https://safeguard.sh/resources/blog/bitbucket-merge-checks-suggested-versus-required 2026-10-19T05:45:30.724Z weekly 0.7 https://safeguard.sh/resources/blog/blameless-security-review-after-an-incident-small-team 2026-10-19T05:45:30.825Z weekly 0.7 https://safeguard.sh/resources/blog/blanket-vs-per-finding-vulnerability-waivers 2026-10-19T05:45:30.919Z weekly 0.7 https://safeguard.sh/resources/blog/blind-triage-compare-two-security-tools-without-bias 2026-10-19T05:45:31.042Z weekly 0.7 https://safeguard.sh/resources/blog/block-all-allow-some-extensions-chrome-edge-firefox-compared 2026-10-19T05:45:31.138Z weekly 0.7 https://safeguard.sh/resources/blog/block-an-entire-extension-store-in-edge-by-update-url 2026-10-19T05:45:31.230Z weekly 0.7 https://safeguard.sh/resources/blog/block-git-dependencies-with-npm-allow-git 2026-10-19T05:45:31.324Z weekly 0.7 https://safeguard.sh/resources/blog/block-the-extension-store-but-keep-approved-extensions 2026-10-19T05:45:31.422Z weekly 0.7 https://safeguard.sh/resources/blog/block-unapproved-mobile-dependencies-in-ci-allowlist-steps 2026-10-19T05:45:31.522Z weekly 0.7 https://safeguard.sh/resources/blog/bod-26-04-four-factors-versus-a-single-patch-number 2026-10-19T05:45:31.623Z weekly 0.7 https://safeguard.sh/resources/blog/branch-protection-for-volunteer-contributors-minimum-setup 2026-10-19T05:45:31.723Z weekly 0.7 https://safeguard.sh/resources/blog/breach-notification-terms-to-require-from-a-security-vendor 2026-10-19T05:45:31.829Z weekly 0.7 https://safeguard.sh/resources/blog/break-glass-access-for-ai-agents 2026-10-19T05:45:31.926Z weekly 0.7 https://safeguard.sh/resources/blog/break-glass-access-to-public-registries-design 2026-10-19T05:45:32.016Z weekly 0.7 https://safeguard.sh/resources/blog/breaking-change-notice-template-for-users-of-your-library 2026-10-19T05:45:32.113Z weekly 0.7 https://safeguard.sh/resources/blog/brew-update-vs-brew-upgrade-vs-brew-outdated-explained 2026-10-19T05:45:32.210Z weekly 0.7 https://safeguard.sh/resources/blog/brief-your-developers-before-a-security-tool-trial-in-15-minutes 2026-10-19T05:45:32.301Z weekly 0.7 https://safeguard.sh/resources/blog/bring-down-security-answers-before-a-deal-closes 2026-10-19T05:45:32.395Z weekly 0.7 https://safeguard.sh/resources/blog/bsd-3-clause-no-endorsement-clause-explained 2026-10-19T05:45:32.519Z weekly 0.7 https://safeguard.sh/resources/blog/budget-for-unplanned-security-work-in-a-sprint 2026-10-19T05:45:32.620Z weekly 0.7 https://safeguard.sh/resources/blog/budget-time-for-diamond-dependency-conflicts-in-upgrade-plans 2026-10-19T05:45:32.724Z weekly 0.7 https://safeguard.sh/resources/blog/build-a-component-to-release-index-for-affected-product-mapping 2026-10-19T05:45:32.821Z weekly 0.7 https://safeguard.sh/resources/blog/build-a-credible-sbom-story-in-a-day-a-week-and-a-month 2026-10-19T05:45:32.915Z weekly 0.7 https://safeguard.sh/resources/blog/build-a-dependency-inventory-in-your-first-year-security-program 2026-10-19T05:45:33.009Z weekly 0.7 https://safeguard.sh/resources/blog/build-a-harmless-canary-package-for-dependency-incident-drills 2026-10-19T05:45:33.102Z weekly 0.7 https://safeguard.sh/resources/blog/build-a-kev-and-epss-shortlist-from-your-sbom 2026-10-19T05:45:33.194Z weekly 0.7 https://safeguard.sh/resources/blog/build-a-known-answer-test-project-to-compare-two-dependency-scanners 2026-10-19T05:45:33.286Z weekly 0.7 https://safeguard.sh/resources/blog/build-a-quarterly-upgrade-backlog-from-your-sbom 2026-10-19T05:45:33.384Z weekly 0.7 https://safeguard.sh/resources/blog/build-a-regression-corpus-from-static-analysis-false-positive-reports 2026-10-19T05:45:33.484Z weekly 0.7 https://safeguard.sh/resources/blog/build-a-secure-development-skills-matrix 2026-10-19T05:45:33.584Z weekly 0.7 https://safeguard.sh/resources/blog/build-a-security-exception-register-for-ssdf-with-review-dates 2026-10-19T05:45:33.690Z weekly 0.7 https://safeguard.sh/resources/blog/build-a-starter-codeowners-file-for-scanner-findings 2026-10-19T05:45:33.796Z weekly 0.7 https://safeguard.sh/resources/blog/build-an-alert-ownership-map-who-gets-which-security-alert 2026-10-19T05:45:33.892Z weekly 0.7 https://safeguard.sh/resources/blog/build-an-ssdf-evidence-binder-in-30-days-for-a-small-team 2026-10-19T05:45:33.980Z weekly 0.7 https://safeguard.sh/resources/blog/build-broke-after-dependency-update-security-or-compatibility 2026-10-19T05:45:34.077Z weekly 0.7 https://safeguard.sh/resources/blog/build-customer-specific-security-packs-from-a-base-library 2026-10-19T05:45:34.170Z weekly 0.7 https://safeguard.sh/resources/blog/build-integrity-glossary-for-leadership-eight-terms 2026-10-19T05:45:34.261Z weekly 0.7 https://safeguard.sh/resources/blog/build-or-buy-a-shared-component-ssdf-pw-4-2-decision-guide 2026-10-19T05:45:34.355Z weekly 0.7 https://safeguard.sh/resources/blog/build-or-buy-first-supply-chain-security-tooling-for-a-startup 2026-10-19T05:45:34.456Z weekly 0.7 https://safeguard.sh/resources/blog/build-password-reset-links-without-trusting-the-host-header 2026-10-19T05:45:34.571Z weekly 0.7 https://safeguard.sh/resources/blog/build-time-deploy-time-run-time-controls-difference 2026-10-19T05:45:34.678Z weekly 0.7 https://safeguard.sh/resources/blog/build-time-sbom-says-clean-but-production-differs-what-to-check 2026-10-19T05:45:34.781Z weekly 0.7 https://safeguard.sh/resources/blog/build-time-scan-or-deployed-estate-scan-which-do-you-need 2026-10-19T05:45:34.883Z weekly 0.7 https://safeguard.sh/resources/blog/build-your-first-sdk-and-api-inventory-in-one-week 2026-10-19T05:45:34.976Z weekly 0.7 https://safeguard.sh/resources/blog/bulk-update-wordpress-plugins-with-wp-cli-dry-run-and-patch 2026-10-19T05:45:35.066Z weekly 0.7 https://safeguard.sh/resources/blog/bump-pin-override-replace-fork-remove-six-fixes-defined 2026-10-19T05:45:35.161Z weekly 0.7 https://safeguard.sh/resources/blog/bun-lock-or-bun-lockb-which-file-to-commit-and-scan 2026-10-19T05:45:35.253Z weekly 0.7 https://safeguard.sh/resources/blog/bundled-dependencies-in-a-ui-library-what-scanners-miss 2026-10-19T05:45:35.355Z weekly 0.7 https://safeguard.sh/resources/blog/bundled-native-code-in-language-packages-where-hidden-c-libraries-live 2026-10-19T05:45:35.456Z weekly 0.7 https://safeguard.sh/resources/blog/business-criticality-tiers-for-vulnerability-triage 2026-10-19T05:45:35.559Z weekly 0.7 https://safeguard.sh/resources/blog/buyer-asks-to-review-your-source-code-options 2026-10-19T05:45:35.657Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-3pao-assessment-replace-signing-the-attestation-form 2026-10-19T05:45:35.765Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-cve-record-carry-a-purl-package-url-in-cve-5-2 2026-10-19T05:45:35.891Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-cve-record-name-the-vulnerable-function-or-file 2026-10-19T05:45:35.986Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-dev-container-feature-change-your-security-settings 2026-10-19T05:45:36.091Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-device-id-authenticate-a-user-to-your-api 2026-10-19T05:45:36.183Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-feature-flag-make-a-vulnerable-dependency-safe-to-ship 2026-10-19T05:45:36.274Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-firewall-rule-protect-a-server-that-cannot-be-patched 2026-10-19T05:45:36.372Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-fork-pull-request-reach-your-mobile-signing-secrets 2026-10-19T05:45:36.472Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-fork-pull-request-read-my-ci-secrets 2026-10-19T05:45:36.576Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-godot-pck-patch-or-mod-file-run-malicious-code 2026-10-19T05:45:36.677Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-health-software-vendor-use-cisa-kev-to-prioritize-fixes 2026-10-19T05:45:36.781Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-malicious-advisory-or-comment-steer-an-ai-fix 2026-10-19T05:45:36.880Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-malicious-website-steal-source-code-from-your-dev-server 2026-10-19T05:45:36.977Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-nonprofit-get-free-ddos-protection-for-its-website 2026-10-19T05:45:37.072Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-one-person-security-team-have-a-credible-sbom-story 2026-10-19T05:45:37.166Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-one-time-dependency-scan-pass-a-soc-2-type-2 2026-10-19T05:45:37.260Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-published-package-differ-from-its-source-repository 2026-10-19T05:45:37.362Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-redis-client-write-files-on-your-server-config-dir-and-rdb 2026-10-19T05:45:37.465Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-repository-be-your-grc-system-a-minimal-setup-for-small-teams 2026-10-19T05:45:37.569Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-reusable-workflow-raise-github-token-permissions 2026-10-19T05:45:37.675Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-roslyn-analyzer-or-source-generator-dll-in-unity-be-trusted 2026-10-19T05:45:37.802Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-school-consent-for-students-under-coppa-what-vendors-must-offer 2026-10-19T05:45:37.902Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-security-fix-be-a-breaking-change-in-semver 2026-10-19T05:45:38.000Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-vex-statement-end-a-transitive-dependency-dispute 2026-10-19T05:45:38.093Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-vulnerability-advisory-attack-the-llm-reading-it 2026-10-19T05:45:38.188Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-vulnerability-description-hijack-your-ai-chat 2026-10-19T05:45:38.283Z weekly 0.7 https://safeguard.sh/resources/blog/can-a-vulnerable-version-be-removed-from-maven-central 2026-10-19T05:45:38.380Z weekly 0.7 https://safeguard.sh/resources/blog/can-ai-generated-code-copy-licensed-open-source-code 2026-10-19T05:45:38.480Z weekly 0.7 https://safeguard.sh/resources/blog/can-ai-write-your-soc-2-or-iso-27001-policies 2026-10-19T05:45:38.578Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-ai-agent-approve-its-own-action 2026-10-19T05:45:38.682Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-ai-agent-pass-its-permissions-to-another-agent 2026-10-19T05:45:38.789Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-ai-assistant-answer-from-your-security-docs-safely 2026-10-19T05:45:38.892Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-ai-assistant-create-security-tickets-through-mcp-safely 2026-10-19T05:45:38.993Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-airflow-3-task-read-the-metadata-database 2026-10-19T05:45:39.121Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-android-app-download-and-run-code-after-install-on-google-play 2026-10-19T05:45:39.214Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-environment-variable-change-where-pip-installs-from 2026-10-19T05:45:39.307Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-error-budget-work-for-security-risk 2026-10-19T05:45:39.412Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-in-toto-statement-have-an-empty-predicate 2026-10-19T05:45:39.509Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-ios-app-download-new-features-after-app-review 2026-10-19T05:45:39.608Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-iso-27001-audit-be-done-remotely 2026-10-19T05:45:39.711Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-sbom-generator-run-offline-in-an-air-gapped-build 2026-10-19T05:45:39.811Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-sbom-help-you-find-unused-dependencies 2026-10-19T05:45:39.902Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-sbom-prove-a-library-is-not-in-your-product 2026-10-19T05:45:39.992Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-sbom-serve-as-your-third-party-sdk-and-api-inventory 2026-10-19T05:45:40.084Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-sbom-settle-a-dependency-argument-between-teams 2026-10-19T05:45:40.176Z weekly 0.7 https://safeguard.sh/resources/blog/can-an-sbom-tell-you-if-a-runtime-upgrade-will-break-a-dependency 2026-10-19T05:45:40.268Z weekly 0.7 https://safeguard.sh/resources/blog/can-application-allowlisting-protect-an-unpatchable-host 2026-10-19T05:45:40.366Z weekly 0.7 https://safeguard.sh/resources/blog/can-attackers-bypass-certificate-pinning-in-your-app 2026-10-19T05:45:40.470Z weekly 0.7 https://safeguard.sh/resources/blog/can-cisa-kev-work-as-a-wordpress-vulnerability-feed 2026-10-19T05:45:40.575Z weekly 0.7 https://safeguard.sh/resources/blog/can-client-editors-have-less-access-than-admin-wordpress-roles 2026-10-19T05:45:40.678Z weekly 0.7 https://safeguard.sh/resources/blog/can-dead-code-removal-replace-reachability-analysis 2026-10-19T05:45:40.782Z weekly 0.7 https://safeguard.sh/resources/blog/can-dependabot-pull-requests-serve-as-soc-2-change-evidence 2026-10-19T05:45:40.888Z weekly 0.7 https://safeguard.sh/resources/blog/can-dependency-scanning-work-offline-or-air-gapped 2026-10-19T05:45:40.983Z weekly 0.7 https://safeguard.sh/resources/blog/can-developers-fork-private-repos-to-personal-accounts 2026-10-19T05:45:41.080Z weekly 0.7 https://safeguard.sh/resources/blog/can-fork-pull-requests-poison-your-github-actions-cache 2026-10-19T05:45:41.178Z weekly 0.7 https://safeguard.sh/resources/blog/can-fork-pull-requests-reach-your-ci-secrets 2026-10-19T05:45:41.271Z weekly 0.7 https://safeguard.sh/resources/blog/can-git-hooks-run-code-on-your-laptop-and-how-to-control-them 2026-10-19T05:45:41.370Z weekly 0.7 https://safeguard.sh/resources/blog/can-hidden-unicode-characters-hide-in-copied-code 2026-10-19T05:45:41.478Z weekly 0.7 https://safeguard.sh/resources/blog/can-i-cite-epss-in-a-risk-register-and-risk-framework 2026-10-19T05:45:41.581Z weekly 0.7 https://safeguard.sh/resources/blog/can-i-email-a-projects-security-team-about-an-advisory 2026-10-19T05:45:41.705Z weekly 0.7 https://safeguard.sh/resources/blog/can-ide-dependency-scanning-replace-ci-scanning 2026-10-19T05:45:41.819Z weekly 0.7 https://safeguard.sh/resources/blog/can-kubernetes-admission-control-require-an-sbom-attestation 2026-10-19T05:45:41.917Z weekly 0.7 https://safeguard.sh/resources/blog/can-lambda-edge-use-layers-env-vars-or-containers 2026-10-19T05:45:42.012Z weekly 0.7 https://safeguard.sh/resources/blog/can-maven-fail-over-to-a-second-mirror 2026-10-19T05:45:42.105Z weekly 0.7 https://safeguard.sh/resources/blog/can-maven-produce-an-spdx-sbom-as-well-as-cyclonedx 2026-10-19T05:45:42.198Z weekly 0.7 https://safeguard.sh/resources/blog/can-middleware-alone-protect-pages-on-an-edge-hosted-site 2026-10-19T05:45:42.294Z weekly 0.7 https://safeguard.sh/resources/blog/can-node-run-typescript-directly-what-you-lose 2026-10-19T05:45:42.388Z weekly 0.7 https://safeguard.sh/resources/blog/can-one-security-score-summarise-an-application 2026-10-19T05:45:42.485Z weekly 0.7 https://safeguard.sh/resources/blog/can-one-update-pull-request-cover-several-package-ecosystems 2026-10-19T05:45:42.581Z weekly 0.7 https://safeguard.sh/resources/blog/can-opening-a-downloaded-unity-project-run-code-on-your-machine 2026-10-19T05:45:42.722Z weekly 0.7 https://safeguard.sh/resources/blog/can-opentelemetry-baggage-leak-sensitive-data 2026-10-19T05:45:42.845Z weekly 0.7 https://safeguard.sh/resources/blog/can-other-jobs-see-secrets-passed-as-command-line-arguments 2026-10-19T05:45:42.937Z weekly 0.7 https://safeguard.sh/resources/blog/can-pip-create-a-lock-file-pip-lock-and-its-limits 2026-10-19T05:45:43.063Z weekly 0.7 https://safeguard.sh/resources/blog/can-reachability-be-perfect-undecidability-explained 2026-10-19T05:45:43.173Z weekly 0.7 https://safeguard.sh/resources/blog/can-readers-reuse-code-snippets-from-your-docs-license-question 2026-10-19T05:45:43.269Z weekly 0.7 https://safeguard.sh/resources/blog/can-rolling-back-a-release-bring-back-a-vulnerability 2026-10-19T05:45:43.365Z weekly 0.7 https://safeguard.sh/resources/blog/can-spam-transactional-email-exemption-what-it-covers 2026-10-19T05:45:43.462Z weekly 0.7 https://safeguard.sh/resources/blog/can-testing-find-a-backdoor-in-a-fine-tuned-model 2026-10-19T05:45:43.570Z weekly 0.7 https://safeguard.sh/resources/blog/can-the-last-pusher-approve-their-own-pull-request 2026-10-19T05:45:43.676Z weekly 0.7 https://safeguard.sh/resources/blog/can-user-controlled-styles-be-dangerous-in-vue 2026-10-19T05:45:43.793Z weekly 0.7 https://safeguard.sh/resources/blog/can-user-input-break-out-of-a-prompt-template 2026-10-19T05:45:43.892Z weekly 0.7 https://safeguard.sh/resources/blog/can-users-tamper-with-a-force-installed-browser-extension 2026-10-19T05:45:43.984Z weekly 0.7 https://safeguard.sh/resources/blog/can-vendor-support-staff-see-your-code-and-findings 2026-10-19T05:45:44.078Z weekly 0.7 https://safeguard.sh/resources/blog/can-wordpress-org-change-or-remove-a-plugin-without-the-developer 2026-10-19T05:45:44.187Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-accept-risk-on-a-major-version-upgrade-that-is-too-costly 2026-10-19T05:45:44.286Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-ask-apple-for-expedited-review-for-an-sdk-security-fix 2026-10-19T05:45:44.378Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-average-cvss-scores-across-findings 2026-10-19T05:45:44.477Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-block-community-images-on-docker-hub-for-your-team 2026-10-19T05:45:44.579Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-block-themes-and-other-addon-types-by-policy 2026-10-19T05:45:44.684Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-cache-scan-results-by-image-digest-and-lockfile-hash 2026-10-19T05:45:44.791Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-charge-money-for-gpl-software 2026-10-19T05:45:44.892Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-convert-a-zip-lambda-function-to-a-container 2026-10-19T05:45:44.983Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-delete-a-public-container-image-others-depend-on 2026-10-19T05:45:45.078Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-export-all-your-sbom-data-if-you-switch-tools 2026-10-19T05:45:45.175Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-get-a-tls-certificate-for-an-ip-address 2026-10-19T05:45:45.363Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-hide-an-api-key-inside-a-mobile-app 2026-10-19T05:45:45.464Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-load-a-distributed-pytorch-checkpoint-from-the-internet 2026-10-19T05:45:45.567Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-load-a-model-from-a-hugging-face-pull-request-ref 2026-10-19T05:45:45.669Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-manage-airflow-dependencies-with-poetry-or-pip-tools 2026-10-19T05:45:45.781Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-paste-stack-overflow-code-into-a-commercial-product 2026-10-19T05:45:45.939Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-paste-stack-overflow-code-into-your-product 2026-10-19T05:45:46.036Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-patch-app-dependencies-without-a-maintenance-window 2026-10-19T05:45:46.129Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-patch-during-a-change-freeze 2026-10-19T05:45:46.220Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-post-a-third-party-assessment-or-poam-publicly 2026-10-19T05:45:46.313Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-rely-on-a-container-image-tag-staying-the-same 2026-10-19T05:45:46.408Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-remove-copyright-headers-from-open-source-code 2026-10-19T05:45:46.514Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-restore-a-deleted-container-image-what-registries-say 2026-10-19T05:45:46.616Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-reuse-osv-advisory-data-licenses-by-source 2026-10-19T05:45:46.724Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-review-a-pull-request-in-a-language-you-do-not-know 2026-10-19T05:45:46.834Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-revoke-a-jwt-oauth-revocation-and-short-lifetimes 2026-10-19T05:45:46.934Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-roll-back-a-mobile-sdk-upgrade-after-release 2026-10-19T05:45:47.030Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-schedule-update-pull-requests-quarterly 2026-10-19T05:45:47.125Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-self-host-company-browser-extensions-requirements-and-risks 2026-10-19T05:45:47.221Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-send-sboms-for-every-version-you-ever-shipped 2026-10-19T05:45:47.318Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-sign-git-tags-with-an-ssh-key 2026-10-19T05:45:47.418Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-sign-powershell-scripts-with-an-authenticode-certificate 2026-10-19T05:45:47.518Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-stop-a-browser-extension-attaching-a-debugger 2026-10-19T05:45:47.614Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-suppress-a-cisa-kev-listed-dependency-finding 2026-10-19T05:45:47.706Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-tie-bonuses-to-security-metrics 2026-10-19T05:45:47.800Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-trust-an-ai-assistant-answer-about-sast-tools 2026-10-19T05:45:47.895Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-trust-tests-an-ai-coding-agent-wrote 2026-10-19T05:45:47.992Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-use-cc-by-nc-assets-in-a-commercial-app 2026-10-19T05:45:48.085Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-use-open-fonts-in-an-app-ofl-rules 2026-10-19T05:45:48.196Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-use-production-data-for-load-testing 2026-10-19T05:45:48.294Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-verify-a-pypi-package-signature-pgp-removed 2026-10-19T05:45:48.388Z weekly 0.7 https://safeguard.sh/resources/blog/can-you-verify-npm-signatures-and-provenance-through-a-mirror 2026-10-19T05:45:48.484Z weekly 0.7 https://safeguard.sh/resources/blog/can-your-build-run-offline-a-small-team-test 2026-10-19T05:45:48.589Z weekly 0.7 https://safeguard.sh/resources/blog/canary-a-dependency-fix-before-full-rollout 2026-10-19T05:45:48.693Z weekly 0.7 https://safeguard.sh/resources/blog/cap-fix-pr-size-and-scope-guardrails-that-limit-damage 2026-10-19T05:45:48.803Z weekly 0.7 https://safeguard.sh/resources/blog/cap-open-fix-pull-requests-work-in-progress-limits 2026-10-19T05:45:48.912Z weekly 0.7 https://safeguard.sh/resources/blog/cap-parallel-package-installs-across-a-ci-runner-fleet 2026-10-19T05:45:49.009Z weekly 0.7 https://safeguard.sh/resources/blog/caret-vs-tilde-version-ranges-how-they-change-upgrades 2026-10-19T05:45:49.109Z weekly 0.7 https://safeguard.sh/resources/blog/cargo-build-locked-frozen-offline-in-ci-what-each-does 2026-10-19T05:45:49.204Z weekly 0.7 https://safeguard.sh/resources/blog/cargo-features-and-embedded-rust-what-actually-ships 2026-10-19T05:45:49.298Z weekly 0.7 https://safeguard.sh/resources/blog/cargo-metadata-build-a-rust-dependency-inventory 2026-10-19T05:45:49.399Z weekly 0.7 https://safeguard.sh/resources/blog/cargo-optional-dependencies-and-dep-prefix-what-to-scan 2026-10-19T05:45:49.499Z weekly 0.7 https://safeguard.sh/resources/blog/cargo-patch-section-point-a-crate-at-your-fork 2026-10-19T05:45:49.601Z weekly 0.7 https://safeguard.sh/resources/blog/cargo-source-replacement-mirror-or-vendor-which-to-use 2026-10-19T05:45:49.705Z weekly 0.7 https://safeguard.sh/resources/blog/cargo-tree-invert-find-what-pulls-in-a-vulnerable-crate 2026-10-19T05:45:49.821Z weekly 0.7 https://safeguard.sh/resources/blog/cargo-update-dry-run-preview-lockfile-changes 2026-10-19T05:45:49.942Z weekly 0.7 https://safeguard.sh/resources/blog/cargo-version-requirements-caret-and-zero-point-x-crates 2026-10-19T05:45:50.037Z weekly 0.7 https://safeguard.sh/resources/blog/carry-a-patch-while-waiting-for-an-upstream-merge-steps 2026-10-19T05:45:50.140Z weekly 0.7 https://safeguard.sh/resources/blog/carry-over-existing-suppressions-in-a-scanner-comparison 2026-10-19T05:45:50.237Z weekly 0.7 https://safeguard.sh/resources/blog/carry-risk-decisions-between-scanners-with-sarif-suppressions 2026-10-19T05:45:50.333Z weekly 0.7 https://safeguard.sh/resources/blog/carry-suppressions-between-two-scanners-without-losing-decisions 2026-10-19T05:45:50.435Z weekly 0.7 https://safeguard.sh/resources/blog/cc-by-attribution-what-appropriate-credit-looks-like-in-an-app 2026-10-19T05:45:50.529Z weekly 0.7 https://safeguard.sh/resources/blog/cc-by-nc-dependency-in-a-commercial-product 2026-10-19T05:45:50.621Z weekly 0.7 https://safeguard.sh/resources/blog/cc-by-sa-sharealike-what-it-means-for-app-assets 2026-10-19T05:45:50.714Z weekly 0.7 https://safeguard.sh/resources/blog/celery-pickle-serializer-and-accept-content-lockdown 2026-10-19T05:45:50.814Z weekly 0.7 https://safeguard.sh/resources/blog/celery-serializers-for-data-pipelines-json-pickle-and-signed-messages 2026-10-19T05:45:50.907Z weekly 0.7 https://safeguard.sh/resources/blog/cert-manager-csi-driver-per-pod-certificates-no-secret 2026-10-19T05:45:51.005Z weekly 0.7 https://safeguard.sh/resources/blog/cert-manager-private-key-rotation-policy-default-changed 2026-10-19T05:45:51.104Z weekly 0.7 https://safeguard.sh/resources/blog/cert-manager-renewbefore-and-duration-avoid-renewal-loops 2026-10-19T05:45:51.200Z weekly 0.7 https://safeguard.sh/resources/blog/certbot-deploy-hook-vs-pre-and-post-hooks 2026-10-19T05:45:51.299Z weekly 0.7 https://safeguard.sh/resources/blog/certificate-of-deletion-what-a-security-vendor-should-put-in-writing 2026-10-19T05:45:51.405Z weekly 0.7 https://safeguard.sh/resources/blog/cgo-enabled-0-what-changes-for-go-dependencies 2026-10-19T05:45:51.503Z weekly 0.7 https://safeguard.sh/resources/blog/chance-at-least-one-vulnerability-is-exploited-epss-formula 2026-10-19T05:45:51.600Z weekly 0.7 https://safeguard.sh/resources/blog/change-a-live-ci-gate-policy-replay-announce-and-roll-back 2026-10-19T05:45:51.701Z weekly 0.7 https://safeguard.sh/resources/blog/change-approval-model-for-shared-infrastructure-repositories 2026-10-19T05:45:51.802Z weekly 0.7 https://safeguard.sh/resources/blog/change-control-checklist-before-an-rpa-workflow-goes-live 2026-10-19T05:45:51.905Z weekly 0.7 https://safeguard.sh/resources/blog/changelog-says-internal-improvements-how-to-check-what-changed 2026-10-19T05:45:52.000Z weekly 0.7 https://safeguard.sh/resources/blog/changelog-security-and-yanked-sections-what-consumers-should-look-for 2026-10-19T05:45:52.098Z weekly 0.7 https://safeguard.sh/resources/blog/characterization-tests-before-upgrading-legacy-code 2026-10-19T05:45:52.199Z weekly 0.7 https://safeguard.sh/resources/blog/chat-templates-in-model-repositories-jinja-you-did-not-write 2026-10-19T05:45:52.294Z weekly 0.7 https://safeguard.sh/resources/blog/chatgpt-and-codex-scheduled-tasks-event-triggers-and-limits 2026-10-19T05:45:52.390Z weekly 0.7 https://safeguard.sh/resources/blog/check-a-cached-hugging-face-model-against-the-hub-checksums 2026-10-19T05:45:52.491Z weekly 0.7 https://safeguard.sh/resources/blog/check-a-mirrored-npm-tarball-against-your-lockfile-integrity-hash 2026-10-19T05:45:52.582Z weekly 0.7 https://safeguard.sh/resources/blog/check-a-projects-security-policy-before-you-adopt-it 2026-10-19T05:45:52.677Z weekly 0.7 https://safeguard.sh/resources/blog/check-certificate-expiry-with-openssl-checkend-in-cron 2026-10-19T05:45:52.768Z weekly 0.7 https://safeguard.sh/resources/blog/check-every-repository-is-scanned-coverage-evidence 2026-10-19T05:45:52.861Z weekly 0.7 https://safeguard.sh/resources/blog/check-installed-python-files-against-the-record-file-hashes 2026-10-19T05:45:52.952Z weekly 0.7 https://safeguard.sh/resources/blog/check-performance-before-merging-a-security-upgrade 2026-10-19T05:45:53.052Z weekly 0.7 https://safeguard.sh/resources/blog/check-reachability-by-hand-when-you-cannot-automate-it 2026-10-19T05:45:53.146Z weekly 0.7 https://safeguard.sh/resources/blog/check-run-annotations-or-pull-request-comments-for-findings 2026-10-19T05:45:53.248Z weekly 0.7 https://safeguard.sh/resources/blog/check-scan-coverage-before-and-after-a-monorepo-migration 2026-10-19T05:45:53.344Z weekly 0.7 https://safeguard.sh/resources/blog/check-whether-your-nonprofit-email-addresses-are-in-breaches 2026-10-19T05:45:53.443Z weekly 0.7 https://safeguard.sh/resources/blog/check-your-ecosystems-against-osv-coverage-before-choosing-a-scanner 2026-10-19T05:45:53.540Z weekly 0.7 https://safeguard.sh/resources/blog/checked-in-jar-and-dll-files-will-a-manifest-scanner-see-them 2026-10-19T05:45:53.640Z weekly 0.7 https://safeguard.sh/resources/blog/checklist-before-importing-a-third-party-model-into-production 2026-10-19T05:45:53.744Z weekly 0.7 https://safeguard.sh/resources/blog/checklist-before-quoting-a-patch-statistic-in-a-board-deck 2026-10-19T05:45:53.846Z weekly 0.7 https://safeguard.sh/resources/blog/checklist-before-you-open-a-ticket-for-a-container-scan-finding 2026-10-19T05:45:53.939Z weekly 0.7 https://safeguard.sh/resources/blog/checklist-for-reviewing-a-docs-pull-request-for-security 2026-10-19T05:45:54.040Z weekly 0.7 https://safeguard.sh/resources/blog/cherry-pick-conflict-when-backporting-a-security-fix 2026-10-19T05:45:54.208Z weekly 0.7 https://safeguard.sh/resources/blog/cherry-pick-x-record-where-a-backported-patch-came-from 2026-10-19T05:45:54.303Z weekly 0.7 https://safeguard.sh/resources/blog/chips-partitioned-cookies-explained 2026-10-19T05:45:54.402Z weekly 0.7 https://safeguard.sh/resources/blog/choosing-an-npm-package-name-what-the-guidelines-say 2026-10-19T05:45:54.507Z weekly 0.7 https://safeguard.sh/resources/blog/chrome-web-store-impersonation-and-spam-rules-what-they-ban 2026-10-19T05:45:54.878Z weekly 0.7 https://safeguard.sh/resources/blog/chrome-web-store-publisher-roles-least-privilege 2026-10-19T05:45:54.972Z weekly 0.7 https://safeguard.sh/resources/blog/chrome-web-store-user-data-policy-limited-use-privacy-policy-rules 2026-10-19T05:45:55.082Z weekly 0.7 https://safeguard.sh/resources/blog/chrome-web-store-visibility-for-internal-extensions 2026-10-19T05:45:55.184Z weekly 0.7 https://safeguard.sh/resources/blog/ci-cd-hardening-checklist-for-a-team-without-a-security-engineer 2026-10-19T05:45:55.287Z weekly 0.7 https://safeguard.sh/resources/blog/ci-iam-role-red-flags-a-ten-minute-review-checklist 2026-10-19T05:45:55.398Z weekly 0.7 https://safeguard.sh/resources/blog/ci-pipeline-questions-for-a-supply-chain-incident-postmortem 2026-10-19T05:45:55.510Z weekly 0.7 https://safeguard.sh/resources/blog/ci-run-history-expires-export-security-metrics-before-it-does 2026-10-19T05:45:55.634Z weekly 0.7 https://safeguard.sh/resources/blog/ci-security-check-time-budget-for-fast-feedback 2026-10-19T05:45:55.738Z weekly 0.7 https://safeguard.sh/resources/blog/ci-test-fail-the-build-if-api-docs-endpoints-are-reachable 2026-10-19T05:45:55.847Z weekly 0.7 https://safeguard.sh/resources/blog/cis-control-15-service-provider-evidence-for-software-suppliers 2026-10-19T05:45:55.950Z weekly 0.7 https://safeguard.sh/resources/blog/cis-control-16-application-software-security-evidence-from-ci 2026-10-19T05:45:56.053Z weekly 0.7 https://safeguard.sh/resources/blog/cis-control-2-software-asset-evidence-from-sboms-and-registries 2026-10-19T05:45:56.159Z weekly 0.7 https://safeguard.sh/resources/blog/cis-control-7-vulnerability-management-evidence-from-scans 2026-10-19T05:45:56.265Z weekly 0.7 https://safeguard.sh/resources/blog/cis-control-8-audit-log-evidence-from-pipelines-and-source-hosts 2026-10-19T05:45:56.374Z weekly 0.7 https://safeguard.sh/resources/blog/cisa-kev-json-feed-fields-to-ingest-and-validate 2026-10-19T05:45:56.484Z weekly 0.7 https://safeguard.sh/resources/blog/citizen-developer-guardrails-what-to-allow-restrict-and-ban 2026-10-19T05:45:56.613Z weekly 0.7 https://safeguard.sh/resources/blog/cla-or-dco-which-contributor-sign-off-fits-your-startup 2026-10-19T05:45:56.783Z weekly 0.7 https://safeguard.sh/resources/blog/classify-ai-agent-tools-read-write-delete-send-risk-table 2026-10-19T05:45:56.884Z weekly 0.7 https://safeguard.sh/resources/blog/claude-api-code-execution-tool-sandbox-limits-and-retention 2026-10-19T05:45:56.989Z weekly 0.7 https://safeguard.sh/resources/blog/claude-api-mcp-connector-what-it-supports-and-what-it-does-not 2026-10-19T05:45:57.101Z weekly 0.7 https://safeguard.sh/resources/blog/claude-chatgpt-claude-code-and-codex-what-is-the-difference 2026-10-19T05:45:57.208Z weekly 0.7 https://safeguard.sh/resources/blog/claude-code-cloud-session-network-access-levels-explained 2026-10-19T05:45:57.314Z weekly 0.7 https://safeguard.sh/resources/blog/claude-code-mcp-json-why-a-cloned-repo-cannot-approve-its-servers 2026-10-19T05:45:57.417Z weekly 0.7 https://safeguard.sh/resources/blog/claude-code-organization-controls-for-mcp-servers-allow-deny-managed 2026-10-19T05:45:57.616Z weekly 0.7 https://safeguard.sh/resources/blog/claude-code-sandbox-runtime-wrap-mcp-servers-and-hooks 2026-10-19T05:45:57.733Z weekly 0.7 https://safeguard.sh/resources/blog/claude-file-creation-network-egress-options-for-admins 2026-10-19T05:45:57.839Z weekly 0.7 https://safeguard.sh/resources/blog/clean-up-after-a-security-tool-trial-data-checklist 2026-10-19T05:45:58.181Z weekly 0.7 https://safeguard.sh/resources/blog/clean-up-stale-domain-verification-txt-records 2026-10-19T05:45:58.350Z weekly 0.7 https://safeguard.sh/resources/blog/cleaning-a-starter-template-before-reusing-it-for-a-new-client 2026-10-19T05:45:59.438Z weekly 0.7 https://safeguard.sh/resources/blog/clear-site-data-header-on-logout-which-directives 2026-10-19T05:46:00.269Z weekly 0.7 https://safeguard.sh/resources/blog/clear-the-awaiting-approval-queue-for-fork-workflow-runs 2026-10-19T05:46:04.571Z weekly 0.7 https://safeguard.sh/resources/blog/cli-telemetry-local-only-mode-the-go-toolchain-approach 2026-10-19T05:46:04.666Z weekly 0.7 https://safeguard.sh/resources/blog/client-side-search-index-on-a-static-site-what-it-leaks 2026-10-19T05:46:04.763Z weekly 0.7 https://safeguard.sh/resources/blog/client-site-on-old-php-what-to-tell-the-client 2026-10-19T05:46:04.862Z weekly 0.7 https://safeguard.sh/resources/blog/client-website-compromised-first-hour-checklist-for-agencies 2026-10-19T05:46:04.962Z weekly 0.7 https://safeguard.sh/resources/blog/cloud-agent-or-local-agent-how-the-risk-changes 2026-10-19T05:46:05.067Z weekly 0.7 https://safeguard.sh/resources/blog/cloud-agent-secrets-setup-phase-versus-agent-phase 2026-10-19T05:46:05.163Z weekly 0.7 https://safeguard.sh/resources/blog/cloud-sandbox-escape-vs-sandbox-abuse-myth-versus-fact 2026-10-19T05:46:05.263Z weekly 0.7 https://safeguard.sh/resources/blog/cloudflare-workers-runtime-updates-vs-dependency-updates 2026-10-19T05:46:05.363Z weekly 0.7 https://safeguard.sh/resources/blog/cloudfront-functions-or-lambda-edge-where-do-dependencies-fit 2026-10-19T05:46:05.457Z weekly 0.7 https://safeguard.sh/resources/blog/cocoapods-podfile-lock-and-pessimistic-version-operator 2026-10-19T05:46:05.560Z weekly 0.7 https://safeguard.sh/resources/blog/code-first-or-spec-first-openapi-which-gives-scanners-better-input 2026-10-19T05:46:05.665Z weekly 0.7 https://safeguard.sh/resources/blog/code-review-and-branch-protection-evidence-for-investors 2026-10-19T05:46:05.765Z weekly 0.7 https://safeguard.sh/resources/blog/code-scanning-alerts-as-audit-evidence-fields-to-keep 2026-10-19T05:46:05.863Z weekly 0.7 https://safeguard.sh/resources/blog/codeowners-paths-after-moving-a-repo-into-a-monorepo-subdirectory 2026-10-19T05:46:05.966Z weekly 0.7 https://safeguard.sh/resources/blog/codex-mcp-config-toml-enabled-tools-and-approval-modes 2026-10-19T05:46:06.068Z weekly 0.7 https://safeguard.sh/resources/blog/coep-require-corp-vs-credentialless 2026-10-19T05:46:06.167Z weekly 0.7 https://safeguard.sh/resources/blog/cold-start-or-patching-how-to-decide-for-serverless-dependencies 2026-10-19T05:46:06.273Z weekly 0.7 https://safeguard.sh/resources/blog/collect-ci-security-metrics-from-the-ci-api-without-new-tools 2026-10-19T05:46:06.380Z weekly 0.7 https://safeguard.sh/resources/blog/combining-mit-bsd-and-apache-notices-in-one-release 2026-10-19T05:46:06.478Z weekly 0.7 https://safeguard.sh/resources/blog/commitments-register-track-promises-made-in-security-reviews 2026-10-19T05:46:06.583Z weekly 0.7 https://safeguard.sh/resources/blog/community-support-or-a-support-sla-when-a-scan-breaks-a-release 2026-10-19T05:46:06.683Z weekly 0.7 https://safeguard.sh/resources/blog/community-support-vs-contract-support-what-to-expect-from-a-scanner 