10-18T19:56:43.317Z weekly 0.7 https://safeguard.sh/resources/blog/sast-vendor-demo-script-ten-things-to-ask-them-to-show 2026-10-18T19:56:43.418Z weekly 0.7 https://safeguard.sh/resources/blog/sast-vs-secret-scanning-vs-iac-scanning-what-each-covers 2026-10-18T19:56:43.519Z weekly 0.7 https://safeguard.sh/resources/blog/saudi-pdpl-transfer-rules-for-software-teams 2026-10-18T19:56:43.613Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-and-vex-short-answers-for-sales-engineers 2026-10-18T19:56:43.714Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-components-with-no-version-how-to-handle-them 2026-10-18T19:56:43.811Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-contract-commitments-depth-frequency-known-unknowns 2026-10-18T19:56:43.910Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-diff-changes-that-should-trigger-a-security-review 2026-10-18T19:56:44.011Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-distributor-role-explained 2026-10-18T19:56:44.109Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-file-fails-to-parse-ingestion-troubleshooting 2026-10-18T19:56:44.208Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-for-a-java-uber-jar-with-shaded-dependencies 2026-10-18T19:56:44.304Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-for-a-multi-stage-docker-build-which-stage-is-scanned 2026-10-18T19:56:44.401Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-for-a-saas-product-what-an-agency-can-ask-for 2026-10-18T19:56:44.499Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-for-a-shipped-desktop-or-mobile-app 2026-10-18T19:56:44.601Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-for-zephyr-firmware-with-west-spdx 2026-10-18T19:56:44.702Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-generation-or-sbom-ingestion-which-do-you-need 2026-10-18T19:56:44.809Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-generator-or-vulnerability-scanner-which-do-you-need 2026-10-18T19:56:44.910Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-intake-states-accept-warn-quarantine-reject 2026-10-18T19:56:45.345Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-on-request-contract-clause-after-m-26-05 2026-10-18T19:56:45.458Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-platform-storage-retention-and-sharing-questions 2026-10-18T19:56:45.573Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-proof-of-concept-plan-two-weeks 2026-10-18T19:56:45.695Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-request-intake-workflow-for-software-vendors 2026-10-18T19:56:45.808Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-rules-compared-us-eu-germany-india 2026-10-18T19:56:45.924Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-sharing-lifecycle-discovery-access-transport 2026-10-18T19:56:46.047Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-sharing-six-patterns-email-portal-registry-compared 2026-10-18T19:56:46.330Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-tool-evaluation-checklist-test-on-your-own-repo 2026-10-18T19:56:46.448Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-version-specific-urls-map-sbom-to-release 2026-10-18T19:56:46.565Z weekly 0.7 https://safeguard.sh/resources/blog/sca-evaluation-scorecard-weighted-criteria 2026-10-18T19:56:46.692Z weekly 0.7 https://safeguard.sh/resources/blog/sca-exit-plan-data-portability-checklist 2026-10-18T19:56:46.872Z weekly 0.7 https://safeguard.sh/resources/blog/sca-for-ai-suggested-packages-what-to-evaluate 2026-10-18T19:56:46.986Z weekly 0.7 https://safeguard.sh/resources/blog/sca-malicious-package-detection-evaluation-criteria 2026-10-18T19:56:47.097Z weekly 0.7 https://safeguard.sh/resources/blog/sca-pricing-models-explained-generically 2026-10-18T19:56:47.201Z weekly 0.7 https://safeguard.sh/resources/blog/sca-prioritization-signals-compared-how-to-test 2026-10-18T19:56:47.295Z weekly 0.7 https://safeguard.sh/resources/blog/sca-supplier-sbom-import-what-to-test 2026-10-18T19:56:47.387Z weekly 0.7 https://safeguard.sh/resources/blog/sca-trial-mistakes-myth-vs-fact 2026-10-18T19:56:47.484Z weekly 0.7 https://safeguard.sh/resources/blog/sca-vs-sbom-what-is-the-difference 2026-10-18T19:56:47.584Z weekly 0.7 https://safeguard.sh/resources/blog/scan-a-dockerfile-or-a-built-image-which-one 2026-10-18T19:56:47.682Z weekly 0.7 https://safeguard.sh/resources/blog/scan-a-go-workspace-with-several-modules 2026-10-18T19:56:47.775Z weekly 0.7 https://safeguard.sh/resources/blog/scan-a-maven-multi-module-project-from-the-reactor 2026-10-18T19:56:47.874Z weekly 0.7 https://safeguard.sh/resources/blog/scan-a-polyglot-repo-dependencies-one-ci-job-checklist 2026-10-18T19:56:47.976Z weekly 0.7 https://safeguard.sh/resources/blog/scan-a-staging-site-safely-guardrails-checklist 2026-10-18T19:56:48.063Z weekly 0.7 https://safeguard.sh/resources/blog/scan-built-jar-or-java-image-without-source 2026-10-18T19:56:48.150Z weekly 0.7 https://safeguard.sh/resources/blog/scan-container-image-without-docker-daemon-tar-oci-layout 2026-10-18T19:56:48.237Z weekly 0.7 https://safeguard.sh/resources/blog/scan-coverage-statement-what-to-attach-to-every-scan-report 2026-10-18T19:56:48.323Z weekly 0.7 https://safeguard.sh/resources/blog/scan-gradle-multi-project-builds-subproject-by-subproject 2026-10-18T19:56:48.412Z weekly 0.7 https://safeguard.sh/resources/blog/scan-images-in-the-registry-or-in-ci-which-first 2026-10-18T19:56:48.507Z weekly 0.7 https://safeguard.sh/resources/blog/scan-multi-arch-images-every-platform 2026-10-18T19:56:48.599Z weekly 0.7 https://safeguard.sh/resources/blog/scan-on-push-merge-or-release-which-event-to-use 2026-10-18T19:56:48.696Z weekly 0.7 https://safeguard.sh/resources/blog/scan-once-and-promote-the-same-image-digest 2026-10-18T19:56:48.793Z weekly 0.7 https://safeguard.sh/resources/blog/scan-only-affected-packages-nx-affected-and-turbo-filter 2026-10-18T19:56:48.891Z weekly 0.7 https://safeguard.sh/resources/blog/scan-release-branches-and-old-versions-on-a-schedule 2026-10-18T19:56:48.995Z weekly 0.7 https://safeguard.sh/resources/blog/scan-the-bundle-or-the-lockfile-for-front-end-vulnerabilities 2026-10-18T19:56:49.086Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-ci-speed-and-blocking-test-plan 2026-10-18T19:56:49.185Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-ecosystem-coverage-checklist-for-your-stack 2026-10-18T19:56:49.279Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-migration-checklist-integrations-tokens-and-reports 2026-10-18T19:56:49.376Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-outage-fail-open-or-fail-closed-in-ci 2026-10-18T19:56:49.510Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-says-fix-available-what-it-means-and-what-to-check 2026-10-18T19:56:49.607Z weekly 0.7 https://safeguard.sh/resources/blog/schedule-recurring-dependency-maintenance-time 2026-10-18T19:56:49.705Z weekly 0.7 https://safeguard.sh/resources/blog/scheduled-or-event-driven-vulnerability-scans-which-to-use 2026-10-18T19:56:49.802Z weekly 0.7 https://safeguard.sh/resources/blog/schema-compatibility-modes-and-safe-upgrade-order 2026-10-18T19:56:49.900Z weekly 0.7 https://safeguard.sh/resources/blog/school-data-breach-notice-what-parents-can-do 2026-10-18T19:56:49.997Z weekly 0.7 https://safeguard.sh/resources/blog/scope-a-pypi-api-token-to-one-project 2026-10-18T19:56:50.152Z weekly 0.7 https://safeguard.sh/resources/blog/screen-time-family-sharing-setup-checklist 2026-10-18T19:56:50.249Z weekly 0.7 https://safeguard.sh/resources/blog/sebi-cscrf-incident-reporting-6-hours-and-24-hours 2026-10-18T19:56:50.340Z weekly 0.7 https://safeguard.sh/resources/blog/sebi-cscrf-sbom-requirement-explained 2026-10-18T19:56:50.435Z weekly 0.7 https://safeguard.sh/resources/blog/sebi-cscrf-secure-development-vulnerability-assessment-on-release 2026-10-18T19:56:50.529Z weekly 0.7 https://safeguard.sh/resources/blog/sec-four-companies-hypothetical-risk-language-cyber-disclosures 2026-10-18T19:56:50.625Z weekly 0.7 https://safeguard.sh/resources/blog/seccomp-capabilities-no-new-privileges-what-each-switch-does 2026-10-18T19:56:50.725Z weekly 0.7 https://safeguard.sh/resources/blog/secret-detection-vs-secrets-management-whats-the-difference 2026-10-18T19:56:50.871Z weekly 0.7 https://safeguard.sh/resources/blog/secret-pasted-in-chat-or-ticket-what-to-do 2026-10-18T19:56:50.966Z weekly 0.7 https://safeguard.sh/resources/blog/secret-scanning-covers-issues-and-pull-request-comments 2026-10-18T19:56:51.060Z weekly 0.7 https://safeguard.sh/resources/blog/secrets-in-ci-test-logs-and-artifacts-checklist 2026-10-18T19:56:51.157Z weekly 0.7 https://safeguard.sh/resources/blog/secrets-in-git-history-diligence-rotate-dont-rewrite 2026-10-18T19:56:51.253Z weekly 0.7 https://safeguard.sh/resources/blog/secrets-program-metrics-what-to-measure 2026-10-18T19:56:51.347Z weekly 0.7 https://safeguard.sh/resources/blog/secure-boot-certificates-expire-2026-what-to-check 2026-10-18T19:56:51.442Z weekly 0.7 https://safeguard.sh/resources/blog/secure-boot-trusted-boot-measured-boot-difference 2026-10-18T19:56:51.539Z weekly 0.7 https://safeguard.sh/resources/blog/secure-build-environment-evidence-six-items-in-the-cisa-form 2026-10-18T19:56:51.638Z weekly 0.7 https://safeguard.sh/resources/blog/secure-by-default-api-how-to-judge-a-library-before-you-adopt 2026-10-18T19:56:51.739Z weekly 0.7 https://safeguard.sh/resources/blog/secure-by-demand-questions-government-buyers-may-ask-suppliers 2026-10-18T19:56:51.836Z weekly 0.7 https://safeguard.sh/resources/blog/secure-by-design-ai-agent-one-page-checklist 2026-10-18T19:56:51.934Z weekly 0.7 https://safeguard.sh/resources/blog/secure-by-design-pledge-voluntary-not-a-certification 2026-10-18T19:56:52.027Z weekly 0.7 https://safeguard.sh/resources/blog/secure-coding-training-for-teams-using-ai-assistants 2026-10-18T19:56:52.131Z weekly 0.7 https://safeguard.sh/resources/blog/secure-cookie-settings-for-store-sessions-and-carts 2026-10-18T19:56:52.231Z weekly 0.7 https://safeguard.sh/resources/blog/secure-defaults-in-backstage-software-templates-what-to-include 2026-10-18T19:56:52.329Z weekly 0.7 https://safeguard.sh/resources/blog/secure-your-ai-chat-account-password-mfa-updates 2026-10-18T19:56:52.426Z weekly 0.7 https://safeguard.sh/resources/blog/securing-the-log-pipeline-agents-brokers-and-central-processing 2026-10-18T19:56:52.524Z weekly 0.7 https://safeguard.sh/resources/blog/security-certifications-as-costly-signals-spence-explained 2026-10-18T19:56:52.620Z weekly 0.7 https://safeguard.sh/resources/blog/security-claims-to-evidence-what-to-request-from-a-software-vendor 2026-10-18T19:56:52.719Z weekly 0.7 https://safeguard.sh/resources/blog/security-clauses-to-discuss-with-counsel-in-software-contracts 2026-10-18T19:56:52.817Z weekly 0.7 https://safeguard.sh/resources/blog/security-contact-alias-who-should-receive-reports 2026-10-18T19:56:52.921Z weekly 0.7 https://safeguard.sh/resources/blog/security-control-versus-evidence-versus-artifact-what-auditors-mean 2026-10-18T19:56:53.021Z weekly 0.7 https://safeguard.sh/resources/blog/security-definition-of-done-checklist-for-engineering-teams 2026-10-18T19:56:53.120Z weekly 0.7 https://safeguard.sh/resources/blog/security-economics-glossary-externality-moral-hazard-selection 2026-10-18T19:56:53.220Z weekly 0.7 https://safeguard.sh/resources/blog/security-event-vs-incident-vs-alert-difference 2026-10-18T19:56:53.322Z weekly 0.7 https://safeguard.sh/resources/blog/security-exception-for-an-open-source-dependency-template 2026-10-18T19:56:53.415Z weekly 0.7 https://safeguard.sh/resources/blog/security-exceptions-without-a-ticket-queue-self-service-with-expiry 2026-10-18T19:56:53.511Z weekly 0.7 https://safeguard.sh/resources/blog/security-exhibit-clauses-to-ask-a-vendor-for 2026-10-18T19:56:53.615Z weekly 0.7 https://safeguard.sh/resources/blog/security-finding-in-another-teams-service-routing-and-escalation 2026-10-18T19:56:53.716Z weekly 0.7 https://safeguard.sh/resources/blog/security-finding-in-pull-request-comment-what-to-include 2026-10-18T19:56:53.810Z weekly 0.7 https://safeguard.sh/resources/blog/security-findings-in-legacy-code-nobody-owns 2026-10-18T19:56:53.909Z weekly 0.7 https://safeguard.sh/resources/blog/security-for-ai-vs-ai-for-security-what-is-being-sold 2026-10-18T19:56:54.009Z weekly 0.7 https://safeguard.sh/resources/blog/security-gate-fail-on-existing-findings-or-only-new-ones 2026-10-18T19:56:54.107Z weekly 0.7 https://safeguard.sh/resources/blog/security-gate-vs-guardrail-what-is-the-difference 2026-10-18T19:56:54.278Z weekly 0.7 https://safeguard.sh/resources/blog/security-guild-vs-champions-program-vs-center-of-excellence 2026-10-18T19:56:54.371Z weekly 0.7 https://safeguard.sh/resources/blog/security-md-vs-security-txt-which-to-publish 2026-10-18T19:56:54.485Z weekly 0.7 https://safeguard.sh/resources/blog/security-metrics-for-your-team-versus-the-board 2026-10-18T19:56:54.595Z weekly 0.7 https://safeguard.sh/resources/blog/security-office-hours-for-developers-format-and-agenda 2026-10-18T19:56:54.742Z weekly 0.7 https://safeguard.sh/resources/blog/security-page-review-cadence-owners-and-triggers 2026-10-18T19:56:54.839Z weekly 0.7 https://safeguard.sh/resources/blog/security-page-wording-claims-you-can-prove 2026-10-18T19:56:54.933Z weekly 0.7 https://safeguard.sh/resources/blog/security-policy-tiers-by-service-criticality-for-platform-teams 2026-10-18T19:56:55.027Z weekly 0.7 https://safeguard.sh/resources/blog/security-purchase-myths-vs-facts 2026-10-18T19:56:55.123Z weekly 0.7 https://safeguard.sh/resources/blog/security-purchase-stages-from-request-to-signature 2026-10-18T19:56:55.221Z weekly 0.7 https://safeguard.sh/resources/blog/security-report-first-reply-template-for-maintainers 2026-10-18T19:56:55.315Z weekly 0.7 https://safeguard.sh/resources/blog/security-review-of-a-compliance-platform-before-you-connect-it 2026-10-18T19:56:55.412Z weekly 0.7 https://safeguard.sh/resources/blog/security-review-turnaround-for-features-without-blocking-launches 2026-10-18T19:56:55.505Z weekly 0.7 https://safeguard.sh/resources/blog/security-testing-glossary-scan-pen-test-red-team-bounty-vdp 2026-10-18T19:56:55.600Z weekly 0.7 https://safeguard.sh/resources/blog/security-tool-consolidation-risk-register-what-can-go-wrong 2026-10-18T19:56:55.693Z weekly 0.7 https://safeguard.sh/resources/blog/security-tool-requirements-checklist-for-platform-engineers 2026-10-18T19:56:55.789Z weekly 0.7 https://safeguard.sh/resources/blog/security-updates-vs-version-updates-two-lanes 2026-10-18T19:56:55.883Z weekly 0.7 https://safeguard.sh/resources/blog/security-upgrade-breaks-the-build-what-to-do 2026-10-18T19:56:55.979Z weekly 0.7 https://safeguard.sh/resources/blog/security-vs-features-myths-and-facts-for-engineering-managers 2026-10-18T19:56:56.081Z weekly 0.7 https://safeguard.sh/resources/blog/seed-corpus-and-dictionary-how-to-build 2026-10-18T19:56:56.272Z weekly 0.7 https://safeguard.sh/resources/blog/seeded-test-set-for-ai-code-review-vulnerable-and-safe-pairs 2026-10-18T19:56:56.408Z weekly 0.7 https://safeguard.sh/resources/blog/self-attestation-third-party-assessment-or-sbom-which-assurance 2026-10-18T19:56:56.503Z weekly 0.7 https://safeguard.sh/resources/blog/self-host-or-cdn-for-third-party-javascript-decision-guide 2026-10-18T19:56:56.608Z weekly 0.7 https://safeguard.sh/resources/blog/self-hosted-or-saas-scanner-decision-guide 2026-10-18T19:56:56.710Z weekly 0.7 https://safeguard.sh/resources/blog/selinux-or-apparmor-which-mandatory-access-control-for-a-server 2026-10-18T19:56:56.807Z weekly 0.7 https://safeguard.sh/resources/blog/selinux-permissive-vs-disabled-which-to-use 2026-10-18T19:56:57.075Z weekly 0.7 https://safeguard.sh/resources/blog/send-a-custom-questionnaire-or-accept-the-vendors-caiq 2026-10-18T19:56:57.168Z weekly 0.7 https://safeguard.sh/resources/blog/send-gradle-dependencies-to-githubs-dependency-graph 2026-10-18T19:56:57.266Z weekly 0.7 https://safeguard.sh/resources/blog/sent-money-to-a-scammer-first-steps-by-payment-method 2026-10-18T19:56:57.362Z weekly 0.7 https://safeguard.sh/resources/blog/service-accounts-and-api-tokens-for-appsec-in-ci 2026-10-18T19:56:57.461Z weekly 0.7 https://safeguard.sh/resources/blog/set-a-carrier-pin-and-lock-your-phone-number 2026-10-18T19:56:57.562Z weekly 0.7 https://safeguard.sh/resources/blog/set-github-actions-org-defaults-token-permissions-and-sha-pinning 2026-10-18T19:56:57.661Z weekly 0.7 https://safeguard.sh/resources/blog/set-up-a-safe-home-lab-for-web-application-testing 2026-10-18T19:56:57.760Z weekly 0.7 https://safeguard.sh/resources/blog/settle-a-severity-dispute-between-security-and-engineering 2026-10-18T19:56:57.866Z weekly 0.7 https://safeguard.sh/resources/blog/seven-principles-of-coordinated-disclosure-for-product-teams 2026-10-18T19:56:58.145Z weekly 0.7 https://safeguard.sh/resources/blog/severity-only-vs-risk-based-vulnerability-prioritization 2026-10-18T19:56:58.247Z weekly 0.7 https://safeguard.sh/resources/blog/sextortion-teen-first-steps-for-parents-and-teens 2026-10-18T19:56:58.343Z weekly 0.7 https://safeguard.sh/resources/blog/shadow-mode-for-automated-remediation-run-report-only-first 2026-10-18T19:56:58.456Z weekly 0.7 https://safeguard.sh/resources/blog/shai-hulud-npm-worm-how-self-replication-worked 2026-10-18T19:56:58.556Z weekly 0.7 https://safeguard.sh/resources/blog/shallow-clone-breaks-diff-based-scans-fetch-depth 2026-10-18T19:56:58.653Z weekly 0.7 https://safeguard.sh/resources/blog/share-renovate-config-across-an-organization-with-presets 2026-10-18T19:56:58.748Z weekly 0.7 https://safeguard.sh/resources/blog/share-your-sbom-publicly-or-under-nda-decision-guide 2026-10-18T19:56:58.842Z weekly 0.7 https://safeguard.sh/resources/blog/sharepoint-onedrive-external-sharing-levels-explained 2026-10-18T19:56:58.932Z weekly 0.7 https://safeguard.sh/resources/blog/ship-container-images-to-disconnected-customers-with-skopeo-copy 2026-10-18T19:56:59.026Z weekly 0.7 https://safeguard.sh/resources/blog/ship-with-a-known-risk-decision-record-template 2026-10-18T19:56:59.119Z weekly 0.7 https://safeguard.sh/resources/blog/shopify-storefront-api-public-vs-private-token-headless 2026-10-18T19:56:59.215Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-bootloader-validate-the-image-on-every-boot 2026-10-18T19:56:59.312Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-bot-bump-your-node-version-lts-explained 2026-10-18T19:56:59.404Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-bot-update-your-container-base-image 2026-10-18T19:56:59.501Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-ci-gate-block-on-known-exploited-vulnerabilities 2026-10-18T19:56:59.595Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-hotfix-skip-the-vulnerability-scan 2026-10-18T19:56:59.703Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-kubernetes-operator-have-cluster-admin 2026-10-18T19:56:59.809Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-pen-test-run-in-production-or-staging 2026-10-18T19:56:59.908Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-security-finding-fail-the-build 2026-10-18T19:57:00.003Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-security-gate-ignore-vulnerabilities-with-no-fix 2026-10-18T19:57:00.100Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-web-app-sbom-list-cdn-scripts-and-services 2026-10-18T19:57:00.199Z weekly 0.7 https://safeguard.sh/resources/blog/should-admission-control-block-critical-image-vulnerabilities 2026-10-18T19:57:00.294Z weekly 0.7 https://safeguard.sh/resources/blog/should-ai-agents-be-allowed-to-open-pull-requests 2026-10-18T19:57:00.392Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-analyst-report-build-your-security-vendor-shortlist 2026-10-18T19:57:00.494Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-mcp-server-show-different-tools-to-different-users 2026-10-18T19:57:00.599Z weekly 0.7 https://safeguard.sh/resources/blog/should-automations-trust-data-from-connected-saas-apps 2026-10-18T19:57:00.698Z weekly 0.7 https://safeguard.sh/resources/blog/should-ci-gate-fail-on-dev-dependency-vulnerabilities 2026-10-18T19:57:00.793Z weekly 0.7 https://safeguard.sh/resources/blog/should-containers-log-to-stdout-or-files 2026-10-18T19:57:00.897Z weekly 0.7 https://safeguard.sh/resources/blog/should-gpu-training-instances-on-aws-require-imdsv2 2026-10-18T19:57:00.995Z weekly 0.7 https://safeguard.sh/resources/blog/should-i-turn-on-dependabot-auto-merge-for-dependency-updates 2026-10-18T19:57:01.090Z weekly 0.7 https://safeguard.sh/resources/blog/should-laravel-queued-jobs-be-encrypted 2026-10-18T19:57:01.186Z weekly 0.7 https://safeguard.sh/resources/blog/should-ml-training-containers-run-as-non-root 2026-10-18T19:57:01.285Z weekly 0.7 https://safeguard.sh/resources/blog/should-procurement-ask-vendors-for-an-sbom-and-what-then 2026-10-18T19:57:01.380Z weekly 0.7 https://safeguard.sh/resources/blog/should-production-install-pre-release-versions-rc-beta 2026-10-18T19:57:01.476Z weekly 0.7 https://safeguard.sh/resources/blog/should-production-run-a-non-lts-java-release 2026-10-18T19:57:01.579Z weekly 0.7 https://safeguard.sh/resources/blog/should-reachability-decide-whether-a-gate-blocks 2026-10-18T19:57:01.909Z weekly 0.7 https://safeguard.sh/resources/blog/should-release-binaries-live-as-workflow-artifacts 2026-10-18T19:57:02.230Z weekly 0.7 https://safeguard.sh/resources/blog/should-saas-startups-charge-extra-for-sso-and-audit-logs 2026-10-18T19:57:02.327Z weekly 0.7 https://safeguard.sh/resources/blog/should-sast-suppressions-expire-review-dates 2026-10-18T19:57:02.427Z weekly 0.7 https://safeguard.sh/resources/blog/should-security-champions-triage-vulnerability-findings 2026-10-18T19:57:02.522Z weekly 0.7 https://safeguard.sh/resources/blog/should-security-fixes-ship-separately-from-feature-changes 2026-10-18T19:57:02.733Z weekly 0.7 https://safeguard.sh/resources/blog/should-security-scanning-be-mandatory-for-every-repository 2026-10-18T19:57:03.340Z weekly 0.7 https://safeguard.sh/resources/blog/should-security-training-affect-performance-reviews 2026-10-18T19:57:03.439Z weekly 0.7 https://safeguard.sh/resources/blog/should-update-bots-propose-pre-release-versions 2026-10-18T19:57:03.563Z weekly 0.7 https://safeguard.sh/resources/blog/should-vendor-support-staff-see-production-phi 2026-10-18T19:57:04.436Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-accept-a-vulnerability-when-a-fix-pr-exists 2026-10-18T19:57:04.795Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-adopt-a-new-lts-release-right-away 2026-10-18T19:57:05.721Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-allow-versionoverride-in-nuget-central-package-management 2026-10-18T19:57:07.042Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-apt-mark-hold-a-package-risks-and-alternatives 2026-10-18T19:57:07.529Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-ask-your-appsec-vendor-for-its-own-sbom 2026-10-18T19:57:07.636Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-bundle-the-aws-sdk-in-your-lambda-package 2026-10-18T19:57:08.621Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-commit-composer-lock-app-or-library 2026-10-18T19:57:09.848Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-commit-node-modules-or-use-zero-installs 2026-10-18T19:57:09.944Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-commit-package-resolved-swift-project 2026-10-18T19:57:10.035Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-commit-poetry-lock-applications-vs-libraries 2026-10-18T19:57:10.127Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-commit-the-php-vendor-directory 2026-10-18T19:57:10.219Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-disable-fastapi-docs-and-openapi-json-in-production 2026-10-18T19:57:10.324Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-disable-grpc-reflection-in-production 2026-10-18T19:57:10.420Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-log-http-request-bodies 2026-10-18T19:57:11.016Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-migrate-security-tools-during-an-audit-window 2026-10-18T19:57:11.963Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-pin-apt-package-versions-in-a-dockerfile 2026-10-18T19:57:12.062Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-pin-github-actions-to-a-commit-sha 2026-10-18T19:57:12.162Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-pin-lets-encrypt-intermediate-certificates 2026-10-18T19:57:12.261Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-require-an-nda-before-sharing-an-sbom 2026-10-18T19:57:12.360Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-scan-training-and-eval-data-for-secrets-and-personal-data 2026-10-18T19:57:12.460Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-sign-your-sparkle-appcast-feed-as-well-as-archives 2026-10-18T19:57:12.569Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-still-use-the-oauth-implicit-flow 2026-10-18T19:57:15.390Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-study-the-owasp-top-10-2025-in-order 2026-10-18T19:57:15.493Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-trust-vulnerabilities-embedded-in-a-supplier-sbom 2026-10-18T19:57:15.593Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-turn-off-automatic-updates-after-malicious-update 2026-10-18T19:57:15.696Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-use-mavenlocal-or-flatdir-in-gradle 2026-10-18T19:57:15.799Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-write-your-own-dependency-scanner 2026-10-18T19:57:15.930Z weekly 0.7 https://safeguard.sh/resources/blog/show-provenance-for-internal-code-and-third-party-components 2026-10-18T19:57:16.031Z weekly 0.7 https://safeguard.sh/resources/blog/si-2-flaw-remediation-vs-ra-5-vulnerability-scanning 2026-10-18T19:57:18.028Z weekly 0.7 https://safeguard.sh/resources/blog/sign-your-rpm-packages-and-repo-metadata-gpgcheck-explained 2026-10-18T19:57:20.391Z weekly 0.7 https://safeguard.sh/resources/blog/signed-apt-repository-signed-by-instead-of-apt-key 2026-10-18T19:57:21.769Z weekly 0.7 https://safeguard.sh/resources/blog/signed-components-cm-14-and-si-7-integrity-for-builds 2026-10-18T19:57:22.551Z weekly 0.7 https://safeguard.sh/resources/blog/signed-cookies-vs-encrypted-cookies-vs-server-sessions 2026-10-18T19:57:22.650Z weekly 0.7 https://safeguard.sh/resources/blog/signing-key-rollover-with-kid-and-an-overlap-window 2026-10-18T19:57:22.755Z weekly 0.7 https://safeguard.sh/resources/blog/signs-its-time-to-switch-your-dependency-scanner 2026-10-18T19:57:22.871Z weekly 0.7 https://safeguard.sh/resources/blog/signs-you-have-outgrown-diy-appsec-scanning 2026-10-18T19:57:22.975Z weekly 0.7 https://safeguard.sh/resources/blog/sigstore-policy-controller-no-match-policy-what-happens 2026-10-18T19:57:23.085Z weekly 0.7 https://safeguard.sh/resources/blog/single-maintainer-risk-what-it-means-for-the-business-using-the-code 2026-10-18T19:57:23.217Z weekly 0.7 https://safeguard.sh/resources/blog/sitemaps-for-docs-sites-what-they-do-and-indexnow 2026-10-18T19:57:23.337Z weekly 0.7 https://safeguard.sh/resources/blog/six-design-patterns-for-prompt-injection-resistant-agents 2026-10-18T19:57:23.445Z weekly 0.7 https://safeguard.sh/resources/blog/six-ideas-from-security-economics-for-engineering-leaders 2026-10-18T19:57:23.869Z weekly 0.7 https://safeguard.sh/resources/blog/six-phases-of-coordinated-vulnerability-disclosure 2026-10-18T19:57:25.543Z weekly 0.7 https://safeguard.sh/resources/blog/slack-app-approval-and-restricting-installs-enterprise 2026-10-18T19:57:26.648Z weekly 0.7 https://safeguard.sh/resources/blog/slack-guests-vs-slack-connect-which-to-use 2026-10-18T19:57:27.044Z weekly 0.7 https://safeguard.sh/resources/blog/slack-message-retention-settings-by-plan 2026-10-18T19:57:27.160Z weekly 0.7 https://safeguard.sh/resources/blog/slow-dependency-updates-before-a-release-freeze 2026-10-18T19:57:27.260Z weekly 0.7 https://safeguard.sh/resources/blog/slsa-and-signing-myths-vs-facts 2026-10-18T19:57:27.356Z weekly 0.7 https://safeguard.sh/resources/blog/small-team-vulnerability-management-myths-vs-facts 2026-10-18T19:57:27.450Z weekly 0.7 https://safeguard.sh/resources/blog/smart-app-control-unsigned-binaries-what-developers-should-do 2026-10-18T19:57:27.547Z weekly 0.7 https://safeguard.sh/resources/blog/smart-contract-testing-ladder-unit-fuzz-static-formal 2026-10-18T19:57:27.644Z weekly 0.7 https://safeguard.sh/resources/blog/smartscreen-reputation-signed-installer-new-release-warning 2026-10-18T19:57:27.734Z weekly 0.7 https://safeguard.sh/resources/blog/smb-signing-windows-11-24h2-what-changes-and-what-breaks 2026-10-18T19:57:27.829Z weekly 0.7 https://safeguard.sh/resources/blog/snowflake-python-connector-authentication-options-for-pipelines 2026-10-18T19:57:27.931Z weekly 0.7 https://safeguard.sh/resources/blog/soc-1-who-needs-it-icfr-and-when-soc-2-is-not-enough 2026-10-18T19:57:28.027Z weekly 0.7 https://safeguard.sh/resources/blog/soc-2-vulnerability-management-evidence-what-to-collect 2026-10-18T19:57:28.128Z weekly 0.7 https://safeguard.sh/resources/blog/soft-delete-vs-hard-delete-personal-data 2026-10-18T19:57:28.224Z weekly 0.7 https://safeguard.sh/resources/blog/software-supply-chain-explained-with-a-restaurant-kitchen 2026-10-18T19:57:28.320Z weekly 0.7 https://safeguard.sh/resources/blog/sound-vs-unsound-rust-wrapping-c-libraries 2026-10-18T19:57:28.415Z weekly 0.7 https://safeguard.sh/resources/blog/sp-800-171a-original-withdrawn-use-rev-3-for-assessments 2026-10-18T19:57:28.506Z weekly 0.7 https://safeguard.sh/resources/blog/sp-800-18-rev-2-security-privacy-supply-chain-plans 2026-10-18T19:57:28.604Z weekly 0.7 https://safeguard.sh/resources/blog/spam-text-scams-package-and-prize-messages-what-to-do 2026-10-18T19:57:28.703Z weekly 0.7 https://safeguard.sh/resources/blog/sparse-checkout-is-not-access-control-monorepo 2026-10-18T19:57:28.800Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-file-formats-json-tag-value-yaml-rdf-which-to-use 2026-10-18T19:57:28.900Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-licenseref-record-licenses-not-on-the-list 2026-10-18T19:57:28.993Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-package-verification-code-vs-checksum-for-firmware-components 2026-10-18T19:57:29.092Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-with-license-exceptions-classpath-gcc-linux-syscall 2026-10-18T19:57:29.193Z weekly 0.7 https://safeguard.sh/resources/blog/spend-open-source-sponsorship-money-on-security 2026-10-18T19:57:29.291Z weekly 0.7 https://safeguard.sh/resources/blog/spiffe-ids-and-svids-explained-for-service-identity 2026-10-18T19:57:29.385Z weekly 0.7 https://safeguard.sh/resources/blog/spreadsheet-or-compliance-platform-first-soc-2 2026-10-18T19:57:29.482Z weekly 0.7 https://safeguard.sh/resources/blog/spring-boot-actuator-env-values-sanitized-show-values 2026-10-18T19:57:29.576Z weekly 0.7 https://safeguard.sh/resources/blog/spring-boot-actuator-health-show-details 2026-10-18T19:57:29.673Z weekly 0.7 https://safeguard.sh/resources/blog/spring-boot-actuator-sbom-endpoint 2026-10-18T19:57:29.769Z weekly 0.7 https://safeguard.sh/resources/blog/spring-boot-dependency-hygiene-checklist 2026-10-18T19:57:29.876Z weekly 0.7 https://safeguard.sh/resources/blog/spring-boot-fat-jar-contents-and-inventory 2026-10-18T19:57:29.989Z weekly 0.7 https://safeguard.sh/resources/blog/spring-boot-starter-security-method-security 2026-10-18T19:57:30.089Z weekly 0.7 https://safeguard.sh/resources/blog/spring-security-6-csrf-403-single-page-app 2026-10-18T19:57:30.186Z weekly 0.7 https://safeguard.sh/resources/blog/spring-security-authorizehttprequests-rule-order 2026-10-18T19:57:30.409Z weekly 0.7 https://safeguard.sh/resources/blog/spring-security-csrf-protection-default 