2026-10-19T05:46:06.778Z weekly 0.7 https://safeguard.sh/resources/blog/company-wide-or-per-product-attestation-which-type-to-pick 2026-10-19T05:46:06.886Z weekly 0.7 https://safeguard.sh/resources/blog/compare-build-cache-controls-bazel-gradle-nx-turborepo 2026-10-19T05:46:07.065Z weekly 0.7 https://safeguard.sh/resources/blog/compare-build-output-before-and-after-a-build-tool-security-bump 2026-10-19T05:46:07.167Z weekly 0.7 https://safeguard.sh/resources/blog/compare-open-source-projects-like-with-like-before-judging-health 2026-10-19T05:46:07.269Z weekly 0.7 https://safeguard.sh/resources/blog/compare-package-inventories-before-vulnerabilities 2026-10-19T05:46:07.368Z weekly 0.7 https://safeguard.sh/resources/blog/compare-scanner-pull-request-gates-on-the-same-prs 2026-10-19T05:46:07.478Z weekly 0.7 https://safeguard.sh/resources/blog/compare-scanners-on-repositories-without-lockfiles 2026-10-19T05:46:07.577Z weekly 0.7 https://safeguard.sh/resources/blog/compare-the-hash-in-a-write-up-to-the-file-you-installed 2026-10-19T05:46:07.684Z weekly 0.7 https://safeguard.sh/resources/blog/compare-two-container-scans-new-fixed-unchanged-before-release 2026-10-19T05:46:07.789Z weekly 0.7 https://safeguard.sh/resources/blog/compare-two-libraries-with-a-weighted-decision-matrix 2026-10-19T05:46:07.887Z weekly 0.7 https://safeguard.sh/resources/blog/compare-two-sca-reports-new-vs-old-findings 2026-10-19T05:46:07.996Z weekly 0.7 https://safeguard.sh/resources/blog/compensating-control-or-not-reachable-which-label-is-honest 2026-10-19T05:46:08.110Z weekly 0.7 https://safeguard.sh/resources/blog/compilesdk-targetsdk-minsdk-what-an-sdk-upgrade-can-force 2026-10-19T05:46:08.226Z weekly 0.7 https://safeguard.sh/resources/blog/compliance-automation-read-only-access-checklist 2026-10-19T05:46:08.343Z weekly 0.7 https://safeguard.sh/resources/blog/compliance-evidence-that-cannot-be-automated-small-saas 2026-10-19T05:46:08.441Z weekly 0.7 https://safeguard.sh/resources/blog/composer-lock-file-caret-tilde-libraries-vs-applications 2026-10-19T05:46:08.536Z weekly 0.7 https://safeguard.sh/resources/blog/composer-prohibits-why-cant-i-upgrade-a-php-package 2026-10-19T05:46:08.638Z weekly 0.7 https://safeguard.sh/resources/blog/composer-replace-and-provide-why-a-package-name-is-missing 2026-10-19T05:46:08.737Z weekly 0.7 https://safeguard.sh/resources/blog/composer-repository-filters-keep-internal-packages-off-packagist 2026-10-19T05:46:08.837Z weekly 0.7 https://safeguard.sh/resources/blog/composer-update-with-dependencies-w-vs-capital-w-explained 2026-10-19T05:46:08.938Z weekly 0.7 https://safeguard.sh/resources/blog/conda-activate-scripts-run-code-keep-secrets-out 2026-10-19T05:46:09.253Z weekly 0.7 https://safeguard.sh/resources/blog/conda-explicit-spec-file-with-sha256-hashes-what-it-pins 2026-10-19T05:46:09.367Z weekly 0.7 https://safeguard.sh/resources/blog/conda-from-history-export-what-it-records-and-hides 2026-10-19T05:46:09.467Z weekly 0.7 https://safeguard.sh/resources/blog/conda-lock-vs-environment-yml-when-you-need-a-lock-file 2026-10-19T05:46:09.566Z weekly 0.7 https://safeguard.sh/resources/blog/conda-then-pip-why-order-matters-and-what-conda-cannot-see 2026-10-19T05:46:09.667Z weekly 0.7 https://safeguard.sh/resources/blog/container-base-image-open-source-customer-question-answer 2026-10-19T05:46:09.766Z weekly 0.7 https://safeguard.sh/resources/blog/container-base-images-in-soc-2-vulnerability-management 2026-10-19T05:46:09.877Z weekly 0.7 https://safeguard.sh/resources/blog/container-image-age-as-a-vulnerability-metric-how-old-is-what-you-run 2026-10-19T05:46:09.990Z weekly 0.7 https://safeguard.sh/resources/blog/container-image-terms-base-parent-builder-scratch-digest-defined 2026-10-19T05:46:10.100Z weekly 0.7 https://safeguard.sh/resources/blog/container-images-for-healthcare-saas-what-to-show-security-reviewers 2026-10-19T05:46:10.209Z weekly 0.7 https://safeguard.sh/resources/blog/container-sca-report-os-vs-app-packages 2026-10-19T05:46:10.318Z weekly 0.7 https://safeguard.sh/resources/blog/container-scan-myths-about-fixes-and-base-images-myth-vs-fact 2026-10-19T05:46:10.417Z weekly 0.7 https://safeguard.sh/resources/blog/container-scan-report-terms-defined-installed-fixed-source-layer 2026-10-19T05:46:10.521Z weekly 0.7 https://safeguard.sh/resources/blog/container-scan-results-faq-eight-questions-answered-fast 2026-10-19T05:46:10.619Z weekly 0.7 https://safeguard.sh/resources/blog/container-security-policy-by-environment-dev-staging-prod 2026-10-19T05:46:10.716Z weekly 0.7 https://safeguard.sh/resources/blog/container-vulnerability-sla-by-severity-and-fix-availability 2026-10-19T05:46:10.814Z weekly 0.7 https://safeguard.sh/resources/blog/contract-clauses-for-marketing-script-vendors 2026-10-19T05:46:10.911Z weekly 0.7 https://safeguard.sh/resources/blog/contract-says-patch-all-criticals-can-reachability-decisions-fit 2026-10-19T05:46:11.019Z weekly 0.7 https://safeguard.sh/resources/blog/contract-test-or-integration-test-for-a-library-upgrade 2026-10-19T05:46:11.124Z weekly 0.7 https://safeguard.sh/resources/blog/contractor-configured-software-is-it-agency-developed-attestation 2026-10-19T05:46:11.229Z weekly 0.7 https://safeguard.sh/resources/blog/contractor-day-one-repository-access-checklist 2026-10-19T05:46:11.346Z weekly 0.7 https://safeguard.sh/resources/blog/contractor-engagement-handover-what-engineering-should-collect 2026-10-19T05:46:11.452Z weekly 0.7 https://safeguard.sh/resources/blog/contractor-org-member-or-outside-collaborator-github 2026-10-19T05:46:11.551Z weekly 0.7 https://safeguard.sh/resources/blog/contributing-factors-checklist-for-a-supply-chain-incident-postmortem 2026-10-19T05:46:11.658Z weekly 0.7 https://safeguard.sh/resources/blog/control-objective-vs-control-activity-vs-policy-vs-procedure 2026-10-19T05:46:11.760Z weekly 0.7 https://safeguard.sh/resources/blog/convert-maven-pom-to-gradle-what-gradle-init-does 2026-10-19T05:46:11.890Z weekly 0.7 https://safeguard.sh/resources/blog/convert-package-lock-json-to-pnpm-lock-yaml 2026-10-19T05:46:11.993Z weekly 0.7 https://safeguard.sh/resources/blog/converting-between-spdx-and-cyclonedx-what-gets-lost 2026-10-19T05:46:12.107Z weekly 0.7 https://safeguard.sh/resources/blog/cookie-domain-attribute-host-only-vs-subdomain-sharing 2026-10-19T05:46:12.212Z weekly 0.7 https://safeguard.sh/resources/blog/coop-same-origin-allow-popups-oauth-and-payment-popups 2026-10-19T05:46:12.320Z weekly 0.7 https://safeguard.sh/resources/blog/cooperative-purchasing-contracts-explained-for-security-tool-vendors 2026-10-19T05:46:12.422Z weekly 0.7 https://safeguard.sh/resources/blog/coordinate-releases-and-audit-windows-security-and-compliance 2026-10-19T05:46:12.521Z weekly 0.7 https://safeguard.sh/resources/blog/coordinated-release-day-plan-for-a-security-fix 2026-10-19T05:46:12.622Z weekly 0.7 https://safeguard.sh/resources/blog/copied-a-ci-workflow-from-a-blog-or-forum-review-steps 2026-10-19T05:46:12.737Z weekly 0.7 https://safeguard.sh/resources/blog/copied-and-forked-code-in-your-sbom-what-startups-should-say 2026-10-19T05:46:12.838Z weekly 0.7 https://safeguard.sh/resources/blog/corepack-and-the-packagemanager-field-pin-your-package-manager 2026-10-19T05:46:12.939Z weekly 0.7 https://safeguard.sh/resources/blog/cosign-verify-a-public-image-what-identity-and-issuer-to-expect 2026-10-19T05:46:13.047Z weekly 0.7 https://safeguard.sh/resources/blog/count-dependencies-added-with-ai-assistant-help-git-history 2026-10-19T05:46:13.159Z weekly 0.7 https://safeguard.sh/resources/blog/count-vulnerabilities-in-short-lived-containers-no-double-count 2026-10-19T05:46:13.255Z weekly 0.7 https://safeguard.sh/resources/blog/cra-annex-i-external-interfaces-design-review-for-a-first-device 2026-10-19T05:46:13.359Z weekly 0.7 https://safeguard.sh/resources/blog/cran-bioconductor-conda-forge-pypi-what-review-means-compared 2026-10-19T05:46:13.461Z weekly 0.7 https://safeguard.sh/resources/blog/create-a-jira-ticket-from-a-ci-security-finding 2026-10-19T05:46:13.554Z weekly 0.7 https://safeguard.sh/resources/blog/credential-proxy-pattern-keep-tokens-outside-the-agent-sandbox 2026-10-19T05:46:13.662Z weekly 0.7 https://safeguard.sh/resources/blog/credential-rotation-calendar-for-small-engineering-teams 2026-10-19T05:46:13.766Z weekly 0.7 https://safeguard.sh/resources/blog/critical-cve-during-a-buyers-security-review 2026-10-19T05:46:13.866Z weekly 0.7 https://safeguard.sh/resources/blog/critical-cve-lands-in-launch-week-what-a-product-manager-decides 2026-10-19T05:46:13.963Z weekly 0.7 https://safeguard.sh/resources/blog/cross-origin-resource-policy-corp-vs-cors 2026-10-19T05:46:14.060Z weekly 0.7 https://safeguard.sh/resources/blog/crossplane-provider-packages-pin-by-digest-and-manual-upgrades 2026-10-19T05:46:14.159Z weekly 0.7 https://safeguard.sh/resources/blog/cryptography-code-review-checklist-ten-questions 2026-10-19T05:46:14.252Z weekly 0.7 https://safeguard.sh/resources/blog/csaf-document-status-draft-final-and-version-numbers 2026-10-19T05:46:14.352Z weekly 0.7 https://safeguard.sh/resources/blog/csaf-notes-categories-which-to-use-in-an-advisory 2026-10-19T05:46:14.455Z weekly 0.7 https://safeguard.sh/resources/blog/csaf-vex-profile-vs-openvex-which-fits-a-vendor-workflow 2026-10-19T05:46:14.552Z weekly 0.7 https://safeguard.sh/resources/blog/csf-2-gv-sc-checklist-for-software-supply-chain-governance 2026-10-19T05:46:14.649Z weekly 0.7 https://safeguard.sh/resources/blog/csp-base-uri-object-src-form-action-small-directives 2026-10-19T05:46:14.761Z weekly 0.7 https://safeguard.sh/resources/blog/csp-in-a-meta-tag-for-static-sites-what-works 2026-10-19T05:46:14.874Z weekly 0.7 https://safeguard.sh/resources/blog/csp-report-to-and-reporting-endpoints-setup 2026-10-19T05:46:14.977Z weekly 0.7 https://safeguard.sh/resources/blog/csp-strict-dynamic-explained 2026-10-19T05:46:15.086Z weekly 0.7 https://safeguard.sh/resources/blog/csp-unsafe-inline-and-unsafe-eval-what-they-allow 2026-10-19T05:46:15.190Z weekly 0.7 https://safeguard.sh/resources/blog/csp-violation-reports-report-to-vs-report-uri 2026-10-19T05:46:15.299Z weekly 0.7 https://safeguard.sh/resources/blog/csv-injection-in-analytics-exports-what-to-sanitize 2026-10-19T05:46:15.400Z weekly 0.7 https://safeguard.sh/resources/blog/curl-with-an-api-token-how-to-keep-it-out-of-history-and-logs 2026-10-19T05:46:15.512Z weekly 0.7 https://safeguard.sh/resources/blog/custom-message-when-an-extension-install-is-blocked 2026-10-19T05:46:15.624Z weekly 0.7 https://safeguard.sh/resources/blog/custom-mustache-templates-for-openapi-generator-who-do-you-trust 2026-10-19T05:46:15.722Z weekly 0.7 https://safeguard.sh/resources/blog/custom-scheme-claimed-https-or-loopback-oauth-redirect 2026-10-19T05:46:15.829Z weekly 0.7 https://safeguard.sh/resources/blog/custom-static-analysis-rule-or-existing-ruleset-decision-guide 2026-10-19T05:46:15.937Z weekly 0.7 https://safeguard.sh/resources/blog/customer-asks-about-ai-coding-tools-and-open-source-dependencies 2026-10-19T05:46:16.051Z weekly 0.7 https://safeguard.sh/resources/blog/customer-asks-about-gpl-and-agpl-use-how-to-reply 2026-10-19T05:46:16.147Z weekly 0.7 https://safeguard.sh/resources/blog/customer-asks-for-access-to-your-environment-what-to-offer-instead 2026-10-19T05:46:16.255Z weekly 0.7 https://safeguard.sh/resources/blog/customer-asks-for-open-source-license-notices-what-to-send 2026-10-19T05:46:16.352Z weekly 0.7 https://safeguard.sh/resources/blog/customer-asks-for-third-party-component-list-for-their-deployment 2026-10-19T05:46:16.444Z weekly 0.7 https://safeguard.sh/resources/blog/customer-commitments-that-reference-your-old-dependency-policy 2026-10-19T05:46:16.545Z weekly 0.7 https://safeguard.sh/resources/blog/customer-contract-bans-copyleft-how-to-track-per-customer-restrictions 2026-10-19T05:46:16.638Z weekly 0.7 https://safeguard.sh/resources/blog/customer-hosted-installs-tracking-dependency-versions-you-cannot-see 2026-10-19T05:46:16.732Z weekly 0.7 https://safeguard.sh/resources/blog/customer-notice-now-or-wait-for-the-vex-decision-guide 2026-10-19T05:46:16.830Z weekly 0.7 https://safeguard.sh/resources/blog/customer-request-for-an-rca-after-a-supply-chain-incident 2026-10-19T05:46:16.929Z weekly 0.7 https://safeguard.sh/resources/blog/customer-security-bulletin-template-for-a-vendor 2026-10-19T05:46:17.027Z weekly 0.7 https://safeguard.sh/resources/blog/cve-affected-versions-vs-nvd-configurations-two-ways-to-say-what-is-hit 2026-10-19T05:46:17.124Z weekly 0.7 https://safeguard.sh/resources/blog/cve-dates-reserved-published-public-which-one-to-use 2026-10-19T05:46:17.231Z weekly 0.7 https://safeguard.sh/resources/blog/cve-record-format-cna-and-adp-containers-where-scores-live 2026-10-19T05:46:17.325Z weekly 0.7 https://safeguard.sh/resources/blog/cve-record-states-reserved-published-rejected-what-ops-should-do 2026-10-19T05:46:17.416Z weekly 0.7 https://safeguard.sh/resources/blog/cve-reference-tags-find-the-patch-or-vendor-advisory 2026-10-19T05:46:17.512Z weekly 0.7 https://safeguard.sh/resources/blog/cve-tags-disputed-unsupported-when-assigned-exclusively-hosted-what-to-do 2026-10-19T05:46:17.605Z weekly 0.7 https://safeguard.sh/resources/blog/cve-version-status-unknown-does-not-mean-safe 2026-10-19T05:46:17.699Z weekly 0.7 https://safeguard.sh/resources/blog/cvelistv5-git-pull-or-zip-which-way-to-sync-cve-records 2026-10-19T05:46:17.794Z weekly 0.7 https://safeguard.sh/resources/blog/cvss-attack-complexity-high-what-it-means-and-how-v4-splits-it 2026-10-19T05:46:17.888Z weekly 0.7 https://safeguard.sh/resources/blog/cvss-confidentiality-integrity-availability-what-low-and-high-mean 2026-10-19T05:46:17.983Z weekly 0.7 https://safeguard.sh/resources/blog/cvss-not-defined-environmental-requirement-means-high 2026-10-19T05:46:18.079Z weekly 0.7 https://safeguard.sh/resources/blog/cvss-privileges-required-none-low-high-what-it-means-in-a-finding 2026-10-19T05:46:18.178Z weekly 0.7 https://safeguard.sh/resources/blog/cvss-scope-changed-what-s-c-means-in-a-scanner-finding 2026-10-19T05:46:18.272Z weekly 0.7 https://safeguard.sh/resources/blog/cvss-severity-is-not-risk-how-to-say-it-in-an-advisory 2026-10-19T05:46:18.367Z weekly 0.7 https://safeguard.sh/resources/blog/cvss-user-interaction-required-does-it-make-a-finding-safe 2026-10-19T05:46:18.470Z weekly 0.7 https://safeguard.sh/resources/blog/cvss-v4-environmental-metrics-explained 2026-10-19T05:46:18.565Z weekly 0.7 https://safeguard.sh/resources/blog/cyber-resilience-act-due-diligence-on-open-source-components-for-pms 2026-10-19T05:46:18.664Z weekly 0.7 https://safeguard.sh/resources/blog/cybersecurity-questions-for-nonprofit-board-directors 2026-10-19T05:46:18.765Z weekly 0.7 https://safeguard.sh/resources/blog/cyclonedx-component-type-library-framework-or-application 2026-10-19T05:46:18.864Z weekly 0.7 https://safeguard.sh/resources/blog/cyclonedx-component-types-for-firmware-and-devices 2026-10-19T05:46:18.959Z weekly 0.7 https://safeguard.sh/resources/blog/cyclonedx-dependencies-block-how-to-read-the-graph 2026-10-19T05:46:19.056Z weekly 0.7 https://safeguard.sh/resources/blog/cyclonedx-depends-on-empty-vs-missing-dependency-entries 2026-10-19T05:46:19.157Z weekly 0.7 https://safeguard.sh/resources/blog/cyclonedx-evidence-identity-how-a-tool-found-a-component 2026-10-19T05:46:19.252Z weekly 0.7 https://safeguard.sh/resources/blog/cyclonedx-external-references-which-types-to-fill 2026-10-19T05:46:19.350Z weekly 0.7 https://safeguard.sh/resources/blog/cyclonedx-group-name-version-what-goes-in-each-field 2026-10-19T05:46:19.443Z weekly 0.7 https://safeguard.sh/resources/blog/cyclonedx-json-xml-or-protobuf-which-serialization-to-exchange 2026-10-19T05:46:19.538Z weekly 0.7 https://safeguard.sh/resources/blog/cyclonedx-license-acknowledgement-declared-vs-concluded 2026-10-19T05:46:19.640Z weekly 0.7 https://safeguard.sh/resources/blog/cyclonedx-or-spdx-which-sbom-format-should-an-agency-give-a-client 2026-10-19T05:46:19.738Z weekly 0.7 https://safeguard.sh/resources/blog/cyclonedx-supplier-vs-publisher-vs-author-which-field 2026-10-19T05:46:19.837Z weekly 0.7 https://safeguard.sh/resources/blog/cypress-and-playwright-download-browser-binaries-what-to-control 2026-10-19T05:46:19.934Z weekly 0.7 https://safeguard.sh/resources/blog/dagster-envvar-vs-os-getenv-which-hides-secrets-in-the-ui 2026-10-19T05:46:20.037Z weekly 0.7 https://safeguard.sh/resources/blog/dark-launch-a-replacement-library-behind-a-feature-flag 2026-10-19T05:46:20.133Z weekly 0.7 https://safeguard.sh/resources/blog/dark-launching-and-feature-flags-security-checks 2026-10-19T05:46:20.228Z weekly 0.7 https://safeguard.sh/resources/blog/dask-cluster-defaults-unauthenticated-unencrypted-what-to-change 2026-10-19T05:46:20.323Z weekly 0.7 https://safeguard.sh/resources/blog/data-pipeline-security-myths-versus-facts 2026-10-19T05:46:20.419Z weekly 0.7 https://safeguard.sh/resources/blog/database-password-special-characters-url-encode 2026-10-19T05:46:20.521Z weekly 0.7 https://safeguard.sh/resources/blog/database-snapshots-hidden-production-copies-in-staging 2026-10-19T05:46:20.615Z weekly 0.7 https://safeguard.sh/resources/blog/databricks-init-scripts-global-vs-cluster-scoped-risks 2026-10-19T05:46:20.710Z weekly 0.7 https://safeguard.sh/resources/blog/datasets-loading-scripts-and-trust-remote-code 2026-10-19T05:46:20.807Z weekly 0.7 https://safeguard.sh/resources/blog/day-one-dependency-security-checklist-for-a-new-service 2026-10-19T05:46:20.925Z weekly 0.7 https://safeguard.sh/resources/blog/dbt-native-private-packages-or-git-tokens-which-is-safer 2026-10-19T05:46:21.056Z weekly 0.7 https://safeguard.sh/resources/blog/dbt-packages-yml-or-dependencies-yml-which-file-should-hold-packages 2026-10-19T05:46:21.162Z weekly 0.7 https://safeguard.sh/resources/blog/deactivate-delete-or-uninstall-a-wordpress-plugin-what-stays-behind 2026-10-19T05:46:21.313Z weekly 0.7 https://safeguard.sh/resources/blog/debezium-replication-slot-wal-growth-and-heartbeats 2026-10-19T05:46:21.414Z weekly 0.7 https://safeguard.sh/resources/blog/debezium-replication-user-least-privilege-for-postgresql 2026-10-19T05:46:21.516Z weekly 0.7 https://safeguard.sh/resources/blog/debian-12-bookworm-base-images-after-regular-support-ended 2026-10-19T05:46:21.616Z weekly 0.7 https://safeguard.sh/resources/blog/debian-12-to-13-base-image-upgrade-checklist-for-containers 2026-10-19T05:46:21.713Z weekly 0.7 https://safeguard.sh/resources/blog/debian-epoch-what-the-1-colon-prefix-means-in-a-package-version 2026-10-19T05:46:21.817Z weekly 0.7 https://safeguard.sh/resources/blog/debian-version-number-looks-vulnerable-backported-fixes-explained 2026-10-19T05:46:21.917Z weekly 0.7 https://safeguard.sh/resources/blog/decision-memo-template-security-fix-versus-feature 2026-10-19T05:46:22.017Z weekly 0.7 https://safeguard.sh/resources/blog/declare-and-isolate-dependencies-twelve-factor-and-sca 2026-10-19T05:46:22.115Z weekly 0.7 https://safeguard.sh/resources/blog/declare-openapi-security-schemes-so-a-scanner-can-authenticate 2026-10-19T05:46:22.212Z weekly 0.7 https://safeguard.sh/resources/blog/declared-built-and-running-the-three-way-inventory-check 2026-10-19T05:46:22.318Z weekly 0.7 https://safeguard.sh/resources/blog/decommission-old-repositories-after-a-monorepo-migration 2026-10-19T05:46:22.420Z weekly 0.7 https://safeguard.sh/resources/blog/dedicated-runners-for-privileged-ci-jobs-how-to-isolate-them 2026-10-19T05:46:22.516Z weekly 0.7 https://safeguard.sh/resources/blog/default-branch-or-release-branches-in-scanner-comparison 2026-10-19T05:46:22.614Z weekly 0.7 https://safeguard.sh/resources/blog/define-critical-vulnerability-in-a-patch-sla-clause 2026-10-19T05:46:22.718Z weekly 0.7 https://safeguard.sh/resources/blog/definition-of-done-for-a-dependency-upgrade-ticket 2026-10-19T05:46:22.822Z weekly 0.7 https://safeguard.sh/resources/blog/definition-of-done-for-infrastructure-as-code-changes 2026-10-19T05:46:22.918Z weekly 0.7 https://safeguard.sh/resources/blog/definition-of-done-vs-acceptance-criteria-for-security 2026-10-19T05:46:23.014Z weekly 0.7 https://safeguard.sh/resources/blog/definition-of-ready-for-a-security-ticket 2026-10-19T05:46:23.120Z weekly 0.7 https://safeguard.sh/resources/blog/definition-of-ready-security-checks-for-user-stories 2026-10-19T05:46:23.214Z weekly 0.7 https://safeguard.sh/resources/blog/delegated-admin-and-scoped-access-in-sca-for-business-units 2026-10-19T05:46:23.309Z weekly 0.7 https://safeguard.sh/resources/blog/delete-old-lockfile-after-package-manager-switch 2026-10-19T05:46:23.404Z weekly 0.7 https://safeguard.sh/resources/blog/delta-adaptive-or-full-image-updates-for-device-fleets 2026-10-19T05:46:23.501Z weekly 0.7 https://safeguard.sh/resources/blog/dependabot-across-many-client-repos-groups-limits-and-noise 2026-10-19T05:46:23.598Z weekly 0.7 https://safeguard.sh/resources/blog/dependabot-alert-dispositions-what-to-record-for-audits 2026-10-19T05:46:23.696Z weekly 0.7 https://safeguard.sh/resources/blog/dependabot-alert-notifications-what-you-get-and-what-you-miss 2026-10-19T05:46:23.796Z weekly 0.7 https://safeguard.sh/resources/blog/dependabot-directories-after-merging-repos-into-a-monorepo 2026-10-19T05:46:23.895Z weekly 0.7 https://safeguard.sh/resources/blog/dependabot-dismissal-reasons-which-to-pick-and-what-to-write 2026-10-19T05:46:23.992Z weekly 0.7 https://safeguard.sh/resources/blog/dependabot-for-terraform-modules-and-providers 2026-10-19T05:46:24.094Z weekly 0.7 https://safeguard.sh/resources/blog/dependabot-versioning-strategy-for-libraries-widen-or-increase 2026-10-19T05:46:24.194Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-alerts-in-repositories-nobody-owns 2026-10-19T05:46:24.291Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-audit-checklist-for-rails-and-laravel-teams 2026-10-19T05:46:24.383Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-change-population-for-audit-sampling 2026-10-19T05:46:24.484Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-changes-in-outside-contributor-pull-requests-what-to-check 2026-10-19T05:46:24.581Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-cooldown-does-it-delay-security-fixes 2026-10-19T05:46:24.677Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-dispute-escalation-ladder-who-decides-and-when 2026-10-19T05:46:24.770Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-freeze-in-release-week-what-about-security-overrides 2026-10-19T05:46:24.871Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-graph-blind-spots-before-exporting-an-sbom 2026-10-19T05:46:24.963Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-heavy-or-custom-code-heavy-where-to-tilt-testing 2026-10-19T05:46:25.058Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-inventory-gap-register-template 2026-10-19T05:46:25.150Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-issue-customer-message-decision-table-four-outcomes 2026-10-19T05:46:25.245Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-metrics-to-track-before-and-during-a-soc-2-audit 2026-10-19T05:46:25.342Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-override-request-template-for-engineering-teams 2026-10-19T05:46:25.435Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-ownership-map-template-for-shared-internal-libraries 2026-10-19T05:46:25.528Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-pull-request-checklist-for-a-data-engineering-repo 2026-10-19T05:46:25.623Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-review-on-pull-requests-as-investor-evidence 2026-10-19T05:46:25.716Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scan-or-penetration-test-what-a-hospital-review-needs 2026-10-19T05:46:25.809Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-coverage-audit-checklist-by-stage 2026-10-19T05:46:25.905Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-for-game-studios-ten-quick-answers 2026-10-19T05:46:25.998Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-ide-vs-pull-request-vs-build-vs-proxy 2026-10-19T05:46:26.094Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-poc-day-five-status-update-template 2026-10-19T05:46:26.186Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-poc-day-zero-environment-checks 2026-10-19T05:46:26.278Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-poc-effort-hours-per-person 2026-10-19T05:46:26.373Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-poc-faq-for-managers 2026-10-19T05:46:26.469Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-poc-fix-loop-upgrade-and-rescan 2026-10-19T05:46:26.564Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-poc-one-page-charter 2026-10-19T05:46:26.665Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-poc-read-only-and-on-a-branch 2026-10-19T05:46:26.770Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-poc-reviewer-agreement-check 2026-10-19T05:46:26.888Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-poc-success-criteria-table 2026-10-19T05:46:26.986Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-poc-with-an-open-source-scanner 2026-10-19T05:46:27.091Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-scanning-proof-of-concept-in-two-weeks 2026-10-19T05:46:27.189Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-security-quiz-for-new-engineers 2026-10-19T05:46:27.283Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-update-prs-and-deployment-frequency 2026-10-19T05:46:27.382Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-updates-faq-for-engineering-managers 2026-10-19T05:46:27.487Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-updates-for-large-frontends-faq 2026-10-19T05:46:27.589Z weekly 0.7 https://safeguard.sh/resources/blog/dependency-upgrade-day-cadence-by-team-size 2026-10-19T05:46:27.688Z weekly 0.7 https://safeguard.sh/resources/blog/deploy-gate-block-warn-or-approval-decision-guide 2026-10-19T05:46:27.822Z weekly 0.7 https://safeguard.sh/resources/blog/deploy-key-or-personal-access-token-for-a-server-pulling-one-repo 2026-10-19T05:46:27.922Z weekly 0.7 https://safeguard.sh/resources/blog/deploy-keys-outlive-contractor-offboarding 2026-10-19T05:46:28.021Z weekly 0.7 https://safeguard.sh/resources/blog/deployment-frequency-sets-a-floor-under-your-exposure-window 2026-10-19T05:46:28.119Z weekly 0.7 https://safeguard.sh/resources/blog/deployment-starter-workflow-add-environments-and-reviewers 2026-10-19T05:46:28.246Z weekly 0.7 https://safeguard.sh/resources/blog/deprecate-then-remove-how-to-retire-an-insecure-api-under-semver 2026-10-19T05:46:28.378Z weekly 0.7 https://safeguard.sh/resources/blog/deprecation-warnings-in-an-sdk-upgrade-which-ones-block-the-merge 2026-10-19T05:46:28.479Z weekly 0.7 https://safeguard.sh/resources/blog/deps-dev-api-resolved-dependency-graph-without-a-lockfile 2026-10-19T05:46:28.575Z weekly 0.7 https://safeguard.sh/resources/blog/describe-a-penetration-test-to-a-customer-without-sharing-the-report 2026-10-19T05:46:28.669Z weekly 0.7 https://safeguard.sh/resources/blog/describe-your-security-gate-rule-in-a-customer-questionnaire 2026-10-19T05:46:28.768Z weekly 0.7 https://safeguard.sh/resources/blog/design-review-questions-before-adding-a-third-party-api 2026-10-19T05:46:28.871Z weekly 0.7 https://safeguard.sh/resources/blog/design-sbom-what-it-is-and-when-it-helps 2026-10-19T05:46:28.976Z weekly 0.7 https://safeguard.sh/resources/blog/design-system-overrides-do-not-reach-consuming-apps 2026-10-19T05:46:29.078Z weekly 0.7 https://safeguard.sh/resources/blog/design-system-peer-dependency-range-how-wide 2026-10-19T05:46:29.223Z weekly 0.7 https://safeguard.sh/resources/blog/design-the-first-security-finding-a-developer-sees 2026-10-19T05:46:29.335Z weekly 0.7 https://safeguard.sh/resources/blog/detached-or-embedded-sbom-signature-which-should-you-use 2026-10-19T05:46:29.437Z weekly 0.7 https://safeguard.sh/resources/blog/detect-a-silent-behavior-change-after-an-upgrade 2026-10-19T05:46:29.554Z weekly 0.7 https://safeguard.sh/resources/blog/detect-scanner-configuration-drift-from-the-repo 2026-10-19T05:46:29.667Z weekly 0.7 https://safeguard.sh/resources/blog/dev-container-root-user-remoteuser-vs-containeruser 2026-10-19T05:46:29.773Z weekly 0.7 https://safeguard.sh/resources/blog/dev-dependencies-in-scans-why-one-scanner-reports-more 2026-10-19T05:46:29.875Z weekly 0.7 https://safeguard.sh/resources/blog/dev-dependency-findings-in-sca-reports 2026-10-19T05:46:29.980Z weekly 0.7 https://safeguard.sh/resources/blog/dev-dependency-vulnerability-does-a-library-maintainer-need-to-fix-it 2026-10-19T05:46:30.084Z weekly 0.7 https://safeguard.sh/resources/blog/dev-tools-in-the-production-image-drift-you-can-remove 2026-10-19T05:46:30.188Z weekly 0.7 https://safeguard.sh/resources/blog/devcontainer-json-settings-a-code-reviewer-should-flag 2026-10-19T05:46:30.300Z weekly 0.7 https://safeguard.sh/resources/blog/developer-changes-teams-access-review-what-nist-ps-5-expects 2026-10-19T05:46:30.401Z weekly 0.7 https://safeguard.sh/resources/blog/developer-friction-survey-questions-for-security-checks-in-ci 2026-10-19T05:46:30.500Z weekly 0.7 https://safeguard.sh/resources/blog/developer-id-or-mac-app-distribution-certificate-which-to-use 2026-10-19T05:46:30.603Z weekly 0.7 https://safeguard.sh/resources/blog/development-keys-in-production-the-hardware-startup-launch-trap 2026-10-19T05:46:30.703Z weekly 0.7 https://safeguard.sh/resources/blog/device-cloud-backend-dependencies-hardware-startups-forget-to-scan 2026-10-19T05:46:30.802Z weekly 0.7 https://safeguard.sh/resources/blog/devices-offline-for-months-how-to-bring-them-current 2026-10-19T05:46:30.907Z weekly 0.7 https://safeguard.sh/resources/blog/diagnose-excessive-agency-in-your-ai-agent-three-causes-checklist 2026-10-19T05:46:31.002Z weekly 0.7 https://safeguard.sh/resources/blog/did-python-fix-dependency-confusion-what-happened-to-pep-708 2026-10-19T05:46:31.101Z weekly 0.7 https://safeguard.sh/resources/blog/diff-based-or-baseline-which-secure-code-review-do-you-need 2026-10-19T05:46:31.199Z weekly 0.7 https://safeguard.sh/resources/blog/diff-resolved-versions-after-a-package-manager-or-workspace-migration 2026-10-19T05:46:31.295Z weekly 0.7 https://safeguard.sh/resources/blog/diff-two-spdx-sboms-which-fields-to-compare-and-ignore 2026-10-19T05:46:31.389Z weekly 0.7 https://safeguard.sh/resources/blog/diff-vulnerabilities-between-releases-introduced-versus-fixed 2026-10-19T05:46:31.485Z weekly 0.7 https://safeguard.sh/resources/blog/diffoscope-find-why-two-builds-differ 2026-10-19T05:46:31.580Z weekly 0.7 https://safeguard.sh/resources/blog/disable-fastapi-docs-and-openapi-json-in-production 2026-10-19T05:46:31.675Z weekly 0.7 https://safeguard.sh/resources/blog/disallow-file-mods-on-client-sites-what-it-blocks-and-costs 2026-10-19T05:46:31.769Z weekly 0.7 https://safeguard.sh/resources/blog/dismiss-stale-approvals-for-contractor-pull-requests 2026-10-19T05:46:31.867Z weekly 0.7 https://safeguard.sh/resources/blog/distribution-vs-import-package-why-pip-install-foo-can-mislead 2026-10-19T05:46:31.966Z weekly 0.7 https://safeguard.sh/resources/blog/distro-advisory-and-library-cve-are-separate-records-in-a-container-scan 2026-10-19T05:46:32.064Z weekly 0.7 https://safeguard.sh/resources/blog/distroless-image-choice-node-java-python-go 2026-10-19T05:46:32.165Z weekly 0.7 https://safeguard.sh/resources/blog/django-csrf-trusted-origins-when-and-how-to-set-it 2026-10-19T05:46:32.262Z weekly 0.7 https://safeguard.sh/resources/blog/django-password-validators-and-hashers-what-is-on-by-default 2026-10-19T05:46:32.360Z weekly 0.7 https://safeguard.sh/resources/blog/django-request-size-limits-data-upload-max-settings 2026-10-19T05:46:32.453Z weekly 0.7 https://safeguard.sh/resources/blog/django-security-support-which-versions-get-fixes-and-how-to-hear 2026-10-19T05:46:32.546Z weekly 0.7 https://safeguard.sh/resources/blog/django-sensitive-variables-and-error-report-secrets 2026-10-19T05:46:32.643Z weekly 0.7 https://safeguard.sh/resources/blog/dmarc-fails-for-some-mail-how-to-find-which-stream 2026-10-19T05:46:32.742Z weekly 0.7 https://safeguard.sh/resources/blog/dns-as-code-review-dns-changes-like-code 2026-10-19T05:46:32.845Z weekly 0.7 https://safeguard.sh/resources/blog/do-ai-steps-in-rpa-workflows-need-extra-security 2026-10-19T05:46:32.950Z weekly 0.7 https://safeguard.sh/resources/blog/do-ai-tutor-features-add-supply-chain-risk-to-student-data-apps 2026-10-19T05:46:33.047Z weekly 0.7 https://safeguard.sh/resources/blog/do-archived-research-repositories-need-vulnerability-rescans 2026-10-19T05:46:33.143Z weekly 0.7 https://safeguard.sh/resources/blog/do-async-and-defer-make-a-third-party-script-safer 2026-10-19T05:46:33.237Z weekly 0.7 https://safeguard.sh/resources/blog/do-aws-access-keys-need-rotating-when-an-employee-leaves 2026-10-19T05:46:33.334Z weekly 0.7 https://safeguard.sh/resources/blog/do-build-tools-end-up-in-your-production-docker-image 2026-10-19T05:46:33.434Z weekly 0.7 https://safeguard.sh/resources/blog/do-ci-build-images-need-the-same-scanning-as-production-images 2026-10-19T05:46:33.536Z weekly 0.7 https://safeguard.sh/resources/blog/do-composite-actions-pin-the-actions-they-call-inside 2026-10-19T05:46:33.632Z weekly 0.7 https://safeguard.sh/resources/blog/do-dependabot-pull-requests-get-repository-secrets 2026-10-19T05:46:33.726Z weekly 0.7 https://safeguard.sh/resources/blog/do-dependency-upgrades-need-change-tickets-in-regulated-teams 2026-10-19T05:46:33.839Z weekly 0.7 https://safeguard.sh/resources/blog/do-deploy-keys-stop-working-when-the-person-who-added-them-leaves 2026-10-19T05:46:33.936Z weekly 0.7 https://safeguard.sh/resources/blog/do-dev-and-build-dependencies-belong-in-an-acquisition-inventory 2026-10-19T05:46:34.049Z weekly 0.7 https://safeguard.sh/resources/blog/do-dev-dependencies-and-build-tools-count-in-soc-2-scope 2026-10-19T05:46:34.158Z weekly 0.7 https://safeguard.sh/resources/blog/do-docs-screenshots-leak-tokens-and-customer-data 2026-10-19T05:46:34.263Z weekly 0.7 https://safeguard.sh/resources/blog/do-docs-sql-examples-teach-readers-to-build-queries-from-strings 2026-10-19T05:46:34.371Z weekly 0.7 https://safeguard.sh/resources/blog/do-embedded-signatures-break-reproducible-builds 2026-10-19T05:46:34.468Z weekly 0.7 https://safeguard.sh/resources/blog/do-existing-sessions-and-tokens-survive-an-auth-library-upgrade 2026-10-19T05:46:34.568Z weekly 0.7 https://safeguard.sh/resources/blog/do-fix-prs-need-a-merge-queue 2026-10-19T05:46:34.697Z weekly 0.7 https://safeguard.sh/resources/blog/do-fork-pull-requests-get-your-repository-secrets 2026-10-19T05:46:34.794Z weekly 0.7 https://safeguard.sh/resources/blog/do-free-pilots-and-demos-need-a-federal-attestation 2026-10-19T05:46:34.889Z weekly 0.7 https://safeguard.sh/resources/blog/do-github-actions-and-ci-plugins-need-dependency-intake 2026-10-19T05:46:35.001Z weekly 0.7 https://safeguard.sh/resources/blog/do-github-actions-secrets-move-when-you-consolidate-repositories 2026-10-19T05:46:35.124Z weekly 0.7 https://safeguard.sh/resources/blog/do-github-oidc-trust-policies-break-when-a-repo-is-renamed 2026-10-19T05:46:35.226Z weekly 0.7 https://safeguard.sh/resources/blog/do-github-stars-and-downloads-show-a-library-is-safe 2026-10-19T05:46:35.333Z weekly 0.7 https://safeguard.sh/resources/blog/do-i-need-an-api-key-to-use-security-tools-in-my-ai-chat-plan 2026-10-19T05:46:35.453Z weekly 0.7 https://safeguard.sh/resources/blog/do-ide-cli-and-cloud-versions-of-a-security-tool-match 2026-10-19T05:46:35.557Z weekly 0.7 https://safeguard.sh/resources/blog/do-kubernetes-networkpolicies-work-without-supporting-plugin 2026-10-19T05:46:35.654Z weekly 0.7 https://safeguard.sh/resources/blog/do-lockfiles-count-as-soc-2-change-management-evidence 2026-10-19T05:46:35.756Z weekly 0.7 https://safeguard.sh/resources/blog/do-low-code-forms-need-input-sanitizing-platform-syntax-injection 2026-10-19T05:46:35.859Z weekly 0.7 https://safeguard.sh/resources/blog/do-mcp-tool-definitions-cost-tokens 2026-10-19T05:46:35.961Z weekly 0.7 https://safeguard.sh/resources/blog/do-minified-javascript-bundles-still-need-license-notices 2026-10-19T05:46:36.058Z weekly 0.7 https://safeguard.sh/resources/blog/do-nginx-access-logs-record-secrets-in-query-strings 2026-10-19T05:46:36.163Z weekly 0.7 https://safeguard.sh/resources/blog/do-not-pip-install-at-lambda-cold-start 2026-10-19T05:46:36.262Z weekly 0.7 https://safeguard.sh/resources/blog/do-npm-ci-and-pip-require-hashes-stop-a-compromised-version 2026-10-19T05:46:36.363Z weekly 0.7 https://safeguard.sh/resources/blog/do-old-container-base-images-count-as-dependency-update-debt 2026-10-19T05:46:36.464Z weekly 0.7 https://safeguard.sh/resources/blog/do-old-tags-of-docker-official-images-still-get-patched 2026-10-19T05:46:36.569Z weekly 0.7 