2026-10-18T19:57:30.518Z weekly 0.7 https://safeguard.sh/resources/blog/spring-security-default-password-encoder 2026-10-18T19:57:30.615Z weekly 0.7 https://safeguard.sh/resources/blog/sqlalchemy-text-bound-parameters-vs-string-formatting 2026-10-18T19:57:30.711Z weekly 0.7 https://safeguard.sh/resources/blog/sr-family-controls-for-software-vendors-quick-map 2026-10-18T19:57:30.810Z weekly 0.7 https://safeguard.sh/resources/blog/src-layout-or-flat-layout-for-a-python-library 2026-10-18T19:57:30.907Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-1-2-draft-po-6-continuous-improvement-plan 2026-10-18T19:57:31.150Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-1-2-draft-ps-4-robust-software-updates 2026-10-18T19:57:31.245Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-or-secure-by-design-which-one-to-ask-a-vendor-about 2026-10-18T19:57:31.341Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-po-3-3-toolchain-artifacts-what-counts-as-evidence 2026-10-18T19:57:31.437Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-po-4-security-check-criteria-and-gates-evidence 2026-10-18T19:57:31.533Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-po-5-secure-development-environments-evidence 2026-10-18T19:57:31.631Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-ps-1-to-ps-3-protect-and-archive-releases-evidence 2026-10-18T19:57:31.725Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-pw-1-and-pw-2-design-review-and-threat-model-evidence 2026-10-18T19:57:31.823Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-pw-5-and-pw-6-secure-coding-and-build-settings-evidence 2026-10-18T19:57:31.917Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-pw-7-and-pw-8-code-review-and-testing-evidence 2026-10-18T19:57:32.009Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-pw-9-secure-by-default-settings-evidence 2026-10-18T19:57:32.104Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-rv-1-and-rv-2-find-and-prioritize-vulnerabilities-evidence 2026-10-18T19:57:32.204Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-rv-3-root-cause-analysis-evidence-that-it-changed-the-sdlc 2026-10-18T19:57:32.307Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-vocabulary-for-supplier-security-conversations 2026-10-18T19:57:32.405Z weekly 0.7 https://safeguard.sh/resources/blog/ssh-certificates-vs-authorized-keys-which-for-a-team 2026-10-18T19:57:32.504Z weekly 0.7 https://safeguard.sh/resources/blog/sshd-match-blocks-and-sshd-t-check-effective-config 2026-10-18T19:57:32.604Z weekly 0.7 https://safeguard.sh/resources/blog/sso-saml-oidc-scim-questions-to-ask-a-security-vendor 2026-10-18T19:57:32.701Z weekly 0.7 https://safeguard.sh/resources/blog/staged-rollout-for-your-own-config-pushes-crowdstrike-lesson 2026-10-18T19:57:32.795Z weekly 0.7 https://safeguard.sh/resources/blog/staged-rollout-of-dependency-updates-across-many-repos 2026-10-18T19:57:32.902Z weekly 0.7 https://safeguard.sh/resources/blog/staging-and-beta-hosts-need-scanning-too 2026-10-18T19:57:33.000Z weekly 0.7 https://safeguard.sh/resources/blog/staging-vs-production-vulnerability-priority 2026-10-18T19:57:33.098Z weekly 0.7 https://safeguard.sh/resources/blog/stale-images-in-your-registry-retention-and-cleanup 2026-10-18T19:57:33.242Z weekly 0.7 https://safeguard.sh/resources/blog/stale-security-tickets-close-fix-or-accept-rules 2026-10-18T19:57:33.338Z weekly 0.7 https://safeguard.sh/resources/blog/static-or-dynamic-linking-who-rebuilds-after-a-library-fix 2026-10-18T19:57:33.436Z weekly 0.7 https://safeguard.sh/resources/blog/static-pods-and-mirror-pods-what-deleting-them-does 2026-10-18T19:57:33.533Z weekly 0.7 https://safeguard.sh/resources/blog/status-page-components-how-to-model-your-service 2026-10-18T19:57:33.726Z weekly 0.7 https://safeguard.sh/resources/blog/status-page-update-wording-investigating-identified-resolved 2026-10-18T19:57:33.821Z weekly 0.7 https://safeguard.sh/resources/blog/status-page-uptime-percentage-how-to-calculate-honestly 2026-10-18T19:57:33.918Z weekly 0.7 https://safeguard.sh/resources/blog/stolen-code-signing-certificate-response-runbook 2026-10-18T19:57:34.019Z weekly 0.7 https://safeguard.sh/resources/blog/stop-a-runaway-container-memory-cpu-and-process-limits 2026-10-18T19:57:34.115Z weekly 0.7 https://safeguard.sh/resources/blog/stop-nightly-scans-repeating-the-same-alerts 2026-10-18T19:57:34.214Z weekly 0.7 https://safeguard.sh/resources/blog/stop-teams-bypassing-the-pipeline-protected-environments 2026-10-18T19:57:34.312Z weekly 0.7 https://safeguard.sh/resources/blog/store-or-direct-download-where-to-distribute-a-desktop-app 2026-10-18T19:57:34.409Z weekly 0.7 https://safeguard.sh/resources/blog/storefront-app-access-scopes-what-to-review-before-you-install 2026-10-18T19:57:34.568Z weekly 0.7 https://safeguard.sh/resources/blog/storefront-dependency-advisory-triage-patch-wrap-or-replace 2026-10-18T19:57:34.691Z weekly 0.7 https://safeguard.sh/resources/blog/structure-aware-fuzzing-when-random-bytes-fail 2026-10-18T19:57:34.791Z weekly 0.7 https://safeguard.sh/resources/blog/structured-data-myths-versus-facts-for-technical-sites 2026-10-18T19:57:34.886Z weekly 0.7 https://safeguard.sh/resources/blog/subprocessor-change-notice-and-objection-rights 2026-10-18T19:57:34.982Z weekly 0.7 https://safeguard.sh/resources/blog/sudoedit-vs-sudo-vim-shell-escape-risk 2026-10-18T19:57:35.077Z weekly 0.7 https://safeguard.sh/resources/blog/sudoers-wildcards-in-command-arguments-pitfall 2026-10-18T19:57:35.176Z weekly 0.7 https://safeguard.sh/resources/blog/supplier-security-questions-organized-by-supply-chain-attack-class 2026-10-18T19:57:35.276Z weekly 0.7 https://safeguard.sh/resources/blog/supplier-will-not-provide-an-sbom-what-to-do 2026-10-18T19:57:35.373Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-attack-first-hour-by-attack-class 2026-10-18T19:57:35.467Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-attack-myths-vs-facts-for-buyers 2026-10-18T19:57:35.564Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-attack-vs-data-breach-how-they-differ 2026-10-18T19:57:35.663Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-evidence-that-can-be-automated 2026-10-18T19:57:35.768Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-incident-contact-sheet-prepare-before-you-need-it 2026-10-18T19:57:35.859Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-incident-hardening-backlog-what-to-fix-first 2026-10-18T19:57:35.956Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-incident-severity-levels-with-examples 2026-10-18T19:57:36.053Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-security-acronyms-sbom-sca-vex-kev-cve-explained 2026-10-18T19:57:36.148Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-security-glossary-for-non-engineers-fifteen-terms 2026-10-18T19:57:36.245Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-security-tool-trial-success-criteria 2026-10-18T19:57:36.335Z weekly 0.7 https://safeguard.sh/resources/blog/support-and-escalation-terms-in-a-security-tool-contract 2026-10-18T19:57:36.424Z weekly 0.7 https://safeguard.sh/resources/blog/support-period-and-end-of-life-dates-what-buyers-expect 2026-10-18T19:57:36.514Z weekly 0.7 https://safeguard.sh/resources/blog/supported-languages-page-myth-vs-fact-what-to-check 2026-10-18T19:57:36.606Z weekly 0.7 https://safeguard.sh/resources/blog/supported-versions-table-in-security-md-how-many-releases 2026-10-18T19:57:36.704Z weekly 0.7 https://safeguard.sh/resources/blog/suppress-image-vulnerability-with-expiry-and-vex 2026-10-18T19:57:36.804Z weekly 0.7 https://safeguard.sh/resources/blog/suppression-files-rot-how-to-keep-diy-scanner-exceptions-honest 2026-10-18T19:57:36.909Z weekly 0.7 https://safeguard.sh/resources/blog/suspend-or-end-a-data-transfer-runbook 2026-10-18T19:57:37.007Z weekly 0.7 https://safeguard.sh/resources/blog/swift-macros-sandbox-what-can-a-macro-access 2026-10-18T19:57:37.104Z weekly 0.7 https://safeguard.sh/resources/blog/swiftpm-build-tool-plugins-what-can-they-access 2026-10-18T19:57:37.200Z weekly 0.7 https://safeguard.sh/resources/blog/swiftpm-cocoapods-carthage-gradle-lockfile-comparison 2026-10-18T19:57:37.293Z weekly 0.7 https://safeguard.sh/resources/blog/swiftpm-dependency-requirements-from-exact-revision-branch 2026-10-18T19:57:37.405Z weekly 0.7 https://safeguard.sh/resources/blog/swiftpm-from-exact-branch-revision-which-requirement 2026-10-18T19:57:37.502Z weekly 0.7 https://safeguard.sh/resources/blog/switching-compliance-platforms-mid-audit-period-checklist 2026-10-18T19:57:37.601Z weekly 0.7 https://safeguard.sh/resources/blog/synthetic-benchmark-or-your-own-code-which-result-to-trust 2026-10-18T19:57:37.699Z weekly 0.7 https://safeguard.sh/resources/blog/system-library-or-bundled-copy-in-c-who-patches 2026-10-18T19:57:37.796Z weekly 0.7 https://safeguard.sh/resources/blog/systemd-dynamicuser-what-it-implies 2026-10-18T19:57:37.895Z weekly 0.7 https://safeguard.sh/resources/blog/systemd-service-sandboxing-starter-directives 2026-10-18T19:57:37.999Z weekly 0.7 https://safeguard.sh/resources/blog/systemd-timers-vs-cron-for-security-sensitive-jobs 2026-10-18T19:57:38.164Z weekly 0.7 https://safeguard.sh/resources/blog/table-driven-unit-tests-for-authorization-rules 2026-10-18T19:57:38.645Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-loss-of-power-at-a-water-treatment-plant 2026-10-18T19:57:38.742Z weekly 0.7 https://safeguard.sh/resources/blog/tags-or-digests-which-to-track-when-base-images-span-many-services 2026-10-18T19:57:38.840Z weekly 0.7 https://safeguard.sh/resources/blog/tailoring-and-overlays-in-nist-800-53b-explained 2026-10-18T19:57:38.944Z weekly 0.7 https://safeguard.sh/resources/blog/take-it-down-how-hash-based-image-removal-works 2026-10-18T19:57:39.040Z weekly 0.7 https://safeguard.sh/resources/blog/tauri-capabilities-and-scopes-explained 2026-10-18T19:57:39.137Z weekly 0.7 https://safeguard.sh/resources/blog/tauri-isolation-pattern-and-csp-when-to-use 2026-10-18T19:57:39.233Z weekly 0.7 https://safeguard.sh/resources/blog/tauri-security-model-core-vs-webview 2026-10-18T19:57:39.325Z weekly 0.7 https://safeguard.sh/resources/blog/tauri-updater-signatures-and-key-handling 2026-10-18T19:57:39.421Z weekly 0.7 https://safeguard.sh/resources/blog/teach-a-teen-to-spot-phishing-recognize-resist-delete 2026-10-18T19:57:39.519Z weekly 0.7 https://safeguard.sh/resources/blog/teams-external-access-vs-guest-access-explained 2026-10-18T19:57:39.617Z weekly 0.7 https://safeguard.sh/resources/blog/tech-support-and-fake-government-calls-script-to-refuse 2026-10-18T19:57:39.713Z weekly 0.7 https://safeguard.sh/resources/blog/tech-support-pop-up-scam-protect-parents-and-grandparents 2026-10-18T19:57:39.811Z weekly 0.7 https://safeguard.sh/resources/blog/technical-writing-for-answer-engines-checklist 2026-10-18T19:57:39.905Z weekly 0.7 https://safeguard.sh/resources/blog/tell-if-a-partners-sbom-is-complete-or-for-show 2026-10-18T19:57:40.001Z weekly 0.7 https://safeguard.sh/resources/blog/temporary-private-fork-limits-for-security-fixes 2026-10-18T19:57:40.097Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-to-ask-of-any-analyst-report-before-you-rely-on-it 2026-10-18T19:57:40.193Z weekly 0.7 https://safeguard.sh/resources/blog/ten-sbom-questions-a-risk-manager-should-ask-a-supplier 2026-10-18T19:57:40.288Z weekly 0.7 https://safeguard.sh/resources/blog/tenant-isolation-questions-for-a-saas-appsec-tool 2026-10-18T19:57:40.384Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-external-data-source-escape-hatch-security-review 2026-10-18T19:57:40.481Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-init-lockfile-readonly-in-ci-should-you-use-it 2026-10-18T19:57:40.576Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-plan-detailed-exitcode-in-ci-what-it-returns 2026-10-18T19:57:40.673Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-plan-vs-ansible-check-mode-which-preview-to-trust 2026-10-18T19:57:40.781Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-provider-mirror-air-gapped-networks-how-it-works 2026-10-18T19:57:40.878Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-providers-lock-what-it-does-and-when-to-run-it 2026-10-18T19:57:40.974Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-refresh-only-mode-reconcile-drift-after-an-incident 2026-10-18T19:57:41.071Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-registry-credentials-tf-token-variables-vs-cli-config 2026-10-18T19:57:41.165Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-remote-state-data-source-needs-access-to-the-whole-state 2026-10-18T19:57:41.262Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-required-providers-source-address-registry-namespace 2026-10-18T19:57:41.358Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-state-backup-and-recovery 2026-10-18T19:57:41.456Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-state-locking-and-force-unlock-what-to-know 2026-10-18T19:57:41.731Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-target-flag-when-is-it-safe-to-use 2026-10-18T19:57:41.854Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-validate-vs-plan-vs-security-scan-what-each-catches 2026-10-18T19:57:41.960Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-version-constraints-what-tilde-arrow-allows 2026-10-18T19:57:42.061Z weekly 0.7 https://safeguard.sh/resources/blog/test-a-kubernetes-upgrade-by-disabling-deprecated-apis 2026-10-18T19:57:42.161Z weekly 0.7 https://safeguard.sh/resources/blog/test-a-new-package-in-a-sandbox-before-adopting-it 2026-10-18T19:57:42.259Z weekly 0.7 https://safeguard.sh/resources/blog/test-a-python-release-on-testpypi-before-you-publish 2026-10-18T19:57:42.357Z weekly 0.7 https://safeguard.sh/resources/blog/test-a-scanner-for-missed-vulnerabilities-seeded-test 2026-10-18T19:57:42.459Z weekly 0.7 https://safeguard.sh/resources/blog/test-ai-security-assistant-language-and-framework-coverage 2026-10-18T19:57:42.553Z weekly 0.7 https://safeguard.sh/resources/blog/test-both-states-of-a-feature-flag-before-release 2026-10-18T19:57:42.649Z weekly 0.7 https://safeguard.sh/resources/blog/test-data-for-data-pipelines-without-production-pii 2026-10-18T19:57:42.747Z weekly 0.7 https://safeguard.sh/resources/blog/test-data-privacy-synthetic-masked-or-subset 2026-10-18T19:57:42.844Z weekly 0.7 https://safeguard.sh/resources/blog/test-sca-with-private-registries-and-internal-packages 2026-10-18T19:57:42.942Z weekly 0.7 https://safeguard.sh/resources/blog/test-vendor-reachability-claim-before-you-trust-it 2026-10-18T19:57:43.037Z weekly 0.7 https://safeguard.sh/resources/blog/test-whether-a-scanner-advisory-data-is-fresh 2026-10-18T19:57:43.135Z weekly 0.7 https://safeguard.sh/resources/blog/test-your-kill-switch-monthly-drill-checklist 2026-10-18T19:57:43.233Z weekly 0.7 https://safeguard.sh/resources/blog/testflight-vs-app-store-vs-direct-install-beta-distribution 2026-10-18T19:57:43.596Z weekly 0.7 https://safeguard.sh/resources/blog/theme-app-extensions-vs-editing-theme-code-which-is-safer 2026-10-18T19:57:43.687Z weekly 0.7 https://safeguard.sh/resources/blog/third-party-sdk-and-subprocessor-inventory-for-privacy 2026-10-18T19:57:43.785Z weekly 0.7 https://safeguard.sh/resources/blog/third-party-vendor-breach-how-to-tell-your-customers 2026-10-18T19:57:43.883Z weekly 0.7 https://safeguard.sh/resources/blog/threat-model-a-file-upload-feature-step-by-step 2026-10-18T19:57:43.981Z weekly 0.7 https://safeguard.sh/resources/blog/threat-model-a-kubernetes-deployment-what-to-draw 2026-10-18T19:57:44.080Z weekly 0.7 https://safeguard.sh/resources/blog/threat-model-a-login-feature-with-stride 2026-10-18T19:57:44.180Z weekly 0.7 https://safeguard.sh/resources/blog/threat-model-a-mobile-app-five-areas-to-check 2026-10-18T19:57:44.276Z weekly 0.7 https://safeguard.sh/resources/blog/threat-model-a-multi-tenant-saas-tenant-isolation 2026-10-18T19:57:44.371Z weekly 0.7 https://safeguard.sh/resources/blog/threat-model-as-code-with-pytm-what-it-does 2026-10-18T19:57:44.468Z weekly 0.7 https://safeguard.sh/resources/blog/threat-model-oauth-sign-in-using-rfc-9700 2026-10-18T19:57:44.576Z weekly 0.7 https://safeguard.sh/resources/blog/threat-model-template-what-to-record-on-one-page 2026-10-18T19:57:44.671Z weekly 0.7 https://safeguard.sh/resources/blog/threat-modeling-manifesto-explained-values-principles-anti-patterns 2026-10-18T19:57:44.774Z weekly 0.7 https://safeguard.sh/resources/blog/threat-modeling-terms-asset-threat-vulnerability-countermeasure 2026-10-18T19:57:44.874Z weekly 0.7 https://safeguard.sh/resources/blog/thumbs-up-down-feedback-stores-whole-chat-five-years 2026-10-18T19:57:44.971Z weekly 0.7 https://safeguard.sh/resources/blog/tier-your-services-before-you-set-vulnerability-slas 2026-10-18T19:57:45.067Z weekly 0.7 https://safeguard.sh/resources/blog/time-to-remediate-by-source-dependency-code-container 2026-10-18T19:57:45.163Z weekly 0.7 https://safeguard.sh/resources/blog/timelock-controller-explained-delay-before-execution 2026-10-18T19:57:45.259Z weekly 0.7 https://safeguard.sh/resources/blog/tisax-assessment-levels-al-1-al-2-al-3-explained 2026-10-18T19:57:45.356Z weekly 0.7 https://safeguard.sh/resources/blog/tisax-choose-assessment-objectives-and-level-yourself 2026-10-18T19:57:45.454Z weekly 0.7 https://safeguard.sh/resources/blog/tisax-labels-validity-and-sharing-results-with-partners 2026-10-18T19:57:45.544Z weekly 0.7 https://safeguard.sh/resources/blog/tj-actions-and-reviewdog-two-actions-one-incident-explained 2026-10-18T19:57:45.645Z weekly 0.7 https://safeguard.sh/resources/blog/tls-termination-at-the-proxy-backend-encryption-decision-guide 2026-10-18T19:57:45.792Z weekly 0.7 https://safeguard.sh/resources/blog/tls-verification-disabled-in-code-what-to-do-instead 2026-10-18T19:57:45.893Z weekly 0.7 https://safeguard.sh/resources/blog/token-approvals-and-wallet-hygiene-for-crypto-teams 2026-10-18T19:57:45.994Z weekly 0.7 https://safeguard.sh/resources/blog/tokenization-vs-encryption-vs-pseudonymization-pii-fields 2026-10-18T19:57:46.650Z weekly 0.7 https://safeguard.sh/resources/blog/tools-that-fix-vulnerabilities-automatically-what-to-expect 2026-10-18T19:57:46.745Z weekly 0.7 https://safeguard.sh/resources/blog/top-weakness-by-package-ecosystem-cwe-counts 2026-10-18T19:57:46.845Z weekly 0.7 https://safeguard.sh/resources/blog/top-weaknesses-in-osv-advisories-by-ecosystem 2026-10-18T19:57:46.942Z weekly 0.7 https://safeguard.sh/resources/blog/train-test-data-leakage-correctness-and-governance 2026-10-18T19:57:47.039Z weekly 0.7 https://safeguard.sh/resources/blog/training-data-poisoning-controls-for-data-teams 2026-10-18T19:57:47.138Z weekly 0.7 https://safeguard.sh/resources/blog/transfer-a-github-repository-checklist-what-moves-what-breaks 2026-10-18T19:57:47.234Z weekly 0.7 https://safeguard.sh/resources/blog/transfer-npm-package-ownership-to-a-new-maintainer-steps 2026-10-18T19:57:47.326Z weekly 0.7 https://safeguard.sh/resources/blog/transitive-dependencies-policy-who-approves-what-you-inherit 2026-10-18T19:57:47.426Z weekly 0.7 https://safeguard.sh/resources/blog/transitive-dependency-cannot-upgrade-options-before-accepting 2026-10-18T19:57:47.525Z weekly 0.7 https://safeguard.sh/resources/blog/transportation-sector-seven-modes-and-their-cyber-rules 2026-10-18T19:57:47.628Z weekly 0.7 https://safeguard.sh/resources/blog/triage-a-fuzzer-crash-reproduce-minimize-deduplicate 2026-10-18T19:57:47.733Z weekly 0.7 https://safeguard.sh/resources/blog/triage-fuzzer-crashes-dedupe-minimize-reproduce 2026-10-18T19:57:47.840Z weekly 0.7 https://safeguard.sh/resources/blog/triage-secret-alerts-live-revoked-or-test 2026-10-18T19:57:47.943Z weekly 0.7 https://safeguard.sh/resources/blog/trivy-march-2026-compromise-timeline-and-what-it-touched 2026-10-18T19:57:48.582Z weekly 0.7 https://safeguard.sh/resources/blog/true-positive-false-positive-false-negative-explained 2026-10-18T19:57:49.195Z weekly 0.7 https://safeguard.sh/resources/blog/trust-a-private-ca-in-node-python-java-and-curl 2026-10-18T19:57:49.292Z weekly 0.7 https://safeguard.sh/resources/blog/tsa-rail-directive-1580-21-01-four-requirements 2026-10-18T19:57:49.390Z weekly 0.7 https://safeguard.sh/resources/blog/tsb-fca-pra-final-notice-testing-and-governance 2026-10-18T19:57:49.485Z weekly 0.7 https://safeguard.sh/resources/blog/tsb-final-notice-outsourcing-due-diligence-fourth-parties 2026-10-18T19:57:49.579Z weekly 0.7 https://safeguard.sh/resources/blog/ttl-and-partition-retention-deletion-jobs 2026-10-18T19:57:49.678Z weekly 0.7 https://safeguard.sh/resources/blog/tuf-for-firmware-updates-what-it-protects 2026-10-18T19:57:49.778Z weekly 0.7 https://safeguard.sh/resources/blog/turn-off-sms-fallback-after-adding-an-authenticator 2026-10-18T19:57:49.878Z weekly 0.7 https://safeguard.sh/resources/blog/turn-on-a-license-gate-without-breaking-every-build 2026-10-18T19:57:49.975Z weekly 0.7 https://safeguard.sh/resources/blog/turn-on-automatic-updates-on-family-devices 2026-10-18T19:57:50.069Z weekly 0.7 https://safeguard.sh/resources/blog/turn-scanner-findings-into-secure-coding-training-topics 2026-10-18T19:57:50.166Z weekly 0.7 https://safeguard.sh/resources/blog/turn-selinux-back-on-after-it-was-disabled 2026-10-18T19:57:50.265Z weekly 0.7 https://safeguard.sh/resources/blog/twelve-test-cases-before-an-ai-agent-goes-live 2026-10-18T19:57:50.365Z weekly 0.7 https://safeguard.sh/resources/blog/two-mcp-servers-expose-the-same-tool-name-what-happens 2026-10-18T19:57:50.458Z weekly 0.7 https://safeguard.sh/resources/blog/two-person-review-when-you-are-the-only-maintainer 2026-10-18T19:57:50.562Z weekly 0.7 https://safeguard.sh/resources/blog/two-vulnerabilities-same-priority-tie-breakers 2026-10-18T19:57:50.779Z weekly 0.7 https://safeguard.sh/resources/blog/two-week-proof-of-concept-plan-for-automated-fix-prs 2026-10-18T19:57:50.998Z weekly 0.7 https://safeguard.sh/resources/blog/typosquatting-vs-dependency-confusion-vs-slopsquatting-compared 2026-10-18T19:57:51.098Z weekly 0.7 https://safeguard.sh/resources/blog/u-boot-signed-fit-configurations-mix-and-match-attacks 2026-10-18T19:57:51.204Z weekly 0.7 https://safeguard.sh/resources/blog/u-boot-verified-boot-where-the-public-key-lives 2026-10-18T19:57:51.420Z weekly 0.7 https://safeguard.sh/resources/blog/uae-pdpl-and-sector-data-localisation-what-teams-should-check 2026-10-18T19:57:51.520Z weekly 0.7 https://safeguard.sh/resources/blog/ubsan-in-production-minimal-runtime-and-trap-mode 2026-10-18T19:57:51.616Z weekly 0.7 https://safeguard.sh/resources/blog/ubsan-msan-tsan-which-sanitizer-for-which-bug 2026-10-18T19:57:51.716Z weekly 0.7 https://safeguard.sh/resources/blog/uk-cyber-security-and-resilience-bill-what-it-is 2026-10-18T19:57:51.815Z weekly 0.7 https://safeguard.sh/resources/blog/ultralytics-pypi-attack-trusted-publishing-made-it-auditable 2026-10-18T19:57:51.911Z weekly 0.7 https://safeguard.sh/resources/blog/umask-022-vs-027-which-default-for-new-files 2026-10-18T19:57:52.008Z weekly 0.7 https://safeguard.sh/resources/blog/unity-manifest-json-what-to-pin-and-why-the-lock-file-matters 2026-10-18T19:57:52.179Z weekly 0.7 https://safeguard.sh/resources/blog/unity-scoped-registries-how-package-source-is-chosen 2026-10-18T19:57:52.277Z weekly 0.7 https://safeguard.sh/resources/blog/unrated-advisories-severity-gaps-by-ecosystem 2026-10-18T19:57:52.377Z weekly 0.7 https://safeguard.sh/resources/blog/update-channels-stable-beta-nightly-security-tradeoffs 2026-10-18T19:57:52.472Z weekly 0.7 https://safeguard.sh/resources/blog/update-one-composer-package-with-minimal-changes 2026-10-18T19:57:52.571Z weekly 0.7 https://safeguard.sh/resources/blog/update-system-threats-freeze-rollback-key-compromise 2026-10-18T19:57:52.667Z weekly 0.7 https://safeguard.sh/resources/blog/update-the-threat-model-after-an-incident 2026-10-18T19:57:52.767Z weekly 0.7 https://safeguard.sh/resources/blog/upgrade-jenkins-lts-without-breaking-builds-step-by-step 2026-10-18T19:57:52.871Z weekly 0.7 https://safeguard.sh/resources/blog/upgradeable-contract-rules-initializers-storage-layout 2026-10-18T19:57:52.970Z weekly 0.7 https://safeguard.sh/resources/blog/use-cisa-kev-as-a-trigger-for-an-urgent-rescan 2026-10-18T19:57:53.070Z weekly 0.7 https://safeguard.sh/resources/blog/use-kev-and-epss-to-rank-findings-across-many-services 2026-10-18T19:57:53.182Z weekly 0.7 https://safeguard.sh/resources/blog/userns-remap-or-rootless-docker-which-to-use 2026-10-18T19:57:53.323Z weekly 0.7 https://safeguard.sh/resources/blog/uv-exclude-newer-reproducible-python-installs 2026-10-18T19:57:53.426Z weekly 0.7 https://safeguard.sh/resources/blog/uv-locked-vs-frozen-which-flag-for-ci 2026-10-18T19:57:53.527Z weekly 0.7 https://safeguard.sh/resources/blog/vcpkg-abi-hash-what-triggers-a-rebuild 2026-10-18T19:57:53.621Z weekly 0.7 https://safeguard.sh/resources/blog/vcpkg-baseline-vs-overrides-pinning-cpp-dependencies 2026-10-18T19:57:53.712Z weekly 0.7 https://safeguard.sh/resources/blog/vcpkg-manifest-mode-or-classic-mode-for-security 2026-10-18T19:57:53.810Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-acquired-or-sunsetting-what-to-do-with-your-security-tool 2026-10-18T19:57:53.915Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-evidence-freshness-which-documents-expire 2026-10-18T19:57:54.011Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-review-data-residency-checklist-for-buyers 2026-10-18T19:57:54.111Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-risk-myths-vs-facts 2026-10-18T19:57:54.213Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-risk-register-fields-what-to-record 2026-10-18T19:57:54.308Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-risk-vs-supply-chain-risk-vs-tprm-definitions 2026-10-18T19:57:54.408Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-security-review-in-one-week-lightweight-plan 2026-10-18T19:57:54.505Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-turned-on-an-ai-feature-by-default-what-to-check 2026-10-18T19:57:54.603Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-wont-patch-a-vulnerability-accept-replace-or-wrap 2026-10-18T19:57:54.700Z weekly 0.7 https://safeguard.sh/resources/blog/vendored-code-and-git-submodules-license-scanning-blind-spots 2026-10-18T19:57:54.798Z weekly 0.7 https://safeguard.sh/resources/blog/vendoring-dependencies-or-using-a-proxy-which-fits 2026-10-18T19:57:54.894Z weekly 0.7 https://safeguard.sh/resources/blog/vendoring-vs-cache-vs-mirror-which-outage-insurance 2026-10-18T19:57:54.996Z weekly 0.7 https://safeguard.sh/resources/blog/verify-a-downloaded-library-in-cmake-with-url-hash 2026-10-18T19:57:55.094Z weekly 0.7 https://safeguard.sh/resources/blog/verify-a-windows-installer-signature-with-signtool 2026-10-18T19:57:55.198Z weekly 0.7 https://safeguard.sh/resources/blog/verify-an-apk-signature-with-apksigner 2026-10-18T19:57:55.295Z weekly 0.7 https://safeguard.sh/resources/blog/verify-deployed-contract-source-matches-bytecode 2026-10-18T19:57:55.394Z weekly 0.7 https://safeguard.sh/resources/blog/verify-github-ssh-host-key-on-first-connection 2026-10-18T19:57:55.493Z weekly 0.7 https://safeguard.sh/resources/blog/verify-gradle-wrapper-before-running 2026-10-18T19:57:55.591Z weekly 0.7 https://safeguard.sh/resources/blog/verify-kubectl-binary-signature-with-cosign 2026-10-18T19:57:55.693Z weekly 0.7 https://safeguard.sh/resources/blog/verify-kubernetes-control-plane-images-and-sbom 2026-10-18T19:57:55.797Z weekly 0.7 https://safeguard.sh/resources/blog/verify-postgres-backup-with-pg-verifybackup 2026-10-18T19:57:55.895Z weekly 0.7 https://safeguard.sh/resources/blog/verify-requester-identity-without-collecting-more-data 2026-10-18T19:57:55.993Z weekly 0.7 https://safeguard.sh/resources/blog/verify-your-own-release-the-way-a-user-would 2026-10-18T19:57:56.094Z weekly 0.7 https://safeguard.sh/resources/blog/version-and-roll-out-changes-to-a-shared-pipeline-template 2026-10-18T19:57:56.201Z weekly 0.7 https://safeguard.sh/resources/blog/version-catalog-or-bom-which-controls-gradle-versions 2026-10-18T19:57:56.304Z weekly 0.7 https://safeguard.sh/resources/blog/vex-fixed-or-not-affected-for-an-upgraded-component 2026-10-18T19:57:56.409Z weekly 0.7 https://safeguard.sh/resources/blog/vex-inside-an-advisory-or-standalone-document 2026-10-18T19:57:56.507Z weekly 0.7 https://safeguard.sh/resources/blog/vite-env-prefix-what-reaches-the-browser 2026-10-18T19:57:56.603Z weekly 0.7 https://safeguard.sh/resources/blog/vue-ssr-cross-request-state-pollution-explained 2026-10-18T19:57:56.705Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-age-buckets-how-to-chart-open-findings 2026-10-18T19:57:56.808Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-backlog-triage-meeting-format 2026-10-18T19:57:56.907Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-exception-metrics-aging-renewals-and-coverage 2026-10-18T19:57:57.006Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-exceptions-risk-acceptance-vendor-questions 2026-10-18T19:57:57.103Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-exploitation-now-top-initial-access-dbir-2026-economics 2026-10-18T19:57:57.207Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-management-metrics-before-and-after-tool 2026-10-18T19:57:57.362Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-management-platform-or-just-a-scanner 2026-10-18T19:57:57.462Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-management-poc-two-week-plan 2026-10-18T19:57:57.562Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-management-vs-appsec-testing 2026-10-18T19:57:57.743Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-markets-bug-bounties-and-pricing-software-security 2026-10-18T19:57:57.852Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-metrics-for-leadership-reports 2026-10-18T19:57:57.962Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-register-spreadsheet-minimum-columns 2026-10-18T19:57:58.063Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-reported-in-a-public-issue-what-to-do 2026-10-18T19:57:58.161Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-risk-acceptance-quick-answers-faq 2026-10-18T19:57:58.260Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-scanning-cadence-runbook-template 2026-10-18T19:57:58.359Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-scoring-signals-compared-cvss-epss-kev-ssvc 2026-10-18T19:57:58.456Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-sla-calendar-days-vs-business-days 2026-10-18T19:57:58.561Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-tool-advisory-data-sources-what-to-ask 2026-10-18T19:57:58.661Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-tool-evaluation-mistakes-myths-and-facts 2026-10-18T19:57:58.763Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-tool-integrations-checklist-tickets-chat-ci 2026-10-18T19:57:58.861Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerable-but-not-reachable-what-it-means-and-when-to-ignore 2026-10-18T19:57:58.961Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerable-vs-exploitable-vs-reachable-vs-exposed 2026-10-18T19:57:59.059Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerable-vs-malicious-dependency-why-you-need-different-checks 2026-10-18T19:57:59.156Z weekly 0.7 https://safeguard.sh/resources/blog/waf-anomaly-scoring-detection-only-vs-blocking-explained 2026-10-18T19:57:59.254Z weekly 0.7 https://safeguard.sh/resources/blog/warehouse-role-design-least-privilege-for-analysts 2026-10-18T19:57:59.345Z weekly 0.7 https://safeguard.sh/resources/blog/watch-your-vendors-with-a-kev-watchlist 2026-10-18T19:57:59.441Z weekly 0.7 https://safeguard.sh/resources/blog/webassembly-on-cloudflare-workers-what-changes-for-dependency-review 2026-10-18T19:57:59.543Z weekly 0.7 https://safeguard.sh/resources/blog/webhook-consumer-replay-and-duplicate-event-handling 