https://safeguard.sh/resources/blog/do-pinned-dependencies-leave-you-with-old-vulnerable-versions 2026-10-19T05:46:36.665Z weekly 0.7 https://safeguard.sh/resources/blog/do-projects-ship-security-fixes-on-a-schedule-or-on-demand 2026-10-19T05:46:36.761Z weekly 0.7 https://safeguard.sh/resources/blog/do-pull-request-dependency-scans-cover-transitive-dependencies 2026-10-19T05:46:36.891Z weekly 0.7 https://safeguard.sh/resources/blog/do-redis-key-patterns-isolate-tenants-the-flushall-gap 2026-10-19T05:46:36.985Z weekly 0.7 https://safeguard.sh/resources/blog/do-removed-developers-signed-commits-stay-verified 2026-10-19T05:46:37.079Z weekly 0.7 https://safeguard.sh/resources/blog/do-repo-scans-cover-images-named-in-compose-and-kubernetes-files 2026-10-19T05:46:37.175Z weekly 0.7 https://safeguard.sh/resources/blog/do-rpa-bots-need-their-own-identity-or-a-shared-login 2026-10-19T05:46:37.268Z weekly 0.7 https://safeguard.sh/resources/blog/do-sbom-minimum-elements-include-licenses 2026-10-19T05:46:37.368Z weekly 0.7 https://safeguard.sh/resources/blog/do-scheduled-ai-tasks-ask-permission-when-nobody-is-watching 2026-10-19T05:46:37.466Z weekly 0.7 https://safeguard.sh/resources/blog/do-secrets-in-old-repo-history-follow-you-into-the-monorepo 2026-10-19T05:46:37.569Z weekly 0.7 https://safeguard.sh/resources/blog/do-security-fix-pull-requests-count-against-the-open-pr-limit 2026-10-19T05:46:37.665Z weekly 0.7 https://safeguard.sh/resources/blog/do-security-gates-hurt-dora-lead-time 2026-10-19T05:46:37.759Z weekly 0.7 https://safeguard.sh/resources/blog/do-signed-commits-make-a-hugging-face-model-trustworthy 2026-10-19T05:46:37.858Z weekly 0.7 https://safeguard.sh/resources/blog/do-signing-and-provenance-make-a-plugin-safe-to-install 2026-10-19T05:46:37.965Z weekly 0.7 https://safeguard.sh/resources/blog/do-small-companies-need-an-sbom 2026-10-19T05:46:38.062Z weekly 0.7 https://safeguard.sh/resources/blog/do-staging-and-test-environments-call-real-third-party-apis 2026-10-19T05:46:38.156Z weekly 0.7 https://safeguard.sh/resources/blog/do-staging-dependencies-need-scanning-if-data-is-fake 2026-10-19T05:46:38.251Z weekly 0.7 https://safeguard.sh/resources/blog/do-static-sites-need-vulnerability-scanning 2026-10-19T05:46:38.350Z weekly 0.7 https://safeguard.sh/resources/blog/do-sub-workflows-in-low-code-inherit-the-parent-apps-security 2026-10-19T05:46:38.450Z weekly 0.7 https://safeguard.sh/resources/blog/do-third-party-sdks-in-a-childrens-app-count-as-your-data-collection 2026-10-19T05:46:38.543Z weekly 0.7 https://safeguard.sh/resources/blog/do-unity-assetbundles-contain-code-what-a-bundle-can-and-cannot-carry 2026-10-19T05:46:38.643Z weekly 0.7 https://safeguard.sh/resources/blog/do-update-bot-pull-requests-get-access-to-ci-secrets 2026-10-19T05:46:38.744Z weekly 0.7 https://safeguard.sh/resources/blog/do-update-bots-work-with-merge-queues-and-merge-trains 2026-10-19T05:46:38.845Z weekly 0.7 https://safeguard.sh/resources/blog/do-vulnerability-alerts-cover-sha-pinned-github-actions 2026-10-19T05:46:38.945Z weekly 0.7 https://safeguard.sh/resources/blog/do-vulnerability-scans-pause-during-a-release-freeze 2026-10-19T05:46:39.044Z weekly 0.7 https://safeguard.sh/resources/blog/do-watermarks-protect-shared-security-documents 2026-10-19T05:46:39.140Z weekly 0.7 https://safeguard.sh/resources/blog/do-we-need-a-cla-for-our-company-open-source-project 2026-10-19T05:46:39.232Z weekly 0.7 https://safeguard.sh/resources/blog/do-we-need-an-sbom-small-nonprofit-with-a-website-or-app 2026-10-19T05:46:39.326Z weekly 0.7 https://safeguard.sh/resources/blog/do-wordpress-core-updates-install-themselves 2026-10-19T05:46:39.427Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-a-condition-on-an-oidc-trust-policy-aws-gcp-azure 2026-10-19T05:46:39.540Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-a-private-vs-code-extension-marketplace 2026-10-19T05:46:39.651Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-a-reverse-proxy-in-front-of-nodejs 2026-10-19T05:46:39.754Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-an-ai-agent-or-a-fixed-workflow-a-decision-guide 2026-10-19T05:46:39.856Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-an-ml-bom-or-is-an-sbom-enough 2026-10-19T05:46:39.957Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-an-nda-before-sharing-an-sbom-with-a-customer 2026-10-19T05:46:40.062Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-an-sbom-for-every-container-image-build 2026-10-19T05:46:40.173Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-both-a-ci-image-gate-and-admission-control 2026-10-19T05:46:40.272Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-gradle-lockfiles-before-the-first-scan 2026-10-19T05:46:40.366Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-sam-gov-registration-to-sell-security-software-to-schools 2026-10-19T05:46:40.463Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-the-transparency-exchange-api-yet 2026-10-19T05:46:40.561Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-need-tuf-or-is-a-signed-binary-enough-for-cli-updates 2026-10-19T05:46:40.665Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-pin-dependency-versions-lockfiles-customer-answer 2026-10-19T05:46:40.766Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-scan-open-source-for-malicious-packages-customer-reply 2026-10-19T05:46:40.868Z weekly 0.7 https://safeguard.sh/resources/blog/do-you-use-open-source-how-to-answer-a-customer 2026-10-19T05:46:40.963Z weekly 0.7 https://safeguard.sh/resources/blog/docker-base-image-tag-or-digest-which-patches-faster 2026-10-19T05:46:41.061Z weekly 0.7 https://safeguard.sh/resources/blog/docker-compose-database-port-binds-all-interfaces 2026-10-19T05:46:41.161Z weekly 0.7 https://safeguard.sh/resources/blog/docker-content-trust-is-being-retired-what-to-use-instead 2026-10-19T05:46:41.253Z weekly 0.7 https://safeguard.sh/resources/blog/docker-desktop-updates-gradual-rollout-and-the-six-month-window 2026-10-19T05:46:41.351Z weekly 0.7 https://safeguard.sh/resources/blog/docker-healthcheck-without-curl-minimal-images 2026-10-19T05:46:41.454Z weekly 0.7 https://safeguard.sh/resources/blog/docker-hub-trust-badges-compared-which-fits-which-use 2026-10-19T05:46:41.561Z weekly 0.7 https://safeguard.sh/resources/blog/docker-registry-htpasswd-bcrypt-and-the-default-user-trap 2026-10-19T05:46:41.670Z weekly 0.7 https://safeguard.sh/resources/blog/docker-run-flags-to-harden-an-inference-container 2026-10-19T05:46:41.810Z weekly 0.7 https://safeguard.sh/resources/blog/docker-tag-or-digest-which-keeps-staging-and-prod-identical 2026-10-19T05:46:41.912Z weekly 0.7 https://safeguard.sh/resources/blog/dockerizing-an-ai-built-prototype-four-changes-before-it-ships 2026-10-19T05:46:42.011Z weekly 0.7 https://safeguard.sh/resources/blog/docs-as-code-for-security-teams-what-to-keep-in-git 2026-10-19T05:46:42.099Z weekly 0.7 https://safeguard.sh/resources/blog/document-a-vulnerability-you-have-not-fixed-yet 2026-10-19T05:46:42.189Z weekly 0.7 https://safeguard.sh/resources/blog/document-ssdf-practices-that-do-not-apply-to-you 2026-10-19T05:46:42.282Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-bare-python-slim-tag-pin-your-debian-release 2026-10-19T05:46:42.380Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-cached-package-need-re-verifying-before-reuse-in-ci 2026-10-19T05:46:42.479Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-cookie-banner-block-your-tags-how-to-test 2026-10-19T05:46:42.584Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-csp-replace-input-sanitizing-on-a-store-myth-vs-fact 2026-10-19T05:46:42.710Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-dependency-have-security-response-six-questions-from-openssf 2026-10-19T05:46:42.813Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-dependency-scanner-check-node-python-or-the-jdk 2026-10-19T05:46:42.959Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-dependency-update-drop-node-support-check-engines 2026-10-19T05:46:43.088Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-dependency-update-tool-run-code-from-your-project 2026-10-19T05:46:43.190Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-dependency-update-tool-update-transitive-dependencies 2026-10-19T05:46:43.282Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-falling-pentest-finding-count-mean-improvement 2026-10-19T05:46:43.377Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-faster-patching-target-cause-more-outages 2026-10-19T05:46:43.474Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-fine-tuned-model-inherit-its-base-model-license 2026-10-19T05:46:43.575Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-fips-validated-crypto-module-make-your-app-secure 2026-10-19T05:46:43.676Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-github-star-count-show-an-open-source-scanner-is-healthy 2026-10-19T05:46:43.779Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-hosted-ai-model-api-count-as-a-component-in-your-product 2026-10-19T05:46:43.887Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-leading-space-keep-a-secret-out-of-shell-history 2026-10-19T05:46:44.043Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-librarys-advisory-history-predict-its-future 2026-10-19T05:46:44.141Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-lockfile-in-your-component-library-protect-consumers 2026-10-19T05:46:44.237Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-multi-arch-container-image-need-one-sbom-per-platform 2026-10-19T05:46:44.328Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-new-aws-base-image-update-my-container-lambda 2026-10-19T05:46:44.427Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-repository-template-update-repos-already-created 2026-10-19T05:46:44.520Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-reproducible-build-make-software-secure-myth-vs-fact 2026-10-19T05:46:44.613Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-scan-cover-a-pyinstaller-or-frozen-python-app 2026-10-19T05:46:44.706Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-scanner-match-a-dependency-pinned-to-a-git-commit 2026-10-19T05:46:44.807Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-scanner-resolve-versions-from-a-maven-bom 2026-10-19T05:46:44.906Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-scanner-see-a-library-downloaded-in-a-dockerfile 2026-10-19T05:46:44.999Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-security-failure-count-as-a-dora-change-failure 2026-10-19T05:46:45.097Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-security-fix-without-a-cve-number-mean-there-was-no-problem 2026-10-19T05:46:45.193Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-self-hosted-docker-registry-need-authentication 2026-10-19T05:46:45.284Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-shared-database-weaken-monolith-decomposition-security 2026-10-19T05:46:45.378Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-signed-maven-central-artifact-mean-it-is-safe 2026-10-19T05:46:45.482Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-single-file-cli-binary-need-an-sbom 2026-10-19T05:46:45.586Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-starter-workflow-update-after-you-copy-it 2026-10-19T05:46:45.690Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-vendor-severity-rating-change-when-an-exploit-appears 2026-10-19T05:46:45.796Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-vpn-make-a-service-not-internet-facing 2026-10-19T05:46:45.897Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-vulnerability-exception-survive-a-dependency-upgrade 2026-10-19T05:46:45.991Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-vulnerability-scan-result-expire 2026-10-19T05:46:46.086Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-waf-count-as-a-compensating-control-for-prioritization 2026-10-19T05:46:46.245Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-wordpress-child-theme-protect-against-parent-bugs 2026-10-19T05:46:46.343Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-wordpress-security-plugin-replace-updates 2026-10-19T05:46:46.523Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-wordpress-theme-build-step-put-node-modules-on-production 2026-10-19T05:46:46.634Z weekly 0.7 https://safeguard.sh/resources/blog/does-a-working-demo-mean-ai-generated-code-is-secure 2026-10-19T05:46:46.742Z weekly 0.7 https://safeguard.sh/resources/blog/does-an-ai-suggested-fix-really-remove-the-vulnerability 2026-10-19T05:46:46.851Z weekly 0.7 https://safeguard.sh/resources/blog/does-an-air-gap-make-a-legacy-system-safe-myth-vs-fact 2026-10-19T05:46:46.953Z weekly 0.7 https://safeguard.sh/resources/blog/does-an-attestation-vulnerability-disclosure-program-need-a-bounty 2026-10-19T05:46:47.051Z weekly 0.7 https://safeguard.sh/resources/blog/does-an-industry-average-time-to-patch-apply-to-you 2026-10-19T05:46:47.154Z weekly 0.7 https://safeguard.sh/resources/blog/does-an-llm-know-which-cves-are-being-exploited 2026-10-19T05:46:47.291Z weekly 0.7 https://safeguard.sh/resources/blog/does-an-open-source-license-give-you-the-right-to-use-the-name 2026-10-19T05:46:47.388Z weekly 0.7 https://safeguard.sh/resources/blog/does-an-rtos-belong-in-a-firmware-sbom 2026-10-19T05:46:47.494Z weekly 0.7 https://safeguard.sh/resources/blog/does-an-sca-scanner-need-your-source-code-manifests-vs-code 2026-10-19T05:46:47.632Z weekly 0.7 https://safeguard.sh/resources/blog/does-an-unreal-engine-plugin-run-code-when-you-build 2026-10-19T05:46:47.737Z weekly 0.7 https://safeguard.sh/resources/blog/does-angular-protect-against-csrf 2026-10-19T05:46:47.853Z weekly 0.7 https://safeguard.sh/resources/blog/does-app-store-review-mean-an-app-is-safe 2026-10-19T05:46:47.953Z weekly 0.7 https://safeguard.sh/resources/blog/does-asking-an-ai-to-double-check-a-package-name-work 2026-10-19T05:46:48.047Z weekly 0.7 https://safeguard.sh/resources/blog/does-blocking-an-extension-remove-it-chrome-edge-firefox 2026-10-19T05:46:48.145Z weekly 0.7 https://safeguard.sh/resources/blog/does-bug-bounty-report-volume-measure-security 2026-10-19T05:46:48.238Z weekly 0.7 https://safeguard.sh/resources/blog/does-build-provenance-stop-a-compromised-build-platform 2026-10-19T05:46:48.332Z weekly 0.7 https://safeguard.sh/resources/blog/does-changing-the-wordpress-table-prefix-stop-sql-injection 2026-10-19T05:46:48.429Z weekly 0.7 https://safeguard.sh/resources/blog/does-chrome-dropping-the-unload-event-break-third-party-scripts 2026-10-19T05:46:48.529Z weekly 0.7 https://safeguard.sh/resources/blog/does-deleting-a-vulnerable-image-tag-fix-the-exposure 2026-10-19T05:46:48.629Z weekly 0.7 https://safeguard.sh/resources/blog/does-deleting-an-image-delete-its-sbom-and-signature 2026-10-19T05:46:48.734Z weekly 0.7 https://safeguard.sh/resources/blog/does-deleting-dead-code-reduce-vulnerability-findings 2026-10-19T05:46:48.835Z weekly 0.7 https://safeguard.sh/resources/blog/does-dependabot-update-helm-charts-and-github-actions 2026-10-19T05:46:48.931Z weekly 0.7 https://safeguard.sh/resources/blog/does-deploying-faster-make-software-less-secure 2026-10-19T05:46:49.030Z weekly 0.7 https://safeguard.sh/resources/blog/does-disabling-a-helm-subchart-remove-it-from-your-risk 2026-10-19T05:46:49.125Z weekly 0.7 https://safeguard.sh/resources/blog/does-disabling-jupyter-terminals-make-the-server-more-secure 2026-10-19T05:46:49.217Z weekly 0.7 https://safeguard.sh/resources/blog/does-dpop-protect-a-mobile-app-from-malware 2026-10-19T05:46:49.316Z weekly 0.7 https://safeguard.sh/resources/blog/does-encrypting-a-database-column-stop-sql-injection 2026-10-19T05:46:49.412Z weekly 0.7 https://safeguard.sh/resources/blog/does-epss-score-vulnerabilities-that-have-no-cve-id 2026-10-19T05:46:49.511Z weekly 0.7 https://safeguard.sh/resources/blog/does-fast-issue-response-mean-a-maintainer-is-trustworthy 2026-10-19T05:46:49.614Z weekly 0.7 https://safeguard.sh/resources/blog/does-file-order-change-your-build-output 2026-10-19T05:46:49.730Z weekly 0.7 https://safeguard.sh/resources/blog/does-finding-more-vulnerabilities-mean-your-security-got-worse 2026-10-19T05:46:49.834Z weekly 0.7 https://safeguard.sh/resources/blog/does-funding-or-sponsorship-make-an-open-source-dependency-safer 2026-10-19T05:46:49.939Z weekly 0.7 https://safeguard.sh/resources/blog/does-fuzzing-replace-dependency-scanning 2026-10-19T05:46:50.077Z weekly 0.7 https://safeguard.sh/resources/blog/does-gh-auth-login-store-your-github-token-in-plain-text 2026-10-19T05:46:50.175Z weekly 0.7 https://safeguard.sh/resources/blog/does-go-mod-list-everything-in-a-go-build-for-your-sbom 2026-10-19T05:46:50.272Z weekly 0.7 https://safeguard.sh/resources/blog/does-go-test-run-fuzz-seed-corpus-entries-by-default 2026-10-19T05:46:50.377Z weekly 0.7 https://safeguard.sh/resources/blog/does-gpl-make-you-publish-private-modifications 2026-10-19T05:46:50.479Z weekly 0.7 https://safeguard.sh/resources/blog/does-gpl-source-have-to-match-the-binary-hash 2026-10-19T05:46:50.596Z weekly 0.7 https://safeguard.sh/resources/blog/does-grounding-an-llm-with-advisories-stop-hallucination 2026-10-19T05:46:50.703Z weekly 0.7 https://safeguard.sh/resources/blog/does-hipaa-require-vulnerability-scanning 2026-10-19T05:46:50.809Z weekly 0.7 https://safeguard.sh/resources/blog/does-hsts-stop-users-clicking-through-certificate-warnings 2026-10-19T05:46:50.916Z weekly 0.7 https://safeguard.sh/resources/blog/does-https-protect-you-on-public-wi-fi-hsts-explained 2026-10-19T05:46:51.028Z weekly 0.7 https://safeguard.sh/resources/blog/does-hugging-face-scanning-make-a-model-safe-to-load 2026-10-19T05:46:51.129Z weekly 0.7 https://safeguard.sh/resources/blog/does-importing-a-package-in-an-airflow-dag-file-run-its-code 2026-10-19T05:46:51.223Z weekly 0.7 https://safeguard.sh/resources/blog/does-installing-a-python-package-run-code-sdist-vs-wheel 2026-10-19T05:46:51.318Z weekly 0.7 https://safeguard.sh/resources/blog/does-integrity-checking-work-the-same-in-every-language 2026-10-19T05:46:51.420Z weekly 0.7 https://safeguard.sh/resources/blog/does-internet-exposure-change-vulnerability-priority 2026-10-19T05:46:51.527Z weekly 0.7 https://safeguard.sh/resources/blog/does-iso-27001-require-a-penetration-test 2026-10-19T05:46:51.630Z weekly 0.7 https://safeguard.sh/resources/blog/does-locale-or-timezone-change-your-build-output 2026-10-19T05:46:51.807Z weekly 0.7 https://safeguard.sh/resources/blog/does-mosquitto-allow-anonymous-connections-by-default 2026-10-19T05:46:51.913Z weekly 0.7 https://safeguard.sh/resources/blog/does-multi-factor-authentication-stop-a-software-supply-chain-attack 2026-10-19T05:46:52.009Z weekly 0.7 https://safeguard.sh/resources/blog/does-my-ai-chat-provider-see-data-from-a-security-connector 2026-10-19T05:46:52.104Z weekly 0.7 https://safeguard.sh/resources/blog/does-my-dependency-scanner-cover-ml-libraries-and-model-files 2026-10-19T05:46:52.200Z weekly 0.7 https://safeguard.sh/resources/blog/does-my-fork-contain-the-upstream-security-fix 2026-10-19T05:46:52.296Z weekly 0.7 https://safeguard.sh/resources/blog/does-new-admission-policy-affect-running-pods 2026-10-19T05:46:52.394Z weekly 0.7 https://safeguard.sh/resources/blog/does-npm-audit-check-devdependencies 2026-10-19T05:46:52.499Z weekly 0.7 https://safeguard.sh/resources/blog/does-npm-audit-work-through-an-internal-package-mirror 2026-10-19T05:46:52.602Z weekly 0.7 https://safeguard.sh/resources/blog/does-npm-sbom-include-devdependencies 2026-10-19T05:46:52.703Z weekly 0.7 https://safeguard.sh/resources/blog/does-nydfs-500-12-mfa-cover-developer-tools-and-ci-consoles 2026-10-19T05:46:52.810Z weekly 0.7 https://safeguard.sh/resources/blog/does-oidc-remove-every-secret-from-your-ci-pipeline 2026-10-19T05:46:52.931Z weekly 0.7 https://safeguard.sh/resources/blog/does-one-security-txt-cover-all-your-subdomains 2026-10-19T05:46:53.030Z weekly 0.7 https://safeguard.sh/resources/blog/does-pandas-read-sql-protect-against-sql-injection 2026-10-19T05:46:53.127Z weekly 0.7 https://safeguard.sh/resources/blog/does-patching-the-os-fix-vulnerable-app-dependencies 2026-10-19T05:46:53.225Z weekly 0.7 https://safeguard.sh/resources/blog/does-pip-install-in-a-notebook-cell-leave-a-dependency-record 2026-10-19T05:46:53.322Z weekly 0.7 https://safeguard.sh/resources/blog/does-pip-wheel-cache-skip-hash-checking 2026-10-19T05:46:53.416Z weekly 0.7 https://safeguard.sh/resources/blog/does-prevents-supply-chain-attacks-mean-block-detect-or-respond 2026-10-19T05:46:53.521Z weekly 0.7 https://safeguard.sh/resources/blog/does-protobuf-type-safety-replace-input-validation 2026-10-19T05:46:53.633Z weekly 0.7 https://safeguard.sh/resources/blog/does-rails-api-mode-need-csrf-protection 2026-10-19T05:46:53.739Z weekly 0.7 https://safeguard.sh/resources/blog/does-reachability-analysis-count-test-code-and-dev-dependencies 2026-10-19T05:46:53.848Z weekly 0.7 https://safeguard.sh/resources/blog/does-reachability-analysis-help-research-code-with-many-dependencies 2026-10-19T05:46:53.946Z weekly 0.7 https://safeguard.sh/resources/blog/does-reachability-analysis-make-two-scanner-counts-incomparable 2026-10-19T05:46:54.042Z weekly 0.7 https://safeguard.sh/resources/blog/does-reachability-analysis-need-the-advisory-to-name-the-function 2026-10-19T05:46:54.134Z weekly 0.7 https://safeguard.sh/resources/blog/does-reachability-analysis-work-on-ai-agent-code 2026-10-19T05:46:54.229Z weekly 0.7 https://safeguard.sh/resources/blog/does-redacting-code-before-asking-ai-actually-protect-it 2026-10-19T05:46:54.323Z weekly 0.7 https://safeguard.sh/resources/blog/does-redis-cve-2025-49844-affect-me-and-how-do-i-fix-it 2026-10-19T05:46:54.423Z weekly 0.7 https://safeguard.sh/resources/blog/does-reducing-dependencies-reduce-your-remediation-workload 2026-10-19T05:46:54.522Z weekly 0.7 https://safeguard.sh/resources/blog/does-registry-mirrors-in-daemon-json-work-for-other-registries 2026-10-19T05:46:54.625Z weekly 0.7 https://safeguard.sh/resources/blog/does-require-sha-pinning-apply-to-reusable-workflows 2026-10-19T05:46:54.729Z weekly 0.7 https://safeguard.sh/resources/blog/does-running-gpl-software-in-your-saas-mean-sharing-source 2026-10-19T05:46:54.826Z weekly 0.7 https://safeguard.sh/resources/blog/does-sbom-generation-slow-your-ci-pipeline-how-to-measure-it 2026-10-19T05:46:54.924Z weekly 0.7 https://safeguard.sh/resources/blog/does-sca-cover-the-dependencies-of-mcp-servers-and-ai-agents 2026-10-19T05:46:55.024Z weekly 0.7 https://safeguard.sh/resources/blog/does-scanning-or-a-honeypot-hit-count-as-exploitation 2026-10-19T05:46:55.119Z weekly 0.7 https://safeguard.sh/resources/blog/does-semver-build-metadata-help-label-a-hotfix 2026-10-19T05:46:55.218Z weekly 0.7 https://safeguard.sh/resources/blog/does-server-side-tagging-reduce-third-party-script-risk 2026-10-19T05:46:55.317Z weekly 0.7 https://safeguard.sh/resources/blog/does-shipping-faster-make-software-less-secure 2026-10-19T05:46:55.419Z weekly 0.7 https://safeguard.sh/resources/blog/does-spack-sign-its-binary-packages 2026-10-19T05:46:55.541Z weekly 0.7 https://safeguard.sh/resources/blog/does-spark-io-encryption-protect-my-output-tables 2026-10-19T05:46:55.637Z weekly 0.7 https://safeguard.sh/resources/blog/does-spring-security-add-content-security-policy 2026-10-19T05:46:55.731Z weekly 0.7 https://safeguard.sh/resources/blog/does-sri-cover-stylesheets-and-preloads-on-a-store 2026-10-19T05:46:55.830Z weekly 0.7 https://safeguard.sh/resources/blog/does-store-approval-last-why-extensions-need-monitoring-after-review 2026-10-19T05:46:55.920Z weekly 0.7 https://safeguard.sh/resources/blog/does-suppressing-a-finding-change-your-sbom 2026-10-19T05:46:56.015Z weekly 0.7 https://safeguard.sh/resources/blog/does-test-coverage-percentage-measure-security 2026-10-19T05:46:56.116Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-ai-show-its-evidence-explainability-test-for-security-tools 2026-10-19T05:46:56.212Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-build-directory-path-change-your-binary 2026-10-19T05:46:56.305Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-demo-fix-build-how-to-check-a-scanner-fix-pr 2026-10-19T05:46:56.398Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-hash-pypi-shows-protect-you-from-a-tampered-package 2026-10-19T05:46:56.499Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-latest-django-patch-release-always-keep-compatibility 2026-10-19T05:46:56.597Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-library-have-a-security-policy-what-to-look-for 2026-10-19T05:46:56.697Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-package-repository-link-match-the-source-you-expect 2026-10-19T05:46:56.996Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-plus-sign-in-a-version-number-change-which-is-newer 2026-10-19T05:46:57.249Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-scanner-demo-show-direct-and-transitive-dependencies 2026-10-19T05:46:57.547Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-spark-web-ui-have-authentication-built-in 2026-10-19T05:46:57.908Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-ssdf-have-maturity-levels-or-tiers-myth-vs-fact 2026-10-19T05:46:58.013Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-strangler-facade-need-its-own-security-controls 2026-10-19T05:46:58.107Z weekly 0.7 https://safeguard.sh/resources/blog/does-the-verified-creator-badge-make-a-github-action-safe 2026-10-19T05:46:58.200Z weekly 0.7 https://safeguard.sh/resources/blog/does-two-person-review-stop-a-malicious-commit 2026-10-19T05:46:58.294Z weekly 0.7 https://safeguard.sh/resources/blog/does-typescript-protect-a-front-end-from-bad-data 2026-10-19T05:46:58.400Z weekly 0.7 https://safeguard.sh/resources/blog/does-visual-regression-testing-catch-a-bad-dependency-update 2026-10-19T05:46:58.492Z weekly 0.7 https://safeguard.sh/resources/blog/does-voila-hide-your-notebook-code-what-a-dashboard-still-exposes 2026-10-19T05:46:58.587Z weekly 0.7 https://safeguard.sh/resources/blog/does-wordpress-roll-back-a-plugin-update-that-crashes-the-site 2026-10-19T05:46:58.699Z weekly 0.7 https://safeguard.sh/resources/blog/does-wp-plugin-verify-checksums-prove-a-plugin-is-safe 2026-10-19T05:46:58.804Z weekly 0.7 https://safeguard.sh/resources/blog/does-your-cli-trust-config-inside-the-repo-it-runs-in-trust-prompt 2026-10-19T05:46:58.908Z weekly 0.7 https://safeguard.sh/resources/blog/does-your-dependency-scanner-read-lockfiles-poc-test 2026-10-19T05:46:59.015Z weekly 0.7 https://safeguard.sh/resources/blog/does-your-eula-conflict-with-the-open-source-in-your-product 2026-10-19T05:46:59.123Z weekly 0.7 https://safeguard.sh/resources/blog/does-your-private-registry-support-npm-registry-signatures 2026-10-19T05:46:59.303Z weekly 0.7 https://safeguard.sh/resources/blog/does-your-store-inventory-include-client-side-libraries 2026-10-19T05:46:59.401Z weekly 0.7 https://safeguard.sh/resources/blog/does-your-test-runner-run-dependency-code-with-ci-secrets 2026-10-19T05:46:59.494Z weekly 0.7 https://safeguard.sh/resources/blog/does-your-unity-webgl-template-load-scripts-nobody-reviewed 2026-10-19T05:46:59.593Z weekly 0.7 https://safeguard.sh/resources/blog/does-your-update-bot-schedule-delay-security-prs 2026-10-19T05:46:59.695Z weekly 0.7 https://safeguard.sh/resources/blog/does-zero-cves-mean-a-package-is-safe 2026-10-19T05:46:59.808Z weekly 0.7 https://safeguard.sh/resources/blog/domain-transfer-auth-codes-how-to-handle-them-safely 2026-10-19T05:46:59.903Z weekly 0.7 https://safeguard.sh/resources/blog/donated-software-checklist-what-to-check-before-you-accept 2026-10-19T05:46:59.997Z weekly 0.7 https://safeguard.sh/resources/blog/dora-metrics-per-service-so-measure-security-per-service 2026-10-19T05:47:00.091Z weekly 0.7 https://safeguard.sh/resources/blog/dora-misuse-warnings-applied-to-security-metrics 2026-10-19T05:47:00.186Z weekly 0.7 https://safeguard.sh/resources/blog/dora-pervasive-security-measures-explained 2026-10-19T05:47:00.279Z weekly 0.7 https://safeguard.sh/resources/blog/dotnet-user-secrets-are-for-development-not-production 2026-10-19T05:47:00.392Z weekly 0.7 https://safeguard.sh/resources/blog/dual-licensing-your-own-code-what-to-record-for-investors 2026-10-19T05:47:00.505Z weekly 0.7 https://safeguard.sh/resources/blog/duplicate-dependencies-across-merged-codebases-align-versions 2026-10-19T05:47:00.619Z weekly 0.7 https://safeguard.sh/resources/blog/dynamic-secrets-or-rotated-passwords-for-a-payments-database 2026-10-19T05:47:00.826Z weekly 0.7 https://safeguard.sh/resources/blog/edge-bundle-size-limits-shape-your-dependency-choices 2026-10-19T05:47:00.952Z weekly 0.7 https://safeguard.sh/resources/blog/edge-device-patch-statistics-do-not-describe-your-whole-estate 2026-10-19T05:47:01.059Z weekly 0.7 https://safeguard.sh/resources/blog/edge-function-dependency-review-checklist 2026-10-19T05:47:01.181Z weekly 0.7 https://safeguard.sh/resources/blog/edge-host-patterns-for-blocking-extensions-on-sensitive-sites 2026-10-19T05:47:01.294Z weekly 0.7 https://safeguard.sh/resources/blog/edge-runtimes-block-eval-what-it-means-for-dependencies 2026-10-19T05:47:01.537Z weekly 0.7 https://safeguard.sh/resources/blog/electron-support-policy-latest-three-majors-and-what-to-record 2026-10-19T05:47:01.657Z weekly 0.7 https://safeguard.sh/resources/blog/email-and-domain-security-glossary-for-software-teams 2026-10-19T05:47:02.219Z weekly 0.7 https://safeguard.sh/resources/blog/email-attachment-link-or-portal-for-security-documents 2026-10-19T05:47:02.456Z weekly 0.7 https://safeguard.sh/resources/blog/email-display-name-rules-that-protect-sender-trust 2026-10-19T05:47:02.917Z weekly 0.7 https://safeguard.sh/resources/blog/email-header-injection-in-contact-forms-how-to-prevent-it 2026-10-19T05:47:03.028Z weekly 0.7 https://safeguard.sh/resources/blog/email-list-consent-hygiene-that-protects-delivery 2026-10-19T05:47:03.123Z weekly 0.7 https://safeguard.sh/resources/blog/email-otp-or-sms-otp-which-is-safer-to-send 2026-10-19T05:47:03.215Z weekly 0.7 https://safeguard.sh/resources/blog/email-template-ask-a-maintainer-which-license-applies 2026-10-19T05:47:03.326Z weekly 0.7 https://safeguard.sh/resources/blog/emergency-change-path-for-critical-advisories 2026-10-19T05:47:03.424Z weekly 0.7 https://safeguard.sh/resources/blog/emergency-dependency-patch-during-a-soc-2-observation-window 2026-10-19T05:47:03.541Z weekly 0.7 https://safeguard.sh/resources/blog/emergency-dependency-patch-runbook-step-by-step 2026-10-19T05:47:03.655Z weekly 0.7 https://safeguard.sh/resources/blog/emergency-fix-applied-only-in-prod-how-to-reconcile-dependency-drift 2026-10-19T05:47:03.758Z weekly 0.7 https://safeguard.sh/resources/blog/emergency-intake-path-for-urgent-security-patches 2026-10-19T05:47:03.860Z weekly 0.7 https://safeguard.sh/resources/blog/emergency-security-fix-review-what-to-keep-and-what-to-defer 2026-10-19T05:47:03.956Z weekly 0.7 https://safeguard.sh/resources/blog/employee-open-source-contributions-in-diligence 2026-10-19T05:47:04.064Z weekly 0.7 https://safeguard.sh/resources/blog/employee-who-maintains-an-open-source-project-leaves-what-to-do 2026-10-19T05:47:04.160Z weekly 0.7 https://safeguard.sh/resources/blog/encryption-answers-that-mean-something-security-vendor-keys 2026-10-19T05:47:04.260Z weekly 0.7 https://safeguard.sh/resources/blog/end-of-sale-end-of-support-end-of-life-what-each-date-means 2026-10-19T05:47:04.358Z weekly 0.7 https://safeguard.sh/resources/blog/enforce-pip-require-virtualenv-so-packages-never-install-globally 2026-10-19T05:47:04.474Z weekly 0.7 https://safeguard.sh/resources/blog/enterprise-readiness-roadmap-for-a-saas-vendor-four-quarters 2026-10-19T05:47:04.572Z weekly 0.7 https://safeguard.sh/resources/blog/enterprise-sso-and-scim-what-do-buyers-mean-by-identity-requirements 2026-10-19T05:47:04.687Z weekly 0.7 https://safeguard.sh/resources/blog/environment-variables-or-mounted-files-for-secrets-in-ci-pods 2026-10-19T05:47:04.802Z weekly 0.7 https://safeguard.sh/resources/blog/envoy-sds-rotate-tls-certificates-without-redeploy 2026-10-19T05:47:04.909Z weekly 0.7 https://safeguard.sh/resources/blog/eo-14028-section-4e-ten-clauses-in-plain-words 2026-10-19T05:47:05.432Z weekly 0.7 https://safeguard.sh/resources/blog/ephemeral-ci-migration-readiness-checklist 2026-10-19T05:47:06.346Z weekly 0.7 https://safeguard.sh/resources/blog/epss-api-lookup-by-cve-what-the-fields-mean 2026-10-19T05:47:06.502Z weekly 0.7 https://safeguard.sh/resources/blog/epss-api-or-daily-csv-which-to-use 2026-10-19T05:47:06.758Z weekly 0.7 https://safeguard.sh/resources/blog/epss-model-versions-why-a-score-history-jumps 2026-10-19T05:47:06.921Z weekly 0.7 https://safeguard.sh/resources/blog/epss-or-patch-time-report-which-question-does-each-answer 2026-10-19T05:47:07.032Z weekly 0.7 https://safeguard.sh/resources/blog/epss-percentile-or-probability-which-belongs-on-a-dashboard 2026-10-19T05:47:07.140Z weekly 0.7 https://safeguard.sh/resources/blog/epss-threshold-that-matches-a-cvss-critical-filter 2026-10-19T05:47:07.290Z weekly 0.7 https://safeguard.sh/resources/blog/escalating-a-blocked-dependency-engineering-security-dispute 2026-10-19T05:47:07.523Z weekly 0.7 https://safeguard.sh/resources/blog/eslint-plugin-security-which-rules-to-keep 2026-10-19T05:47:07.638Z weekly 0.7 https://safeguard.sh/resources/blog/estimate-a-dependency-upgrade-from-your-own-past-upgrades 2026-10-19T05:47:07.741Z weekly 0.7 https://safeguard.sh/resources/blog/evidence-bundle-for-customer-hosted-container-or-installer 2026-10-19T05:47:07.844Z weekly 0.7 https://safeguard.sh/resources/blog/evidence-collector-script-with-gh-api-for-small-teams 2026-10-19T05:47:07.946Z weekly 0.7 https://safeguard.sh/resources/blog/evidence-flow-scanner-to-auditor-who-touches-what 2026-10-19T05:47:08.043Z weekly 0.7 https://safeguard.sh/resources/blog/evidence-for-tools-with-no-api-manual-capture-routine 2026-10-19T05:47:08.140Z weekly 0.7 https://safeguard.sh/resources/blog/evidence-pack-for-ai-assistant-and-mcp-questionnaire-answers 2026-10-19T05:47:08.239Z weekly 0.7 https://safeguard.sh/resources/blog/evidence-register-columns-owner-source-date-and-expiry 2026-10-19T05:47:08.338Z weekly 0.7 https://safeguard.sh/resources/blog/evidence-that-a-disaster-recovery-plan-works-for-customer-reviews 2026-10-19T05:47:08.438Z weekly 0.7 https://safeguard.sh/resources/blog/evidence-that-container-images-are-rebuilt-on-schedule 2026-10-19T05:47:08.552Z weekly 0.7 https://safeguard.sh/resources/blog/evidence-to-attach-to-open-source-questionnaire-answers 2026-10-19T05:47:08.653Z weekly 0.7 https://safeguard.sh/resources/blog/evidence-to-keep-when-an-ai-built-prototype-becomes-a-product 2026-10-19T05:47:08.753Z weekly 0.7 https://safeguard.sh/resources/blog/exception-and-waiver-process-for-vulnerabilities-by-team-size 2026-10-19T05:47:08.913Z weekly 0.7 https://safeguard.sh/resources/blog/exception-expiry-timestamp-timezone-and-end-of-day-rules 2026-10-19T05:47:09.020Z weekly 0.7 https://safeguard.sh/resources/blog/exception-for-a-service-account-that-cannot-use-mfa 2026-10-19T05:47:09.111Z weekly 0.7 https://safeguard.sh/resources/blog/exception-process-myths-auditors-do-not-believe 2026-10-19T05:47:09.205Z weekly 0.7 https://safeguard.sh/resources/blog/exception-record-for-a-base-image-vulnerability-with-no-fix 2026-10-19T05:47:09.308Z weekly 0.7 https://safeguard.sh/resources/blog/exception-request-template-for-an-unapproved-package 2026-10-19T05:47:09.413Z weekly 0.7 https://safeguard.sh/resources/blog/exceptions-for-vendored-or-forked-code-you-do-not-own 2026-10-19T05:47:09.516Z weekly 0.7 https://safeguard.sh/resources/blog/excessive-agency-applied-to-a-remediation-bot 2026-10-19T05:47:09.620Z weekly 0.7 https://safeguard.sh/resources/blog/exclude-a-path-or-suppress-a-finding-test-fixtures-and-samples 2026-10-19T05:47:09.719Z weekly 0.7 https://safeguard.sh/resources/blog/exit-codes-for-a-security-cli-in-ci-what-should-fail-the-build 2026-10-19T05:47:09.822Z weekly 0.7 https://safeguard.sh/resources/blog/exit-plan-for-a-school-software-contract-what-to-delete-and-prove 2026-10-19T05:47:09.912Z weekly 0.7 https://safeguard.sh/resources/blog/expired-email-domains-and-account-recovery-risk 2026-10-19T05:47:10.008Z weekly 0.7 https://safeguard.sh/resources/blog/explain-a-cvss-vector-to-a-manager-in-three-sentences 2026-10-19T05:47:10.125Z weekly 0.7 https://safeguard.sh/resources/blog/explain-an-sbom-to-a-lawyer-or-procurement-lead 2026-10-19T05:47:10.214Z weekly 0.7 https://safeguard.sh/resources/blog/explain-an-sca-report-to-executives 2026-10-19T05:47:10.306Z weekly 0.7 https://safeguard.sh/resources/blog/explain-automated-fix-pull-requests-to-an-auditor 2026-10-19T05:47:10.402Z weekly 0.7 https://safeguard.sh/resources/blog/explain-defense-in-depth-with-an-everyday-analogy 2026-10-19T05:47:10.503Z weekly 0.7 