2026-10-18T19:57:59.666Z weekly 0.7 https://safeguard.sh/resources/blog/webview-native-bridge-risks-in-hybrid-apps 2026-10-18T19:57:59.781Z weekly 0.7 https://safeguard.sh/resources/blog/weekly-digest-or-real-time-alerts-for-vulnerability-findings 2026-10-18T19:57:59.883Z weekly 0.7 https://safeguard.sh/resources/blog/weekly-findings-triage-meeting-agenda-30-minutes 2026-10-18T19:57:59.977Z weekly 0.7 https://safeguard.sh/resources/blog/weekly-vulnerability-review-meeting-agenda 2026-10-18T19:58:00.078Z weekly 0.7 https://safeguard.sh/resources/blog/weekly-vulnerability-routine-30-minutes-solo-developer 2026-10-18T19:58:00.178Z weekly 0.7 https://safeguard.sh/resources/blog/weighted-scorecard-for-ai-security-tools-method 2026-10-18T19:58:00.280Z weekly 0.7 https://safeguard.sh/resources/blog/weighted-scorecard-for-comparing-dependency-scanners 2026-10-18T19:58:00.381Z weekly 0.7 https://safeguard.sh/resources/blog/were-we-exploited-before-the-patch-compromise-check 2026-10-18T19:58:00.481Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-container-image-sbom-contains-and-misses 2026-10-18T19:58:00.580Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-customer-facing-audit-log-should-include 2026-10-18T19:58:00.679Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-device-should-do-when-firmware-tampering-is-detected 2026-10-18T19:58:00.775Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-free-vulnerability-scan-cannot-tell-you 2026-10-18T19:58:00.879Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-lockfile-stops-and-what-it-cannot 2026-10-18T19:58:00.982Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-pen-test-of-an-llm-app-should-cover 2026-10-18T19:58:01.144Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-release-gate-override-log-should-record 2026-10-18T19:58:01.243Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-vendors-scanner-report-does-not-tell-you 2026-10-18T19:58:01.336Z weekly 0.7 https://safeguard.sh/resources/blog/what-allowprivilegeescalation-false-does-in-kubernetes 2026-10-18T19:58:01.433Z weekly 0.7 https://safeguard.sh/resources/blog/what-an-ai-agent-can-do-with-your-logged-in-session 2026-10-18T19:58:01.534Z weekly 0.7 https://safeguard.sh/resources/blog/what-an-ai-product-data-flow-diagram-should-show-for-a-buyer-review 2026-10-18T19:58:01.706Z weekly 0.7 https://safeguard.sh/resources/blog/what-an-api-scanner-needs-before-the-first-run 2026-10-18T19:58:01.809Z weekly 0.7 https://safeguard.sh/resources/blog/what-an-isac-does-e-isac-and-waterisac 2026-10-18T19:58:01.904Z weekly 0.7 https://safeguard.sh/resources/blog/what-an-sbom-tells-a-risk-manager 2026-10-18T19:58:02.001Z weekly 0.7 https://safeguard.sh/resources/blog/what-appsec-tools-should-an-ai-startup-adopt-first 2026-10-18T19:58:02.113Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-critical-activities-in-bank-third-party-risk 2026-10-18T19:58:02.214Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-sboms-used-for-six-practical-uses 2026-10-18T19:58:02.313Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-subuid-and-subgid-and-why-rootless-needs-them 2026-10-18T19:58:02.412Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-the-main-security-risks-of-an-mcp-server 2026-10-18T19:58:02.509Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-ubuntu-phased-updates-and-are-security-updates-delayed 2026-10-18T19:58:02.607Z weekly 0.7 https://safeguard.sh/resources/blog/what-auditors-want-from-dependency-scanning-evidence 2026-10-18T19:58:02.705Z weekly 0.7 https://safeguard.sh/resources/blog/what-banks-monitor-after-onboarding-a-software-vendor 2026-10-18T19:58:02.809Z weekly 0.7 https://safeguard.sh/resources/blog/what-brakeman-checks-and-what-it-cannot-see 2026-10-18T19:58:02.910Z weekly 0.7 https://safeguard.sh/resources/blog/what-breaks-when-diy-scanning-grows-from-5-repositories-to-500 2026-10-18T19:58:03.009Z weekly 0.7 https://safeguard.sh/resources/blog/what-breaks-when-you-run-containers-rootless-with-podman 2026-10-18T19:58:03.110Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-a-bank-do-with-a-vendor-sbom 2026-10-18T19:58:03.209Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-a-dbt-macro-or-hook-do-in-your-warehouse 2026-10-18T19:58:03.312Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-a-third-party-script-do-on-your-page 2026-10-18T19:58:03.414Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-you-learn-about-a-vendor-without-asking-them 2026-10-18T19:58:03.511Z weekly 0.7 https://safeguard.sh/resources/blog/what-counts-as-a-breaking-change-in-a-fix-pr 2026-10-18T19:58:03.611Z weekly 0.7 https://safeguard.sh/resources/blog/what-counts-as-a-gdpr-transfer-three-criteria 2026-10-18T19:58:03.708Z weekly 0.7 https://safeguard.sh/resources/blog/what-cvss-severity-should-fail-a-ci-build 2026-10-18T19:58:03.809Z weekly 0.7 https://safeguard.sh/resources/blog/what-cyber-insurance-leaders-assume-it-covers-and-does-not 2026-10-18T19:58:03.915Z weekly 0.7 https://safeguard.sh/resources/blog/what-data-should-never-go-into-an-ai-coding-assistant 2026-10-18T19:58:04.014Z weekly 0.7 https://safeguard.sh/resources/blog/what-dependency-version-bounds-should-a-python-library-declare 2026-10-18T19:58:04.166Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-analyst-citation-rules-let-vendors-say-about-placement 2026-10-18T19:58:04.267Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-analyst-reports-miss-about-ai-agents-and-mcp-security 2026-10-18T19:58:04.367Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-analyst-vendor-fact-check-and-preview-rounds-cover 2026-10-18T19:58:04.470Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-customers-ask-about-software-supply-chain-security 2026-10-18T19:58:04.575Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-github-artifact-attestations-prove-and-not-prove 2026-10-18T19:58:04.678Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-google-restricted-scopes-mean-for-apps-you-connect 2026-10-18T19:58:04.781Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-nuget-warnings-nu1901-to-nu1904-mean 2026-10-18T19:58:04.888Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-shopify-web-pixels-change-for-tracking-script-risk 2026-10-18T19:58:05.235Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-1-2-11-hash-9-mean-in-a-vcpkg-version 2026-10-18T19:58:05.652Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-container-image-scan-actually-check 2026-10-18T19:58:05.757Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-magic-quadrant-tell-a-software-security-buyer 2026-10-18T19:58:05.860Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-quarantined-pypi-project-mean 2026-10-18T19:58:05.970Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-security-champion-do-in-a-typical-week 2026-10-18T19:58:06.072Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-software-composition-analysis-tool-do 2026-10-18T19:58:06.170Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-an-open-source-appsec-stack-look-like-and-what-is-missing 2026-10-18T19:58:06.274Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-an-open-source-program-office-do-for-security 2026-10-18T19:58:06.376Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-cargo-deny-check-the-four-checks-explained 2026-10-18T19:58:06.479Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-cargo-yank-do-to-existing-lockfiles 2026-10-18T19:58:06.580Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-cosign-verify-actually-check 2026-10-18T19:58:06.679Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-disputed-mean-on-a-cve-record 2026-10-18T19:58:06.776Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-django-debug-true-expose-in-production 2026-10-18T19:58:06.884Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-ecosystem-support-actually-mean-for-a-dependency-scanner 2026-10-18T19:58:06.983Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-electron-crash-reporter-send-and-how-to-keep-it-local 2026-10-18T19:58:07.087Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-end-of-life-mean-for-software-security 2026-10-18T19:58:07.189Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-fix-available-mean-in-a-vulnerability-scan 2026-10-18T19:58:07.286Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-gitlab-container-scanning-cover-os-and-language-packages 2026-10-18T19:58:07.388Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-gitlab-dast-test-and-what-does-it-need 2026-10-18T19:58:07.489Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-gitlab-sast-scan-and-which-languages-does-it-cover 2026-10-18T19:58:07.588Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-indirect-mean-in-go-mod-and-why-it-matters 2026-10-18T19:58:07.691Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-mcp-say-about-audit-logging-and-what-is-left-to-you 2026-10-18T19:58:07.797Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-mcuboot-check-before-it-boots-an-image 2026-10-18T19:58:07.901Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-nist-ssdf-say-about-developer-training 2026-10-18T19:58:08.001Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-no-known-vulnerabilities-mean-for-a-package 2026-10-18T19:58:08.102Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-npm-audit-actually-check-and-send 2026-10-18T19:58:08.204Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-npx-run-and-how-to-use-it-safely 2026-10-18T19:58:08.305Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-nu1507-mean-with-central-package-management 2026-10-18T19:58:08.409Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-onbuild-do-in-a-dockerfile-and-should-you-use-it 2026-10-18T19:58:08.509Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-owasp-samm-expect-for-developer-education 2026-10-18T19:58:08.646Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-pip-audit-check-and-what-can-it-not-see 2026-10-18T19:58:08.747Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-soc-2-require-for-vulnerability-management 2026-10-18T19:58:08.860Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-airflow-fernet-key-protect 2026-10-18T19:58:08.966Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-build-system-table-in-pyproject-toml-do 2026-10-18T19:58:09.065Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-crossorigin-attribute-do-on-script-tags 2026-10-18T19:58:09.250Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-subject-in-an-attestation-prove 2026-10-18T19:58:09.344Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-trust-remote-code-true-do-in-transformers 2026-10-18T19:58:09.949Z weekly 0.7 https://safeguard.sh/resources/blog/what-dont-roll-your-own-crypto-means-in-practice 2026-10-18T19:58:10.971Z weekly 0.7 https://safeguard.sh/resources/blog/what-drives-effort-in-a-security-tool-migration 2026-10-18T19:58:11.075Z weekly 0.7 https://safeguard.sh/resources/blog/what-ends-up-in-a-go-binary-only-packages-that-contribute 2026-10-18T19:58:11.186Z weekly 0.7 https://safeguard.sh/resources/blog/what-ends-up-in-your-npm-package-files-and-npmignore 2026-10-18T19:58:11.543Z weekly 0.7 https://safeguard.sh/resources/blog/what-evidence-should-engineering-show-for-supply-chain-controls 2026-10-18T19:58:13.473Z weekly 0.7 https://safeguard.sh/resources/blog/what-evidence-shows-iso-27001-secure-development-life-cycle-8-25 2026-10-18T19:58:16.731Z weekly 0.7 https://safeguard.sh/resources/blog/what-evidence-to-keep-for-each-release-vulnerability-scan 2026-10-18T19:58:16.855Z weekly 0.7 https://safeguard.sh/resources/blog/what-exit-codes-do-dependency-audit-tools-return 2026-10-18T19:58:16.959Z weekly 0.7 https://safeguard.sh/resources/blog/what-fields-a-cve-record-contains-and-which-are-required 2026-10-18T19:58:17.064Z weekly 0.7 https://safeguard.sh/resources/blog/what-fields-belong-in-a-risk-acceptance-record 2026-10-18T19:58:17.162Z weekly 0.7 https://safeguard.sh/resources/blog/what-gets-shared-when-you-share-a-colab-notebook 2026-10-18T19:58:17.262Z weekly 0.7 https://safeguard.sh/resources/blog/what-good-security-scan-output-looks-like-in-ci-logs 2026-10-18T19:58:17.369Z weekly 0.7 https://safeguard.sh/resources/blog/what-gvisor-does-not-protect-against 2026-10-18T19:58:17.472Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-custom-resources-when-you-delete-a-crd 2026-10-18T19:58:17.568Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-phi-when-a-vendor-contract-ends 2026-10-18T19:58:17.664Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-your-mirror-when-upstream-removes-a-package 2026-10-18T19:58:17.765Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-your-pipeline-when-the-security-scanner-is-down 2026-10-18T19:58:18.013Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-a-lambda-runtime-is-deprecated 2026-10-18T19:58:19.097Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-a-vulnerability-exception-expires 2026-10-18T19:58:22.426Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-a-wordpress-plugin-is-closed-for-security 2026-10-18T19:58:22.531Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-you-open-an-untrusted-repo-in-an-ai-coding-agent 2026-10-18T19:58:22.634Z weekly 0.7 https://safeguard.sh/resources/blog/what-helm-install-verify-proves-about-a-chart 2026-10-18T19:58:22.740Z weekly 0.7 https://safeguard.sh/resources/blog/what-hostnetwork-hostpid-hostipc-do-in-a-pod-spec 2026-10-18T19:58:22.846Z weekly 0.7 https://safeguard.sh/resources/blog/what-if-a-go-dependency-repository-is-deleted 2026-10-18T19:58:22.951Z weekly 0.7 https://safeguard.sh/resources/blog/what-if-a-vendor-skips-a-forrester-wave-nonparticipation-policy 2026-10-18T19:58:23.055Z weekly 0.7 https://safeguard.sh/resources/blog/what-if-fulcio-or-the-oidc-provider-is-compromised 2026-10-18T19:58:23.157Z weekly 0.7 https://safeguard.sh/resources/blog/what-if-the-vendor-you-want-is-not-in-any-analyst-report 2026-10-18T19:58:23.260Z weekly 0.7 https://safeguard.sh/resources/blog/what-if-two-vex-statements-conflict-resolving-disagreements 2026-10-18T19:58:23.356Z weekly 0.7 https://safeguard.sh/resources/blog/what-integrity-checks-does-an-msix-package-give-you 2026-10-18T19:58:23.455Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-certificate-signing-request-csr-explained 2026-10-18T19:58:23.554Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-container-image-layer-and-why-scanners-care 2026-10-18T19:58:23.673Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-dataset-card-and-which-fields-matter-for-supply-chain-review 2026-10-18T19:58:23.776Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-dependabot-alert-and-why-did-you-get-one 2026-10-18T19:58:23.880Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-dependency-update-bot-and-how-does-it-work 2026-10-18T19:58:23.978Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-dsse-envelope-and-why-attestations-use-it 2026-10-18T19:58:24.074Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-false-positive-in-vulnerability-scanning-for-managers 2026-10-18T19:58:24.172Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-fascsa-order-and-how-suppliers-check-for-one 2026-10-18T19:58:24.277Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-frost-radar-and-what-changed-in-june-2026 2026-10-18T19:58:24.378Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-gigaom-radar-quadrants-rings-and-velocity-explained 2026-10-18T19:58:24.478Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-golden-pipeline-and-what-belongs-in-it 2026-10-18T19:58:25.375Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-kuppingercole-leadership-compass-and-the-four-leader-types 2026-10-18T19:58:27.462Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-lockfile-maintenance-pr-and-should-you-merge-it 2026-10-18T19:58:31.930Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-maven-snapshot-and-why-not-in-production 