https://safeguard.sh/resources/blog/explain-dora-metrics-to-a-ciso 2026-10-19T05:47:10.608Z weekly 0.7 https://safeguard.sh/resources/blog/explain-known-exploited-vulnerabilities-to-non-security-leaders 2026-10-19T05:47:10.736Z weekly 0.7 https://safeguard.sh/resources/blog/explain-oidc-instead-of-stored-cloud-keys-to-buyers 2026-10-19T05:47:10.843Z weekly 0.7 https://safeguard.sh/resources/blog/explain-reachability-analysis-to-a-school-board-or-committee 2026-10-19T05:47:10.940Z weekly 0.7 https://safeguard.sh/resources/blog/explain-reachability-to-a-developer-who-says-we-never-call-that 2026-10-19T05:47:11.045Z weekly 0.7 https://safeguard.sh/resources/blog/explaining-a-legacy-system-exception-to-an-auditor-five-artifacts 2026-10-19T05:47:11.151Z weekly 0.7 https://safeguard.sh/resources/blog/explaining-autonomous-remediation-safety-to-your-ciso 2026-10-19T05:47:11.246Z weekly 0.7 https://safeguard.sh/resources/blog/exploit-intelligence-glossary-poc-in-the-wild-attempted-exploitation 2026-10-19T05:47:11.347Z weekly 0.7 https://safeguard.sh/resources/blog/export-an-sbom-during-a-scanner-demo-what-to-check 2026-10-19T05:47:11.446Z weekly 0.7 https://safeguard.sh/resources/blog/export-an-spdx-sbom-from-github-for-a-data-room 2026-10-19T05:47:11.548Z weekly 0.7 https://safeguard.sh/resources/blog/export-github-member-list-for-access-review-evidence 2026-10-19T05:47:11.656Z weekly 0.7 https://safeguard.sh/resources/blog/exposure-window-faq-quick-answers 2026-10-19T05:47:11.759Z weekly 0.7 https://safeguard.sh/resources/blog/exposure-window-metric-for-vulnerability-management 2026-10-19T05:47:11.866Z weekly 0.7 https://safeguard.sh/resources/blog/express-json-body-size-limit-default-100kb 2026-10-19T05:47:11.967Z weekly 0.7 https://safeguard.sh/resources/blog/express-stack-traces-in-responses-node-env-production 2026-10-19T05:47:12.069Z weekly 0.7 https://safeguard.sh/resources/blog/express-trust-proxy-setting-req-ip-spoofing 2026-10-19T05:47:12.161Z weekly 0.7 https://safeguard.sh/resources/blog/express-vs-fastify-request-limit-defaults-compared 2026-10-19T05:47:12.251Z weekly 0.7 https://safeguard.sh/resources/blog/extended-support-after-end-of-support-questions-to-ask 2026-10-19T05:47:12.347Z weekly 0.7 https://safeguard.sh/resources/blog/extension-policy-conflicts-which-rule-wins 2026-10-19T05:47:12.445Z weekly 0.7 https://safeguard.sh/resources/blog/extension-policy-precedence-chrome-edge-and-firefox-cheat-sheet 2026-10-19T05:47:12.536Z weekly 0.7 https://safeguard.sh/resources/blog/failed-deployment-recovery-time-vs-vulnerability-time-to-remediate 2026-10-19T05:47:12.638Z weekly 0.7 https://safeguard.sh/resources/blog/failed-scans-can-look-like-fixed-vulnerabilities 2026-10-19T05:47:12.733Z weekly 0.7 https://safeguard.sh/resources/blog/failing-compliance-check-fix-explain-or-exclude 2026-10-19T05:47:12.835Z weekly 0.7 https://safeguard.sh/resources/blog/false-matches-when-sbom-component-names-collide-in-an-incident 2026-10-19T05:47:12.934Z weekly 0.7 https://safeguard.sh/resources/blog/false-negative-or-false-positive-which-reachability-error-costs-more 2026-10-19T05:47:13.042Z weekly 0.7 https://safeguard.sh/resources/blog/fastapi-global-and-router-dependencies-for-auth 2026-10-19T05:47:13.138Z weekly 0.7 https://safeguard.sh/resources/blog/fastapi-oauth2passwordbearer-what-it-checks-and-what-it-does-not 2026-10-19T05:47:13.232Z weekly 0.7 https://safeguard.sh/resources/blog/fastapi-settings-secrets-env-files-and-secrets-dir 2026-10-19T05:47:13.325Z weekly 0.7 https://safeguard.sh/resources/blog/fastify-ajv-defaults-coercetypes-removeadditional 2026-10-19T05:47:13.436Z weekly 0.7 https://safeguard.sh/resources/blog/fastify-bodylimit-default-1mib-what-to-set 2026-10-19T05:47:13.594Z weekly 0.7 https://safeguard.sh/resources/blog/fastify-json-prototype-poisoning-onprotopoisoning-default 2026-10-19T05:47:13.702Z weekly 0.7 https://safeguard.sh/resources/blog/fastify-maxparamlength-redos-route-parameters 2026-10-19T05:47:13.806Z weekly 0.7 https://safeguard.sh/resources/blog/fastify-rate-limit-in-memory-store-multiple-instances 2026-10-19T05:47:13.915Z weekly 0.7 https://safeguard.sh/resources/blog/fastify-trustproxy-and-rate-limit-keys 2026-10-19T05:47:14.010Z weekly 0.7 https://safeguard.sh/resources/blog/fetch-a-cve-record-from-cve-services-and-read-its-containers 2026-10-19T05:47:14.126Z weekly 0.7 https://safeguard.sh/resources/blog/fetch-metadata-sec-fetch-site-resource-isolation-policy 2026-10-19T05:47:14.234Z weekly 0.7 https://safeguard.sh/resources/blog/fewer-hardware-variants-cheaper-security-updates-decision-guide 2026-10-19T05:47:14.342Z weekly 0.7 https://safeguard.sh/resources/blog/ffile-prefix-map-remove-build-paths-from-binaries 2026-10-19T05:47:14.445Z weekly 0.7 https://safeguard.sh/resources/blog/fields-for-a-vulnerability-report-tracking-record 2026-10-19T05:47:14.546Z weekly 0.7 https://safeguard.sh/resources/blog/final-docker-stage-needs-node-python-java-go 2026-10-19T05:47:14.644Z weekly 0.7 https://safeguard.sh/resources/blog/find-duplicate-copies-of-a-library-in-a-frontend-app 2026-10-19T05:47:14.754Z weekly 0.7 https://safeguard.sh/resources/blog/find-duplicate-library-versions-in-your-sbom-and-collapse-them 2026-10-19T05:47:14.863Z weekly 0.7 https://safeguard.sh/resources/blog/find-every-product-that-ships-a-vulnerable-component 2026-10-19T05:47:14.954Z weekly 0.7 https://safeguard.sh/resources/blog/find-manifests-your-scanner-silently-skipped-with-git-ls-files 2026-10-19T05:47:15.110Z weekly 0.7 https://safeguard.sh/resources/blog/find-script-tags-left-behind-by-vendors-you-stopped-using 2026-10-19T05:47:15.204Z weekly 0.7 https://safeguard.sh/resources/blog/find-shadow-graphql-grpc-and-event-endpoints-api-inventory 2026-10-19T05:47:15.295Z weekly 0.7 https://safeguard.sh/resources/blog/find-the-build-systems-in-a-legacy-monorepo-before-you-scan 2026-10-19T05:47:15.397Z weekly 0.7 https://safeguard.sh/resources/blog/find-the-extension-id-for-an-allowlist-vs-code-edge-firefox 2026-10-19T05:47:15.497Z weekly 0.7 https://safeguard.sh/resources/blog/find-the-guilty-update-in-a-grouped-fix-pr-with-git-bisect 2026-10-19T05:47:15.596Z weekly 0.7 https://safeguard.sh/resources/blog/find-who-still-calls-a-deprecated-api-before-you-remove-it 2026-10-19T05:47:15.712Z weekly 0.7 https://safeguard.sh/resources/blog/find-why-a-dependency-is-in-your-bazel-graph 2026-10-19T05:47:15.842Z weekly 0.7 https://safeguard.sh/resources/blog/firefox-private-browsing-extensions-policy 2026-10-19T05:47:15.951Z weekly 0.7 https://safeguard.sh/resources/blog/firmware-sbom-myths-versus-facts-for-embedded-teams 2026-10-19T05:47:16.056Z weekly 0.7 https://safeguard.sh/resources/blog/first-1000-units-security-launch-checklist-for-a-hardware-startup 2026-10-19T05:47:16.146Z weekly 0.7 https://safeguard.sh/resources/blog/first-24-hours-after-a-component-advisory-vendor-runbook 2026-10-19T05:47:16.236Z weekly 0.7 https://safeguard.sh/resources/blog/first-90-days-of-an-open-source-program-for-a-small-company 2026-10-19T05:47:16.329Z weekly 0.7 https://safeguard.sh/resources/blog/first-appsec-hire-at-fifty-engineers-what-to-automate-first 2026-10-19T05:47:16.425Z weekly 0.7 https://safeguard.sh/resources/blog/first-commit-checklist-for-an-ai-built-prototype 2026-10-19T05:47:16.526Z weekly 0.7 https://safeguard.sh/resources/blog/first-hour-after-a-security-deploy-checklist 2026-10-19T05:47:16.640Z weekly 0.7 https://safeguard.sh/resources/blog/first-hour-checks-after-a-security-release 2026-10-19T05:47:16.744Z weekly 0.7 https://safeguard.sh/resources/blog/first-load-of-an-unknown-model-in-a-no-network-container 2026-10-19T05:47:16.863Z weekly 0.7 https://safeguard.sh/resources/blog/first-message-to-a-supplier-when-their-product-may-be-affected 2026-10-19T05:47:16.982Z weekly 0.7 https://safeguard.sh/resources/blog/first-month-supply-chain-security-plan-weeks-two-to-four 2026-10-19T05:47:17.073Z weekly 0.7 https://safeguard.sh/resources/blog/first-registry-scan-baseline-and-ratchet-plan 2026-10-19T05:47:17.166Z weekly 0.7 https://safeguard.sh/resources/blog/first-week-after-a-term-sheet-supply-chain-checklist 2026-10-19T05:47:17.272Z weekly 0.7 https://safeguard.sh/resources/blog/first-week-secure-sdlc-onboarding-for-a-new-developer 2026-10-19T05:47:17.372Z weekly 0.7 https://safeguard.sh/resources/blog/first-week-supply-chain-security-plan-small-team 2026-10-19T05:47:17.470Z weekly 0.7 https://safeguard.sh/resources/blog/five-container-security-numbers-to-report-to-leadership 2026-10-19T05:47:17.570Z weekly 0.7 https://safeguard.sh/resources/blog/five-dora-metrics-which-ones-touch-security 2026-10-19T05:47:17.681Z weekly 0.7 https://safeguard.sh/resources/blog/five-engineer-team-vulnerability-triage-without-a-security-hire 2026-10-19T05:47:17.783Z weekly 0.7 https://safeguard.sh/resources/blog/five-lifecycle-statuses-for-your-dependency-inventory 2026-10-19T05:47:17.909Z weekly 0.7 https://safeguard.sh/resources/blog/five-measures-that-show-your-security-news-triage-is-working 2026-10-19T05:47:18.002Z weekly 0.7 https://safeguard.sh/resources/blog/five-minute-library-check-with-osv-and-deps-dev 2026-10-19T05:47:18.107Z weekly 0.7 https://safeguard.sh/resources/blog/five-minute-script-explaining-reachability-on-a-customer-call 2026-10-19T05:47:18.201Z weekly 0.7 https://safeguard.sh/resources/blog/five-myths-about-dependency-hygiene-in-edtech 2026-10-19T05:47:18.300Z weekly 0.7 https://safeguard.sh/resources/blog/five-myths-about-how-vulnerability-scanners-work 2026-10-19T05:47:18.398Z weekly 0.7 https://safeguard.sh/resources/blog/five-questions-to-pick-a-dependency-scanning-deployment-model 2026-10-19T05:47:18.496Z weekly 0.7 https://safeguard.sh/resources/blog/five-questions-to-pick-a-security-testing-method 2026-10-19T05:47:18.599Z weekly 0.7 https://safeguard.sh/resources/blog/five-questions-to-threat-model-a-plugin-system-before-launch 2026-10-19T05:47:18.730Z weekly 0.7 https://safeguard.sh/resources/blog/five-security-documents-a-small-engineering-team-needs 2026-10-19T05:47:18.842Z weekly 0.7 https://safeguard.sh/resources/blog/five-sentence-executive-summary-for-a-supply-chain-postmortem 2026-10-19T05:47:18.936Z weekly 0.7 https://safeguard.sh/resources/blog/five-stages-of-an-open-source-review-and-what-to-automate 2026-10-19T05:47:19.045Z weekly 0.7 https://safeguard.sh/resources/blog/five-thresholds-that-show-open-source-scanners-no-longer-scale 2026-10-19T05:47:19.141Z weekly 0.7 https://safeguard.sh/resources/blog/five-triggers-that-mean-a-change-needs-a-design-review 2026-10-19T05:47:19.232Z weekly 0.7 https://safeguard.sh/resources/blog/five-whys-in-security-postmortems-use-and-limits 2026-10-19T05:47:19.327Z weekly 0.7 https://safeguard.sh/resources/blog/fix-a-vulnerability-privately-github-temporary-private-fork 2026-10-19T05:47:19.429Z weekly 0.7 https://safeguard.sh/resources/blog/fix-available-but-not-applied-metric-for-executives 2026-10-19T05:47:19.530Z weekly 0.7 https://safeguard.sh/resources/blog/fix-base-image-findings-first-why-layer-order-matters 2026-10-19T05:47:19.631Z weekly 0.7 https://safeguard.sh/resources/blog/fix-is-in-a-newer-os-release-what-to-do-with-your-base-image 2026-10-19T05:47:19.734Z weekly 0.7 https://safeguard.sh/resources/blog/fix-mitigate-or-accept-ssdf-rv-2-2-risk-response-records 2026-10-19T05:47:19.846Z weekly 0.7 https://safeguard.sh/resources/blog/fix-pr-fails-on-an-unrelated-test-what-to-check-before-you-rerun 2026-10-19T05:47:19.942Z weekly 0.7 https://safeguard.sh/resources/blog/fix-pr-freeze-windows-release-freezes-and-holidays 2026-10-19T05:47:20.043Z weekly 0.7 https://safeguard.sh/resources/blog/fix-pr-proposes-a-version-that-was-later-yanked-what-to-do 2026-10-19T05:47:20.141Z weekly 0.7 https://safeguard.sh/resources/blog/fix-prs-for-release-branches-what-bots-cover 2026-10-19T05:47:20.234Z weekly 0.7 https://safeguard.sh/resources/blog/fix-pypi-description-failed-to-render-error 2026-10-19T05:47:20.328Z weekly 0.7 https://safeguard.sh/resources/blog/fix-security-issues-in-the-files-you-are-already-touching 2026-10-19T05:47:20.432Z weekly 0.7 https://safeguard.sh/resources/blog/fix-the-vulnerable-dependencies-that-matter-first-small-team 2026-10-19T05:47:20.531Z weekly 0.7 https://safeguard.sh/resources/blog/fix-timeline-evidence-from-real-tickets-for-diligence 2026-10-19T05:47:20.638Z weekly 0.7 https://safeguard.sh/resources/blog/fixed-in-public-go-security-track-what-it-means-for-you 2026-10-19T05:47:20.746Z weekly 0.7 https://safeguard.sh/resources/blog/flaky-security-check-how-to-measure-flake-rate 2026-10-19T05:47:20.843Z weekly 0.7 https://safeguard.sh/resources/blog/flask-file-uploads-secure-filename-and-path-traversal 2026-10-19T05:47:20.938Z weekly 0.7 https://safeguard.sh/resources/blog/flask-request-size-limits-max-content-length-and-form-parts 2026-10-19T05:47:21.036Z weekly 0.7 https://safeguard.sh/resources/blog/flask-session-cookie-settings-secure-httponly-samesite 2026-10-19T05:47:21.133Z weekly 0.7 https://safeguard.sh/resources/blog/fleet-update-coverage-metrics-what-to-report-without-vanity-numbers 2026-10-19T05:47:21.224Z weekly 0.7 https://safeguard.sh/resources/blog/flexible-or-immediate-in-app-update-for-an-android-sdk-fix 2026-10-19T05:47:21.319Z weekly 0.7 https://safeguard.sh/resources/blog/flux-ocirepository-tag-semver-or-digest-which-to-pin 2026-10-19T05:47:21.415Z weekly 0.7 https://safeguard.sh/resources/blog/follow-python-package-advisories-with-the-pypa-advisory-database 2026-10-19T05:47:21.520Z weekly 0.7 https://safeguard.sh/resources/blog/follow-spring-security-advisories-for-java-applications 2026-10-19T05:47:21.632Z weekly 0.7 https://safeguard.sh/resources/blog/follow-up-questions-after-a-vague-vendor-security-answer 2026-10-19T05:47:21.733Z weekly 0.7 https://safeguard.sh/resources/blog/force-installed-or-normal-installed-extension-which-to-use 2026-10-19T05:47:21.865Z weekly 0.7 https://safeguard.sh/resources/blog/force-installed-or-normal-installed-which-extension-mode 2026-10-19T05:47:21.999Z weekly 0.7 https://safeguard.sh/resources/blog/force-maven-builds-through-one-internal-repository 2026-10-19T05:47:22.106Z weekly 0.7 https://safeguard.sh/resources/blog/forecast-when-your-vulnerability-backlog-will-clear 2026-10-19T05:47:22.201Z weekly 0.7 https://safeguard.sh/resources/blog/fork-or-rebuilt-package-same-version-number-false-positive 2026-10-19T05:47:22.296Z weekly 0.7 https://safeguard.sh/resources/blog/fork-pull-request-security-myths-vs-facts 2026-10-19T05:47:22.451Z weekly 0.7 https://safeguard.sh/resources/blog/fork-register-who-owns-each-fork-and-what-to-track 2026-10-19T05:47:22.555Z weekly 0.7 https://safeguard.sh/resources/blog/forward-port-a-hotfix-to-main-so-the-bug-does-not-return 2026-10-19T05:47:22.702Z weekly 0.7 https://safeguard.sh/resources/blog/found-an-unknown-third-party-integration-in-production-what-to-do 2026-10-19T05:47:22.807Z weekly 0.7 https://safeguard.sh/resources/blog/founder-faq-open-source-license-questions-in-plain-words 2026-10-19T05:47:22.899Z weekly 0.7 https://safeguard.sh/resources/blog/four-eyes-approval-for-destructive-ai-agent-actions 2026-10-19T05:47:22.990Z weekly 0.7 https://safeguard.sh/resources/blog/four-stages-of-open-source-engagement-and-dependency-rules 2026-10-19T05:47:23.082Z weekly 0.7 https://safeguard.sh/resources/blog/four-status-words-for-a-public-vulnerability-notice 2026-10-19T05:47:23.181Z weekly 0.7 https://safeguard.sh/resources/blog/framework-end-of-life-while-the-runtime-is-supported-two-clocks 2026-10-19T05:47:23.282Z weekly 0.7 https://safeguard.sh/resources/blog/framework-support-windows-compared-node-django-spring-rails-go 2026-10-19T05:47:23.384Z weekly 0.7 https://safeguard.sh/resources/blog/free-government-service-buy-a-tool-or-build-scripts-decision-guide 2026-10-19T05:47:23.484Z weekly 0.7 https://safeguard.sh/resources/blog/free-supply-chain-security-tools-by-job-for-small-teams 2026-10-19T05:47:23.586Z weekly 0.7 https://safeguard.sh/resources/blog/free-vulnerability-scanning-for-a-research-lab-with-no-budget 2026-10-19T05:47:23.691Z weekly 0.7 https://safeguard.sh/resources/blog/freelancer-agency-or-staff-augmentation-access-model 2026-10-19T05:47:23.792Z weekly 0.7 https://safeguard.sh/resources/blog/freeze-a-dated-license-inventory-snapshot-at-signing 2026-10-19T05:47:23.916Z weekly 0.7 https://safeguard.sh/resources/blog/freeze-code-before-comparing-dependency-scanners 2026-10-19T05:47:24.017Z weekly 0.7 https://safeguard.sh/resources/blog/freeze-deploys-or-keep-shipping-during-a-dependency-compromise 2026-10-19T05:47:24.107Z weekly 0.7 https://safeguard.sh/resources/blog/from-audit-finding-to-engineering-ticket-tracking-remediation 2026-10-19T05:47:24.207Z weekly 0.7 https://safeguard.sh/resources/blog/frozen-installs-in-ci-the-command-for-each-language 2026-10-19T05:47:24.303Z weekly 0.7 https://safeguard.sh/resources/blog/full-dependency-list-or-summary-for-enterprise-buyers 2026-10-19T05:47:24.401Z weekly 0.7 https://safeguard.sh/resources/blog/ga-early-access-or-roadmap-how-to-read-a-vendors-ai-claims 2026-10-19T05:47:24.499Z weekly 0.7 https://safeguard.sh/resources/blog/game-build-pipeline-dependency-checklist-for-ci 2026-10-19T05:47:24.609Z weekly 0.7 https://safeguard.sh/resources/blog/game-patch-delivery-checklist-sign-verify-limit 2026-10-19T05:47:24.711Z weekly 0.7 https://safeguard.sh/resources/blog/game-plugin-intake-form-fields-for-a-small-studio 2026-10-19T05:47:24.813Z weekly 0.7 https://safeguard.sh/resources/blog/gap-statement-template-for-questionnaire-answers-without-a-yes 2026-10-19T05:47:24.912Z weekly 0.7 https://safeguard.sh/resources/blog/gate-an-npm-release-on-the-audit-exit-code 2026-10-19T05:47:25.006Z weekly 0.7 https://safeguard.sh/resources/blog/gate-pull-requests-written-rules-or-enforced-checks 2026-10-19T05:47:25.100Z weekly 0.7 https://safeguard.sh/resources/blog/generate-a-gradle-sbom-without-editing-build-files 2026-10-19T05:47:25.192Z weekly 0.7 https://safeguard.sh/resources/blog/generate-a-third-party-notices-file-step-by-step 2026-10-19T05:47:25.283Z weekly 0.7 https://safeguard.sh/resources/blog/generate-api-client-from-a-remote-spec-url-or-a-pinned-file 2026-10-19T05:47:25.380Z weekly 0.7 https://safeguard.sh/resources/blog/generate-cyclonedx-sbom-for-a-gradle-project 2026-10-19T05:47:25.472Z weekly 0.7 https://safeguard.sh/resources/blog/generate-cyclonedx-sbom-for-a-maven-project 2026-10-19T05:47:25.561Z weekly 0.7 https://safeguard.sh/resources/blog/generate-just-the-apis-and-models-you-need-selective-generation 2026-10-19T05:47:25.652Z weekly 0.7 https://safeguard.sh/resources/blog/generate-the-client-at-build-time-or-commit-it 2026-10-19T05:47:25.743Z weekly 0.7 https://safeguard.sh/resources/blog/generated-code-security-myths-vs-facts-openapi-clients 2026-10-19T05:47:25.834Z weekly 0.7 https://safeguard.sh/resources/blog/generated-sdk-ci-files-and-git-push-script-review-before-you-publish 2026-10-19T05:47:25.924Z weekly 0.7 https://safeguard.sh/resources/blog/get-a-first-exposure-baseline-in-one-hour 2026-10-19T05:47:26.064Z weekly 0.7 https://safeguard.sh/resources/blog/get-an-alert-when-a-model-you-depend-on-changes-upstream 2026-10-19T05:47:26.157Z weekly 0.7 https://safeguard.sh/resources/blog/get-approvals-before-a-security-tool-trial-in-a-regulated-company 2026-10-19T05:47:26.251Z weekly 0.7 https://safeguard.sh/resources/blog/gh-attestation-verify-for-binaries-images-and-sboms 2026-10-19T05:47:26.352Z weekly 0.7 https://safeguard.sh/resources/blog/git-abbreviated-hash-in-version-string-breaks-builds 2026-10-19T05:47:26.444Z weekly 0.7 https://safeguard.sh/resources/blog/git-credential-cache-or-store-which-helper-keeps-passwords-safe 2026-10-19T05:47:26.534Z weekly 0.7 https://safeguard.sh/resources/blog/git-lfs-pointer-files-what-dependency-scanners-see 2026-10-19T05:47:26.624Z weekly 0.7 https://safeguard.sh/resources/blog/git-subtree-or-plain-copy-for-vendored-code 2026-10-19T05:47:26.713Z weekly 0.7 https://safeguard.sh/resources/blog/github-account-security-for-package-maintainers-2fa-passkeys-recovery 2026-10-19T05:47:26.807Z weekly 0.7 https://safeguard.sh/resources/blog/github-actions-cache-key-hash-lockfile-restore-keys 2026-10-19T05:47:26.898Z weekly 0.7 https://safeguard.sh/resources/blog/github-actions-cache-mode-read-write-none-explained 2026-10-19T05:47:26.989Z weekly 0.7 https://safeguard.sh/resources/blog/github-actions-cache-who-can-restore-what-branch-scope-rules 2026-10-19T05:47:27.085Z weekly 0.7 https://safeguard.sh/resources/blog/github-actions-deploy-wait-for-external-security-check 2026-10-19T05:47:27.180Z weekly 0.7 https://safeguard.sh/resources/blog/github-actions-hardening-for-soc-2-change-management 2026-10-19T05:47:27.270Z weekly 0.7 https://safeguard.sh/resources/blog/github-actions-in-your-sbom-semver-versus-sha-pinning 2026-10-19T05:47:27.359Z weekly 0.7 https://safeguard.sh/resources/blog/github-actions-node20-removal-which-workflows-need-a-check 2026-10-19T05:47:27.466Z weekly 0.7 https://safeguard.sh/resources/blog/github-actions-oidc-to-azure-federated-credential-steps 2026-10-19T05:47:27.732Z weekly 0.7 https://safeguard.sh/resources/blog/github-actions-pin-to-sha-tag-or-lockfile 2026-10-19T05:47:27.848Z weekly 0.7 https://safeguard.sh/resources/blog/github-actions-retention-change-october-2026-and-audit-evidence 2026-10-19T05:47:27.939Z weekly 0.7 https://safeguard.sh/resources/blog/github-advisory-database-rest-api-query-by-package 2026-10-19T05:47:28.034Z weekly 0.7 https://safeguard.sh/resources/blog/github-advisory-database-search-qualifiers-cheat-sheet 2026-10-19T05:47:28.297Z weekly 0.7 https://safeguard.sh/resources/blog/github-app-for-automation-token-lifetime-and-key-handling 2026-10-19T05:47:28.398Z weekly 0.7 https://safeguard.sh/resources/blog/github-app-permissions-for-a-security-scanner-what-to-grant 2026-10-19T05:47:28.557Z weekly 0.7 https://safeguard.sh/resources/blog/github-attestation-workflow-permissions-explained 2026-10-19T05:47:28.659Z weekly 0.7 https://safeguard.sh/resources/blog/github-branch-protection-bypass-and-admin-exceptions-auditors-ask 2026-10-19T05:47:28.759Z weekly 0.7 https://safeguard.sh/resources/blog/github-env-and-github-path-what-an-action-can-change-for-later-steps 2026-10-19T05:47:28.894Z weekly 0.7 https://safeguard.sh/resources/blog/github-environment-approvals-as-deployment-evidence 2026-10-19T05:47:28.985Z weekly 0.7 https://safeguard.sh/resources/blog/github-environments-deployment-branch-rules-and-secret-access 2026-10-19T05:47:29.100Z weekly 0.7 https://safeguard.sh/resources/blog/github-environments-required-reviewers-for-infrastructure-apply 2026-10-19T05:47:29.198Z weekly 0.7 https://safeguard.sh/resources/blog/github-oauth-app-access-restrictions-what-they-block 2026-10-19T05:47:29.294Z weekly 0.7 https://safeguard.sh/resources/blog/github-oidc-sub-claim-formats-by-trigger-what-to-match 2026-10-19T05:47:29.406Z weekly 0.7 https://safeguard.sh/resources/blog/github-releases-atom-feed-rss-for-dependency-releases 2026-10-19T05:47:29.565Z weekly 0.7 https://safeguard.sh/resources/blog/github-reviewed-vs-unreviewed-advisories-what-scanners-do-with-them 2026-10-19T05:47:29.721Z weekly 0.7 https://safeguard.sh/resources/blog/github-token-permissions-for-a-release-workflow-least-privilege 2026-10-19T05:47:29.873Z weekly 0.7 https://safeguard.sh/resources/blog/github-token-permissions-for-fork-pull-requests-set-a-safe-default 2026-10-19T05:47:29.965Z weekly 0.7 https://safeguard.sh/resources/blog/github-token-permissions-in-a-shared-monorepo-workflow 2026-10-19T05:47:30.082Z weekly 0.7 https://safeguard.sh/resources/blog/github-tokens-when-an-employee-leaves-what-org-owners-can-revoke 2026-10-19T05:47:30.181Z weekly 0.7 https://safeguard.sh/resources/blog/gitlab-audit-events-for-soc-2-evidence-tiers-and-limits 2026-10-19T05:47:30.269Z weekly 0.7 https://safeguard.sh/resources/blog/gitlab-ci-id-tokens-for-cloud-login-what-to-know 2026-10-19T05:47:30.371Z weekly 0.7 https://safeguard.sh/resources/blog/gitlab-merge-request-approvals-as-change-evidence 2026-10-19T05:47:30.481Z weekly 0.7 https://safeguard.sh/resources/blog/gitlab-merge-request-pipelines-and-security-scan-jobs 2026-10-19T05:47:30.582Z weekly 0.7 https://safeguard.sh/resources/blog/gitlab-push-rules-what-they-can-block-before-code-lands 2026-10-19T05:47:30.681Z weekly 0.7 https://safeguard.sh/resources/blog/gitlab-ref-protected-claim-limit-cloud-access-to-protected-branches 2026-10-19T05:47:30.780Z weekly 0.7 https://safeguard.sh/resources/blog/give-a-fix-bot-its-own-identity-and-signed-commits 2026-10-19T05:47:30.878Z weekly 0.7 https://safeguard.sh/resources/blog/give-a-secret-to-one-step-not-the-whole-github-actions-job 2026-10-19T05:47:30.966Z weekly 0.7 https://safeguard.sh/resources/blog/give-the-llm-reachability-facts-not-just-the-cve-list 2026-10-19T05:47:31.065Z weekly 0.7 https://safeguard.sh/resources/blog/global-gitignore-for-env-files-where-personal-ignore-rules-belong 2026-10-19T05:47:31.159Z weekly 0.7 https://safeguard.sh/resources/blog/gmail-spam-rate-0-10-percent-and-0-30-percent-explained 2026-10-19T05:47:31.250Z weekly 0.7 https://safeguard.sh/resources/blog/go-advisory-affects-one-os-why-a-linux-scan-flagged-a-windows-issue 2026-10-19T05:47:31.345Z weekly 0.7 https://safeguard.sh/resources/blog/go-binary-build-info-dependency-scanning 2026-10-19T05:47:31.444Z weekly 0.7 https://safeguard.sh/resources/blog/go-binary-in-a-container-image-standard-library-finding-fix 2026-10-19T05:47:31.543Z weekly 0.7 https://safeguard.sh/resources/blog/go-build-trimpath-and-buildvcs-what-they-change 2026-10-19T05:47:31.649Z weekly 0.7 https://safeguard.sh/resources/blog/go-docker-scratch-or-distroless-static 2026-10-19T05:47:31.753Z weekly 0.7 https://safeguard.sh/resources/blog/go-dockerfile-module-download-and-verify 2026-10-19T05:47:31.853Z weekly 0.7 https://safeguard.sh/resources/blog/go-generate-does-go-build-run-it 2026-10-19T05:47:31.947Z weekly 0.7 https://safeguard.sh/resources/blog/go-gotoolchain-explained-how-go-picks-its-toolchain 2026-10-19T05:47:32.041Z weekly 0.7 https://safeguard.sh/resources/blog/go-handler-panics-what-net-http-recovers-and-leaks 2026-10-19T05:47:32.141Z weekly 0.7 https://safeguard.sh/resources/blog/go-http-client-has-no-timeout-by-default 2026-10-19T05:47:32.230Z weekly 0.7 https://safeguard.sh/resources/blog/go-http-server-timeouts-readheadertimeout-and-friends 2026-10-19T05:47:32.324Z weekly 0.7 https://safeguard.sh/resources/blog/go-install-at-latest-is-it-safe-for-developer-tools 2026-10-19T05:47:32.425Z weekly 0.7 https://safeguard.sh/resources/blog/go-install-at-latest-or-a-pinned-version-which-to-use 2026-10-19T05:47:32.520Z weekly 0.7 https://safeguard.sh/resources/blog/go-list-m-u-all-find-outdated-go-dependencies 2026-10-19T05:47:32.625Z weekly 0.7 https://safeguard.sh/resources/blog/go-maxbytesreader-limit-request-body-size 2026-10-19T05:47:32.726Z weekly 0.7 https://safeguard.sh/resources/blog/go-minimal-version-selection-and-go-sum-pinning 2026-10-19T05:47:32.821Z weekly 0.7 https://safeguard.sh/resources/blog/go-mod-replace-to-a-fork-what-it-changes-and-what-it-hides 2026-10-19T05:47:32.913Z weekly 0.7 https://safeguard.sh/resources/blog/go-module-cache-read-only-and-how-to-clear-it 2026-10-19T05:47:33.006Z weekly 0.7 https://safeguard.sh/resources/blog/go-no-go-checklist-for-shipping-a-security-upgrade 2026-10-19T05:47:33.095Z weekly 0.7 https://safeguard.sh/resources/blog/go-release-policy-two-newest-majors-and-what-it-means-for-upgrades 2026-10-19T05:47:33.183Z weekly 0.7 https://safeguard.sh/resources/blog/go-reload-tls-certificates-without-restart 2026-10-19T05:47:33.278Z weekly 0.7 https://safeguard.sh/resources/blog/go-replace-in-a-library-is-ignored-by-your-build 2026-10-19T05:47:33.369Z weekly 0.7 https://safeguard.sh/resources/blog/go-rust-cpp-one-repo-dependency-review-checklist 2026-10-19T05:47:33.466Z weekly 0.7 https://safeguard.sh/resources/blog/go-sbom-licenses-are-evidence-not-assertion 2026-10-19T05:47:33.567Z weekly 0.7 https://safeguard.sh/resources/blog/go-security-error-checksum-mismatch-what-to-do 2026-10-19T05:47:33.675Z weekly 0.7 https://safeguard.sh/resources/blog/go-tls-config-minversion-ciphersuites-what-to-set 2026-10-19T05:47:33.777Z weekly 0.7 https://safeguard.sh/resources/blog/go-vendor-directories-and-scanner-onboarding-in-a-monorepo 2026-10-19T05:47:33.874Z weekly 0.7 https://safeguard.sh/resources/blog/godot-asset-library-support-levels-what-they-tell-you 2026-10-19T05:47:33.969Z weekly 0.7 https://safeguard.sh/resources/blog/godot-export-templates-addons-and-nuget-game-dependencies 2026-10-19T05:47:34.061Z weekly 0.7 https://safeguard.sh/resources/blog/godot-mods-pck-packs-or-runtime-file-loading-which-is-safer 2026-10-19T05:47:34.153Z weekly 0.7 https://safeguard.sh/resources/blog/golden-path-dependency-checks-block-warn-or-inform 2026-10-19T05:47:34.247Z weekly 0.7 https://safeguard.sh/resources/blog/golden-path-template-committed-lockfile-npm-gradle-pip 2026-10-19T05:47:34.340Z weekly 0.7 https://safeguard.sh/resources/blog/golden-path-template-stale-dependencies-what-happens 2026-10-19T05:47:34.437Z weekly 0.7 https://safeguard.sh/resources/blog/golden-path-vs-paved-road-vs-template-vs-golden-image-glossary 2026-10-19T05:47:34.532Z weekly 0.7 https://safeguard.sh/resources/blog/google-adc-on-a-laptop-user-login-or-service-account-key 2026-10-19T05:47:34.635Z weekly 0.7 https://safeguard.sh/resources/blog/google-faq-rich-results-ended-what-it-means-for-advisory-faqs 2026-10-19T05:47:34.732Z weekly 0.7 https://safeguard.sh/resources/blog/google-oauth-app-verification-sensitive-and-restricted-scopes 2026-10-19T05:47:34.834Z weekly 0.7 https://safeguard.sh/resources/blog/google-play-service-account-for-ci-uploads-least-privilege 2026-10-19T05:47:34.928Z weekly 0.7 https://safeguard.sh/resources/blog/google-restricted-scope-verification-what-it-tells-buyers 2026-10-19T05:47:35.015Z weekly 0.7 https://safeguard.sh/resources/blog/google-sign-in-breaks-after-play-app-signing-register-fingerprints 2026-10-19T05:47:35.110Z weekly 0.7 https://safeguard.sh/resources/blog/governance-md-for-a-company-led-open-source-project 2026-10-19T05:47:35.202Z weekly 0.7 https://safeguard.sh/resources/blog/govulncheck-has-no-ignore-list-how-to-track-accepted-go-findings 2026-10-19T05:47:35.295Z weekly 0.7 https://safeguard.sh/resources/blog/gpl-javascript-on-your-website-source-must-reach-users 2026-10-19T05:47:35.398Z weekly 0.7 https://safeguard.sh/resources/blog/gpl-mere-aggregation-shipping-gpl-with-proprietary-software 2026-10-19T05:47:35.506Z weekly 0.7 https://safeguard.sh/resources/blog/gplv3-user-products-installation-information-for-devices 2026-10-19T05:47:35.610Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-centralize-repositories-fail-on-project-repos 2026-10-19T05:47:35.715Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-composite-builds-dependency-substitution-risks 2026-10-19T05:47:35.817Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-constraint-because-clause-what-to-write 2026-10-19T05:47:35.909Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-dependency-locking-when-to-use-it 2026-10-19T05:47:36.002Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-dependency-verification-checksums-and-signatures 2026-10-19T05:47:36.093Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-dependency-verification-failed-what-to-do 2026-10-19T05:47:36.181Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-dependency-verification-for-android-sdks-explained 2026-10-19T05:47:36.278Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-dependency-verification-when-artifacts-come-from-a-mirror 2026-10-19T05:47:36.391Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-dynamic-versions-and-dependency-locking 2026-10-19T05:47:36.505Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-exclusive-content-stop-internal-groups-leaking 2026-10-19T05:47:36.607Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-has-no-default-repository-after-maven-migration 2026-10-19T05:47:36.718Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-locking-or-verification-which-protects-your-mobile-build 2026-10-19T05:47:36.819Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-major-upgrade-steps-warning-mode-plugins-and-wrapper 2026-10-19T05:47:36.910Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-module-replacement-swap-an-abandoned-library 2026-10-19T05:47:37.001Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-platform-or-maven-bom-share-dependency-versions 2026-10-19T05:47:37.096Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-reproducible-archives-timestamps-and-file-order 2026-10-19T05:47:37.185Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-sbom-aggregate-or-direct-which-task-to-run 2026-10-19T05:47:37.278Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-sbom-leave-out-test-dependencies-with-configurations 2026-10-19T05:47:37.372Z weekly 0.7 https://safeguard.sh/resources/blog/gradle-verification-metadata-checksums-are-not-a-vulnerability-scan 2026-10-19T05:47:37.477Z weekly 0.7 https://safeguard.sh/resources/blog/grandfather-existing-dependencies-when-starting-intake 2026-10-19T05:47:37.578Z weekly 0.7 https://safeguard.sh/resources/blog/grant-ends-who-patches-research-software 2026-10-19T05:47:37.678Z weekly 0.7 https://safeguard.sh/resources/blog/graphql-resolver-review-nodes-edges-and-field-access 2026-10-19T05:47:37.779Z weekly 0.7 https://safeguard.sh/resources/blog/green-build-means-safe-to-merge-ai-fix-myths-vs-facts 2026-10-19T05:47:37.881Z weekly 0.7 https://safeguard.sh/resources/blog/greenfield-or-legacy-app-which-security-testing-first 2026-10-19T05:47:37.974Z weekly 0.7 https://safeguard.sh/resources/blog/group-similar-security-findings-into-one-pull-request-comment 2026-10-19T05:47:38.063Z weekly 0.7 https://safeguard.sh/resources/blog/grouped-fix-pr-touches-several-owners-who-approves 2026-10-19T05:47:38.154Z weekly 0.7 https://safeguard.sh/resources/blog/grouped-security-updates-fewer-prs-or-slower-fixes 2026-10-19T05:47:38.246Z weekly 0.7 https://safeguard.sh/resources/blog/grpc-tls-or-mtls-for-service-to-service-calls-and-rotation 2026-10-19T05:47:38.339Z weekly 0.7 https://safeguard.sh/resources/blog/guardrails-checklist-for-security-automation-in-ci-and-webhooks 2026-10-19T05:47:38.436Z weekly 0.7 https://safeguard.sh/resources/blog/handing-over-a-shared-library-when-teams-reorganize-checklist 2026-10-19T05:47:38.534Z weekly 0.7 https://safeguard.sh/resources/blog/handle-http-429-from-slack-and-jira-in-security-automation 2026-10-19T05:47:38.633Z weekly 0.7 https://safeguard.sh/resources/blog/handling-vulnerability-reports-in-languages-your-team-does-not-read 2026-10-19T05:47:38.735Z weekly 0.7 https://safeguard.sh/resources/blog/har-files-and-secrets-what-chrome-sanitized-export-removes 2026-10-19T05:47:38.842Z weekly 0.7 https://safeguard.sh/resources/blog/hardware-and-software-in-one-bill-of-materials-for-iot-devices 2026-10-19T05:47:38.932Z weekly 0.7 https://safeguard.sh/resources/blog/hardware-backed-ssh-keys-what-ed25519-sk-gives-a-developer 2026-10-19T05:47:39.028Z weekly 0.7 https://safeguard.sh/resources/blog/hardware-ids-and-release-counters-keep-wrong-firmware-off-the-wrong-device 2026-10-19T05:47:39.122Z weekly 0.7 https://safeguard.sh/resources/blog/hardware-supply-chain-security-myths-for-startups-myth-vs-fact 2026-10-19T05:47:39.216Z weekly 0.7 https://safeguard.sh/resources/blog/hbom-vs-sbom-hardware-and-software-bills-of-materials 2026-10-19T05:47:39.307Z weekly 0.7 https://safeguard.sh/resources/blog/head-or-tail-sampling-keep-security-relevant-traces 2026-10-19T05:47:39.407Z weekly 0.7 https://safeguard.sh/resources/blog/header-only-cpp-libraries-and-your-sbom 2026-10-19T05:47:39.515Z weekly 0.7 https://safeguard.sh/resources/blog/headless-cms-api-tokens-on-a-static-site-which-can-be-public 2026-10-19T05:47:39.613Z weekly 0.7 https://safeguard.sh/resources/blog/health-app-analytics-sdk-and-the-ftc-breach-rule 2026-10-19T05:47:39.703Z weekly 0.7 https://safeguard.sh/resources/blog/healthtech-pre-release-checklist-for-small-teams 2026-10-19T05:47:39.792Z weekly 0.7 https://safeguard.sh/resources/blog/healthtech-startup-secure-engineering-first-90-days 2026-10-19T05:47:39.883Z weekly 0.7 https://safeguard.sh/resources/blog/helm-chart-lock-file-keep-chart-dependencies-the-same-everywhere 2026-10-19T05:47:39.974Z weekly 0.7 https://safeguard.sh/resources/blog/helm-chart-version-vs-appversion-which-one-to-bump 2026-10-19T05:47:40.066Z weekly 0.7 https://safeguard.sh/resources/blog/helm-dependency-update-chart-lock-bump-a-chart-dependency 2026-10-19T05:47:40.157Z weekly 0.7 https://safeguard.sh/resources/blog/helm-kubeversion-constraint-guardrail-for-shared-charts 2026-10-19T05:47:40.247Z weekly 0.7 https://safeguard.sh/resources/blog/helm-plugins-run-code-on-your-machine-what-to-check-first 2026-10-19T05:47:40.339Z weekly 0.7 https://safeguard.sh/resources/blog/helm-post-renderer-what-it-sees-and-can-change 2026-10-19T05:47:40.431Z weekly 0.7 https://safeguard.sh/resources/blog/helm-repo-add-insecure-skip-tls-verify-and-pass-credentials-explained 2026-10-19T05:47:40.524Z weekly 0.7 https://safeguard.sh/resources/blog/helm-values-schema-json-guardrail-for-risky-settings 2026-10-19T05:47:40.622Z weekly 0.7 https://safeguard.sh/resources/blog/hermetic-build-vs-reproducible-build-difference 2026-10-19T05:47:40.721Z weekly 0.7 https://safeguard.sh/resources/blog/hermetic-vs-reproducible-build-whats-the-difference 2026-10-19T05:47:40.832Z weekly 0.7 https://safeguard.sh/resources/blog/hit-the-five-lambda-layer-limit-what-now 2026-10-19T05:47:40.922Z weekly 0.7 https://safeguard.sh/resources/blog/hold-out-repositories-in-a-scanner-comparison 2026-10-19T05:47:41.015Z weekly 0.7 https://safeguard.sh/resources/blog/homebrew-pin-what-it-protects-and-what-it-does-not 2026-10-19T05:47:41.110Z weekly 0.7 https://safeguard.sh/resources/blog/hospital-security-review-faq-third-party-components-and-how-to-answer 2026-10-19T05:47:41.200Z weekly 0.7 https://safeguard.sh/resources/blog/hosted-or-self-hosted-package-mirror-a-decision-guide-for-small-teams 2026-10-19T05:47:41.293Z weekly 0.7 https://safeguard.sh/resources/blog/hosted-or-self-run-update-tool-how-to-decide 2026-10-19T05:47:41.393Z weekly 0.7 https://safeguard.sh/resources/blog/hosted-or-shipped-software-what-changes-in-inventory-questions 2026-10-19T05:47:41.501Z weekly 0.7 https://safeguard.sh/resources/blog/hotfix-branch-from-the-release-tag-or-from-main 2026-10-19T05:47:41.597Z weekly 0.7 https://safeguard.sh/resources/blog/hotfix-in-a-monorepo-which-packages-to-bump-and-release 2026-10-19T05:47:41.701Z weekly 0.7 https://safeguard.sh/resources/blog/hotfix-mode-for-pull-request-security-checks 2026-10-19T05:47:41.804Z weekly 0.7 https://safeguard.sh/resources/blog/hotfix-process-for-a-health-app-without-bypassing-controls 2026-10-19T05:47:41.906Z weekly 0.7 https://safeguard.sh/resources/blog/how-a-device-reports-its-versions-so-the-server-picks-the-right-update 2026-10-19T05:47:42.000Z weekly 0.7 https://safeguard.sh/resources/blog/how-a-security-gate-should-treat-active-exceptions 2026-10-19T05:47:42.104Z weekly 0.7 https://safeguard.sh/resources/blog/how-an-agency-answers-a-client-supply-chain-security-questionnaire 2026-10-19T05:47:42.196Z weekly 0.7 https://safeguard.sh/resources/blog/how-auditors-sample-vulnerability-exceptions 2026-10-19T05:47:42.288Z weekly 0.7 https://safeguard.sh/resources/blog/how-can-a-school-check-an-edtech-apps-dependencies-before-buying 2026-10-19T05:47:42.386Z weekly 0.7 https://safeguard.sh/resources/blog/how-can-i-tell-if-a-vendor-keeps-its-software-parts-current 2026-10-19T05:47:42.492Z weekly 0.7 https://safeguard.sh/resources/blog/how-can-i-tell-if-an-open-source-project-is-still-maintained 2026-10-19T05:47:42.594Z weekly 0.7 https://safeguard.sh/resources/blog/how-can-other-teams-contribute-to-a-golden-path-safely 2026-10-19T05:47:42.697Z weekly 0.7 https://safeguard.sh/resources/blog/how-compliance-should-request-evidence-from-engineers 2026-10-19T05:47:42.805Z weekly 0.7 https://safeguard.sh/resources/blog/how-conda-forge-packages-get-built-feedstocks-explained 2026-10-19T05:47:42.898Z weekly 0.7 https://safeguard.sh/resources/blog/how-deep-should-you-review-an-open-source-component-by-risk-tier 2026-10-19T05:47:42.990Z weekly 0.7 https://safeguard.sh/resources/blog/how-defenders-can-use-the-exploit-database 2026-10-19T05:47:43.088Z weekly 0.7 https://safeguard.sh/resources/blog/how-did-we-find-out-detection-section-of-a-supply-chain-postmortem 2026-10-19T05:47:43.180Z weekly 0.7 https://safeguard.sh/resources/blog/how-django-deprecations-work-and-how-to-plan-lts-to-lts-upgrades 2026-10-19T05:47:43.271Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-certificate-bound-access-tokens-work-for-partner-apis 2026-10-19T05:47:43.370Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-ecosystems-separate-dev-test-and-build-only-dependencies 2026-10-19T05:47:43.490Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-gitlab-ci-jobs-fetch-secrets-from-vault 2026-10-19T05:47:43.595Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-auto-assign-vulnerability-tickets-to-the-right-team 2026-10-19T05:47:43.705Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-check-if-software-i-use-has-a-known-vulnerability 2026-10-19T05:47:43.813Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-check-npm-package-provenance-before-adding-it 2026-10-19T05:47:43.941Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-cite-research-software-with-a-citation-cff-file 2026-10-19T05:47:44.040Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-explain-ai-coding-risk-to-a-non-technical-boss 2026-10-19T05:47:44.222Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-get-a-doi-for-a-github-release-with-zenodo 2026-10-19T05:47:44.323Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-get-started-with-safeguard-in-my-first-hour 2026-10-19T05:47:44.427Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-map-scanner-severity-to-ticket-priority 2026-10-19T05:47:44.527Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-monitor-the-security-automation-itself 2026-10-19T05:47:44.631Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-read-a-dependabot-alert-as-a-new-developer 2026-10-19T05:47:44.732Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-remove-an-unused-dependency-safely 2026-10-19T05:47:44.849Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-report-a-suspicious-package-found-in-your-first-week 2026-10-19T05:47:44.961Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-see-why-a-package-is-in-my-dependency-tree 2026-10-19T05:47:45.109Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-set-up-npmrc-safely-on-a-new-laptop 2026-10-19T05:47:45.296Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-stop-duplicate-security-tickets-from-repeated-scans 2026-10-19T05:47:45.408Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-use-safeguard-from-claude-or-chatgpt 2026-10-19T05:47:45.669Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-i-verify-an-apptainer-container-signature 2026-10-19T05:47:45.775Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-plugin-marketplaces-stop-name-squatting-and-lookalike-plugins 2026-10-19T05:47:45.873Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-protected-variables-work-in-gitlab-ci 2026-10-19T05:47:45.972Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-software-supply-chain-attacks-usually-start 2026-10-19T05:47:46.077Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-typosquatted-package-names-reach-tutorial-readers 2026-10-19T05:47:46.181Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-add-plugins-to-an-electron-app-without-giving-them-node 2026-10-19T05:47:46.305Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-answer-an-sbom-request-for-a-component-you-resell 2026-10-19T05:47:46.400Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-cache-a-vulnerability-database-across-scan-workers 2026-10-19T05:47:46.493Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-calculate-the-bus-factor-of-a-dependency 2026-10-19T05:47:46.587Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-check-whether-a-package-name-appears-in-a-malware-advisory 2026-10-19T05:47:46.677Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-decide-how-often-a-control-should-run 2026-10-19T05:47:46.778Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-decommission-a-legacy-component-without-leaving-risk 2026-10-19T05:47:46.874Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-evaluate-a-community-fork-of-an-abandoned-project 2026-10-19T05:47:46.966Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-evaluate-an-ai-suggested-fix-before-merging 2026-10-19T05:47:47.056Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-evidence-dormant-account-removal 2026-10-19T05:47:47.148Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-explain-a-revised-sbom-to-a-customer 2026-10-19T05:47:47.565Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-find-out-how-to-fund-an-open-source-dependency 2026-10-19T05:47:47.956Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-handle-randomness-and-uuids-in-a-reproducible-build 2026-10-19T05:47:48.186Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-keep-vulnerable-open-source-out-of-production 2026-10-19T05:47:48.283Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-know-if-your-build-is-hermetic 2026-10-19T05:47:48.382Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-make-a-pull-request-prove-a-new-dependency-was-vetted 2026-10-19T05:47:48.479Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-measure-sbom-generation-accuracy-on-your-own-repo 2026-10-19T05:47:48.584Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-measure-whether-your-security-docs-work 2026-10-19T05:47:48.751Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-pin-operating-system-packages-in-a-build-image 2026-10-19T05:47:48.853Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-read-a-dependencys-advisory-history-before-adopting-it 2026-10-19T05:47:48.961Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-sandbox-a-low-trust-developer-plugin 2026-10-19T05:47:49.067Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-secure-an-internal-cli-your-developers-run 2026-10-19T05:47:49.162Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-tell-a-client-their-plugin-is-vulnerable 2026-10-19T05:47:49.263Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-test-a-vulnerability-scanner-in-a-proof-of-concept 2026-10-19T05:47:49.356Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-track-software-components-across-an-iot-device-fleet 2026-10-19T05:47:49.450Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-train-a-sales-team-on-sbom-in-thirty-minutes 2026-10-19T05:47:49.541Z weekly 0.7 https://safeguard.sh/resources/blog/how-do-you-weigh-security-fixes-against-features-in-sprint-planning 2026-10-19T05:47:49.636Z weekly 0.7 https://safeguard.sh/resources/blog/how-docker-registry-garbage-collection-works-and-why-writes-must-stop 2026-10-19T05:47:49.732Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-a-chat-app-learn-a-connector-added-a-new-tool 2026-10-19T05:47:49.828Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-a-golden-path-help-with-ai-generated-code 2026-10-19T05:47:49.925Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-a-package-get-into-conda-forge-and-who-reviews-it 2026-10-19T05:47:50.067Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-a-scanner-choose-the-fix-version-to-suggest 2026-10-19T05:47:50.162Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-a-scanner-decide-your-version-is-affected-osv-ranges 2026-10-19T05:47:50.332Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-a-scanner-decide-your-version-is-affected 2026-10-19T05:47:50.427Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-a-scanner-find-reflected-xss-step-by-step 2026-10-19T05:47:50.520Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-a-scanner-know-a-finding-is-the-same-as-last-week 2026-10-19T05:47:50.610Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-a-split-plugin-sandbox-keep-ui-code-and-data-code-apart 2026-10-19T05:47:50.703Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-a-vulnerability-scanner-work-six-stages 2026-10-19T05:47:50.800Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-an-ai-agent-use-a-tool-through-mcp-step-by-step 2026-10-19T05:47:50.900Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-bioconductor-review-new-packages 2026-10-19T05:47:50.995Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-maven-pick-a-version-when-two-dependencies-disagree 2026-10-19T05:47:51.093Z weekly 0.7 https://safeguard.sh/resources/blog/how-does-the-chrome-web-store-review-extensions 2026-10-19T05:47:51.323Z weekly 0.7 https://safeguard.sh/resources/blog/how-extension-and-plugin-stores-enforce-rules-reject-warn-block-ban 2026-10-19T05:47:51.415Z weekly 0.7 https://safeguard.sh/resources/blog/how-fast-do-you-patch-open-source-vulnerabilities-reply 2026-10-19T05:47:51.507Z weekly 0.7 https://safeguard.sh/resources/blog/how-fast-does-a-new-advisory-reach-your-scanner 2026-10-19T05:47:51.621Z weekly 0.7 https://safeguard.sh/resources/blog/how-fast-is-too-fast-for-a-soc-2-questions-for-your-auditor 2026-10-19T05:47:51.776Z weekly 0.7 https://safeguard.sh/resources/blog/how-fast-must-a-manufacturer-report-an-exploited-vulnerability-cra 2026-10-19T05:47:51.874Z weekly 0.7 https://safeguard.sh/resources/blog/how-fast-should-a-human-approve-a-fix-pr-by-urgency 2026-10-19T05:47:51.964Z weekly 0.7 https://safeguard.sh/resources/blog/how-fast-should-a-pull-request-dependency-scan-be 2026-10-19T05:47:52.094Z weekly 0.7 https://safeguard.sh/resources/blog/how-fast-should-a-startup-patch-dependencies-for-soc-2 2026-10-19T05:47:52.184Z weekly 0.7 https://safeguard.sh/resources/blog/how-fast-should-exception-reviewers-respond-approval-sla 2026-10-19T05:47:52.284Z weekly 0.7 https://safeguard.sh/resources/blog/how-fast-should-you-answer-an-sbom-request 2026-10-19T05:47:52.378Z weekly 0.7 https://safeguard.sh/resources/blog/how-fast-should-you-patch-open-source-dependencies-what-s2c2f-says 2026-10-19T05:47:52.471Z weekly 0.7 https://safeguard.sh/resources/blog/how-force-installed-browser-extensions-get-updates 2026-10-19T05:47:52.568Z weekly 0.7 https://safeguard.sh/resources/blog/how-fresh-is-your-scanners-advisory-data-poc-test 2026-10-19T05:47:52.662Z weekly 0.7 https://safeguard.sh/resources/blog/how-github-detects-a-repo-license-and-why-scans-say-other 2026-10-19T05:47:52.763Z weekly 0.7 https://safeguard.sh/resources/blog/how-go-vulnerability-reports-are-made-and-reviewed 2026-10-19T05:47:52.860Z weekly 0.7 https://safeguard.sh/resources/blog/how-is-an-mcp-server-different-from-an-ide-extension-for-risk 2026-10-19T05:47:52.955Z weekly 0.7 https://safeguard.sh/resources/blog/how-lockfile-drift-hides-outdated-dependencies-behind-green-builds 2026-10-19T05:47:53.054Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-can-an-attacker-use-a-stolen-token 2026-10-19T05:47:53.148Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-does-a-deprecated-feature-stay-a-security-risk 2026-10-19T05:47:53.237Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-does-a-framework-promise-security-fixes-rails-example 2026-10-19T05:47:53.333Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-does-a-github-token-last-and-what-about-long-jobs 2026-10-19T05:47:53.438Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-does-a-vendor-get-to-fix-a-bug-before-it-is-public 2026-10-19T05:47:53.539Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-does-an-enterprise-security-review-take 2026-10-19T05:47:53.642Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-does-each-kubernetes-minor-version-get-security-patches 2026-10-19T05:47:53.740Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-does-github-keep-audit-log-events-for-evidence 2026-10-19T05:47:53.852Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-does-github-keep-audit-log-events 2026-10-19T05:47:53.951Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-does-npm-pip-or-cargo-keep-retrying-a-dead-registry 2026-10-19T05:47:54.045Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-from-advisory-to-scan-alert-the-four-clocks 2026-10-19T05:47:54.138Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-is-a-ci-oidc-token-valid-github-vs-gitlab 2026-10-19T05:47:54.234Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-is-a-spring-boot-version-supported 2026-10-19T05:47:54.327Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-a-canary-bake-before-promoting-a-patch 2026-10-19T05:47:54.426Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-a-grace-period-be-for-a-merged-dependency-policy 2026-10-19T05:47:54.525Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-a-new-scanner-run-in-report-only-mode 2026-10-19T05:47:54.636Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-a-presigned-artifact-url-last 2026-10-19T05:47:54.738Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-a-scanner-take-on-your-largest-repository 2026-10-19T05:47:54.838Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-a-security-document-share-link-last 2026-10-19T05:47:54.937Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-a-security-platform-keep-your-scan-results 2026-10-19T05:47:55.112Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-a-security-tool-trial-last 2026-10-19T05:47:55.211Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-a-supply-chain-postmortem-be 2026-10-19T05:47:55.315Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-an-api-deprecation-window-be 2026-10-19T05:47:55.520Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-an-email-or-sms-verification-code-be-valid 2026-10-19T05:47:55.626Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-ci-cloud-credentials-last 2026-10-19T05:47:55.725Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-contractor-and-intern-access-last 2026-10-19T05:47:55.818Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-reachability-analysis-take-and-why 2026-10-19T05:47:55.911Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-staging-data-live-refresh-schedule 2026-10-19T05:47:56.005Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-you-keep-gpl-source-for-shipped-versions 2026-10-19T05:47:56.102Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-should-you-support-a-release-under-the-cyber-resilience-act 2026-10-19T05:47:56.286Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-to-keep-ai-agent-audit-logs 2026-10-19T05:47:56.486Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-to-keep-ai-chat-history-with-security-details 2026-10-19T05:47:56.645Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-to-keep-container-scan-evidence-for-audits 2026-10-19T05:47:56.826Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-to-keep-reachability-and-exploitability-evidence 2026-10-19T05:47:56.918Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-to-keep-supplier-sboms-after-the-contract-ends 2026-10-19T05:47:57.012Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-to-keep-vulnerability-exception-records 2026-10-19T05:47:57.109Z weekly 0.7 https://safeguard.sh/resources/blog/how-long-to-keep-vulnerability-records-and-change-tickets 2026-10-19T05:47:57.221Z weekly 0.7 https://safeguard.sh/resources/blog/how-low-code-apps-let-users-impersonate-the-app-creator 2026-10-19T05:47:57.456Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-container-image-versions-should-you-keep 2026-10-19T05:47:57.650Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-dependencies-should-a-cli-have-a-practical-budget 2026-10-19T05:47:57.828Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-dependency-update-prs-can-a-small-project-absorb 2026-10-19T05:47:57.961Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-findings-should-a-scanner-demo-show-on-your-repo 2026-10-19T05:47:58.093Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-nvd-records-carry-a-cvss-3-severity-by-band 2026-10-19T05:47:58.229Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-records-are-in-the-nvd-and-why-rejected-ones-matter 2026-10-19T05:47:58.368Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-repositories-to-compare-dependency-scanners 2026-10-19T05:47:58.519Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-reviewers-does-a-dependency-need-code-review-signals 2026-10-19T05:47:58.673Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-security-alerts-can-a-slack-channel-take-before-rate-limits 2026-10-19T05:47:58.855Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-security-checks-should-one-pull-request-run 2026-10-19T05:47:59.026Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-security-tools-do-you-have-is-not-a-coverage-metric 2026-10-19T05:47:59.165Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-suppressions-is-too-many-health-signals 2026-10-19T05:47:59.311Z weekly 0.7 https://safeguard.sh/resources/blog/how-many-versions-back-does-a-vendor-patch 2026-10-19T05:47:59.492Z weekly 0.7 https://safeguard.sh/resources/blog/how-much-access-should-a-coding-agent-have 2026-10-19T05:47:59.680Z weekly 0.7 https://safeguard.sh/resources/blog/how-much-build-reproducibility-is-enough-for-a-small-team 2026-10-19T05:47:59.850Z weekly 0.7 https://safeguard.sh/resources/blog/how-much-clock-skew-leeway-should-jwt-validation-allow 2026-10-19T05:48:00.008Z weekly 0.7 https://safeguard.sh/resources/blog/how-much-does-a-library-pull-in-check-its-dependency-footprint 2026-10-19T05:48:00.164Z weekly 0.7 https://safeguard.sh/resources/blog/how-much-does-dependency-update-debt-cost-an-engineering-team 2026-10-19T05:48:00.292Z weekly 0.7 https://safeguard.sh/resources/blog/how-much-of-a-years-dependency-backlog-is-actually-urgent 2026-10-19T05:48:00.385Z weekly 0.7 https://safeguard.sh/resources/blog/how-much-roadmap-capacity-should-dependency-maintenance-get 2026-10-19T05:48:00.481Z weekly 0.7 https://safeguard.sh/resources/blog/how-much-sprint-capacity-should-go-to-dependency-upgrades 2026-10-19T05:48:00.579Z weekly 0.7 https://safeguard.sh/resources/blog/how-much-sprint-time-should-security-work-get 2026-10-19T05:48:00.685Z weekly 0.7 https://safeguard.sh/resources/blog/how-much-testing-does-a-fix-need-if-code-is-unreachable 2026-10-19T05:48:00.796Z weekly 0.7 https://safeguard.sh/resources/blog/how-much-vulnerability-work-can-a-team-absorb-capacity-metric 2026-10-19T05:48:00.939Z weekly 0.7 https://safeguard.sh/resources/blog/how-notarization-helps-if-your-developer-id-key-leaks 2026-10-19T05:48:01.040Z weekly 0.7 https://safeguard.sh/resources/blog/how-oauth-sign-in-works-when-you-connect-a-security-connector 2026-10-19T05:48:01.137Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-must-you-scan-for-vulnerabilities-ftc-and-nydfs 2026-10-19T05:48:01.239Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-a-healthy-dependency-release 2026-10-19T05:48:01.335Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-a-small-team-update-dependencies 2026-10-19T05:48:01.428Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-asset-context-be-refreshed 2026-10-19T05:48:01.526Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-ci-secrets-be-rotated-what-owasp-says 2026-10-19T05:48:01.625Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-engineering-teams-run-supply-chain-drills 2026-10-19T05:48:01.725Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-iot-devices-poll-for-updates-interval-and-backoff 2026-10-19T05:48:01.825Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-ssdf-evidence-be-refreshed-a-review-cadence 2026-10-19T05:48:01.927Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-you-rebase-a-fork-onto-upstream 2026-10-19T05:48:02.030Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-you-rebuild-ci-runner-images 2026-10-19T05:48:02.133Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-you-rescan-when-no-code-has-changed 2026-10-19T05:48:02.229Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-you-review-ai-agent-access 2026-10-19T05:48:02.331Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-you-review-approved-mobile-sdks 2026-10-19T05:48:02.433Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-you-send-updates-during-an-active-zero-day 2026-10-19T05:48:02.544Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-should-you-update-a-static-site-generator 2026-10-19T05:48:02.794Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-to-back-up-wordpress-and-how-to-test-a-restore 2026-10-19T05:48:02.898Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-to-run-a-dependency-compromise-tabletop 2026-10-19T05:48:02.992Z weekly 0.7 https://safeguard.sh/resources/blog/how-often-to-update-a-scanner-and-its-vulnerability-database 2026-10-19T05:48:03.136Z weekly 0.7 https://safeguard.sh/resources/blog/how-old-is-too-old-for-a-container-image 2026-10-19T05:48:03.237Z weekly 0.7 https://safeguard.sh/resources/blog/how-old-is-too-old-for-an-sbom-in-a-deal 2026-10-19T05:48:03.344Z weekly 0.7 https://safeguard.sh/resources/blog/how-one-teams-override-can-surprise-another-team-in-a-shared-repo 2026-10-19T05:48:03.437Z weekly 0.7 https://safeguard.sh/resources/blog/how-prompt-injection-reaches-a-coding-agent-through-your-repo 2026-10-19T05:48:03.536Z weekly 0.7 https://safeguard.sh/resources/blog/how-python-entry-points-load-plugins-and-why-install-means-trust 2026-10-19T05:48:03.646Z weekly 0.7 https://safeguard.sh/resources/blog/how-reachability-analysis-changes-a-fix-capacity-plan 2026-10-19T05:48:03.884Z weekly 0.7 https://safeguard.sh/resources/blog/how-registry-retention-rules-combine-keep-delete-or-priority 2026-10-19T05:48:03.987Z weekly 0.7 https://safeguard.sh/resources/blog/how-risky-is-anonymized-test-data-reidentification 2026-10-19T05:48:04.082Z weekly 0.7 https://safeguard.sh/resources/blog/how-rollback-differs-for-os-patches-and-dependency-updates 2026-10-19T05:48:04.188Z weekly 0.7 https://safeguard.sh/resources/blog/how-scanners-detect-os-command-injection-and-what-they-miss 2026-10-19T05:48:04.309Z weekly 0.7 https://safeguard.sh/resources/blog/how-scheduled-tasks-work-in-claude-chatgpt-and-codex 2026-10-19T05:48:04.407Z weekly 0.7 https://safeguard.sh/resources/blog/how-secrets-reach-an-ai-coding-agent-and-how-to-cut-each-path 2026-10-19T05:48:04.510Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-a-health-software-vendor-answer-do-you-use-open-source 2026-10-19T05:48:04.617Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-a-library-deprecate-an-api-what-semver-says 2026-10-19T05:48:04.713Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-a-maintainer-step-away-from-an-open-source-project-safely 2026-10-19T05:48:04.813Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-a-mobile-app-log-out-and-revoke-its-tokens 2026-10-19T05:48:04.913Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-a-platform-handle-manual-edits-to-an-sbom 2026-10-19T05:48:05.079Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-a-plugin-marketplace-handle-vulnerable-bundled-libraries 2026-10-19T05:48:05.171Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-a-sandboxed-store-widget-talk-to-your-page 2026-10-19T05:48:05.270Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-a-security-bot-comment-on-a-pull-request 2026-10-19T05:48:05.386Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-a-small-team-scope-its-first-penetration-test 2026-10-19T05:48:05.490Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-a-vulnerability-scan-job-queue-be-designed 2026-10-19T05:48:05.613Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-a-webhook-sample-verify-signatures 2026-10-19T05:48:05.712Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-docs-show-api-keys-in-code-samples 2026-10-19T05:48:05.825Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-ephemeral-ci-jobs-authenticate-to-a-private-registry 2026-10-19T05:48:05.927Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-ephemeral-ci-runners-reach-private-networks 2026-10-19T05:48:06.019Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-plugins-ask-for-consent-before-sending-user-data-out 2026-10-19T05:48:06.119Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-policy-inheritance-work-in-an-sca-tool-for-large-orgs 2026-10-19T05:48:06.217Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-rpa-bots-store-credentials 2026-10-19T05:48:06.324Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-scan-jobs-retry-backoff-dead-letters-and-idempotency 2026-10-19T05:48:06.550Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-security-tooling-treat-prompt-and-skill-files 2026-10-19T05:48:06.661Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-you-configure-npm-access-tokens-on-a-developer-laptop 2026-10-19T05:48:06.767Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-you-store-rotate-and-expire-a-scim-bearer-token 2026-10-19T05:48:06.882Z weekly 0.7 https://safeguard.sh/resources/blog/how-should-you-structure-a-security-knowledge-base-for-engineers 2026-10-19T05:48:07.106Z weekly 0.7 https://safeguard.sh/resources/blog/how-slow-can-a-security-scan-be-before-developers-skip-it 2026-10-19T05:48:07.205Z weekly 0.7 https://safeguard.sh/resources/blog/how-soon-after-an-incident-should-you-hold-the-postmortem 2026-10-19T05:48:07.307Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-add-a-fresh-clone-build-check-to-ci 2026-10-19T05:48:07.411Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-add-a-new-language-to-your-stack-without-losing-dependency-control 2026-10-19T05:48:07.512Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-add-mfa-to-a-legacy-app-that-cannot-support-it 2026-10-19T05:48:07.623Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-allow-only-trusted-build-scripts-in-pnpm 2026-10-19T05:48:07.721Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-annotate-a-security-dashboard-so-trends-stay-honest 2026-10-19T05:48:07.825Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-announce-a-security-release-of-an-internal-library 2026-10-19T05:48:07.921Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-announce-a-vulnerability-on-the-oss-security-list 2026-10-19T05:48:08.022Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-announce-end-of-life-for-an-old-release-line 2026-10-19T05:48:08.261Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-announce-end-of-support-under-ssdf-po-1-2 2026-10-19T05:48:08.381Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-a-buyer-request-for-single-tenant-hosting 2026-10-19T05:48:08.498Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-a-school-security-questionnaire-about-dependencies 2026-10-19T05:48:08.604Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-are-ai-model-providers-subprocessors 2026-10-19T05:48:08.704Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-are-we-affected-by-this-cve-for-a-customer 2026-10-19T05:48:08.814Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-business-continuity-and-dr-questions-from-buyers 2026-10-19T05:48:08.915Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-customers-about-transitive-dependencies 2026-10-19T05:48:09.008Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-data-classification-questions-from-enterprise-buyers 2026-10-19T05:48:09.110Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-do-agents-have-their-own-identities-questionnaire 2026-10-19T05:48:09.206Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-do-developers-use-ai-coding-assistants-questionnaire 2026-10-19T05:48:09.301Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-do-you-assess-your-own-vendors-in-a-buyer-review 2026-10-19T05:48:09.404Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-do-you-detect-unapproved-software-in-a-security-questionnaire 2026-10-19T05:48:09.504Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-do-you-have-a-secure-development-lifecycle 2026-10-19T05:48:09.611Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-do-you-have-reproducible-builds-on-a-questionnaire 2026-10-19T05:48:09.830Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-do-you-inventory-mcp-servers-questionnaire 2026-10-19T05:48:09.939Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-do-you-log-ai-agent-and-mcp-activity 2026-10-19T05:48:10.032Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-do-you-run-end-of-life-components-in-a-hospital-review 2026-10-19T05:48:10.137Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-do-you-run-unsupported-or-end-of-life-software 2026-10-19T05:48:10.355Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-do-you-sandbox-local-mcp-servers-questionnaire 2026-10-19T05:48:10.451Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-does-your-product-use-ai-in-a-security-questionnaire 2026-10-19T05:48:10.552Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-how-do-you-authenticate-mcp-clients-questionnaire 2026-10-19T05:48:10.651Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-how-do-you-secure-your-ci-cd-pipeline 2026-10-19T05:48:10.758Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-how-do-you-vet-open-source-before-using-it 2026-10-19T05:48:10.859Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-how-fast-do-you-patch-critical-vulnerabilities 2026-10-19T05:48:11.098Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-how-fast-do-you-patch-honestly-when-you-have-no-sla 2026-10-19T05:48:11.196Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-how-you-inventory-open-source-components 2026-10-19T05:48:11.290Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-incident-response-questions-in-a-buyer-review 2026-10-19T05:48:11.584Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-is-a-human-in-the-loop-for-ai-agent-actions 2026-10-19T05:48:11.698Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-logging-and-monitoring-questions-from-enterprise-buyers 2026-10-19T05:48:11.799Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-mcp-supply-chain-vetting-questions 2026-10-19T05:48:11.900Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-mcp-transport-and-session-security-questions 2026-10-19T05:48:12.055Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-prompt-injection-questions-in-a-questionnaire 2026-10-19T05:48:12.155Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-what-happens-if-an-mcp-token-leaks 2026-10-19T05:48:12.250Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-which-ai-models-do-you-use-when-models-change 2026-10-19T05:48:12.378Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-answer-who-can-add-an-mcp-server-change-control 2026-10-19T05:48:12.485Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-appeal-a-chrome-web-store-warning-or-takedown 2026-10-19T05:48:12.580Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-ask-a-reporter-for-more-time-embargo-extension 2026-10-19T05:48:12.677Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-ask-a-security-vendor-about-known-limitations 2026-10-19T05:48:12.788Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-ask-for-a-security-review-early-without-slowing-your-team 2026-10-19T05:48:12.888Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-ask-for-a-security-tool-trial-extension 2026-10-19T05:48:12.987Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-ask-product-for-dependency-upgrade-time-a-short-script 2026-10-19T05:48:13.088Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-ask-product-to-schedule-a-security-fix 2026-10-19T05:48:13.185Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-audit-a-vulnerability-dashboard-in-one-hour 2026-10-19T05:48:13.284Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-audit-old-docs-for-outdated-security-advice 2026-10-19T05:48:13.380Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-audit-the-sdks-in-a-student-mobile-app 2026-10-19T05:48:13.482Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-audit-the-secrets-in-your-ci-pipeline 2026-10-19T05:48:13.580Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-authorize-list-and-search-endpoints 2026-10-19T05:48:13.694Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-authorize-queue-jobs-in-a-multi-tenant-app 2026-10-19T05:48:13.793Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-avoid-a-flood-of-pull-requests-when-you-turn-on-an-update-tool 2026-10-19T05:48:13.893Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-backfill-missed-webhooks-with-a-reconciliation-job 2026-10-19T05:48:13.996Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-block-dangerous-redis-commands-acl-or-rename-command 2026-10-19T05:48:14.096Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-block-git-and-tarball-transitive-dependencies-in-pnpm 2026-10-19T05:48:14.204Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-build-a-dependency-inventory-for-an-ml-project 2026-10-19T05:48:14.300Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-build-a-deprecation-tracker-for-your-dependencies 2026-10-19T05:48:14.396Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-build-a-license-inventory-for-a-client-delivery 2026-10-19T05:48:14.491Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-build-a-low-code-app-inventory-in-one-week 2026-10-19T05:48:14.593Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-build-a-security-glossary-engineers-will-read 2026-10-19T05:48:14.695Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-build-an-authorization-test-matrix 