2026-10-18T19:58:32.092Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-nuget-audit-source-and-do-i-need-one 2026-10-18T19:58:32.195Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-psirt-does-a-small-product-team-need-one 2026-10-18T19:58:32.300Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-reproducible-build-and-does-your-desktop-app-need-one 2026-10-18T19:58:32.406Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-restricted-api-key-and-when-to-use-one-in-integrations 2026-10-18T19:58:32.512Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-saasbom-and-does-your-service-inventory-need-one 2026-10-18T19:58:32.612Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-saasbom-and-should-you-ask-saas-vendors-for-one 2026-10-18T19:58:32.715Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-shaded-jar-and-why-scanners-miss-it 2026-10-18T19:58:32.821Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-slsa-verification-summary-attestation 2026-10-18T19:58:32.932Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-software-catalog-and-why-vulnerability-management-needs-one 2026-10-18T19:58:33.854Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-software-composition-audit-in-an-acquisition 2026-10-18T19:58:34.621Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-software-supply-chain-incident-response-plan 2026-10-18T19:58:34.718Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-source-and-a-sink-in-sast 2026-10-18T19:58:34.817Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-swift-package-registry-and-how-does-it-verify 2026-10-18T19:58:34.917Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-vendor-risk-assessment-and-how-to-run-one 2026-10-18T19:58:35.019Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-zero-day-and-how-do-scanners-find-one 2026-10-18T19:58:35.117Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-account-enumeration-and-how-scanners-spot-it 2026-10-18T19:58:35.262Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-ai-agent-governance-definition-and-first-steps 2026-10-18T19:58:35.512Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-ai-agent-identity 2026-10-18T19:58:35.610Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-aar-file-what-to-inspect-in-android-libraries 2026-10-18T19:58:35.709Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-agentic-coding-tool-vs-autocomplete 2026-10-18T19:58:36.094Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-ai-security-assistant-vs-a-scanner 2026-10-18T19:58:36.204Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-airflow-constraints-file-and-do-you-need-one 2026-10-18T19:58:36.304Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-application-security-program 2026-10-18T19:58:36.403Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-idc-marketscape-and-why-do-excerpts-show-one-vendor 2026-10-18T19:58:36.502Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-npm-install-script-and-when-does-it-run 2026-10-18T19:58:36.602Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-oci-image-manifest 2026-10-18T19:58:36.860Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-open-redirect-in-checkout-and-login-return-urls 2026-10-18T19:58:36.958Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-untrusted-search-path-cwe-426-in-games-and-installers 2026-10-18T19:58:37.049Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-bubblewrap-and-when-to-use-it-for-sandboxing 2026-10-18T19:58:37.148Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-cloudformation-guard-and-what-it-does-not-check 2026-10-18T19:58:37.247Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-content-exclusion-for-ai-coding-assistants 2026-10-18T19:58:37.339Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-elephant-factor-and-why-it-matters-for-dependencies 2026-10-18T19:58:37.434Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-entropy-in-secret-scanning-and-why-is-it-noisy 2026-10-18T19:58:37.536Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-excessive-agency-and-how-does-it-show-up-in-mcp-tools 2026-10-18T19:58:37.635Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-gcve-and-how-it-differs-from-cve 2026-10-18T19:58:37.728Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-github-security-overview-risk-and-coverage-views-explained 2026-10-18T19:58:37.828Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-gitlab-advanced-sast-cross-file-taint-analysis-explained 2026-10-18T19:58:37.929Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-gitsign-keyless-git-commit-signing 2026-10-18T19:58:38.030Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-govramp-and-when-would-a-state-buyer-ask-for-it 2026-10-18T19:58:38.126Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-in-a-container-image-reference 2026-10-18T19:58:38.225Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-inside-a-python-sdist-and-a-wheel 2026-10-18T19:58:38.328Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-inside-a-safetensors-file-header-offsets-and-metadata 2026-10-18T19:58:38.433Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-jenkins-agent-to-controller-access-control 2026-10-18T19:58:38.528Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-landlock-and-how-is-it-different-from-seccomp 2026-10-18T19:58:38.625Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-llms-txt-should-a-docs-site-publish-one 2026-10-18T19:58:38.726Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-manylinux-and-when-does-a-library-need-it 2026-10-18T19:58:38.828Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-mcp-sampling-and-why-it-needs-a-human-in-the-loop 2026-10-18T19:58:38.927Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-memory-safety-spatial-and-temporal-bugs-explained 2026-10-18T19:58:39.024Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-namespace-squatting-and-how-registries-limit-it 2026-10-18T19:58:39.129Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-nist-sate-and-why-it-does-not-rank-security-tools 2026-10-18T19:58:39.229Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-nist-ssdf-a-plain-words-guide-for-new-appsec-engineers 2026-10-18T19:58:39.325Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-nuget-audit-mode-direct-vs-all 2026-10-18T19:58:39.423Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-nuget-package-id-prefix-reservation 2026-10-18T19:58:39.519Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-nuget-package-pruning-and-does-it-cut-audit-noise 2026-10-18T19:58:39.615Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-onnx-external-data-and-why-do-file-paths-matter 2026-10-18T19:58:39.712Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-oscal-for-compliance-teams-and-why-it-matters 2026-10-18T19:58:39.818Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-osv-and-how-do-you-use-it-to-check-a-dependency 2026-10-18T19:58:39.979Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-owasp-cornucopia-card-game-for-threat-modeling 2026-10-18T19:58:40.177Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-pkce-and-why-mcp-clients-must-use-it 2026-10-18T19:58:40.277Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-pylock-toml-python-lock-file-format 2026-10-18T19:58:40.377Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-reachability-analysis-and-do-you-need-it 2026-10-18T19:58:40.474Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-sarif-and-when-do-you-need-it 2026-10-18T19:58:40.573Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-secret-zero-the-bootstrap-credential-problem 2026-10-18T19:58:40.672Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-session-fixation-and-how-to-test-for-it 2026-10-18T19:58:40.771Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-snapshot-debian-org-and-when-to-use-it-for-builds 2026-10-18T19:58:40.868Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-sni-why-wrong-certificate-is-served 2026-10-18T19:58:40.969Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-cisa-kev-catalog-and-how-should-beginners-use-it 2026-10-18T19:58:41.070Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-cisa-kev-catalog-and-why-should-business-leaders-care 2026-10-18T19:58:41.171Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-gitlab-vulnerability-report-and-how-to-triage-in-it 2026-10-18T19:58:41.267Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-google-play-sdk-index-and-how-to-use-it 2026-10-18T19:58:41.366Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-integrity-field-in-package-lock-json 2026-10-18T19:58:41.465Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-integrity-policy-header-and-should-you-use-it 2026-10-18T19:58:41.560Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-minimum-an-spdx-ai-package-record-needs 2026-10-18T19:58:41.661Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-nist-sard-and-how-can-buyers-use-it 2026-10-18T19:58:41.759Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-oci-referrers-api-for-signatures-and-sboms 2026-10-18T19:58:41.858Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-openssf-criticality-score-and-should-you-use-it 2026-10-18T19:58:41.956Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-owasp-web-security-testing-guide-and-how-do-you-use-it 2026-10-18T19:58:42.052Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-ssdf-and-why-do-procurement-teams-mention-it 2026-10-18T19:58:42.150Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-transitive-pinning-in-nuget-central-package-management 2026-10-18T19:58:42.249Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-tuf-and-how-does-sigstore-use-it-for-trust 2026-10-18T19:58:42.342Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-vector-and-embedding-weaknesses-owasp-llm08 2026-10-18T19:58:42.441Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-vex-and-should-a-partner-send-one 2026-10-18T19:58:42.542Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-virtual-patching-and-when-does-it-help 2026-10-18T19:58:42.639Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-web-cache-deception-for-cart-and-account-pages 2026-10-18T19:58:42.736Z weekly 0.7 https://safeguard.sh/resources/blog/what-lockfiles-tell-you-about-an-engineering-team 2026-10-18T19:58:42.839Z weekly 0.7 https://safeguard.sh/resources/blog/what-makes-a-fair-scanner-test-ground-truth-and-repeatability 2026-10-18T19:58:42.936Z weekly 0.7 https://safeguard.sh/resources/blog/what-makes-a-good-fuzz-target-checklist 2026-10-18T19:58:43.039Z weekly 0.7 https://safeguard.sh/resources/blog/what-manifest-only-dependency-scanning-misses 2026-10-18T19:58:43.136Z weekly 0.7 https://safeguard.sh/resources/blog/what-maven-central-requires-before-you-publish-a-library 2026-10-18T19:58:43.233Z weekly 0.7 https://safeguard.sh/resources/blog/what-must-an-application-log-under-pci-dss-10-2 2026-10-18T19:58:43.327Z weekly 0.7 https://safeguard.sh/resources/blog/what-must-the-google-play-data-safety-form-say-about-sdks 2026-10-18T19:58:43.424Z weekly 0.7 https://safeguard.sh/resources/blog/what-nist-sp-800-115-says-about-scanning-and-pen-testing 2026-10-18T19:58:43.519Z weekly 0.7 https://safeguard.sh/resources/blog/what-not-to-paste-into-a-consumer-ai-chat-checklist 2026-10-18T19:58:43.615Z weekly 0.7 https://safeguard.sh/resources/blog/what-nuget-package-source-mapping-does-not-protect 2026-10-18T19:58:43.715Z weekly 0.7 https://safeguard.sh/resources/blog/what-openapi-driven-api-testing-cannot-find 2026-10-18T19:58:43.880Z weekly 0.7 https://safeguard.sh/resources/blog/what-package-provenance-proves-and-what-it-does-not 2026-10-18T19:58:43.982Z weekly 0.7 https://safeguard.sh/resources/blog/what-patch-timeline-should-a-software-vendor-commit-to 2026-10-18T19:58:44.079Z weekly 0.7 https://safeguard.sh/resources/blog/what-permissions-should-a-remediation-bot-have 2026-10-18T19:58:44.172Z weekly 0.7 https://safeguard.sh/resources/blog/what-security-questions-will-enterprise-buyers-ask-an-ai-startup 2026-10-18T19:58:44.369Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-dockerfile-policy-gate-block-in-ci 2026-10-18T19:58:44.470Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-platform-team-report-on-pipeline-security-each-month 2026-10-18T19:58:44.564Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-pull-request-gate-block-in-an-ml-repo 2026-10-18T19:58:44.672Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-release-gate-block-on-vulnerability-scanning 2026-10-18T19:58:44.769Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-security-gate-exemption-record-contain 2026-10-18T19:58:44.870Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-ai-coding-assistant-security-policy-include 2026-10-18T19:58:45.139Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-appsec-report-for-executives-contain 2026-10-18T19:58:45.238Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-internal-registry-log-for-security 2026-10-18T19:58:45.330Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-online-store-log-for-security 2026-10-18T19:58:45.426Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-automatically-revoke-a-vulnerability-exception 2026-10-18T19:58:45.522Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-disqualify-an-ai-code-review-tool-in-an-evaluation 2026-10-18T19:58:45.618Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-never-be-logged-in-experiment-tracking 2026-10-18T19:58:45.715Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-you-log-from-an-ai-coding-agent-telemetry 2026-10-18T19:58:45.812Z weekly 0.7 https://safeguard.sh/resources/blog/what-skills-does-an-entry-level-appsec-engineer-need 2026-10-18T19:58:45.914Z weekly 0.7 https://safeguard.sh/resources/blog/what-software-teams-forget-to-back-up 2026-10-18T19:58:46.007Z weekly 0.7 https://safeguard.sh/resources/blog/what-solo-developer-can-ignore-in-scanner-results 2026-10-18T19:58:46.097Z weekly 0.7 https://safeguard.sh/resources/blog/what-ssdf-asks-for-in-code-review-and-testing 2026-10-18T19:58:46.186Z weekly 0.7 https://safeguard.sh/resources/blog/what-survives-a-git-history-rewrite-secret-removal 2026-10-18T19:58:46.279Z weekly 0.7 https://safeguard.sh/resources/blog/what-target-api-level-does-google-play-require-in-2026 2026-10-18T19:58:46.378Z weekly 0.7 https://safeguard.sh/resources/blog/what-the-drift-oauth-token-incident-teaches-integration-owners 2026-10-18T19:58:46.477Z weekly 0.7 https://safeguard.sh/resources/blog/what-the-ftc-fake-reviews-rule-means-for-security-tool-buyers 2026-10-18T19:58:46.577Z weekly 0.7 https://safeguard.sh/resources/blog/what-the-github-dependency-graph-can-and-cannot-see 2026-10-18T19:58:46.676Z weekly 0.7 https://safeguard.sh/resources/blog/what-the-root-component-of-an-sbom-means 2026-10-18T19:58:46.775Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-archive-for-each-software-release-ssdf-retention-policy 2026-10-18T19:58:46.875Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-ask-a-security-vendor-about-apis-and-integrations 2026-10-18T19:58:46.981Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-ask-a-security-vendor-about-support-before-you-sign 2026-10-18T19:58:47.138Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-ask-a-vendor-who-cites-an-independent-test 2026-10-18T19:58:47.237Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-ask-before-enabling-automated-fix-pull-requests 2026-10-18T19:58:47.332Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-back-up-from-jenkins-home-and-what-to-leave-out 2026-10-18T19:58:47.482Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-buy-first-appsec-seed-stage-startup 2026-10-18T19:58:47.704Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-before-giving-a-software-partner-api-access 2026-10-18T19:58:47.804Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-before-one-click-installing-an-mcp-server 2026-10-18T19:58:47.900Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-before-you-depend-on-an-open-source-security-tool 