2026-10-19T05:48:14.804Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-build-cache-keys-for-mobile-ci-from-lockfiles 2026-10-19T05:48:14.919Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-check-a-public-image-has-provenance-and-sbom-attestations 2026-10-19T05:48:15.017Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-check-a-third-party-component-still-gets-security-updates 2026-10-19T05:48:15.300Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-check-an-open-source-scanner-project-is-healthy 2026-10-19T05:48:15.500Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-choose-a-base-image-for-a-newly-extracted-service 2026-10-19T05:48:15.624Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-choose-a-cryptography-library-that-is-hard-to-misuse 2026-10-19T05:48:15.735Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-cite-a-docker-image-digest-in-a-methods-section 2026-10-19T05:48:16.101Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-cite-a-patch-statistic-without-overclaiming 2026-10-19T05:48:16.198Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-classify-the-severity-of-an-ai-agent-incident 2026-10-19T05:48:16.299Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-collect-developer-feedback-on-security-tools 2026-10-19T05:48:16.649Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-compare-installed-packages-in-staging-and-prod 2026-10-19T05:48:16.751Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-compare-two-candidate-base-images-with-an-sbom-and-a-scan 2026-10-19T05:48:16.849Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-compare-your-patch-times-to-a-report-fairly 2026-10-19T05:48:16.942Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-confirm-a-container-fix-landed-after-a-rebuild 2026-10-19T05:48:17.199Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-confirm-a-security-fix-is-running-in-production 2026-10-19T05:48:17.312Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-control-vs-code-updates-across-a-team 2026-10-19T05:48:17.519Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-correct-a-published-security-advisory 2026-10-19T05:48:17.628Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-count-a-vulnerability-cve-package-instance-or-fix 2026-10-19T05:48:17.733Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-count-unscored-vulnerabilities-in-a-dashboard 2026-10-19T05:48:17.851Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-create-a-multi-platform-conda-lockfile 2026-10-19T05:48:17.955Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-credit-a-vulnerability-reporter-in-your-advisory 2026-10-19T05:48:18.056Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-cut-runtime-version-sprawl-count-distinct-versions-first 2026-10-19T05:48:18.157Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-decommission-a-subdomain-safely-step-order 2026-10-19T05:48:18.248Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-dedupe-the-same-cve-across-many-environments 2026-10-19T05:48:18.345Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-describe-a-fork-in-a-cyclonedx-sbom-with-pedigree 2026-10-19T05:48:18.438Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-describe-ai-features-on-a-trust-page-without-overclaiming 2026-10-19T05:48:18.539Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-describe-your-appsec-testing-in-a-security-questionnaire 2026-10-19T05:48:18.636Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-design-deployment-groups-for-a-staged-iot-firmware-rollout 2026-10-19T05:48:18.816Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-diff-two-dependency-scanner-exports-step-by-step 2026-10-19T05:48:18.908Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-disable-smbv1-when-an-old-device-still-needs-it 2026-10-19T05:48:18.998Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-document-a-manual-control-so-it-survives-staff-turnover 2026-10-19T05:48:19.096Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-download-all-cve-records-with-the-cvelistv5-repository 2026-10-19T05:48:19.203Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-draw-a-data-flow-map-of-your-third-party-integrations 2026-10-19T05:48:19.301Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-edit-a-bot-pr-without-the-bot-overwriting-your-changes 2026-10-19T05:48:19.444Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-enable-github-private-vulnerability-reporting-for-a-repo 2026-10-19T05:48:19.539Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-enable-gradle-dependency-verification 2026-10-19T05:48:19.646Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-enable-tls-for-redis-clients-replicas-and-cluster 2026-10-19T05:48:19.755Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-estimate-time-saved-by-a-security-ai-feature-honestly 2026-10-19T05:48:19.865Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-evaluate-a-supply-chain-security-tool-in-one-week 2026-10-19T05:48:20.101Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-evaluate-claims-that-ai-finds-zero-day-vulnerabilities 2026-10-19T05:48:20.216Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-explain-a-risk-acceptance-to-an-executive 2026-10-19T05:48:20.339Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-explain-ai-coding-agent-risk-to-leadership 2026-10-19T05:48:20.446Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-explain-open-source-risk-to-comms-and-pr 2026-10-19T05:48:20.591Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-explain-reachability-to-a-customer-security-reviewer 2026-10-19T05:48:20.803Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-explain-reachability-to-product-managers 2026-10-19T05:48:20.912Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-explain-supply-chain-security-to-a-non-technical-founder 2026-10-19T05:48:21.019Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-explain-two-scanner-numbers-to-leadership-in-one-page 2026-10-19T05:48:21.180Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-explain-vex-statuses-to-support-and-sales 2026-10-19T05:48:21.273Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-explain-vulnerability-backlog-cost-to-a-cfo 2026-10-19T05:48:21.391Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-explain-vulnerability-sla-to-customer-success 2026-10-19T05:48:21.564Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-filter-cisa-advisories-to-what-matters-for-your-sector 2026-10-19T05:48:21.672Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-ai-agent-config-files-in-your-repos 2026-10-19T05:48:21.779Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-ai-sdk-usage-across-your-repos 2026-10-19T05:48:21.952Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-assets-your-vulnerability-scanner-never-saw 2026-10-19T05:48:22.144Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-client-sites-running-plugins-that-need-a-newer-php 2026-10-19T05:48:22.319Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-container-images-from-unapproved-registries 2026-10-19T05:48:22.502Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-dangling-dns-records-in-your-zone 2026-10-19T05:48:22.659Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-every-dependency-manifest-across-your-repositories 2026-10-19T05:48:22.822Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-every-repository-a-target-company-really-has 2026-10-19T05:48:22.970Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-every-service-using-a-vulnerable-base-image 2026-10-19T05:48:23.130Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-every-third-party-api-your-services-call 2026-10-19T05:48:23.283Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-forgotten-ai-prototypes-in-your-organization 2026-10-19T05:48:23.465Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-forgotten-lab-servers-and-websites 2026-10-19T05:48:23.637Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-git-url-dependencies-in-npm-and-pip-projects 2026-10-19T05:48:23.772Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-model-files-in-repos-and-artifact-stores 2026-10-19T05:48:23.866Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-package-installs-hiding-in-ci-scripts-and-dockerfiles 2026-10-19T05:48:23.958Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-repos-nobody-owns-with-codeowners 2026-10-19T05:48:24.060Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-shadow-accounts-a-leaving-developer-created 2026-10-19T05:48:24.163Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-tables-missing-row-level-security 2026-10-19T05:48:24.380Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-the-owner-of-a-vulnerable-asset-when-tags-are-missing 2026-10-19T05:48:24.487Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-the-same-vendor-used-by-multiple-product-teams 2026-10-19T05:48:24.582Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-third-party-apps-with-access-to-google-workspace-data 2026-10-19T05:48:24.693Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-unapproved-dependencies-in-your-repos 2026-10-19T05:48:24.794Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-unused-credentials-before-anyone-leaves 2026-10-19T05:48:24.900Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-unused-maven-dependencies-to-cut-risk 2026-10-19T05:48:25.018Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-webhooks-sending-your-repo-events-to-outside-services 2026-10-19T05:48:25.117Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-find-wordpress-plugins-no-longer-listed-on-wordpress-org 2026-10-19T05:48:25.213Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-follow-chrome-security-fixes-from-the-chrome-releases-blog 2026-10-19T05:48:25.314Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-follow-kubernetes-security-issues-with-the-official-cve-feed 2026-10-19T05:48:25.415Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-follow-nodejs-security-releases-and-advisories 2026-10-19T05:48:25.513Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-force-a-patched-transitive-dependency-in-gradle 2026-10-19T05:48:25.613Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-gate-new-services-while-the-legacy-app-stays-ungated 2026-10-19T05:48:25.712Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-gate-pull-requests-in-a-student-data-codebase 2026-10-19T05:48:25.841Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-give-an-update-tool-private-registry-access-safely 2026-10-19T05:48:25.956Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-give-pip-credentials-for-a-private-index-without-leaking-them 2026-10-19T05:48:26.056Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-give-security-feedback-in-code-review-without-sounding-harsh 2026-10-19T05:48:26.163Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-group-sdk-modules-so-they-upgrade-together 2026-10-19T05:48:26.256Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-handle-429-rate-limits-from-saas-apis-without-making-it-worse 2026-10-19T05:48:26.359Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-handle-a-denied-vulnerability-exception-request 2026-10-19T05:48:26.461Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-handle-a-pen-test-finding-you-decide-not-to-fix 2026-10-19T05:48:26.573Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-handle-a-vendored-or-copied-library-in-a-legacy-app 2026-10-19T05:48:26.670Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-handle-mistakes-in-a-supplier-sbom-good-faith-or-obfuscation 2026-10-19T05:48:26.777Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-handle-transitive-dependencies-in-an-approved-package-list 2026-10-19T05:48:26.884Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-import-a-unitypackage-file-safely-a-step-by-step-routine 2026-10-19T05:48:26.990Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-import-repositories-into-a-monorepo-with-git-filter-repo 2026-10-19T05:48:27.097Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-install-npm-global-packages-without-sudo 2026-10-19T05:48:27.197Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-introduce-a-security-bot-to-your-developers 2026-10-19T05:48:27.332Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-inventory-agent-tooling-across-developer-machines 2026-10-19T05:48:27.440Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-inventory-applications-across-multiple-cloud-accounts 2026-10-19T05:48:27.548Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-inventory-developer-tools-across-laptops-and-build-agents 2026-10-19T05:48:27.670Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-inventory-every-ci-secret-with-gh-secret-list 2026-10-19T05:48:27.778Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-inventory-every-prompt-and-dataset-in-your-repositories 2026-10-19T05:48:27.894Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-inventory-inbound-webhooks-and-callbacks 2026-10-19T05:48:27.998Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-inventory-native-plugins-in-a-unity-project 2026-10-19T05:48:28.098Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-inventory-third-party-scripts-on-a-student-portal 2026-10-19T05:48:28.192Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-judge-a-sellers-vex-not-affected-claims 2026-10-19T05:48:28.286Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-keep-a-dependency-inventory-across-every-client-site 2026-10-19T05:48:28.395Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-keep-a-vendor-claims-ledger-during-an-evaluation 2026-10-19T05:48:28.515Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-keep-one-noisy-team-from-starving-everyone-elses-scans 2026-10-19T05:48:28.621Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-keep-pinned-github-actions-up-to-date 2026-10-19T05:48:28.741Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-keep-questionnaire-answers-consistent-with-a-claims-register 2026-10-19T05:48:28.847Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-keep-scan-results-consistent-between-ide-ci-and-platform 2026-10-19T05:48:28.949Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-know-your-merged-dependency-policy-is-working 2026-10-19T05:48:29.044Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-label-data-sensitivity-for-vulnerability-triage 2026-10-19T05:48:29.139Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-label-shipped-early-access-and-planned-on-a-security-page 2026-10-19T05:48:29.235Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-limit-which-github-actions-your-organization-can-run 2026-10-19T05:48:29.331Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-link-a-finding-ticket-and-pull-request-for-audit-traceability 2026-10-19T05:48:29.443Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-link-sbom-vex-and-advisories-from-one-security-page 2026-10-19T05:48:29.618Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-list-every-redis-kafka-rabbitmq-and-sqs-client-library-you-use 2026-10-19T05:48:29.735Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-list-every-wordpress-plugin-across-client-sites-with-wp-cli 2026-10-19T05:48:29.851Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-list-internal-packages-in-an-sbom-with-no-public-registry 2026-10-19T05:48:29.948Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-lock-android-sdk-versions-with-gradle-lockfiles 2026-10-19T05:48:30.041Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-lock-dependency-versions-in-a-legacy-java-build 2026-10-19T05:48:30.137Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-lock-down-a-domain-that-never-sends-email 2026-10-19T05:48:30.240Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-lock-down-github-actions-for-a-small-team 2026-10-19T05:48:30.337Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-make-a-security-scan-a-required-check-before-merge 2026-10-19T05:48:30.442Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-make-ai-agent-logs-tamper-evident 2026-10-19T05:48:30.549Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-make-pip-verify-hashes-before-installing-python-packages 2026-10-19T05:48:30.659Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-make-security-docs-findable-titles-synonyms-and-search 2026-10-19T05:48:30.772Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-make-the-case-for-more-vulnerability-remediation-capacity 2026-10-19T05:48:30.879Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-manage-hugging-face-tokens-in-notebooks-and-ci 2026-10-19T05:48:30.978Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-map-a-repository-to-the-production-asset-it-runs-as 2026-10-19T05:48:31.077Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-map-vulnerable-dependencies-to-owning-teams 2026-10-19T05:48:31.174Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-measure-dependency-lag-across-your-repositories 2026-10-19T05:48:31.276Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-measure-how-far-your-fork-has-diverged-from-upstream 2026-10-19T05:48:31.377Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-measure-noise-from-a-dependency-update-tool 2026-10-19T05:48:31.477Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-measure-paved-road-adoption-for-security 2026-10-19T05:48:31.580Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-measure-security-alert-fatigue-with-your-own-data 2026-10-19T05:48:31.693Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-measure-security-progress-in-a-modernization-project 2026-10-19T05:48:31.794Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-measure-the-dependency-footprint-of-your-sdk 2026-10-19T05:48:31.903Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-measure-time-to-remediate-across-hybrid-environments 2026-10-19T05:48:31.995Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-measure-vulnerabilities-with-no-owner 2026-10-19T05:48:32.092Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-measure-whether-your-postmortems-work 2026-10-19T05:48:32.182Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-measure-your-shadow-dependency-rate 2026-10-19T05:48:32.285Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-merge-two-dependency-policies-after-a-merger 2026-10-19T05:48:32.389Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-monitor-a-legacy-system-that-cannot-run-an-agent 2026-10-19T05:48:32.491Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-monitor-an-ai-security-feature-after-you-adopt-it 2026-10-19T05:48:32.597Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-monitor-for-new-vulnerabilities-ssdf-rv-1-1-routine 2026-10-19T05:48:32.777Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-name-and-label-dependency-update-pull-requests-for-triage 2026-10-19T05:48:32.903Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-name-and-submit-a-secure-software-attestation-package 2026-10-19T05:48:32.995Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-notify-customers-when-an-open-source-flaw-affects-them 2026-10-19T05:48:33.285Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-organize-exception-evidence-for-an-audit-period 2026-10-19T05:48:33.400Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-override-a-vulnerable-transitive-dependency-npm-yarn 2026-10-19T05:48:33.571Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-pass-artifacts-between-ephemeral-ci-jobs-safely 2026-10-19T05:48:33.678Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-pause-automated-fix-prs-during-an-incident 2026-10-19T05:48:33.800Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-pick-one-vulnerability-sla-after-two-teams-merge 2026-10-19T05:48:33.914Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-pin-a-hugging-face-model-to-a-specific-commit 2026-10-19T05:48:34.011Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-pin-an-ai-model-version-and-test-before-you-move 2026-10-19T05:48:34.097Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-pin-and-lock-dependencies-in-a-small-edtech-team 2026-10-19T05:48:34.195Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-pin-ios-sdk-versions-podfile-lock-and-package-resolved 2026-10-19T05:48:34.299Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-pin-the-openapi-generator-version-in-ci 2026-10-19T05:48:34.394Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-plan-a-major-version-upgrade-with-an-sbom 2026-10-19T05:48:34.490Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-prepare-for-an-auditor-walkthrough-of-your-exception-process 2026-10-19T05:48:34.582Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-present-a-worse-vulnerability-quarter-to-leadership 2026-10-19T05:48:34.690Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-prevent-injection-defenses-in-order-of-strength 2026-10-19T05:48:34.796Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-prioritise-client-site-patches-today-or-this-quarter 2026-10-19T05:48:34.903Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-produce-an-sbom-for-every-release-ssdf-ps-3-2 2026-10-19T05:48:34.996Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-protect-github-workflow-files-with-codeowners 2026-10-19T05:48:35.094Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-protect-your-build-pipeline-three-settings-small-team 2026-10-19T05:48:35.187Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-publish-a-github-action-with-moving-major-tags 2026-10-19T05:48:35.282Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-publish-and-verify-a-sha256sums-file 2026-10-19T05:48:35.390Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-publish-organization-workflow-templates-safely 2026-10-19T05:48:35.498Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-pull-a-malicious-version-out-of-your-mirror-runbook 2026-10-19T05:48:35.597Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-push-back-on-a-pen-test-finding-you-disagree-with 2026-10-19T05:48:35.711Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-put-a-legacy-server-behind-a-jump-host 2026-10-19T05:48:35.828Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-a-csp-violation-report-from-your-storefront 2026-10-19T05:48:35.928Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-a-dependabot-pull-request-as-a-maintainer 2026-10-19T05:48:36.039Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-a-dependency-vulnerability-alert-in-five-minutes 2026-10-19T05:48:36.151Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-a-security-vendor-changelog-to-judge-product-maturity 2026-10-19T05:48:36.243Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-a-security-vendor-feature-comparison-table 2026-10-19T05:48:36.338Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-a-time-to-patch-report-five-questions 2026-10-19T05:48:36.465Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-a-wordpress-plugin-readme-before-you-install 2026-10-19T05:48:36.570Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-an-injection-finding-request-payload-evidence 2026-10-19T05:48:36.671Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-an-open-source-license-scan-report 2026-10-19T05:48:36.837Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-an-sca-report-step-by-step 2026-10-19T05:48:36.956Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-an-sdk-lockfile-diff-before-merging 2026-10-19T05:48:37.048Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-spdx-relationships-depends-on-contains-describes 2026-10-19T05:48:37.148Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-the-first-results-screen-of-a-scanner-demo 2026-10-19T05:48:37.247Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-the-kev-flag-in-vulnerability-dashboard-data 2026-10-19T05:48:37.336Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-read-the-oss-security-mailing-list-as-a-consumer 2026-10-19T05:48:37.432Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-reconcile-a-source-sbom-and-an-image-sbom-for-one-release 2026-10-19T05:48:37.529Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-record-a-closed-source-vendor-binary-in-an-sbom 2026-10-19T05:48:37.632Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-record-failure-behavior-for-third-party-apis 2026-10-19T05:48:37.727Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-record-forks-and-patched-open-source-in-an-inventory 2026-10-19T05:48:37.820Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-remove-a-saas-integration-completely-keys-tokens-and-webhooks 2026-10-19T05:48:37.909Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-remove-a-third-party-sdk-from-a-mobile-app-playbook 2026-10-19T05:48:38.000Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-reply-when-a-customer-asks-if-you-are-affected-by-a-new-cve 2026-10-19T05:48:38.089Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-report-a-flaw-in-a-component-you-ship-to-its-maintainer 2026-10-19T05:48:38.203Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-report-a-malicious-vs-code-extension-to-the-marketplace 2026-10-19T05:48:38.315Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-report-a-security-problem-in-a-docker-official-image 2026-10-19T05:48:38.426Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-report-the-first-monorepo-scan-to-leadership 2026-10-19T05:48:38.534Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-reproduce-a-python-environment-with-uv-exclude-newer 2026-10-19T05:48:38.633Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-reproduce-a-researchers-vulnerability-report-safely 2026-10-19T05:48:38.730Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-require-2fa-for-a-research-lab-github-organization 2026-10-19T05:48:38.828Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-require-2fa-for-new-developers-and-contractors-on-github 2026-10-19T05:48:38.922Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-require-approval-before-a-production-deploy 2026-10-19T05:48:39.038Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-require-two-person-review-for-payment-code 2026-10-19T05:48:39.127Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-rerun-a-libfuzzer-crash-file-as-a-regression-check 2026-10-19T05:48:39.222Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-restore-one-tenant-from-a-shared-backup 2026-10-19T05:48:39.318Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-restrict-gitlab-ci-job-token-access 2026-10-19T05:48:39.419Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-restrict-globals-in-a-python-unpickler-with-find-class 2026-10-19T05:48:39.532Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-restrict-redis-pub-sub-channels-with-acl-rules 2026-10-19T05:48:39.641Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-retest-a-fix-with-the-researcher-who-reported-it 2026-10-19T05:48:39.750Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-retest-an-injection-finding-after-a-fix 2026-10-19T05:48:39.850Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-retire-a-control-without-creating-an-audit-finding 2026-10-19T05:48:39.943Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-retire-a-model-dependency-cleanly-caches-images-and-records 2026-10-19T05:48:40.033Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-revert-a-merged-fix-pr 2026-10-19T05:48:40.127Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-a-codemod-pull-request-without-reading-every-line 2026-10-19T05:48:40.234Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-a-contractor-pull-request-for-supply-chain-risk 2026-10-19T05:48:40.331Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-a-github-action-version-bump-before-you-merge 2026-10-19T05:48:40.428Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-a-helm-values-change-in-a-pull-request 2026-10-19T05:48:40.548Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-a-lockfile-diff-after-upgrading-a-build-tool 2026-10-19T05:48:40.660Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-a-lockfile-only-security-pull-request 2026-10-19T05:48:40.774Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-a-projects-github-actions-workflows-before-adopting-it 2026-10-19T05:48:40.874Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-a-pull-request-that-adds-a-model-file 2026-10-19T05:48:40.967Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-a-security-vendors-subprocessor-list 2026-10-19T05:48:41.106Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-a-third-party-github-action-before-using-it 2026-10-19T05:48:41.227Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-a-vendored-dependency-update-in-a-pull-request 2026-10-19T05:48:41.322Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-dependency-changes-an-ai-agent-proposes 2026-10-19T05:48:41.416Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-review-the-diff-since-your-last-release-tag 2026-10-19T05:48:41.538Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-roll-out-a-mobile-sdk-upgrade-safely 2026-10-19T05:48:41.648Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-roll-out-a-new-scanner-without-blocking-every-pull-request 2026-10-19T05:48:41.773Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-roll-out-a-scanner-upgrade-without-a-finding-flood 2026-10-19T05:48:41.874Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-rotate-a-ci-secret-that-leaked-into-a-build-log 2026-10-19T05:48:41.974Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-rotate-jwt-signing-keys-without-breaking-clients 2026-10-19T05:48:42.113Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-rotate-rpa-credentials-without-breaking-the-bots 2026-10-19T05:48:42.206Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-route-security-alerts-by-on-call-hours-and-severity 2026-10-19T05:48:42.301Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-run-a-30-minute-dependency-dispute-meeting 2026-10-19T05:48:42.414Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-run-a-dependency-exception-review-board 2026-10-19T05:48:42.528Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-run-a-license-review-from-an-sbom-step-by-step 2026-10-19T05:48:42.635Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-run-a-monthly-security-upgrade-day 2026-10-19T05:48:42.750Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-run-a-paved-road-pilot-with-one-team 2026-10-19T05:48:42.871Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-run-a-release-go-no-go-meeting-with-security 2026-10-19T05:48:42.973Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-run-a-security-bug-bash 2026-10-19T05:48:43.111Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-run-a-security-tool-friction-walkthrough 2026-10-19T05:48:43.213Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-run-an-approved-component-list-for-ssdf-pw-4-1 2026-10-19T05:48:43.304Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-run-an-sca-scale-test-before-you-buy-for-a-large-organization 2026-10-19T05:48:43.402Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-run-old-and-new-systems-in-parallel-without-doubling-risk 2026-10-19T05:48:43.504Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-say-i-do-not-know-in-a-security-meeting 2026-10-19T05:48:43.604Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-scan-a-monolith-before-you-start-splitting-it 2026-10-19T05:48:43.706Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-scope-security-scans-in-a-monorepo-changed-paths-or-full-scan 2026-10-19T05:48:43.822Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-score-a-dependency-compromise-tabletop-exercise 2026-10-19T05:48:43.919Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-score-a-security-trial-blind 2026-10-19T05:48:44.018Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-score-severity-for-a-vulnerability-someone-reported-to-you 2026-10-19T05:48:44.137Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-secure-a-phone-hotspot-before-tethering-a-laptop 2026-10-19T05:48:44.228Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-secure-a-shared-jupyter-server-for-an-ml-team 2026-10-19T05:48:44.325Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-secure-an-anti-corruption-layer-between-old-and-new 2026-10-19T05:48:44.430Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-secure-wordpress-admin-logins-in-practice 2026-10-19T05:48:44.533Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-secure-your-dns-provider-account-and-api-tokens 2026-10-19T05:48:44.637Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-see-deprecation-warnings-before-a-major-upgrade 2026-10-19T05:48:44.745Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-see-what-changed-behind-an-image-tag-compare-digests 2026-10-19T05:48:44.850Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-see-what-your-ci-role-did-in-cloudtrail 2026-10-19T05:48:44.947Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-see-which-oauth-apps-can-reach-your-github-org 2026-10-19T05:48:45.061Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-self-test-your-exception-process-before-an-audit 2026-10-19T05:48:45.169Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-send-a-security-fix-from-your-fork-to-upstream 2026-10-19T05:48:45.269Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-sequence-upgrades-when-internal-shared-libraries-are-involved 2026-10-19T05:48:45.386Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-set-a-noise-budget-for-security-findings 2026-10-19T05:48:45.497Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-set-vulnerability-remediation-timelines-you-can-defend 2026-10-19T05:48:45.604Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-shard-scans-of-a-large-monorepo 2026-10-19T05:48:45.725Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-share-one-policy-set-across-many-repositories 2026-10-19T05:48:45.840Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-ship-a-command-line-tool-with-project-scripts 2026-10-19T05:48:45.962Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-ship-a-security-fix-for-a-python-library-on-pypi 2026-10-19T05:48:46.061Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-ship-python-dependencies-to-a-spark-cluster-reproducibly 2026-10-19T05:48:46.192Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-size-a-vulnerability-fix-small-medium-or-large 2026-10-19T05:48:46.292Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-sort-security-fixes-in-github-release-notes 2026-10-19T05:48:46.400Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-spot-a-seeded-demo-environment 2026-10-19T05:48:46.503Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-stamp-a-version-into-a-build-without-a-timestamp 2026-10-19T05:48:46.592Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-state-the-minimum-safe-version-in-a-security-advisory 2026-10-19T05:48:46.682Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-stay-under-api-rate-limits-when-scanning-thousands-of-repos 2026-10-19T05:48:46.772Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-stop-a-cli-printing-secrets-in-ci-logs-add-mask-limits 2026-10-19T05:48:46.870Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-stop-a-risky-broker-config-change-in-a-pull-request 2026-10-19T05:48:46.961Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-stop-a-security-tool-trial-from-becoming-free-consulting 2026-10-19T05:48:47.056Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-stop-a-tampered-gradle-wrapper-jar 2026-10-19T05:48:47.159Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-stop-an-app-endpoint-running-up-sms-and-email-costs 2026-10-19T05:48:47.251Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-stop-customer-requests-from-derailing-a-security-roadmap 2026-10-19T05:48:47.346Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-stop-duplicate-findings-when-you-scan-in-several-places 2026-10-19T05:48:47.451Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-stop-git-from-storing-passwords-in-plain-text 2026-10-19T05:48:47.557Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-stop-script-injection-in-github-actions-run-steps 2026-10-19T05:48:47.651Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-submit-an-upstream-fix-for-a-shared-dependency-inside-your-org 2026-10-19T05:48:47.758Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-subscribe-to-ubuntu-and-debian-security-advisories 2026-10-19T05:48:47.914Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-sync-ticket-status-back-to-a-scanner-without-loops 2026-10-19T05:48:48.027Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-tell-a-real-software-update-from-a-fake-update-prompt 2026-10-19T05:48:48.119Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-tell-an-acquired-dev-team-about-the-new-dependency-policy 2026-10-19T05:48:48.232Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-tell-if-a-security-vendors-ai-features-are-real 2026-10-19T05:48:48.326Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-tell-if-a-wordpress-plugin-is-abandoned 2026-10-19T05:48:48.440Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-tell-if-an-sbom-is-complete-known-unknowns 2026-10-19T05:48:48.562Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-tell-if-secure-code-review-is-working-four-measures 2026-10-19T05:48:48.664Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-tell-schools-about-a-vulnerable-dependency-in-your-product 2026-10-19T05:48:48.769Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-tell-who-built-a-ghcr-image-source-label-and-linked-repo 2026-10-19T05:48:48.899Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-a-component-you-cannot-read-the-source-of 2026-10-19T05:48:48.994Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-a-custom-eslint-rule-with-ruletester 2026-10-19T05:48:49.098Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-a-golden-path-template-before-release 2026-10-19T05:48:49.443Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-a-security-automation-before-it-touches-production 2026-10-19T05:48:50.022Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-a-security-kpi-for-gaming-before-you-launch-it 2026-10-19T05:48:50.624Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-a-security-runbook-with-a-cold-read-exercise 2026-10-19T05:48:50.746Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-a-security-tool-on-model-dependencies-in-a-demo 2026-10-19T05:48:50.847Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-a-set-up-in-minutes-claim 2026-10-19T05:48:51.091Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-ai-vulnerability-triage-on-your-own-repositories 2026-10-19T05:48:51.559Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-an-os-patch-versus-a-dependency-update 2026-10-19T05:48:51.674Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-coding-agent-guardrails-before-rollout 2026-10-19T05:48:52.024Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-integrations-during-a-security-tool-trial 2026-10-19T05:48:52.117Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-mcp-server-coverage-in-a-security-tool-evaluation 2026-10-19T05:48:52.220Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-security-headers-with-curl 2026-10-19T05:48:52.312Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-skipped-steps-in-a-multi-step-flow-checklist 2026-10-19T05:48:52.412Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-store-credentials-in-ci-without-releasing-anything 2026-10-19T05:48:52.509Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-vendor-support-during-a-security-tool-trial 2026-10-19T05:48:52.612Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-what-a-mobile-sdk-sends-over-the-network 2026-10-19T05:48:52.707Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-whether-a-scanner-gives-the-same-results-twice 2026-10-19T05:48:52.819Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-test-whether-a-sellers-dependency-inventory-is-complete 2026-10-19T05:48:52.915Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-threat-model-an-ai-coding-agent-in-one-hour 2026-10-19T05:48:53.007Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-tier-software-suppliers-and-components-by-criticality 2026-10-19T05:48:53.108Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-time-box-a-security-spike-story 2026-10-19T05:48:53.201Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-track-vendor-api-deprecations-and-sunset-dates 2026-10-19T05:48:53.293Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-treat-vulnerabilities-in-staging-and-development 2026-10-19T05:48:53.394Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-triage-ai-generated-security-pull-requests-as-a-maintainer 2026-10-19T05:48:53.487Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-triage-an-inbound-vulnerability-report-in-24-hours 2026-10-19T05:48:53.586Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-triage-first-dependency-scan-results-in-an-afternoon 2026-10-19T05:48:53.678Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-triage-ml-framework-vulnerabilities-with-reachability 2026-10-19T05:48:53.771Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-triage-sboms-from-dozens-of-suppliers-by-tier 2026-10-19T05:48:53.866Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-triage-security-issues-into-public-and-private-tracks 2026-10-19T05:48:53.965Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-triage-which-dependencies-to-check-first-in-diligence 2026-10-19T05:48:54.093Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-trim-a-ci-role-with-iam-access-analyzer 2026-10-19T05:48:54.187Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-trust-user-headers-from-a-gateway-or-proxy 2026-10-19T05:48:54.308Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-try-a-pre-release-terraform-module-safely 2026-10-19T05:48:54.418Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-unit-test-a-policy-as-code-rule-before-you-enforce-it 2026-10-19T05:48:54.515Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-update-global-npm-packages-and-see-what-is-outdated 2026-10-19T05:48:54.607Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-update-pinned-docker-base-image-digests-and-keep-patches 2026-10-19T05:48:54.700Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-upgrade-openapi-generator-without-surprises 2026-10-19T05:48:54.798Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-use-dependabot-without-flooding-a-small-edtech-team 2026-10-19T05:48:54.898Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-use-pip-hash-checking-for-ml-requirements 2026-10-19T05:48:55.000Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-use-the-kev-catalog-across-many-environments 2026-10-19T05:48:55.094Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-validate-a-vulnerability-report-before-you-fix-it 2026-10-19T05:48:55.189Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-verify-a-downloaded-dataset-with-checksums 2026-10-19T05:48:55.292Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-verify-a-fix-closed-a-finding-rescan-checklist 2026-10-19T05:48:55.390Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-verify-a-postmortem-action-fixed-the-supply-chain-gap 2026-10-19T05:48:55.518Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-verify-a-signed-git-tag-before-you-build 2026-10-19T05:48:55.624Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-verify-a-webhook-signature-with-hmac 2026-10-19T05:48:55.721Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-verify-an-apache-airflow-release-gpg-and-sha512 2026-10-19T05:48:55.834Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-verify-integrity-and-provenance-of-open-source-packages 2026-10-19T05:48:55.936Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-verify-wordpress-core-files-with-wp-core-verify-checksums 2026-10-19T05:48:56.072Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-version-a-shared-terraform-module-with-semver 2026-10-19T05:48:56.174Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-version-and-review-prompt-templates-in-git 2026-10-19T05:48:56.280Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-vet-a-community-backstage-plugin 2026-10-19T05:48:56.378Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-vet-a-new-open-source-dependency-before-adding-it 2026-10-19T05:48:56.482Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-vet-a-third-party-form-handler-for-a-static-site 2026-10-19T05:48:56.577Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-vet-a-third-party-ui-component-before-you-add-it 2026-10-19T05:48:56.681Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-vet-a-vs-code-extension-before-you-install-it 2026-10-19T05:48:56.854Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-vet-an-mcp-server-before-a-coding-agent-uses-it 2026-10-19T05:48:56.946Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-vet-an-open-source-maintainer-before-adopting-a-package 2026-10-19T05:48:57.046Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-vet-premium-and-non-directory-wordpress-plugins 2026-10-19T05:48:57.141Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-vet-store-apps-and-plugins-before-installing 2026-10-19T05:48:57.242Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-vet-third-party-scripts-on-an-ecommerce-checkout-page 2026-10-19T05:48:57.333Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-word-a-release-note-for-a-dependency-security-bump 2026-10-19T05:48:57.426Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-work-out-which-entry-point-an-attack-used 2026-10-19T05:48:57.521Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-custom-eslint-rule-for-a-security-check 2026-10-19T05:48:57.628Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-dependency-update-policy-a-small-team-can-keep 2026-10-19T05:48:57.723Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-dismissal-comment-an-auditor-will-accept 2026-10-19T05:48:57.822Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-one-page-trial-readout-for-your-cfo 2026-10-19T05:48:57.912Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-one-sentence-security-risk-statement 2026-10-19T05:48:58.015Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-proof-request-to-a-security-vendor 2026-10-19T05:48:58.113Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-security-entry-in-your-sdk-changelog 2026-10-19T05:48:58.212Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-security-faq-engineers-actually-use 2026-10-19T05:48:58.314Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-security-risk-acceptance-record 2026-10-19T05:48:58.410Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-security-support-policy-for-an-sdk 2026-10-19T05:48:58.525Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-security-warning-in-docs-that-readers-notice 2026-10-19T05:48:58.634Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-supply-chain-risk-appetite-statement 2026-10-19T05:48:58.748Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-tldr-for-a-long-security-advisory 2026-10-19T05:48:58.862Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-a-verify-page-for-your-releases 2026-10-19T05:48:58.968Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-an-advisory-when-no-fix-is-planned 2026-10-19T05:48:59.063Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-an-exit-plan-before-you-adopt-a-library 2026-10-19T05:48:59.153Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-an-ide-security-warning-developers-act-on 2026-10-19T05:48:59.244Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-ci-gate-failure-messages-developers-can-act-on 2026-10-19T05:48:59.364Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-good-secure-coding-quiz-questions 2026-10-19T05:48:59.465Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-injects-for-a-supply-chain-tabletop 2026-10-19T05:48:59.607Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-security-okrs-for-a-first-year-program 2026-10-19T05:48:59.709Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-testable-security-requirements 2026-10-19T05:48:59.845Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-the-business-case-for-ai-security-tooling 2026-10-19T05:49:00.237Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-the-impact-section-of-a-supply-chain-postmortem 2026-10-19T05:49:00.338Z weekly 0.7 https://safeguard.sh/resources/blog/how-to-write-we-do-not-know-yet-in-a-vulnerability-update 2026-10-19T05:49:00.445Z weekly 0.7 https://safeguard.sh/resources/blog/how-wpackagist-maps-wordpress-plugins-to-composer 2026-10-19T05:49:00.551Z weekly 0.7 https://safeguard.sh/resources/blog/how-year-one-security-milestones-change-from-20-to-200-engineers 2026-10-19T05:49:00.654Z weekly 0.7 https://safeguard.sh/resources/blog/hql-injection-hibernate-named-parameters 2026-10-19T05:49:00.760Z weekly 0.7 https://safeguard.sh/resources/blog/hsts-preload-should-you-submit-your-domain 2026-10-19T05:49:00.860Z weekly 0.7 https://safeguard.sh/resources/blog/htpasswd-or-token-auth-for-a-self-hosted-docker-registry 2026-10-19T05:49:00.957Z weekly 0.7 https://safeguard.sh/resources/blog/http-client-library-fix-changes-redirects-timeouts-and-tls-checks 2026-10-19T05:49:01.053Z weekly 0.7 https://safeguard.sh/resources/blog/httpclient-default-timeout-100-seconds-and-how-to-bound-calls 2026-10-19T05:49:01.156Z weekly 0.7 https://safeguard.sh/resources/blog/httpclient-lifetime-pooledconnectionlifetime-and-dns-changes 2026-10-19T05:49:01.258Z weekly 0.7 https://safeguard.sh/resources/blog/hub-scanning-clamav-versus-pickle-import-scan-what-each-one-catches 2026-10-19T05:49:01.361Z weekly 0.7 https://safeguard.sh/resources/blog/hugging-face-offline-mode-for-production-inference 2026-10-19T05:49:01.653Z weekly 0.7 https://safeguard.sh/resources/blog/human-approval-before-automated-remediation-github-environments 2026-10-19T05:49:01.769Z weekly 0.7 https://safeguard.sh/resources/blog/husky-prepare-script-in-ci-and-docker-should-git-hooks-install 2026-10-19T05:49:01.888Z weekly 0.7 https://safeguard.sh/resources/blog/hyper-header-read-timeout-needs-a-timer-to-work 2026-10-19T05:49:02.167Z weekly 0.7 https://safeguard.sh/resources/blog/ide-cli-ci-or-pull-request-scan-a-quick-answer-guide 2026-10-19T05:49:02.266Z weekly 0.7 https://safeguard.sh/resources/blog/ide-or-ci-where-should-dependency-scanning-run 2026-10-19T05:49:02.367Z weekly 0.7 https://safeguard.sh/resources/blog/immutable-image-tags-registry-setting-or-admission-policy 2026-10-19T05:49:02.466Z weekly 0.7 https://safeguard.sh/resources/blog/import-old-suppressions-or-start-fresh-after-a-scanner-switch 2026-10-19T05:49:02.635Z weekly 0.7 https://safeguard.sh/resources/blog/imported-vs-called-the-gap-reachability-analysis-measures 2026-10-19T05:49:02.740Z weekly 0.7 https://safeguard.sh/resources/blog/in-process-iframe-worker-or-wasm-where-should-plugins-run 2026-10-19T05:49:02.844Z weekly 0.7 https://safeguard.sh/resources/blog/in-what-order-should-a-scanner-prioritize-vulnerabilities 2026-10-19T05:49:03.033Z weekly 0.7 https://safeguard.sh/resources/blog/in-what-order-to-read-a-pull-request-for-security 2026-10-19T05:49:03.143Z weekly 0.7 https://safeguard.sh/resources/blog/incident-handoffs-between-product-security-platform-and-compliance 2026-10-19T05:49:03.244Z weekly 0.7 https://safeguard.sh/resources/blog/incident-or-outage-wording-in-customer-messages 2026-10-19T05:49:03.348Z weekly 0.7 https://safeguard.sh/resources/blog/ingress-nginx-retirement-what-to-check-and-do 2026-10-19T05:49:03.446Z weekly 0.7 https://safeguard.sh/resources/blog/ingress-or-gateway-api-security-differences-for-app-teams 2026-10-19T05:49:03.550Z weekly 0.7 https://safeguard.sh/resources/blog/inherited-codebase-with-old-dependencies-a-30-60-90-day-plan 2026-10-19T05:49:03.653Z weekly 0.7 https://safeguard.sh/resources/blog/inherited-vs-introduced-vulnerabilities-metric 2026-10-19T05:49:03.755Z weekly 0.7 https://safeguard.sh/resources/blog/inherited-vulnerabilities-after-an-acquisition-exception-plan 2026-10-19T05:49:03.856Z weekly 0.7 https://safeguard.sh/resources/blog/inline-comment-or-summary-comment-for-security-findings 2026-10-19T05:49:03.948Z weekly 0.7 https://safeguard.sh/resources/blog/inner-source-contributions-to-a-shared-library-security-review-rules 2026-10-19T05:49:04.042Z weekly 0.7 https://safeguard.sh/resources/blog/insecure-defaults-in-ai-generated-config-what-to-check 2026-10-19T05:49:04.276Z weekly 0.7 https://safeguard.sh/resources/blog/inspect-your-cloudflare-worker-bundle-before-you-deploy 2026-10-19T05:49:04.430Z weekly 0.7 https://safeguard.sh/resources/blog/install-a-godot-addon-from-github-release-or-zip 2026-10-19T05:49:04.532Z weekly 0.7 https://safeguard.sh/resources/blog/install-only-project-dependencies-in-docker-with-pip-only-deps 2026-10-19T05:49:04.634Z weekly 0.7 https://safeguard.sh/resources/blog/install-only-wheels-with-pip-and-handle-packages-without-them 2026-10-19T05:49:04.731Z weekly 0.7 https://safeguard.sh/resources/blog/install-script-checklist-for-a-cli-truncation-sudo-checksums 2026-10-19T05:49:04.828Z weekly 0.7 https://safeguard.sh/resources/blog/install-scripts-and-scan-timing-why-after-install-is-too-late 2026-10-19T05:49:04.933Z weekly 0.7 https://safeguard.sh/resources/blog/installed-imported-executed-three-meanings-of-using-a-package 2026-10-19T05:49:05.027Z weekly 0.7 https://safeguard.sh/resources/blog/installed-is-not-exploitable-reading-container-image-findings 2026-10-19T05:49:05.300Z weekly 0.7 https://safeguard.sh/resources/blog/insufficient-logging-in-health-apps-what-to-detect 2026-10-19T05:49:05.405Z weekly 0.7 https://safeguard.sh/resources/blog/intake-checklist-for-a-new-commercial-software-product 2026-10-19T05:49:05.511Z weekly 0.7 https://safeguard.sh/resources/blog/intake-rules-which-scanner-findings-deserve-a-ticket 2026-10-19T05:49:05.624Z weekly 0.7 https://safeguard.sh/resources/blog/internal-developer-platform-vs-developer-portal-difference 2026-10-19T05:49:05.860Z weekly 0.7 https://safeguard.sh/resources/blog/internal-tools-are-not-safe-because-they-are-internal 2026-10-19T05:49:05.963Z weekly 0.7 https://safeguard.sh/resources/blog/interview-questions-for-a-targets-engineering-lead-on-dependencies 2026-10-19T05:49:06.060Z weekly 0.7 https://safeguard.sh/resources/blog/inventory-every-lambda-function-layer-and-runtime-with-the-cli 2026-10-19T05:49:06.270Z weekly 0.7 https://safeguard.sh/resources/blog/inventory-first-for-a-district-services-and-software-components 2026-10-19T05:49:06.395Z weekly 0.7 https://safeguard.sh/resources/blog/inventory-first-or-enforcement-first-for-ai-agents 2026-10-19T05:49:06.517Z weekly 0.7 https://safeguard.sh/resources/blog/inventory-gaps-30-60-90-day-plan-after-close 2026-10-19T05:49:06.624Z weekly 0.7 https://safeguard.sh/resources/blog/inventory-plugins-running-in-customer-environments 2026-10-19T05:49:06.741Z weekly 0.7 https://safeguard.sh/resources/blog/ios-app-transport-security-what-it-requires-from-your-api-server 2026-10-19T05:49:06.886Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-base-image-update-a-standard-change-or-needs-approval 2026-10-19T05:49:06.984Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-brand-new-open-source-project-safe-to-adopt 2026-10-19T05:49:07.184Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-burndown-to-zero-deadline-a-safe-security-kpi 2026-10-19T05:49:07.285Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-ci-oidc-token-a-secret-how-to-handle-it 2026-10-19T05:49:07.389Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-custom-ai-connector-verified-by-the-chat-provider 2026-10-19T05:49:07.511Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-cvss-7-0-really-worse-than-a-6-9-reading-severity-bands 2026-10-19T05:49:07.622Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-data-layer-a-sandbox-for-marketing-tags 2026-10-19T05:49:07.743Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-falling-open-vulnerability-count-always-good-news 2026-10-19T05:49:07.939Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-firewall-enough-to-protect-your-redis-or-message-broker 2026-10-19T05:49:08.105Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-firmware-build-on-an-engineers-laptop-slsa-level-zero 2026-10-19T05:49:08.220Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-godot-tool-script-from-an-asset-safe-to-run 2026-10-19T05:49:08.544Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-hotel-room-safe-for-a-laptop-what-protects-your-data 2026-10-19T05:49:08.662Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-libraries-release-cadence-a-roadmap-risk-signal 2026-10-19T05:49:08.777Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-lockfile-change-a-dependency-intake-event 2026-10-19T05:49:08.972Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-more-sophisticated-sbom-sharing-method-better 2026-10-19T05:49:09.074Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-no-code-form-or-website-builder-safe-for-customer-data 2026-10-19T05:49:09.343Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-patch-version-bump-safe-npm-go-and-python-compared 2026-10-19T05:49:09.451Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-paved-road-the-same-as-secure-by-design 2026-10-19T05:49:09.556Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-popular-package-always-safe-myth-vs-fact-for-new-developers 2026-10-19T05:49:09.680Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-private-network-enough-to-trust-service-to-service-calls 2026-10-19T05:49:09.876Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-prometheus-style-metrics-endpoint-safe-to-expose 2026-10-19T05:49:09.981Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-prompt-from-a-public-library-safe-to-paste-into-production 2026-10-19T05:49:10.093Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-pull-through-cache-a-security-control-or-just-speed 2026-10-19T05:49:10.191Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-pytorch-model-a-program-what-pytorch-security-says 2026-10-19T05:49:10.293Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-reproducible-build-required-for-slsa 2026-10-19T05:49:10.405Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-scanner-demo-on-a-sample-app-worth-watching 2026-10-19T05:49:10.540Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-second-llm-opinion-real-verification 2026-10-19T05:49:10.661Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-shared-common-library-a-security-risk-in-a-monolith-split 2026-10-19T05:49:10.814Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-source-available-license-open-source 2026-10-19T05:49:10.969Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-spreadsheet-enough-for-sbom-tracking-at-a-small-company 2026-10-19T05:49:11.066Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-static-call-graph-exact-or-an-estimate 2026-10-19T05:49:11.157Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-thin-wrapper-terraform-module-worth-it 2026-10-19T05:49:11.254Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-third-party-analytics-sdk-in-your-cli-a-supply-chain-risk 2026-10-19T05:49:11.477Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-third-party-console-port-a-supply-chain-dependency 2026-10-19T05:49:11.663Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-twelve-factor-app-secure-what-the-factors-do-and-do-not-cover 2026-10-19T05:49:11.782Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-vulnerable-library-in-your-product-a-hipaa-security-incident 2026-10-19T05:49:11.892Z weekly 0.7 https://safeguard.sh/resources/blog/is-a-vulnerable-wordpress-plugin-exploitable-on-every-site 2026-10-19T05:49:11.998Z weekly 0.7 https://safeguard.sh/resources/blog/is-adding-a-user-to-the-docker-group-safe 2026-10-19T05:49:12.141Z weekly 0.7 https://safeguard.sh/resources/blog/is-ai-generated-code-copyrightable-what-the-us-office-says 2026-10-19T05:49:12.252Z weekly 0.7 https://safeguard.sh/resources/blog/is-allowuntrustedserver-safe-for-gradle-build-cache 2026-10-19T05:49:12.363Z weekly 0.7 https://safeguard.sh/resources/blog/is-an-anonymous-or-pseudonymous-open-source-maintainer-a-risk 2026-10-19T05:49:12.472Z weekly 0.7 https://safeguard.sh/resources/blog/is-an-autofix-claim-proof-of-merged-fixes 2026-10-19T05:49:12.567Z weekly 0.7 https://safeguard.sh/resources/blog/is-an-eslint-plugin-trusted-code-in-your-repo 2026-10-19T05:49:12.692Z weekly 0.7 https://safeguard.sh/resources/blog/is-an-inactive-wordpress-plugin-a-risk-deactivate-vs-delete 2026-10-19T05:49:12.806Z weekly 0.7 https://safeguard.sh/resources/blog/is-an-internal-only-vulnerability-safe-to-ignore 2026-10-19T05:49:12.912Z weekly 0.7 https://safeguard.sh/resources/blog/is-an-old-kev-entry-still-as-urgent-as-a-new-one 2026-10-19T05:49:13.014Z weekly 0.7 https://safeguard.sh/resources/blog/is-an-out-of-date-trust-page-worse-than-no-trust-page 2026-10-19T05:49:13.200Z weekly 0.7 https://safeguard.sh/resources/blog/is-an-sqs-queue-policy-with-principal-star-ever-safe 2026-10-19T05:49:13.314Z weekly 0.7 https://safeguard.sh/resources/blog/is-apache-spark-secure-by-default-settings-to-check 2026-10-19T05:49:13.488Z weekly 0.7 https://safeguard.sh/resources/blog/is-backstage-secure-by-default 2026-10-19T05:49:13.605Z weekly 0.7 https://safeguard.sh/resources/blog/is-catalog-info-yaml-trusted-input-for-backstage 2026-10-19T05:49:13.738Z weekly 0.7 https://safeguard.sh/resources/blog/is-ci-time-your-vulnerability-remediation-bottleneck 2026-10-19T05:49:13.839Z weekly 0.7 https://safeguard.sh/resources/blog/is-comparing-the-jwt-user-id-to-the-path-id-enough-for-bola 2026-10-19T05:49:13.939Z weekly 0.7 https://safeguard.sh/resources/blog/is-count-of-critical-vulnerabilities-a-good-executive-metric 2026-10-19T05:49:14.058Z weekly 0.7 https://safeguard.sh/resources/blog/is-curl-pipe-to-shell-ok-for-an-internal-tool-installer 2026-10-19T05:49:14.161Z weekly 0.7 https://safeguard.sh/resources/blog/is-debian-11-bullseye-end-of-life-lts-and-elts-dates 2026-10-19T05:49:14.262Z weekly 0.7 https://safeguard.sh/resources/blog/is-deleting-old-images-a-security-control-myth-versus-fact 2026-10-19T05:49:14.355Z weekly 0.7 https://safeguard.sh/resources/blog/is-dependency-scanning-alone-enough-for-a-small-web-app 2026-10-19T05:49:14.458Z weekly 0.7 https://safeguard.sh/resources/blog/is-direnv-safe-for-project-secrets-what-direnv-allow-does 2026-10-19T05:49:14.580Z weekly 0.7 https://safeguard.sh/resources/blog/is-docker-config-json-encrypted-base64-registry-credentials 2026-10-19T05:49:14.684Z weekly 0.7 https://safeguard.sh/resources/blog/is-docker-privileged-mode-safe-on-ci-runners 2026-10-19T05:49:14.783Z weekly 0.7 https://safeguard.sh/resources/blog/is-end-of-life-node-or-python-a-soc-2-problem 2026-10-19T05:49:14.946Z weekly 0.7 https://safeguard.sh/resources/blog/is-h2-console-safe-spring-boot-production 2026-10-19T05:49:15.058Z weekly 0.7 https://safeguard.sh/resources/blog/is-hashed-data-anonymous-for-test-environments 2026-10-19T05:49:15.167Z weekly 0.7 https://safeguard.sh/resources/blog/is-it-safe-to-connect-an-ai-assistant-to-email-calendar-and-files 2026-10-19T05:49:15.269Z weekly 0.7 https://safeguard.sh/resources/blog/is-it-safe-to-install-software-updates-on-public-wi-fi 2026-10-19T05:49:15.378Z weekly 0.7 https://safeguard.sh/resources/blog/is-it-safe-to-store-ios-signing-certificates-in-a-git-repo 2026-10-19T05:49:15.514Z weekly 0.7 https://safeguard.sh/resources/blog/is-it-the-registry-or-your-ci-network-a-ten-minute-triage 2026-10-19T05:49:15.616Z weekly 0.7 https://safeguard.sh/resources/blog/is-jackson-default-typing-safe-in-spring-apps 2026-10-19T05:49:15.737Z weekly 0.7 https://safeguard.sh/resources/blog/is-java-11-end-of-life-oracle-roadmap-dates-and-what-to-log 2026-10-19T05:49:15.842Z weekly 0.7 https://safeguard.sh/resources/blog/is-java-8-end-of-life-oracle-premier-and-extended-dates 2026-10-19T05:49:15.954Z weekly 0.7 https://safeguard.sh/resources/blog/is-jupyterhub-safe-for-a-class-or-team-semi-trusted-users-explained 2026-10-19T05:49:16.069Z weekly 0.7 https://safeguard.sh/resources/blog/is-kafka-inter-broker-traffic-encrypted-by-default-listeners 2026-10-19T05:49:16.164Z weekly 0.7 https://safeguard.sh/resources/blog/is-laravel-11-still-supported-and-what-laravel-12-and-13-dates-say 2026-10-19T05:49:16.278Z weekly 0.7 https://safeguard.sh/resources/blog/is-last-pulled-time-a-safe-signal-for-image-cleanup 2026-10-19T05:49:16.388Z weekly 0.7 https://safeguard.sh/resources/blog/is-llm-output-safe-to-pass-to-your-database-or-shell 2026-10-19T05:49:16.492Z weekly 0.7 https://safeguard.sh/resources/blog/is-loading-from-tensorflow-or-flax-a-way-around-pickle 2026-10-19T05:49:16.595Z weekly 0.7 https://safeguard.sh/resources/blog/is-mdx-content-code-review-pull-requests-on-a-static-blog 2026-10-19T05:49:16.727Z weekly 0.7 https://safeguard.sh/resources/blog/is-memcached-safe-to-expose-network-udp-and-sasl-basics 2026-10-19T05:49:16.853Z weekly 0.7 https://safeguard.sh/resources/blog/is-module-federation-safe-micro-frontend-trust-boundaries 2026-10-19T05:49:17.040Z weekly 0.7 https://safeguard.sh/resources/blog/is-my-sbom-spdx-or-cyclonedx-how-to-tell 2026-10-19T05:49:17.158Z weekly 0.7 https://safeguard.sh/resources/blog/is-my-small-advocacy-group-a-high-risk-community-cisa 2026-10-19T05:49:17.687Z weekly 0.7 https://safeguard.sh/resources/blog/is-my-version-inside-the-vulnerable-range-worked-examples 2026-10-19T05:49:18.235Z weekly 0.7 https://safeguard.sh/resources/blog/is-mysql-8-0-end-of-life-what-to-record-and-where-to-move 2026-10-19T05:49:18.653Z weekly 0.7 https://safeguard.sh/resources/blog/is-obfuscated-code-in-a-wordpress-plugin-a-red-flag 2026-10-19T05:49:18.916Z weekly 0.7 https://safeguard.sh/resources/blog/is-opening-a-jupyter-notebook-from-the-internet-safe 2026-10-19T05:49:19.119Z weekly 0.7 https://safeguard.sh/resources/blog/is-paid-extended-support-a-compensating-control 2026-10-19T05:49:19.240Z weekly 0.7 https://safeguard.sh/resources/blog/is-pandas-eval-and-dataframe-query-safe-with-user-input 2026-10-19T05:49:19.360Z weekly 0.7 https://safeguard.sh/resources/blog/is-pandas-read-hdf-safe-hdf5-files-and-pickle 2026-10-19T05:49:19.471Z weekly 0.7 https://safeguard.sh/resources/blog/is-php-8-1-end-of-life-and-when-php-8-2-security-support-ends 2026-10-19T05:49:19.814Z weekly 0.7 https://safeguard.sh/resources/blog/is-pip-trusted-host-safe-what-it-turns-off 2026-10-19T05:49:20.194Z weekly 0.7 https://safeguard.sh/resources/blog/is-powershell-execution-policy-a-security-boundary 2026-10-19T05:49:20.591Z weekly 0.7 https://safeguard.sh/resources/blog/is-pull-request-review-your-vulnerability-remediation-bottleneck 2026-10-19T05:49:20.803Z weekly 0.7 https://safeguard.sh/resources/blog/is-rails-7-2-end-of-life-what-the-maintenance-page-lists 2026-10-19T05:49:21.073Z weekly 0.7 https://safeguard.sh/resources/blog/is-rendering-a-notebook-with-nbconvert-safe-the-csp-sandbox-setting 2026-10-19T05:49:21.281Z weekly 0.7 https://safeguard.sh/resources/blog/is-ruby-3-2-end-of-life-what-ruby-lang-lists-and-what-to-plan 2026-10-19T05:49:21.394Z weekly 0.7 https://safeguard.sh/resources/blog/is-security-patching-included-in-a-software-maintenance-contract 2026-10-19T05:49:21.503Z weekly 0.7 https://safeguard.sh/resources/blog/is-spring-boot-devtools-safe-in-production 2026-10-19T05:49:21.625Z weekly 0.7 https://safeguard.sh/resources/blog/is-ssh-agent-forwarding-safe-what-the-openssh-manual-warns 2026-10-19T05:49:21.728Z weekly 0.7 https://safeguard.sh/resources/blog/is-staying-on-an-old-major-version-ever-the-right-call 2026-10-19T05:49:21.841Z weekly 0.7 https://safeguard.sh/resources/blog/is-the-compiler-toolchain-part-of-a-firmware-sbom 2026-10-19T05:49:21.986Z weekly 0.7 https://safeguard.sh/resources/blog/is-the-openapi-generator-bash-launcher-safe-in-ci 2026-10-19T05:49:22.147Z weekly 0.7 https://safeguard.sh/resources/blog/is-this-dependency-still-maintained-a-quarterly-check 2026-10-19T05:49:22.258Z weekly 0.7 https://safeguard.sh/resources/blog/is-this-sbom-request-a-checkbox-or-a-real-need 2026-10-19T05:49:22.355Z weekly 0.7 https://safeguard.sh/resources/blog/is-this-security-pull-request-really-from-a-real-bot 2026-10-19T05:49:22.498Z weekly 0.7 https://safeguard.sh/resources/blog/is-time-to-exploit-really-shrinking-or-is-the-mix-changing 2026-10-19T05:49:22.726Z weekly 0.7 https://safeguard.sh/resources/blog/is-torch-hub-load-safe-what-hubconf-py-runs 2026-10-19T05:49:22.842Z weekly 0.7 https://safeguard.sh/resources/blog/is-torch-load-safe-what-weights-only-does-and-does-not-cover 2026-10-19T05:49:23.127Z weekly 0.7 https://safeguard.sh/resources/blog/is-typescript-strict-mode-a-security-setting 2026-10-19T05:49:23.313Z weekly 0.7 https://safeguard.sh/resources/blog/is-ubuntu-22-04-end-of-life-standard-maintenance-and-esm-dates 2026-10-19T05:49:23.621Z weekly 0.7 https://safeguard.sh/resources/blog/is-virtual-patching-enough-for-a-legacy-web-application 2026-10-19T05:49:23.881Z weekly 0.7 https://safeguard.sh/resources/blog/is-workflow-run-a-safer-trigger-than-pull-request-target 2026-10-19T05:49:24.050Z weekly 0.7 https://safeguard.sh/resources/blog/is-xss-in-an-admin-only-page-low-risk 2026-10-19T05:49:24.149Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-dev-server-listening-on-all-network-interfaces 2026-10-19T05:49:24.261Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-rollback-ready-before-auto-merge-for-dependency-fixes 2026-10-19T05:49:24.382Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-sbom-identical-every-time-you-generate-it 2026-10-19T05:49:24.503Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-security-vendor-a-processor-or-a-controller-for-scan-data 2026-10-19T05:49:24.604Z weekly 0.7 https://safeguard.sh/resources/blog/is-your-vulnerability-backlog-shrinking-opened-vs-closed 2026-10-19T05:49:24.701Z weekly 0.7 https://safeguard.sh/resources/blog/is-zero-critical-vulnerabilities-a-good-security-goal 2026-10-19T05:49:24.803Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-5-18-access-rights-evidence-from-source-hosts-and-ci 2026-10-19T05:49:24.902Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-5-24-to-5-26-incident-evidence-from-tickets-and-chat 2026-10-19T05:49:25.013Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-5-37-documented-operating-procedures-runbooks-in-repos 2026-10-19T05:49:25.112Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-5-9-asset-inventory-evidence-from-repos-and-sboms 2026-10-19T05:49:25.258Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-6-3-secure-coding-training-evidence-for-developers 2026-10-19T05:49:25.442Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-16-monitoring-activities-evidence-for-software-teams 2026-10-19T05:49:25.644Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-19-installing-software-on-production-evidence 2026-10-19T05:49:25.886Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-2-privileged-access-evidence-admin-roles-and-tokens 2026-10-19T05:49:26.069Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-8-5-secure-authentication-evidence-mfa-and-sso-exports 2026-10-19T05:49:26.180Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-clauses-4-to-10-in-plain-language 2026-10-19T05:49:26.302Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-competence-vs-awareness-vs-training 2026-10-19T05:49:26.431Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-context-and-interested-parties-first-steps 2026-10-19T05:49:26.535Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-continual-improvement-what-to-show 2026-10-19T05:49:26.660Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-planning-of-changes-clause-6-3 2026-10-19T05:49:26.777Z weekly 0.7 https://safeguard.sh/resources/blog/iso-27001-risk-assessment-vs-treatment-plan-vs-register 2026-10-19T05:49:26.894Z weekly 0.7 https://safeguard.sh/resources/blog/isolating-multiple-clients-on-agency-ci-laptops-and-accounts 2026-10-19T05:49:26.990Z weekly 0.7 https://safeguard.sh/resources/blog/isolation-for-coding-agents-that-skip-permission-prompts 2026-10-19T05:49:27.115Z weekly 0.7 https://safeguard.sh/resources/blog/isolation-plan-for-a-legacy-system-checklist-and-tests 2026-10-19T05:49:27.378Z weekly 0.7 https://safeguard.sh/resources/blog/istio-mtls-permissive-vs-strict-migration-steps 2026-10-19T05:49:27.484Z weekly 0.7 https://safeguard.sh/resources/blog/iv-vs-nonce-vs-salt-what-is-the-difference 2026-10-19T05:49:27.594Z weekly 0.7 https://safeguard.sh/resources/blog/java-container-jre-or-jdk-final-image 2026-10-19T05:49:27.716Z weekly 0.7 https://safeguard.sh/resources/blog/java-jar-in-a-container-image-finding-who-fixes-it-shaded-libraries 2026-10-19T05:49:27.832Z weekly 0.7 https://safeguard.sh/resources/blog/java-service-template-gradle-dependency-locking-strict-mode 2026-10-19T05:49:28.112Z weekly 0.7 https://safeguard.sh/resources/blog/javascript-monorepo-packaging-security-checklist 2026-10-19T05:49:28.276Z weekly 0.7 https://safeguard.sh/resources/blog/javax-to-jakarta-migration-dependency-scanner-impact 2026-10-19T05:49:28.405Z weekly 0.7 https://safeguard.sh/resources/blog/jdeprscan-find-deprecated-java-apis-before-a-jdk-upgrade 2026-10-19T05:49:28.513Z weekly 0.7 https://safeguard.sh/resources/blog/jib-or-dockerfile-java-container-images 2026-10-19T05:49:28.614Z weekly 0.7 https://safeguard.sh/resources/blog/join-kev-to-epss-and-account-for-the-rows-that-do-not-match 2026-10-19T05:49:28.856Z weekly 0.7 https://safeguard.sh/resources/blog/json-license-good-not-evil-how-to-treat-it 2026-10-19T05:49:29.075Z weekly 0.7 https://safeguard.sh/resources/blog/judge-an-ml-library-with-openssf-scorecard-checks 2026-10-19T05:49:29.246Z weekly 0.7 https://safeguard.sh/resources/blog/jupyter-execute-permission-means-arbitrary-code-authorizer-explained 2026-10-19T05:49:29.362Z weekly 0.7 