2026-10-18T19:58:47.997Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-in-a-lockfile-diff-during-code-review 2026-10-18T19:58:48.092Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-in-logging-changes-during-code-review 2026-10-18T19:58:48.187Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-after-installing-a-malicious-package 2026-10-18T19:58:48.283Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-in-the-first-hour-of-a-new-zero-day 2026-10-18T19:58:48.379Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-model-license-says-other-or-unknown 2026-10-18T19:58:48.477Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-pull-request-contains-a-secret 2026-10-18T19:58:48.576Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-threat-has-no-countermeasure 2026-10-18T19:58:48.669Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-tls-private-key-leaks 2026-10-18T19:58:48.766Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-vulnerability-has-no-fix-available 2026-10-18T19:58:48.862Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-an-approved-mcp-server-is-abandoned 2026-10-18T19:58:48.961Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-an-automated-fix-pr-fails-ci 2026-10-18T19:58:49.060Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-with-a-service-nobody-owns 2026-10-18T19:58:49.160Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-with-old-scanner-history-after-you-switch 2026-10-18T19:58:49.268Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-exclude-from-a-dependency-scan-fixtures-examples-vendored 2026-10-18T19:58:49.368Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-index-when-you-store-supplier-sboms 2026-10-18T19:58:49.465Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-inventory-before-migrating-off-jenkins-or-another-legacy-ci 2026-10-18T19:58:49.560Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-look-for-in-sql-code-during-pull-request-review 2026-10-18T19:58:49.664Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-prepare-before-your-first-dast-scan 2026-10-18T19:58:49.763Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-promise-researchers-response-times-you-can-keep 2026-10-18T19:58:49.858Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-put-in-a-security-exception-request 2026-10-18T19:58:49.957Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-reset-after-a-poisoned-build 2026-10-18T19:58:50.060Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-rotate-after-each-supply-chain-attack-class 2026-10-18T19:58:50.158Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-run-between-pen-tests 2026-10-18T19:58:50.257Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-tell-customers-when-a-zero-day-hits-your-stack 2026-10-18T19:58:50.350Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-tell-executives-in-the-first-24-hours-of-a-zero-day 2026-10-18T19:58:50.447Z weekly 0.7 https://safeguard.sh/resources/blog/what-types-of-prompt-injection-attacks-exist 2026-10-18T19:58:50.543Z weekly 0.7 https://safeguard.sh/resources/blog/what-vulnerability-metrics-can-you-share-with-a-customer 2026-10-18T19:58:50.642Z weekly 0.7 https://safeguard.sh/resources/blog/what-will-a-bank-ask-a-software-vendor-in-due-diligence 2026-10-18T19:58:50.738Z weekly 0.7 https://safeguard.sh/resources/blog/what-works-with-mcp-on-a-product-page-actually-tells-you 2026-10-18T19:58:50.833Z weekly 0.7 https://safeguard.sh/resources/blog/when-a-free-dependency-scanner-is-enough 2026-10-18T19:58:50.935Z weekly 0.7 https://safeguard.sh/resources/blog/when-automated-dependency-updates-are-enough 2026-10-18T19:58:51.038Z weekly 0.7 https://safeguard.sh/resources/blog/when-built-in-dependency-alerts-are-enough 2026-10-18T19:58:51.137Z weekly 0.7 https://safeguard.sh/resources/blog/when-can-you-close-a-supply-chain-incident 2026-10-18T19:58:51.240Z weekly 0.7 https://safeguard.sh/resources/blog/when-does-a-mobile-app-need-a-manual-pentest 2026-10-18T19:58:51.332Z weekly 0.7 https://safeguard.sh/resources/blog/when-does-dotnet-8-reach-end-of-support-upgrade-plan 2026-10-18T19:58:51.424Z weekly 0.7 https://safeguard.sh/resources/blog/when-does-postgresql-14-reach-end-of-life 2026-10-18T19:58:51.519Z weekly 0.7 https://safeguard.sh/resources/blog/when-does-the-open-source-vulnerability-sla-clock-start 2026-10-18T19:58:51.614Z weekly 0.7 https://safeguard.sh/resources/blog/when-is-angular-bypasssecuritytrust-safe-to-use 2026-10-18T19:58:51.708Z weekly 0.7 https://safeguard.sh/resources/blog/when-is-it-ok-to-ignore-a-cargo-audit-advisory 2026-10-18T19:58:51.803Z weekly 0.7 https://safeguard.sh/resources/blog/when-is-it-safe-to-disable-csrf-spring-security 2026-10-18T19:58:51.905Z weekly 0.7 https://safeguard.sh/resources/blog/when-should-engineers-ask-for-a-security-review 2026-10-18T19:58:52.009Z weekly 0.7 https://safeguard.sh/resources/blog/when-the-secrets-manager-is-down-cached-credentials-tradeoffs 2026-10-18T19:58:52.114Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-bring-in-a-coordinator-for-a-vulnerability 2026-10-18T19:58:52.208Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-buy-a-compliance-platform-before-or-after-first-audit 2026-10-18T19:58:52.310Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-escalate-an-overdue-vulnerability 2026-10-18T19:58:52.408Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-hire-first-appsec-engineer 2026-10-18T19:58:52.538Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-hire-your-first-security-engineer 2026-10-18T19:58:52.632Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-override-a-cvss-score-in-a-security-gate 2026-10-18T19:58:52.731Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-post-an-incident-on-your-status-page 2026-10-18T19:58:52.825Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-treat-a-dependency-advisory-as-an-incident 2026-10-18T19:58:53.060Z weekly 0.7 https://safeguard.sh/resources/blog/where-a-dependency-graph-goes-blind 2026-10-18T19:58:53.159Z weekly 0.7 https://safeguard.sh/resources/blog/where-are-jenkins-logs-and-what-should-you-keep-for-security 2026-10-18T19:58:53.254Z weekly 0.7 https://safeguard.sh/resources/blog/where-composer-audit-gets-advisories-packagist-api 2026-10-18T19:58:53.348Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-devcontainer-lifecycle-commands-run 2026-10-18T19:58:53.443Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-dvc-remote-credentials-go-and-what-stays-out-of-git 2026-10-18T19:58:53.539Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-gradle-plugins-come-from-and-how-to-control-it 2026-10-18T19:58:53.632Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-secrets-found-by-a-scanner-end-up 2026-10-18T19:58:53.723Z weekly 0.7 https://safeguard.sh/resources/blog/where-does-cargo-store-your-crates-io-token-and-how-to-protect-it 2026-10-18T19:58:53.820Z weekly 0.7 https://safeguard.sh/resources/blog/where-does-helm-store-release-data-and-who-can-read-it 2026-10-18T19:58:53.913Z weekly 0.7 https://safeguard.sh/resources/blog/where-eu-data-leaks-out-of-region-logs-backups-telemetry 2026-10-18T19:58:54.014Z weekly 0.7 https://safeguard.sh/resources/blog/where-helm-stores-release-values-and-who-can-read-them 2026-10-18T19:58:54.119Z weekly 0.7 https://safeguard.sh/resources/blog/where-phi-hides-in-a-code-repository 2026-10-18T19:58:54.216Z weekly 0.7 https://safeguard.sh/resources/blog/where-should-a-single-page-app-keep-its-oauth-tokens 2026-10-18T19:58:54.313Z weekly 0.7 https://safeguard.sh/resources/blog/where-should-ai-code-review-run-hosted-self-hosted-or-local 2026-10-18T19:58:54.409Z weekly 0.7 https://safeguard.sh/resources/blog/where-should-sca-findings-surface-ide-pr-cli-dashboard 2026-10-18T19:58:54.506Z weekly 0.7 https://safeguard.sh/resources/blog/where-should-vulnerability-exceptions-live-scanner-ticket-or-grc 2026-10-18T19:58:54.608Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-get-zero-day-alerts-sources-that-matter 2026-10-18T19:58:54.708Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-keep-code-signing-keys-hardware-and-cloud-signing 2026-10-18T19:58:54.808Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-scan-for-secrets-beyond-git-repositories 2026-10-18T19:58:54.905Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-scan-in-a-release-pipeline-build-registry-or-deploy 2026-10-18T19:58:55.003Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-store-keys-on-a-device-tee-secure-element 2026-10-18T19:58:55.101Z weekly 0.7 https://safeguard.sh/resources/blog/which-800-53-controls-developers-touch-and-which-baseline 2026-10-18T19:58:55.199Z weekly 0.7 https://safeguard.sh/resources/blog/which-analyst-formats-rank-vendors-and-which-only-map-a-market 2026-10-18T19:58:55.297Z weekly 0.7 https://safeguard.sh/resources/blog/which-appsec-test-runs-at-which-pipeline-stage 2026-10-18T19:58:55.394Z weekly 0.7 https://safeguard.sh/resources/blog/which-appsec-tools-to-buy-first-order-by-stage 2026-10-18T19:58:55.488Z weekly 0.7 https://safeguard.sh/resources/blog/which-attestation-predicate-type-do-you-need 2026-10-18T19:58:55.584Z weekly 0.7 https://safeguard.sh/resources/blog/which-copy-of-a-library-does-lambda-load 2026-10-18T19:58:55.679Z weekly 0.7 https://safeguard.sh/resources/blog/which-credentials-to-rotate-after-a-zero-day-exploit 2026-10-18T19:58:55.927Z weekly 0.7 https://safeguard.sh/resources/blog/which-developer-surfaces-should-a-security-tool-cover-questions-to-ask 2026-10-18T19:58:56.027Z weekly 0.7 https://safeguard.sh/resources/blog/which-dotnet-analyzer-settings-help-find-security-bugs 2026-10-18T19:58:56.127Z weekly 0.7 https://safeguard.sh/resources/blog/which-end-of-life-component-to-fix-first 2026-10-18T19:58:56.231Z weekly 0.7 https://safeguard.sh/resources/blog/which-file-defines-your-workspace-package-json-or-pnpm-yaml 2026-10-18T19:58:56.329Z weekly 0.7 https://safeguard.sh/resources/blog/which-files-in-a-repository-should-a-security-scan-cover 2026-10-18T19:58:56.426Z weekly 0.7 https://safeguard.sh/resources/blog/which-five-accounts-to-protect-first-an-executive-inventory 2026-10-18T19:58:56.534Z weekly 0.7 https://safeguard.sh/resources/blog/which-github-security-features-are-free-and-which-need-an-add-on 2026-10-18T19:58:56.643Z weekly 0.7 https://safeguard.sh/resources/blog/which-host-folders-to-bind-mount-into-a-dev-container 2026-10-18T19:58:56.738Z weekly 0.7 https://safeguard.sh/resources/blog/which-http-security-headers-to-check-and-fix-in-a-scan 2026-10-18T19:58:56.833Z weekly 0.7 https://safeguard.sh/resources/blog/which-java-version-does-jenkins-support-in-2026 2026-10-18T19:58:56.926Z weekly 0.7 https://safeguard.sh/resources/blog/which-jenkins-authorization-strategy-should-you-pick 2026-10-18T19:58:57.018Z weekly 0.7 https://safeguard.sh/resources/blog/which-languages-are-memory-safe-and-where-the-guarantee-ends 2026-10-18T19:58:57.114Z weekly 0.7 https://safeguard.sh/resources/blog/which-languages-does-codeql-support-and-what-about-the-rest 2026-10-18T19:58:57.217Z weekly 0.7 https://safeguard.sh/resources/blog/which-license-fields-to-record-for-a-model-and-its-datasets 2026-10-18T19:58:57.316Z weekly 0.7 https://safeguard.sh/resources/blog/which-mcp-servers-are-low-medium-or-high-risk 2026-10-18T19:58:57.644Z weekly 0.7 https://safeguard.sh/resources/blog/which-next-public-variables-are-safe-in-a-headless-store 2026-10-18T19:58:57.833Z weekly 0.7 https://safeguard.sh/resources/blog/which-nist-publication-to-read-800-53-800-171-800-218-800-161 2026-10-18T19:58:57.927Z weekly 0.7 https://safeguard.sh/resources/blog/which-nodejs-version-should-i-run-in-production-october-2026 2026-10-18T19:58:58.027Z weekly 0.7 https://safeguard.sh/resources/blog/which-npm-lifecycle-scripts-run-when-you-install 2026-10-18T19:58:58.127Z weekly 0.7 https://safeguard.sh/resources/blog/which-npm-token-settings-for-a-ci-publish-job 2026-10-18T19:58:58.227Z weekly 0.7 https://safeguard.sh/resources/blog/which-nuget-config-file-wins-and-what-clear-does 2026-10-18T19:58:58.323Z weekly 0.7 https://safeguard.sh/resources/blog/which-owasp-llm-risks-matter-for-ai-coding-assistants 2026-10-18T19:58:58.419Z weekly 0.7 https://safeguard.sh/resources/blog/which-owasp-non-human-identity-risks-apply-to-ai-agents 2026-10-18T19:58:58.514Z weekly 0.7 https://safeguard.sh/resources/blog/which-owasp-resource-do-you-need-top-10-asvs-samm-tools 2026-10-18T19:58:58.609Z weekly 0.7 https://safeguard.sh/resources/blog/which-package-managers-run-code-at-install-time 2026-10-18T19:58:58.706Z weekly 0.7 https://safeguard.sh/resources/blog/which-package-pulls-in-a-vulnerable-dependency 2026-10-18T19:58:58.802Z weekly 0.7 https://safeguard.sh/resources/blog/which-permission-mode-should-a-coding-agent-run-in 2026-10-18T19:58:58.902Z weekly 0.7 https://safeguard.sh/resources/blog/which-php-version-to-run-support-dates-8-1-8-2-8-3 2026-10-18T19:58:58.998Z weekly 0.7 https://safeguard.sh/resources/blog/which-pipeline-findings-should-block-warn-or-log 2026-10-18T19:58:59.093Z weekly 0.7 https://safeguard.sh/resources/blog/which-preview-to-run-before-deploy-plan-change-set-template-or-diff 2026-10-18T19:58:59.192Z weekly 0.7 https://safeguard.sh/resources/blog/which-purl-type-for-c-and-cpp-libraries 2026-10-18T19:58:59.288Z weekly 0.7 https://safeguard.sh/resources/blog/which-pyproject-fields-are-required-name-version-and-dynamic 2026-10-18T19:58:59.381Z weekly 0.7 https://safeguard.sh/resources/blog/which-python-versions-still-get-security-fixes 2026-10-18T19:58:59.478Z weekly 0.7 https://safeguard.sh/resources/blog/which-regional-framework-does-your-buyer-mean-decision-guide 2026-10-18T19:58:59.571Z weekly 0.7 https://safeguard.sh/resources/blog/which-sandbox-for-untrusted-code-container-gvisor-microvm-vm 2026-10-18T19:58:59.671Z weekly 0.7 https://safeguard.sh/resources/blog/which-sbom-fields-can-leak-internal-details 2026-10-18T19:58:59.768Z weekly 0.7 https://safeguard.sh/resources/blog/which-sbom-revision-to-use-when-a-supplier-sends-an-update 2026-10-18T19:58:59.870Z weekly 0.7 https://safeguard.sh/resources/blog/which-scan-type-covers-which-part-of-an-llm-app 2026-10-18T19:58:59.969Z weekly 0.7 https://safeguard.sh/resources/blog/which-scanner-checks-container-images-buyer-questions 2026-10-18T19:59:00.068Z weekly 0.7 https://safeguard.sh/resources/blog/which-sectors-depend-on-power-and-communications 2026-10-18T19:59:00.165Z weekly 0.7 https://safeguard.sh/resources/blog/which-security-test-after-a-trigger-event 2026-10-18T19:59:00.265Z weekly 0.7 https://safeguard.sh/resources/blog/which-security-test-finds-what-coverage-table 2026-10-18T19:59:00.361Z weekly 0.7 https://safeguard.sh/resources/blog/which-slsa-build-level-should-you-target 2026-10-18T19:59:00.456Z weekly 0.7 https://safeguard.sh/resources/blog/which-test-type-for-which-security-bug-class 2026-10-18T19:59:00.571Z weekly 0.7 https://safeguard.sh/resources/blog/which-threat-modeling-method-stride-pasta-linddun-or-attack-trees 2026-10-18T19:59:00.665Z weekly 0.7 https://safeguard.sh/resources/blog/which-tool-stops-which-supply-chain-attack-class 2026-10-18T19:59:00.761Z weekly 0.7 https://safeguard.sh/resources/blog/which-tool-types-check-llm-app-security 2026-10-18T19:59:00.859Z weekly 0.7 https://safeguard.sh/resources/blog/which-tools-find-zero-day-vulnerabilities-in-dependencies 2026-10-18T19:59:00.960Z weekly 0.7 https://safeguard.sh/resources/blog/which-uid-for-a-container-user-and-how-to-chown-copied-files 2026-10-18T19:59:01.062Z weekly 0.7 https://safeguard.sh/resources/blog/which-version-number-should-a-security-fix-get 2026-10-18T19:59:01.160Z weekly 0.7 https://safeguard.sh/resources/blog/which-vex-format-should-a-vendor-publish 2026-10-18T19:59:01.254Z weekly 0.7 https://safeguard.sh/resources/blog/which-vulnerability-sources-should-sbom-matching-use 2026-10-18T19:59:01.345Z weekly 0.7 https://safeguard.sh/resources/blog/which-weekdays-cisa-adds-kev-entries 2026-10-18T19:59:01.441Z weekly 0.7 https://safeguard.sh/resources/blog/who-approves-a-new-dependency-risk-tiers-and-fast-lanes 2026-10-18T19:59:01.644Z weekly 0.7 https://safeguard.sh/resources/blog/who-approves-public-incident-communications-roles-and-flow 2026-10-18T19:59:01.742Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-add-information-to-a-cve-record-cna-vs-adp 2026-10-18T19:59:01.836Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-approve-a-release-with-accepted-vulnerabilities 2026-10-18T19:59:01.932Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-approve-a-vulnerability-exception-by-severity 2026-10-18T19:59:02.049Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-change-a-feature-flag-approvals-and-audit 2026-10-18T19:59:02.151Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-publish-your-package-owner-roles-npm-pypi-crates 2026-10-18T19:59:02.245Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-run-code-in-airflow-dag-authors-and-trust 2026-10-18T19:59:02.410Z weekly 0.7 https://safeguard.sh/resources/blog/who-do-you-trust-when-you-verify-slsa-provenance 2026-10-18T19:59:02.512Z weekly 0.7 https://safeguard.sh/resources/blog/who-does-what-in-a-zero-day-response-roles 2026-10-18T19:59:02.610Z weekly 0.7 https://safeguard.sh/resources/blog/who-fixes-a-vulnerable-internal-shared-library-release-train 2026-10-18T19:59:02.709Z weekly 0.7 https://safeguard.sh/resources/blog/who-holds-the-keys-key-custody-checklist-for-eu-data 2026-10-18T19:59:02.809Z weekly 0.7 https://safeguard.sh/resources/blog/who-is-liable-when-a-health-software-vendor-is-breached 2026-10-18T19:59:02.910Z weekly 0.7 https://safeguard.sh/resources/blog/who-is-responsible-for-the-security-of-software-you-buy 2026-10-18T19:59:03.011Z weekly 0.7 https://safeguard.sh/resources/blog/who-maintains-your-scanners-when-the-engineer-who-set-them-up-leaves 2026-10-18T19:59:03.112Z weekly 0.7 https://safeguard.sh/resources/blog/who-must-you-tell-when-an-ai-agent-helps-decide-about-people 2026-10-18T19:59:03.213Z weekly 0.7 https://safeguard.sh/resources/blog/who-needed-the-federal-attestation-form-scope-and-exclusions 2026-10-18T19:59:03.310Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-a-bot-pull-request-when-it-breaks-something 2026-10-18T19:59:03.462Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-a-cve-in-a-library-bundled-inside-a-vendor-sdk 2026-10-18T19:59:03.562Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-appsec-risk-security-or-engineering 2026-10-18T19:59:03.665Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-open-source-license-compliance-engineering-or-legal 2026-10-18T19:59:04.079Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-sbom-and-vex-requests-roles-in-a-vendor 2026-10-18T19:59:04.178Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-scanner-config-central-team-or-each-repo 2026-10-18T19:59:04.274Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-vulnerability-management-without-a-security-team 2026-10-18T19:59:04.370Z weekly 0.7 https://safeguard.sh/resources/blog/who-reports-malicious-npm-packages-in-osv-by-source 2026-10-18T19:59:04.471Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-be-allowed-to-bypass-a-security-gate 2026-10-18T19:59:04.578Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-be-allowed-to-promote-a-model-to-production 2026-10-18T19:59:04.677Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-fix-a-vulnerability-developer-or-security-team 2026-10-18T19:59:04.779Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-fix-a-vulnerability-platform-product-or-security-team 2026-10-18T19:59:04.877Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-have-access-to-production-logs 2026-10-18T19:59:04.970Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-join-a-threat-modeling-session 2026-10-18T19:59:05.066Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-own-a-security-tool-consolidation-project 2026-10-18T19:59:05.165Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-own-the-security-tool-inside-engineering 2026-10-18T19:59:05.261Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-review-ai-generated-code-codeowners 2026-10-18T19:59:05.356Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-see-supplier-sboms-access-control-for-consumers 2026-10-18T19:59:05.464Z weekly 0.7 https://safeguard.sh/resources/blog/who-signs-off-on-a-security-tool-purchase 2026-10-18T19:59:05.560Z weekly 0.7 https://safeguard.sh/resources/blog/who-signs-off-on-buying-an-appsec-tool-stakeholders 2026-10-18T19:59:05.662Z weekly 0.7 https://safeguard.sh/resources/blog/who-signs-off-on-vendor-risk-roles-and-handoffs 2026-10-18T19:59:05.759Z weekly 0.7 https://safeguard.sh/resources/blog/who-watches-security-alerts-when-the-solo-maintainer-is-away 2026-10-18T19:59:06.083Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-release-candidate-sorts-before-the-final-version 2026-10-18T19:59:06.377Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-release-that-passed-last-month-fails-the-scan-today 2026-10-18T19:59:06.868Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-required-security-check-stays-pending-on-every-pr 2026-10-18T19:59:06.993Z weekly 0.7 https://safeguard.sh/resources/blog/why-agencies-keep-a-software-inventory-and-what-suppliers-can-supply 2026-10-18T19:59:07.097Z weekly 0.7 https://safeguard.sh/resources/blog/why-appsec-security-reviews-stall-and-how-to-unblock 2026-10-18T19:59:07.196Z weekly 0.7 https://safeguard.sh/resources/blog/why-are-my-gitlab-security-scan-results-missing 2026-10-18T19:59:07.298Z weekly 0.7 https://safeguard.sh/resources/blog/why-cosign-verify-needs-certificate-identity-and-issuer 2026-10-18T19:59:07.394Z weekly 0.7 https://safeguard.sh/resources/blog/why-cyber-insurance-markets-struggle-correlated-risk-explained 2026-10-18T19:59:07.492Z weekly 0.7 https://safeguard.sh/resources/blog/why-dast-reports-false-positives-common-causes 2026-10-18T19:59:07.589Z weekly 0.7 https://safeguard.sh/resources/blog/why-developers-ignore-bot-pull-requests-and-how-to-fix-it 2026-10-18T19:59:07.691Z weekly 0.7 https://safeguard.sh/resources/blog/why-did-my-google-integration-stop-working-refresh-token-reasons 2026-10-18T19:59:07.797Z weekly 0.7 https://safeguard.sh/resources/blog/why-did-my-scanner-flag-a-package-i-dont-use 2026-10-18T19:59:07.897Z weekly 0.7 https://safeguard.sh/resources/blog/why-did-my-scheduled-github-actions-scan-stop-running 2026-10-18T19:59:08.020Z weekly 0.7 https://safeguard.sh/resources/blog/why-didnt-i-get-a-dependabot-alert-for-a-vulnerable-package 2026-10-18T19:59:08.122Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-enterprise-buyers-ask-for-a-vulnerability-disclosure-policy 2026-10-18T19:59:08.221Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-security-patches-take-weeks-a-plain-explanation 2026-10-18T19:59:08.324Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-some-electron-apis-fail-in-unsigned-builds 2026-10-18T19:59:08.423Z weekly 0.7 https://safeguard.sh/resources/blog/why-docker-stop-hangs-exec-form-cmd-and-pid-1-signals 2026-10-18T19:59:08.528Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-my-android-app-ask-for-permissions-i-never-added 2026-10-18T19:59:08.626Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-nuget-pick-the-lowest-package-version 2026-10-18T19:59:08.723Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-pip-say-externally-managed-environment 2026-10-18T19:59:08.824Z weekly 0.7 https://safeguard.sh/resources/blog/why-ecb-mode-leaks-patterns-and-what-to-use-instead 2026-10-18T19:59:08.923Z weekly 0.7 https://safeguard.sh/resources/blog/why-embedded-and-space-code-still-uses-c-memory-safety-options 2026-10-18T19:59:09.026Z weekly 0.7 https://safeguard.sh/resources/blog/why-gigaom-scores-through-cto-cio-and-ciso-lenses-and-pass-fail-gates 2026-10-18T19:59:09.128Z weekly 0.7 https://safeguard.sh/resources/blog/why-is-a-vendor-missing-from-an-analyst-report-inclusion-criteria 2026-10-18T19:59:09.228Z weekly 0.7 https://safeguard.sh/resources/blog/why-is-my-container-still-running-as-root-despite-user 2026-10-18T19:59:09.323Z weekly 0.7 https://safeguard.sh/resources/blog/why-is-my-pypi-project-name-not-available 2026-10-18T19:59:09.421Z weekly 0.7 https://safeguard.sh/resources/blog/why-is-this-dependency-on-my-classpath-maven-gradle 2026-10-18T19:59:09.516Z weekly 0.7 https://safeguard.sh/resources/blog/why-linux-distro-rates-a-cve-differently-than-cvss 2026-10-18T19:59:09.614Z weekly 0.7 https://safeguard.sh/resources/blog/why-linux-scans-use-source-package-names-debian-example 2026-10-18T19:59:09.710Z weekly 0.7 https://safeguard.sh/resources/blog/why-no-dependabot-alert-for-a-vulnerable-dependency 2026-10-18T19:59:09.807Z weekly 0.7 https://safeguard.sh/resources/blog/why-npm-audit-misses-scripts-you-load-from-a-cdn 2026-10-18T19:59:09.908Z weekly 0.7 https://safeguard.sh/resources/blog/why-one-cve-shows-up-in-hundreds-of-service-scans-group-by-root-cause 2026-10-18T19:59:10.022Z weekly 0.7 https://safeguard.sh/resources/blog/why-one-small-library-can-affect-so-many-products 2026-10-18T19:59:10.128Z weekly 0.7 https://safeguard.sh/resources/blog/why-one-vendor-looks-different-across-analyst-firms-charts 2026-10-18T19:59:10.231Z weekly 0.7 https://safeguard.sh/resources/blog/why-order-fulfilment-must-not-depend-on-the-thank-you-page 2026-10-18T19:59:10.330Z weekly 0.7 https://safeguard.sh/resources/blog/why-pen-test-severity-differs-from-scanner-severity 2026-10-18T19:59:10.427Z weekly 0.7 https://safeguard.sh/resources/blog/why-pip-extra-index-url-is-unsafe-for-private-packages 2026-10-18T19:59:10.526Z weekly 0.7 https://safeguard.sh/resources/blog/why-pypi-advisories-jumped-in-2026-osv-pysec-records 2026-10-18T19:59:10.628Z weekly 0.7 https://safeguard.sh/resources/blog/why-python-and-semver-versions-sort-differently-in-scanners 2026-10-18T19:59:10.728Z weekly 0.7 https://safeguard.sh/resources/blog/why-scanners-miss-stored-xss-two-request-problem 2026-10-18T19:59:10.826Z weekly 0.7 https://safeguard.sh/resources/blog/why-ship-tuesday-is-rational-software-security-incentives 2026-10-18T19:59:10.925Z weekly 0.7 https://safeguard.sh/resources/blog/why-sign-the-image-digest-not-the-tag 2026-10-18T19:59:11.026Z weekly 0.7 https://safeguard.sh/resources/blog/why-spring-security-logout-requires-post 2026-10-18T19:59:11.129Z weekly 0.7 https://safeguard.sh/resources/blog/why-sshd-loaded-liblzma-xz-backdoor-libsystemd-path 2026-10-18T19:59:11.223Z weekly 0.7 https://safeguard.sh/resources/blog/why-statically-linked-binaries-ignore-apt-upgrades 2026-10-18T19:59:11.318Z weekly 0.7 https://safeguard.sh/resources/blog/why-stdio-mcp-servers-skip-oauth-and-use-environment-credentials 2026-10-18T19:59:11.416Z weekly 0.7 https://safeguard.sh/resources/blog/why-the-oauth-password-grant-must-not-be-used 2026-10-18T19:59:12.082Z weekly 0.7 https://safeguard.sh/resources/blog/why-the-same-scan-passes-today-and-fails-tomorrow 2026-10-18T19:59:12.183Z weekly 0.7 https://safeguard.sh/resources/blog/why-two-image-scanners-report-different-counts 2026-10-18T19:59:12.279Z weekly 0.7 https://safeguard.sh/resources/blog/why-two-scanners-report-different-vulnerability-counts 2026-10-18T19:59:12.910Z weekly 0.7 https://safeguard.sh/resources/blog/why-vcpkg-will-not-compare-version-string-with-version 2026-10-18T19:59:13.008Z weekly 0.7 https://safeguard.sh/resources/blog/why-your-dast-scan-misses-pages-in-a-javascript-app 2026-10-18T19:59:13.117Z weekly 0.7 https://safeguard.sh/resources/blog/why-your-sbom-is-missing-components-troubleshooting 2026-10-18T19:59:13.216Z weekly 0.7 https://safeguard.sh/resources/blog/will-this-library-backport-security-fixes-to-older-versions 2026-10-18T19:59:13.314Z weekly 0.7 https://safeguard.sh/resources/blog/windows-laps-local-admin-passwords-explained 2026-10-18T19:59:13.412Z weekly 0.7 https://safeguard.sh/resources/blog/wire-request-callback-rule-for-executives-and-assistants 2026-10-18T19:59:13.511Z weekly 0.7 https://safeguard.sh/resources/blog/woocommerce-rest-api-keys-how-to-handle-them-safely 2026-10-18T19:59:13.609Z weekly 0.7 https://safeguard.sh/resources/blog/workers-nodejs-compat-polyfills-what-reviewers-should-know 2026-10-18T19:59:13.708Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-custom-secret-detection-rule-for-an-internal-token 2026-10-18T19:59:13.804Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-one-page-security-champions-charter 2026-10-18T19:59:13.903Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-sast-suppression-comment-that-survives-review 2026-10-18T19:59:14.002Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-security-tool-evaluation-report-others-can-trust 2026-10-18T19:59:14.101Z weekly 0.7 https://safeguard.sh/resources/blog/write-an-openapi-spec-that-helps-security-testing 2026-10-18T19:59:14.204Z weekly 0.7 https://safeguard.sh/resources/blog/write-sast-requirements-one-pager-before-vendor-calls 2026-10-18T19:59:14.302Z weekly 0.7 https://safeguard.sh/resources/blog/write-security-okrs-that-measure-outcomes 2026-10-18T19:59:14.401Z weekly 0.7 https://safeguard.sh/resources/blog/write-the-failing-test-before-the-vulnerability-fix 2026-10-18T19:59:14.502Z weekly 0.7 https://safeguard.sh/resources/blog/write-your-first-libfuzzer-harness-in-c 2026-10-18T19:59:14.599Z weekly 0.7 https://safeguard.sh/resources/blog/wsl-conf-settings-that-change-your-security-posture 2026-10-18T19:59:14.858Z weekly 0.7 https://safeguard.sh/resources/blog/xxe-code-review-checklist-for-xml-parsers 2026-10-18T19:59:14.961Z weekly 0.7 https://safeguard.sh/resources/blog/yank-or-delete-a-bad-release-what-vendors-should-do 2026-10-18T19:59:15.062Z weekly 0.7 https://safeguard.sh/resources/blog/yarn-berry-postinstall-scripts-off-by-default-and-hardened-mode 2026-10-18T19:59:15.712Z weekly 0.7 https://safeguard.sh/resources/blog/yarn-checksum-mismatch-what-it-means-and-what-to-do 2026-10-18T19:59:15.812Z weekly 0.7 https://safeguard.sh/resources/blog/yarn-npm-audit-and-pnpm-audit-what-each-checks-by-default 2026-10-18T19:59:15.912Z weekly 0.7 https://safeguard.sh/resources/blog/yarn-resolutions-pin-a-vulnerable-transitive-dependency 2026-10-18T19:59:16.011Z weekly 0.7 https://safeguard.sh/resources/blog/yocto-sbom-create-spdx-what-you-get 2026-10-18T19:59:16.109Z weekly 0.7 https://safeguard.sh/resources/blog/your-own-package-was-compromised-first-24-hours-for-maintainers 2026-10-18T19:59:16.208Z weekly 0.7 https://safeguard.sh/resources/blog/your-vendor-was-compromised-first-day-checklist-for-customers 2026-10-18T19:59:16.309Z weekly 0.7 https://safeguard.sh/resources/blog/zap-api-scan-what-it-does-and-what-it-skips 2026-10-18T19:59:16.411Z weekly 0.7 https://safeguard.sh/resources/blog/zap-automation-framework-yaml-plan-explained 2026-10-18T19:59:16.511Z weekly 0.7 https://safeguard.sh/resources/blog/zap-baseline-scan-vs-full-scan-vs-api-scan 2026-10-18T19:59:16.612Z weekly 0.7 https://safeguard.sh/resources/blog/zephyr-lts-support-phases-planning-security-fixes-for-devices 2026-10-18T19:59:16.711Z weekly 0.7 https://safeguard.sh/resources/blog/zero-day-after-action-review-questions 2026-10-18T19:59:16.810Z weekly 0.7 https://safeguard.sh/resources/blog/zero-day-at-a-saas-vendor-what-to-ask-and-do 2026-10-18T19:59:16.912Z weekly 0.7 https://safeguard.sh/resources/blog/zero-day-in-a-container-image-how-to-find-and-fix 2026-10-18T19:59:17.012Z weekly 0.7 https://safeguard.sh/resources/blog/zero-day-in-a-dependency-first-24-hours-response-plan 2026-10-18T19:59:17.710Z weekly 0.7 https://safeguard.sh/resources/blog/zero-day-in-a-transitive-dependency-how-to-find-it 2026-10-18T19:59:17.821Z weekly 0.7 https://safeguard.sh/resources/blog/zero-day-runbook-template-one-page 2026-10-18T19:59:17.917Z weekly 0.7 https://safeguard.sh/resources/blog/zero-day-tabletop-exercise-60-minute-scenario 2026-10-18T19:59:18.018Z weekly 0.7