https://safeguard.sh/resources/blog/jupyter-kernel-connection-file-and-hmac-key-what-they-protect 2026-10-19T05:49:29.470Z weekly 0.7 https://safeguard.sh/resources/blog/jupyter-token-authentication-what-it-protects-and-what-it-does-not 2026-10-19T05:49:29.573Z weekly 0.7 https://safeguard.sh/resources/blog/just-in-time-tool-access-for-ai-agents-time-boxed-grants 2026-10-19T05:49:29.682Z weekly 0.7 https://safeguard.sh/resources/blog/jwt-role-claims-go-stale-after-a-role-change 2026-10-19T05:49:29.787Z weekly 0.7 https://safeguard.sh/resources/blog/kafka-connect-client-override-policy-default-all-explained 2026-10-19T05:49:29.910Z weekly 0.7 https://safeguard.sh/resources/blog/kafka-connect-config-providers-keep-secrets-out-of-connectors 2026-10-19T05:49:30.015Z weekly 0.7 https://safeguard.sh/resources/blog/kafka-connect-plugin-path-what-gets-loaded-and-who-controls-it 2026-10-19T05:49:30.121Z weekly 0.7 https://safeguard.sh/resources/blog/kafka-kraft-controller-listener-why-it-must-be-separate-and-isolated 2026-10-19T05:49:30.338Z weekly 0.7 https://safeguard.sh/resources/blog/keep-a-decision-log-for-ai-fix-suggestions 2026-10-19T05:49:30.528Z weekly 0.7 https://safeguard.sh/resources/blog/keep-a-forked-vendor-sdk-patched-after-the-chip-vendor-moves-on 2026-10-19T05:49:30.643Z weekly 0.7 https://safeguard.sh/resources/blog/keep-a-hugging-face-token-out-of-your-docker-image 2026-10-19T05:49:30.770Z weekly 0.7 https://safeguard.sh/resources/blog/keep-a-lifetime-install-history-on-every-device-what-to-log 2026-10-19T05:49:30.908Z weekly 0.7 https://safeguard.sh/resources/blog/keep-a-never-auto-update-list-with-owners-and-expiry-dates 2026-10-19T05:49:31.138Z weekly 0.7 https://safeguard.sh/resources/blog/keep-a-precision-ledger-for-each-static-analysis-rule 2026-10-19T05:49:31.283Z weekly 0.7 https://safeguard.sh/resources/blog/keep-a-register-of-security-evidence-shared-with-customers 2026-10-19T05:49:31.411Z weekly 0.7 https://safeguard.sh/resources/blog/keep-a-scanner-comparison-from-going-stale 2026-10-19T05:49:31.565Z weekly 0.7 https://safeguard.sh/resources/blog/keep-an-exemption-register-for-image-admission-policies 2026-10-19T05:49:31.670Z weekly 0.7 https://safeguard.sh/resources/blog/keep-android-keystore-passwords-out-of-build-gradle 2026-10-19T05:49:31.785Z weekly 0.7 https://safeguard.sh/resources/blog/keep-audit-evidence-when-you-retire-an-old-dependency-policy 2026-10-19T05:49:31.911Z weekly 0.7 https://safeguard.sh/resources/blog/keep-bot-comments-from-drowning-human-review 2026-10-19T05:49:32.035Z weekly 0.7 https://safeguard.sh/resources/blog/keep-codeowners-working-when-a-developer-leaves 2026-10-19T05:49:32.149Z weekly 0.7 https://safeguard.sh/resources/blog/keep-coding-agent-settings-from-drifting 2026-10-19T05:49:32.250Z weekly 0.7 https://safeguard.sh/resources/blog/keep-custom-static-analysis-rules-working-through-language-upgrades 2026-10-19T05:49:32.364Z weekly 0.7 https://safeguard.sh/resources/blog/keep-customer-data-out-of-staging-logs-and-test-output 2026-10-19T05:49:32.463Z weekly 0.7 https://safeguard.sh/resources/blog/keep-dated-snapshots-of-dependency-signals-to-spot-drift 2026-10-19T05:49:32.562Z weekly 0.7 https://safeguard.sh/resources/blog/keep-donor-spreadsheets-and-exports-safe-small-nonprofit 2026-10-19T05:49:32.737Z weekly 0.7 https://safeguard.sh/resources/blog/keep-extension-policy-json-in-version-control-with-review 2026-10-19T05:49:32.843Z weekly 0.7 https://safeguard.sh/resources/blog/keep-finding-age-and-sla-when-changing-scanners 2026-10-19T05:49:32.961Z weekly 0.7 https://safeguard.sh/resources/blog/keep-joins-working-when-masking-test-data 2026-10-19T05:49:33.070Z weekly 0.7 https://safeguard.sh/resources/blog/keep-policies-in-git-versioned-reviewed-and-approved 2026-10-19T05:49:33.169Z weekly 0.7 https://safeguard.sh/resources/blog/keep-publishing-separate-from-resolving-split-your-mirror-repositories 2026-10-19T05:49:33.291Z weekly 0.7 https://safeguard.sh/resources/blog/keep-sarif-scan-results-per-release-as-evidence 2026-10-19T05:49:33.399Z weekly 0.7 https://safeguard.sh/resources/blog/keep-sbom-and-finding-history-continuous-after-a-repo-move 2026-10-19T05:49:33.525Z weekly 0.7 https://safeguard.sh/resources/blog/keep-sbom-and-scan-reports-beyond-github-artifact-retention 2026-10-19T05:49:33.636Z weekly 0.7 https://safeguard.sh/resources/blog/keep-security-fix-prs-in-their-own-group-with-applies-to 2026-10-19T05:49:33.740Z weekly 0.7 https://safeguard.sh/resources/blog/keep-self-hosted-runners-out-of-public-ci-templates 2026-10-19T05:49:33.836Z weekly 0.7 https://safeguard.sh/resources/blog/keep-sensitive-data-out-of-chat-alerts-and-tickets-from-automation 2026-10-19T05:49:33.954Z weekly 0.7 https://safeguard.sh/resources/blog/keep-terraform-module-trees-flat-and-pass-dependencies-in 2026-10-19T05:49:34.097Z weekly 0.7 https://safeguard.sh/resources/blog/keep-the-evidence-after-you-delete-the-image 2026-10-19T05:49:34.241Z weekly 0.7 https://safeguard.sh/resources/blog/keep-these-files-for-every-firmware-release-for-five-years 2026-10-19T05:49:34.343Z weekly 0.7 https://safeguard.sh/resources/blog/keep-vendored-code-and-test-fixtures-out-of-dependency-update-scans 2026-10-19T05:49:34.443Z weekly 0.7 https://safeguard.sh/resources/blog/keep-vulnerability-data-current-in-a-restricted-network-runbook 2026-10-19T05:49:34.591Z weekly 0.7 https://safeguard.sh/resources/blog/keep-your-android-game-signing-key-safe-play-app-signing 2026-10-19T05:49:34.733Z weekly 0.7 https://safeguard.sh/resources/blog/keep-your-triage-decisions-portable-suppressions-vex-and-exit-paths 2026-10-19T05:49:34.850Z weekly 0.7 https://safeguard.sh/resources/blog/keeping-jetbrains-ides-and-plugins-patched 2026-10-19T05:49:35.064Z weekly 0.7 https://safeguard.sh/resources/blog/keeping-sbom-history-what-to-store-for-every-release 2026-10-19T05:49:35.201Z weekly 0.7 https://safeguard.sh/resources/blog/kestrel-https-sslprotocols-none-and-certificate-loading 2026-10-19T05:49:35.418Z weekly 0.7 https://safeguard.sh/resources/blog/kestrel-limits-body-size-headers-and-connections-to-set 2026-10-19T05:49:35.583Z weekly 0.7 https://safeguard.sh/resources/blog/kestrel-minrequestbodydatarate-and-slow-client-attacks 2026-10-19T05:49:35.702Z weekly 0.7 https://safeguard.sh/resources/blog/kev-entry-says-retire-the-product-what-should-you-do 2026-10-19T05:49:35.821Z weekly 0.7 https://safeguard.sh/resources/blog/kev-epss-cvss-ssvc-what-each-answers-in-a-report 2026-10-19T05:49:35.950Z weekly 0.7 https://safeguard.sh/resources/blog/kev-exposure-metric-open-known-exploited-vulnerabilities 2026-10-19T05:49:36.061Z weekly 0.7 https://safeguard.sh/resources/blog/kev-first-filter-for-teams-with-no-triage-time 2026-10-19T05:49:36.176Z weekly 0.7 https://safeguard.sh/resources/blog/known-issues-register-for-a-data-room 2026-10-19T05:49:36.319Z weekly 0.7 https://safeguard.sh/resources/blog/kubectl-credential-plugins-short-lived-cluster-access-for-developers 2026-10-19T05:49:36.426Z weekly 0.7 https://safeguard.sh/resources/blog/kubectl-version-skew-how-far-behind-is-too-far 2026-10-19T05:49:36.526Z weekly 0.7 https://safeguard.sh/resources/blog/kubernetes-audit-policy-what-to-log-for-deployments 2026-10-19T05:49:36.646Z weekly 0.7 https://safeguard.sh/resources/blog/kubernetes-image-registry-allowlist-admission-policy 2026-10-19T05:49:36.783Z weekly 0.7 https://safeguard.sh/resources/blog/kubernetes-rbac-who-can-read-pod-logs-and-exec 2026-10-19T05:49:36.887Z weekly 0.7 https://safeguard.sh/resources/blog/kubernetes-stuck-rollout-progress-deadline-explained 2026-10-19T05:49:37.008Z weekly 0.7 https://safeguard.sh/resources/blog/kubernetes-subpath-secret-mount-misses-certificate-renewals 2026-10-19T05:49:37.118Z weekly 0.7 https://safeguard.sh/resources/blog/kubernetes-tls-secret-type-what-the-api-server-checks 2026-10-19T05:49:37.220Z weekly 0.7 https://safeguard.sh/resources/blog/kustomize-remote-resources-pin-a-ref-or-a-full-commit 2026-10-19T05:49:37.319Z weekly 0.7 https://safeguard.sh/resources/blog/lab-instrument-pcs-with-old-operating-systems-scan-plan 2026-10-19T05:49:37.422Z weekly 0.7 https://safeguard.sh/resources/blog/label-cvss-scores-in-your-advisory-cvss-b-bt-be-bte 2026-10-19T05:49:37.529Z weekly 0.7 https://safeguard.sh/resources/blog/lambda-edge-runtime-updates-and-numbered-versions-patch-workflow 2026-10-19T05:49:37.658Z weekly 0.7 https://safeguard.sh/resources/blog/lambda-package-size-limits-what-to-trim 2026-10-19T05:49:37.839Z weekly 0.7 https://safeguard.sh/resources/blog/leading-and-lagging-indicators-in-vulnerability-management 2026-10-19T05:49:37.941Z weekly 0.7 https://safeguard.sh/resources/blog/least-privilege-token-permissions-for-security-automation 2026-10-19T05:49:38.044Z weekly 0.7 https://safeguard.sh/resources/blog/leave-pipenv-keep-pipfile-lock-versions 2026-10-19T05:49:38.144Z weekly 0.7 https://safeguard.sh/resources/blog/legacy-system-inventory-fields-you-need-to-manage-risk 2026-10-19T05:49:38.326Z weekly 0.7 https://safeguard.sh/resources/blog/legacy-system-retirement-plan-milestones-that-hold 2026-10-19T05:49:38.435Z weekly 0.7 https://safeguard.sh/resources/blog/lessons-from-a-runaway-maintenance-automation-incident 2026-10-19T05:49:38.553Z weekly 0.7 https://safeguard.sh/resources/blog/let-users-inspect-cli-telemetry-before-it-is-sent-debug-flag 2026-10-19T05:49:38.679Z weekly 0.7 https://safeguard.sh/resources/blog/lets-encrypt-certificate-lifetimes-shorten-nonprofit-website-checklist 2026-10-19T05:49:38.794Z weekly 0.7 https://safeguard.sh/resources/blog/lets-encrypt-consecutive-authorization-failures-pause-issuance 2026-10-19T05:49:38.928Z weekly 0.7 https://safeguard.sh/resources/blog/lets-encrypt-profiles-classic-tlsserver-shortlived-compared 2026-10-19T05:49:39.038Z weekly 0.7 https://safeguard.sh/resources/blog/lets-encrypt-stopped-expiry-emails-what-to-monitor 2026-10-19T05:49:39.155Z weekly 0.7 https://safeguard.sh/resources/blog/lgpl-combined-works-what-section-4-asks-you-to-do 2026-10-19T05:49:39.273Z weekly 0.7 https://safeguard.sh/resources/blog/lgtm-with-comments-for-security-findings-when-it-is-safe 2026-10-19T05:49:39.404Z weekly 0.7 https://safeguard.sh/resources/blog/libfuzzer-merge-corpus-keep-the-useful-inputs 2026-10-19T05:49:39.527Z weekly 0.7 https://safeguard.sh/resources/blog/library-fix-adds-new-exceptions-test-your-error-handling 2026-10-19T05:49:39.641Z weekly 0.7 https://safeguard.sh/resources/blog/library-lockfile-is-not-shipped-why-library-and-app-scans-differ 2026-10-19T05:49:39.766Z weekly 0.7 https://safeguard.sh/resources/blog/library-or-ten-line-helper-ai-assistant-decision 2026-10-19T05:49:39.889Z weekly 0.7 https://safeguard.sh/resources/blog/library-upgrade-changes-log-output-check-pii-and-alert-parsing 2026-10-19T05:49:40.004Z weekly 0.7 https://safeguard.sh/resources/blog/license-decision-log-fields-to-record 2026-10-19T05:49:40.112Z weekly 0.7 https://safeguard.sh/resources/blog/license-evidence-index-for-a-data-room 2026-10-19T05:49:40.214Z weekly 0.7 https://safeguard.sh/resources/blog/license-evidence-pack-for-auditors-and-customers 2026-10-19T05:49:40.311Z weekly 0.7 https://safeguard.sh/resources/blog/license-review-vs-security-review-one-request-two-gates 2026-10-19T05:49:40.426Z weekly 0.7 https://safeguard.sh/resources/blog/license-scan-says-unknown-first-five-steps 2026-10-19T05:49:40.542Z weekly 0.7 https://safeguard.sh/resources/blog/license-scanning-faq-ten-quick-answers 2026-10-19T05:49:40.669Z weekly 0.7 https://safeguard.sh/resources/blog/lightweight-open-source-health-check-automotive-case-study 2026-10-19T05:49:40.794Z weekly 0.7 https://safeguard.sh/resources/blog/limit-ai-agent-tool-arguments-paths-recipients-amounts 2026-10-19T05:49:40.904Z weekly 0.7 https://safeguard.sh/resources/blog/limit-global-types-with-the-tsconfig-types-option 2026-10-19T05:49:41.012Z weekly 0.7 https://safeguard.sh/resources/blog/limit-request-parameters-on-a-self-hosted-inference-server 2026-10-19T05:49:41.107Z weekly 0.7 https://safeguard.sh/resources/blog/limit-which-github-actions-your-org-can-run 2026-10-19T05:49:41.201Z weekly 0.7 https://safeguard.sh/resources/blog/link-every-fix-pr-to-a-change-record 2026-10-19T05:49:41.326Z weekly 0.7 https://safeguard.sh/resources/blog/link-every-sbom-to-the-ci-build-that-made-it 2026-10-19T05:49:41.463Z weekly 0.7 https://safeguard.sh/resources/blog/link-sbom-diff-exceptions-to-components-and-expiry 2026-10-19T05:49:41.574Z weekly 0.7 https://safeguard.sh/resources/blog/link-your-sbom-to-a-vulnerability-response-story-startup-guide 2026-10-19T05:49:41.677Z weekly 0.7 https://safeguard.sh/resources/blog/linkerd-workload-certificates-24-hours-what-you-still-rotate 2026-10-19T05:49:41.822Z weekly 0.7 https://safeguard.sh/resources/blog/linux-kernel-cve-flood-which-ones-apply-to-an-embedded-device 2026-10-19T05:49:41.985Z weekly 0.7 https://safeguard.sh/resources/blog/linux-kernel-longterm-eol-dates-planning-for-an-embedded-fleet 2026-10-19T05:49:42.079Z weekly 0.7 https://safeguard.sh/resources/blog/list-a-copied-c-library-in-an-sbom-without-a-package-manager 2026-10-19T05:49:42.175Z weekly 0.7 https://safeguard.sh/resources/blog/list-every-command-line-tool-you-installed-globally 2026-10-19T05:49:42.273Z weekly 0.7 https://safeguard.sh/resources/blog/list-licenses-in-a-conda-environment-with-conda-list-fields 2026-10-19T05:49:42.432Z weekly 0.7 https://safeguard.sh/resources/blog/live-or-point-in-time-how-to-show-security-posture-on-a-trust-page 2026-10-19T05:49:42.564Z weekly 0.7 https://safeguard.sh/resources/blog/loaner-laptop-for-travel-when-and-how-to-set-one-up 2026-10-19T05:49:42.686Z weekly 0.7 https://safeguard.sh/resources/blog/local-actions-versus-marketplace-actions-what-changes-for-review 2026-10-19T05:49:42.814Z weekly 0.7 https://safeguard.sh/resources/blog/local-or-hosted-ai-coding-agent-where-does-your-code-run 2026-10-19T05:49:42.938Z weekly 0.7 https://safeguard.sh/resources/blog/local-or-remote-mcp-for-security-tools-decision-guide 2026-10-19T05:49:43.058Z weekly 0.7 https://safeguard.sh/resources/blog/local-or-shared-suppressions-ide-ignores-that-do-not-travel 2026-10-19T05:49:43.187Z weekly 0.7 https://safeguard.sh/resources/blog/lock-conda-channels-on-a-shared-server-with-final-and-denylists 2026-10-19T05:49:43.308Z weekly 0.7 https://safeguard.sh/resources/blog/lock-down-duckdb-before-running-untrusted-sql 2026-10-19T05:49:43.414Z weekly 0.7 https://safeguard.sh/resources/blog/lock-protect-or-immutable-what-stops-image-deletion 2026-10-19T05:49:43.553Z weekly 0.7 https://safeguard.sh/resources/blog/lock-the-actions-in-a-copied-workflow-with-gh-actions-lock 2026-10-19T05:49:43.677Z weekly 0.7 https://safeguard.sh/resources/blog/lockfile-merge-conflict-regenerate-or-resolve-by-hand 2026-10-19T05:49:43.800Z weekly 0.7 https://safeguard.sh/resources/blog/lockfile-or-installed-packages-what-does-the-scanner-actually-read 2026-10-19T05:49:43.932Z weekly 0.7 https://safeguard.sh/resources/blog/lockfile-or-manifest-what-build-time-dependency-scans-should-read 2026-10-19T05:49:44.081Z weekly 0.7 https://safeguard.sh/resources/blog/lockfile-poisoning-what-it-is-and-which-settings-check-for-it 2026-10-19T05:49:44.247Z weekly 0.7 https://safeguard.sh/resources/blog/locking-down-installs-for-an-ai-built-python-prototype 2026-10-19T05:49:44.424Z weekly 0.7 https://safeguard.sh/resources/blog/log-who-opened-your-shared-security-evidence 2026-10-19T05:49:44.557Z weekly 0.7 https://safeguard.sh/resources/blog/login-codes-when-your-sms-vendor-is-down-a-safe-fallback-plan 2026-10-19T05:49:44.725Z weekly 0.7 https://safeguard.sh/resources/blog/long-lived-servers-or-rebuilt-images-which-drifts-less 2026-10-19T05:49:44.824Z weekly 0.7 https://safeguard.sh/resources/blog/lost-android-upload-key-how-to-request-an-upload-key-reset 2026-10-19T05:49:44.923Z weekly 0.7 https://safeguard.sh/resources/blog/lost-or-reimaged-laptop-which-package-manager-credentials-to-revoke 2026-10-19T05:49:45.022Z weekly 0.7 https://safeguard.sh/resources/blog/low-code-security-misconfiguration-defaults-checklist 2026-10-19T05:49:45.123Z weekly 0.7 https://safeguard.sh/resources/blog/low-cvss-on-a-critical-system-vs-critical-cvss-on-a-test-box 2026-10-19T05:49:45.225Z weekly 0.7 https://safeguard.sh/resources/blog/lts-or-current-release-which-runtime-version-to-standardize-on 2026-10-19T05:49:45.330Z weekly 0.7 https://safeguard.sh/resources/blog/m-26-05-sbom-of-the-runtime-production-environment-explained 2026-10-19T05:49:45.455Z weekly 0.7 https://safeguard.sh/resources/blog/m365-certified-vs-publisher-attested-apps-whats-the-difference 2026-10-19T05:49:45.602Z weekly 0.7 https://safeguard.sh/resources/blog/mac-app-store-or-developer-id-which-distribution-path 2026-10-19T05:49:45.767Z weekly 0.7 https://safeguard.sh/resources/blog/main-standard-or-restricted-messaging-api-key-which-to-use 2026-10-19T05:49:45.878Z weekly 0.7 https://safeguard.sh/resources/blog/maintained-check-abandoned-dependencies-diligence 2026-10-19T05:49:45.977Z weekly 0.7 https://safeguard.sh/resources/blog/maintainer-says-not-a-vulnerability-what-do-you-do 2026-10-19T05:49:46.090Z weekly 0.7 https://safeguard.sh/resources/blog/maintainers-versus-publishers-who-can-ship-a-release-of-your-dependency 2026-10-19T05:49:46.225Z weekly 0.7 https://safeguard.sh/resources/blog/major-version-upgrade-in-small-steps 2026-10-19T05:49:46.342Z weekly 0.7 https://safeguard.sh/resources/blog/make-a-tar-archive-reproducible-sort-mtime-owner 2026-10-19T05:49:46.460Z weekly 0.7 https://safeguard.sh/resources/blog/make-security-comments-readable-without-color-or-emoji 2026-10-19T05:49:46.568Z weekly 0.7 https://safeguard.sh/resources/blog/malicious-or-just-vulnerable-the-first-branch-in-a-dependency-runbook 2026-10-19T05:49:46.693Z weekly 0.7 https://safeguard.sh/resources/blog/malware-advisory-has-no-fixed-version-what-to-do 2026-10-19T05:49:46.813Z weekly 0.7 https://safeguard.sh/resources/blog/manage-firefox-extensions-with-enterprise-policy 2026-10-19T05:49:46.923Z weekly 0.7 https://safeguard.sh/resources/blog/manage-wordpress-plugins-with-composer-and-wpackagist 2026-10-19T05:49:47.047Z weekly 0.7 https://safeguard.sh/resources/blog/manifest-range-or-lockfile-version-which-one-did-the-scanner-judge 2026-10-19T05:49:47.145Z weekly 0.7 https://safeguard.sh/resources/blog/map-dismissal-reasons-between-dependency-scanners-translation-table 2026-10-19T05:49:47.857Z weekly 0.7 https://safeguard.sh/resources/blog/map-owasp-llm-top-10-to-ai-assistant-questionnaire-answers 2026-10-19T05:49:48.766Z weekly 0.7 https://safeguard.sh/resources/blog/map-projects-teams-and-tags-before-a-scanner-migration 2026-10-19T05:49:49.736Z weekly 0.7 https://safeguard.sh/resources/blog/map-reachability-records-to-nist-ssdf-rv-practices 2026-10-19T05:49:50.140Z weekly 0.7 https://safeguard.sh/resources/blog/map-static-analysis-rule-severity-to-block-warn-and-info 2026-10-19T05:49:50.235Z weekly 0.7 https://safeguard.sh/resources/blog/map-supply-chain-tabletop-scenarios-to-slsa-threat-categories 2026-10-19T05:49:50.715Z weekly 0.7 https://safeguard.sh/resources/blog/map-where-credentials-live-on-a-developer-laptop-a-checklist 2026-10-19T05:49:50.822Z weekly 0.7 https://safeguard.sh/resources/blog/map-where-data-goes-in-a-low-code-workflow-multi-hop-flows 2026-10-19T05:49:50.929Z weekly 0.7 https://safeguard.sh/resources/blog/map-your-advisory-sources-to-your-stack-a-feed-worksheet 2026-10-19T05:49:51.515Z weekly 0.7 https://safeguard.sh/resources/blog/mapping-exception-reasons-to-openvex-justifications 2026-10-19T05:49:51.619Z weekly 0.7 https://safeguard.sh/resources/blog/mark-a-known-vulnerability-test-xfail-without-hiding-it 2026-10-19T05:49:51.725Z weekly 0.7 https://safeguard.sh/resources/blog/mark-a-yanked-release-in-your-changelog-keep-a-changelog-format 2026-10-19T05:49:51.843Z weekly 0.7 https://safeguard.sh/resources/blog/match-affected-version-ranges-against-sbom-versions 2026-10-19T05:49:51.942Z weekly 0.7 https://safeguard.sh/resources/blog/match-cert-sigh-xcode-or-manual-which-ios-signing-setup 2026-10-19T05:49:52.057Z weekly 0.7 https://safeguard.sh/resources/blog/match-scanner-findings-with-purl-and-advisory-aliases 2026-10-19T05:49:52.794Z weekly 0.7 https://safeguard.sh/resources/blog/maven-bom-import-order-conflicts-who-decides-the-managed-version 2026-10-19T05:49:52.918Z weekly 0.7 https://safeguard.sh/resources/blog/maven-bom-vs-sbom-what-is-the-difference 2026-10-19T05:49:53.056Z weekly 0.7 https://safeguard.sh/resources/blog/maven-build-output-timestamp-reproducible-jars 2026-10-19T05:49:53.171Z weekly 0.7 https://safeguard.sh/resources/blog/maven-central-never-removes-a-release-what-to-do-with-a-bad-one 2026-10-19T05:49:53.265Z weekly 0.7 https://safeguard.sh/resources/blog/maven-enforcer-rules-for-supply-chain-hygiene 2026-10-19T05:49:53.366Z weekly 0.7 https://safeguard.sh/resources/blog/maven-exclusion-or-optional-who-can-remove-a-dependency 2026-10-19T05:49:53.955Z weekly 0.7 https://safeguard.sh/resources/blog/maven-exclusions-to-gradle-why-before-how 2026-10-19T05:49:54.070Z weekly 0.7 https://safeguard.sh/resources/blog/maven-mirror-of-central-use-a-caching-proxy-not-a-full-copy 2026-10-19T05:49:54.198Z weekly 0.7 https://safeguard.sh/resources/blog/maven-multi-module-monorepo-where-should-a-scanner-start 2026-10-19T05:49:54.596Z weekly 0.7 https://safeguard.sh/resources/blog/maven-nearest-wins-gradle-highest-wins-version-shift 2026-10-19T05:49:54.739Z weekly 0.7 https://safeguard.sh/resources/blog/maven-reproducible-builds-output-timestamp 2026-10-19T05:49:54.867Z weekly 0.7 https://safeguard.sh/resources/blog/maven-sbom-pom-or-resolved-tree-why-versions-differ 2026-10-19T05:49:54.979Z weekly 0.7 https://safeguard.sh/resources/blog/maven-scopes-to-gradle-configurations 2026-10-19T05:49:55.080Z weekly 0.7 https://safeguard.sh/resources/blog/maven-version-order-alpha-rc-snapshot-sp-explained 2026-10-19T05:49:55.182Z weekly 0.7 https://safeguard.sh/resources/blog/maven-version-ranges-soft-vs-hard-requirements 2026-10-19T05:49:55.288Z weekly 0.7 https://safeguard.sh/resources/blog/maven-wrapper-vs-gradle-wrapper-pin-your-build-tool 2026-10-19T05:49:55.606Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-and-ai-agent-security-myths-vs-facts-for-beginners 2026-10-19T05:49:55.744Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-and-ai-agent-terms-in-plain-english-a-twenty-term-glossary 2026-10-19T05:49:55.852Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-authorization-checks-buyers-should-expect-from-security-tooling 2026-10-19T05:49:55.952Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-servers-in-a-cloud-agent-sandbox-the-egress-gap 2026-10-19T05:49:56.057Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-tool-allowlist-for-dev-staging-and-production 2026-10-19T05:49:56.176Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-tool-approval-for-scheduled-assistant-tasks 2026-10-19T05:49:56.286Z weekly 0.7 https://safeguard.sh/resources/blog/mcp-vs-rest-api-for-security-tools-whats-the-difference 2026-10-19T05:49:56.387Z weekly 0.7 https://safeguard.sh/resources/blog/mean-time-to-unblock-a-failed-security-gate 2026-10-19T05:49:56.573Z weekly 0.7 https://safeguard.sh/resources/blog/measure-a-vendors-patch-speed-from-public-advisories 2026-10-19T05:49:56.702Z weekly 0.7 https://safeguard.sh/resources/blog/measure-advisory-to-detection-lag-in-your-scanner 2026-10-19T05:49:56.826Z weekly 0.7 https://safeguard.sh/resources/blog/measure-dependency-freshness-from-an-sbom-with-libyears 2026-10-19T05:49:56.925Z weekly 0.7 https://safeguard.sh/resources/blog/measure-detection-lag-advisory-published-to-ticket-opened 2026-10-19T05:49:57.031Z weekly 0.7 https://safeguard.sh/resources/blog/measure-handoff-time-between-security-platform-compliance 2026-10-19T05:49:57.153Z weekly 0.7 https://safeguard.sh/resources/blog/measure-how-fast-a-dependency-maintainer-fixes-vulnerabilities 2026-10-19T05:49:57.260Z weekly 0.7 https://safeguard.sh/resources/blog/measure-time-from-fix-merged-to-fix-deployed 2026-10-19T05:49:57.369Z weekly 0.7 https://safeguard.sh/resources/blog/measure-triage-minutes-per-finding-in-scanner-comparison 2026-10-19T05:49:57.507Z weekly 0.7 https://safeguard.sh/resources/blog/measure-which-dependency-scan-stage-finds-the-most 2026-10-19T05:49:57.622Z weekly 0.7 https://safeguard.sh/resources/blog/median-or-average-time-to-fix-which-should-you-report 2026-10-19T05:49:57.751Z weekly 0.7 https://safeguard.sh/resources/blog/median-or-mean-time-to-remediate-which-to-report 2026-10-19T05:49:57.867Z weekly 0.7 https://safeguard.sh/resources/blog/median-vs-mean-time-to-remediate-which-to-report 2026-10-19T05:49:58.057Z weekly 0.7 https://safeguard.sh/resources/blog/merge-fix-prs-as-they-arrive-or-in-a-weekly-window 2026-10-19T05:49:58.183Z weekly 0.7 https://safeguard.sh/resources/blog/merge-or-rebase-to-update-a-long-lived-fork 2026-10-19T05:49:58.303Z weekly 0.7 https://safeguard.sh/resources/blog/merge-sdk-and-api-inventories-after-an-acquisition-or-reorg 2026-10-19T05:49:58.402Z weekly 0.7 https://safeguard.sh/resources/blog/merge-two-ci-gates-into-one-without-breaking-builds 2026-10-19T05:49:58.522Z weekly 0.7 https://safeguard.sh/resources/blog/merge-two-policy-exception-registers-without-losing-history 2026-10-19T05:49:58.645Z weekly 0.7 https://safeguard.sh/resources/blog/merge-update-bot-configs-after-two-teams-combine 2026-10-19T05:49:58.756Z weekly 0.7 https://safeguard.sh/resources/blog/merging-two-private-package-registries-policy-checklist 2026-10-19T05:49:58.863Z weekly 0.7 https://safeguard.sh/resources/blog/meson-wrap-files-source-hash-and-patch-hash 2026-10-19T05:49:58.983Z weekly 0.7 https://safeguard.sh/resources/blog/metrics-for-a-vulnerability-disclosure-program-what-to-track 2026-10-19T05:49:59.100Z weekly 0.7 https://safeguard.sh/resources/blog/metrics-for-an-sdk-and-api-inventory-coverage-and-freshness 2026-10-19T05:49:59.202Z weekly 0.7 https://safeguard.sh/resources/blog/metrics-that-show-sbom-incident-readiness 2026-10-19T05:49:59.327Z weekly 0.7 https://safeguard.sh/resources/blog/metrics-that-show-triage-quality-held-after-scanner-migration 2026-10-19T05:49:59.445Z weekly 0.7 https://safeguard.sh/resources/blog/migrate-and-upgrade-in-separate-pull-requests 2026-10-19T05:49:59.591Z weekly 0.7 https://safeguard.sh/resources/blog/migrate-ci-from-access-keys-to-oidc-without-downtime 2026-10-19T05:49:59.829Z weekly 0.7 https://safeguard.sh/resources/blog/minimum-asset-context-fields-for-vulnerability-prioritization 2026-10-19T05:49:59.931Z weekly 0.7 https://safeguard.sh/resources/blog/minimum-branch-protection-settings-for-a-small-team 2026-10-19T05:50:00.042Z weekly 0.7 https://safeguard.sh/resources/blog/minimum-ownership-tags-for-routing-vulnerabilities 2026-10-19T05:50:00.293Z weekly 0.7 https://safeguard.sh/resources/blog/minimum-testing-evidence-before-your-first-enterprise-customer 2026-10-19T05:50:00.406Z weekly 0.7 https://safeguard.sh/resources/blog/minimum-tests-for-an-emergency-security-patch 2026-10-19T05:50:00.506Z weekly 0.7 https://safeguard.sh/resources/blog/minimum-viable-answers-for-a-small-team-ai-security-questionnaire 2026-10-19T05:50:00.610Z weekly 0.7 https://safeguard.sh/resources/blog/minimum-viable-security-for-a-nonprofit-effort-and-impact-ranked 2026-10-19T05:50:00.714Z weekly 0.7 https://safeguard.sh/resources/blog/minimum-viable-supply-chain-governance-in-30-days 2026-10-19T05:50:00.814Z weekly 0.7 https://safeguard.sh/resources/blog/mirror-keeps-package-deleted-upstream-keep-or-purge 2026-10-19T05:50:00.910Z weekly 0.7 https://safeguard.sh/resources/blog/mirror-sync-lag-and-security-patches 2026-10-19T05:50:01.000Z weekly 0.7 https://safeguard.sh/resources/blog/mistakes-that-cost-startups-trust-when-answering-sbom-questions 2026-10-19T05:50:01.132Z weekly 0.7 https://safeguard.sh/resources/blog/mistakes-that-make-supply-chain-tabletops-useless 2026-10-19T05:50:01.251Z weekly 0.7 https://safeguard.sh/resources/blog/mixed-versions-during-a-rolling-deploy-how-long-is-ok 2026-10-19T05:50:01.356Z weekly 0.7 https://safeguard.sh/resources/blog/mobile-and-front-end-bundles-in-an-acquisition-inventory 2026-10-19T05:50:01.463Z weekly 0.7 https://safeguard.sh/resources/blog/mobile-ci-cd-security-audit-twelve-questions 2026-10-19T05:50:01.591Z weekly 0.7 https://safeguard.sh/resources/blog/mobile-sdk-exceptions-how-to-grant-time-limited-waivers 2026-10-19T05:50:01.719Z weekly 0.7 https://safeguard.sh/resources/blog/mobile-sdk-governance-metrics-what-to-measure 2026-10-19T05:50:01.840Z weekly 0.7 https://safeguard.sh/resources/blog/model-file-terms-for-security-reviewers-a-plain-glossary 2026-10-19T05:50:02.010Z weekly 0.7 https://safeguard.sh/resources/blog/modeling-teams-products-and-repos-in-an-sca-tool-hierarchy-design 2026-10-19T05:50:02.172Z weekly 0.7 https://safeguard.sh/resources/blog/models-versus-packages-how-the-same-supply-chain-habits-differ 2026-10-19T05:50:02.321Z weekly 0.7 https://safeguard.sh/resources/blog/moderate-or-medium-why-severity-labels-differ-between-tools 2026-10-19T05:50:02.444Z weekly 0.7 https://safeguard.sh/resources/blog/monolithic-ci-vs-ephemeral-container-ci-security-differences 2026-10-19T05:50:02.581Z weekly 0.7 https://safeguard.sh/resources/blog/monorepo-duplicate-findings-one-library-many-lockfiles 2026-10-19T05:50:02.699Z weekly 0.7 https://safeguard.sh/resources/blog/monorepo-migration-myths-security-myth-vs-fact 2026-10-19T05:50:02.817Z weekly 0.7 https://safeguard.sh/resources/blog/monorepo-migration-security-checklist-for-the-first-week 2026-10-19T05:50:03.015Z weekly 0.7 https://safeguard.sh/resources/blog/monthly-evidence-health-check-ten-minute-routine 2026-10-19T05:50:03.110Z weekly 0.7 https://safeguard.sh/resources/blog/monthly-offline-build-drill-npm-pip-cargo-and-go-commands 2026-10-19T05:50:03.205Z weekly 0.7 https://safeguard.sh/resources/blog/monthly-one-hour-supply-chain-security-review-agenda 2026-10-19T05:50:03.309Z weekly 0.7 https://safeguard.sh/resources/blog/monthly-security-status-report-for-agency-retainer-clients 2026-10-19T05:50:03.445Z weekly 0.7 https://safeguard.sh/resources/blog/monthly-security-update-for-leadership-four-questions 2026-10-19T05:50:03.564Z weekly 0.7 https://safeguard.sh/resources/blog/move-from-per-repository-alerts-to-an-org-wide-vulnerability-view 2026-10-19T05:50:03.673Z weekly 0.7 https://safeguard.sh/resources/blog/move-requirements-txt-to-uv-without-changing-versions 2026-10-19T05:50:03.807Z weekly 0.7 https://safeguard.sh/resources/blog/move-sbom-tracking-from-a-spreadsheet-to-a-platform-seven-steps 2026-10-19T05:50:03.941Z weekly 0.7 https://safeguard.sh/resources/blog/moving-express-4-to-5-security-relevant-default-changes 2026-10-19T05:50:04.063Z weekly 0.7 https://safeguard.sh/resources/blog/mozilla-add-on-data-consent-rules-what-an-extension-may-send 2026-10-19T05:50:04.206Z weekly 0.7 https://safeguard.sh/resources/blog/mozilla-public-license-2-file-level-copyleft-what-it-covers 2026-10-19T05:50:04.389Z weekly 0.7 https://safeguard.sh/resources/blog/mpl-2-compiled-app-unmodified-source-location-notice 2026-10-19T05:50:04.503Z weekly 0.7 https://safeguard.sh/resources/blog/mqtt-broker-limits-packet-size-queues-and-connections 2026-10-19T05:50:04.618Z weekly 0.7 https://safeguard.sh/resources/blog/mqtt-topic-acl-patterns-per-device-with-username-and-client-id 2026-10-19T05:50:04.749Z weekly 0.7 https://safeguard.sh/resources/blog/msix-signing-publisher-must-match-certificate-subject 2026-10-19T05:50:04.857Z weekly 0.7 https://safeguard.sh/resources/blog/multi-arch-images-retention-and-manifest-list-children 2026-10-19T05:50:04.969Z weekly 0.7 https://safeguard.sh/resources/blog/mute-alerts-with-an-end-time-and-an-owner 2026-10-19T05:50:05.072Z weekly 0.7 https://safeguard.sh/resources/blog/myth-git-hooks-enforce-security-policy-on-every-developer 2026-10-19T05:50:05.171Z weekly 0.7 https://safeguard.sh/resources/blog/myth-or-fact-hipaa-compliant-software-has-no-vulnerable-dependencies 2026-10-19T05:50:05.270Z weekly 0.7 https://safeguard.sh/resources/blog/myth-same-git-commit-means-same-dependencies-everywhere 2026-10-19T05:50:05.691Z weekly 0.7 https://safeguard.sh/resources/blog/myth-versus-fact-minor-version-bumps-are-always-safe 2026-10-19T05:50:05.818Z weekly 0.7 https://safeguard.sh/resources/blog/myth-vs-fact-2fa-on-npm-means-my-publish-token-is-safe 2026-10-19T05:50:05.921Z weekly 0.7 https://safeguard.sh/resources/blog/myth-vs-fact-a-new-scanner-will-break-our-monorepo-build 2026-10-19T05:50:06.019Z weekly 0.7 https://safeguard.sh/resources/blog/myth-vs-fact-acquired-teams-must-adopt-parent-policy-day-one 2026-10-19T05:50:06.121Z weekly 0.7 https://safeguard.sh/resources/blog/myth-vs-fact-an-override-is-a-permanent-fix 2026-10-19T05:50:06.251Z weekly 0.7 https://safeguard.sh/resources/blog/myth-vs-fact-migrating-between-dependency-scanners-and-triage-history 2026-10-19T05:50:06.432Z weekly 0.7 https://safeguard.sh/resources/blog/myth-vs-fact-popular-ci-templates-need-no-review 2026-10-19T05:50:06.563Z weekly 0.7 https://safeguard.sh/resources/blog/myth-vs-fact-we-are-too-small-for-supply-chain-attacks-ecommerce 2026-10-19T05:50:06.692Z weekly 0.7 https://safeguard.sh/resources/blog/myths-about-sca-at-enterprise-scale-and-what-is-actually-true 2026-10-19T05:50:06.814Z weekly 0.7 https://safeguard.sh/resources/blog/myths-about-skipping-dependency-updates-myth-vs-fact 2026-10-19T05:50:06.925Z weekly 0.7 https://safeguard.sh/resources/blog/naming-and-tagging-ai-agent-identities 2026-10-19T05:50:07.029Z weekly 0.7 https://safeguard.sh/resources/blog/narrow-tools-or-a-shell-for-ai-agents-which-is-safer 2026-10-19T05:50:07.166Z weekly 0.7 https://safeguard.sh/resources/blog/native-dependency-fix-test-on-every-os-and-architecture 2026-10-19T05:50:07.293Z weekly 0.7 https://safeguard.sh/resources/blog/nestjs-global-guard-app-guard-so-no-route-is-left-open 2026-10-19T05:50:07.447Z weekly 0.7 https://safeguard.sh/resources/blog/nestjs-swagger-ui-and-raw-json-which-option-hides-what 2026-10-19T05:50:07.577Z weekly 0.7 https://safeguard.sh/resources/blog/nestjs-throttler-setup-and-behind-a-proxy 2026-10-19T05:50:07.704Z weekly 0.7 https://safeguard.sh/resources/blog/nestjs-usesecurityheaders-vs-helmet 2026-10-19T05:50:08.060Z weekly 0.7 https://safeguard.sh/resources/blog/nestjs-validationpipe-whitelist-forbidnonwhitelisted-explained 2026-10-19T05:50:08.165Z weekly 0.7 https://safeguard.sh/resources/blog/net-framework-4-6-2-support-ends-january-2027-what-about-4-8 2026-10-19T05:50:08.284Z weekly 0.7 https://safeguard.sh/resources/blog/network-access-during-builds-volatile-inputs 2026-10-19T05:50:08.415Z weekly 0.7 https://safeguard.sh/resources/blog/never-backdate-evidence-what-to-do-when-the-record-was-never-captured 2026-10-19T05:50:08.525Z weekly 0.7 https://safeguard.sh/resources/blog/new-dependency-pull-request-license-review-checklist 2026-10-19T05:50:08.635Z weekly 0.7 https://safeguard.sh/resources/blog/new-dependency-request-questions-for-healthtech 2026-10-19T05:50:08.755Z weekly 0.7 https://safeguard.sh/resources/blog/new-engineer-vulnerability-triage-first-week-checklist 2026-10-19T05:50:08.861Z weekly 0.7 https://safeguard.sh/resources/blog/new-github-repositories-immutable-oidc-sub-with-owner-and-repo-ids 2026-10-19T05:50:08.968Z weekly 0.7 https://safeguard.sh/resources/blog/new-region-or-dr-environment-dependency-parity-checklist 2026-10-19T05:50:09.064Z weekly 0.7 https://safeguard.sh/resources/blog/new-revised-or-after-waiver-which-attestation-box-to-tick 2026-10-19T05:50:09.165Z weekly 0.7 https://safeguard.sh/resources/blog/new-service-launched-mid-audit-period-controls-and-evidence 2026-10-19T05:50:09.360Z weekly 0.7 https://safeguard.sh/resources/blog/new-versus-inherited-vulnerabilities-report-separately 2026-10-19T05:50:09.469Z weekly 0.7 https://safeguard.sh/resources/blog/nist-csf-2-0-id-am-02-software-inventory-evidence-with-sboms 2026-10-19T05:50:09.585Z weekly 0.7 https://safeguard.sh/resources/blog/nist-csf-2-0-id-ra-01-vulnerability-evidence-for-software 2026-10-19T05:50:09.689Z weekly 0.7 https://safeguard.sh/resources/blog/nist-csf-2-0-id-ra-07-risk-exceptions-and-change-evidence 2026-10-19T05:50:09.808Z weekly 0.7 https://safeguard.sh/resources/blog/nist-csf-2-0-id-ra-09-software-authenticity-and-integrity-evidence 2026-10-19T05:50:09.999Z weekly 0.7 https://safeguard.sh/resources/blog/nist-csf-2-0-pr-aa-05-least-privilege-evidence-for-engineers 2026-10-19T05:50:10.111Z weekly 0.7 https://safeguard.sh/resources/blog/nist-csf-2-0-pr-ps-06-secure-development-evidence-from-ci 2026-10-19T05:50:10.203Z weekly 0.7 https://safeguard.sh/resources/blog/nist-patch-management-five-verbs-mapped-to-exposure-stages 2026-10-19T05:50:10.300Z weekly 0.7 https://safeguard.sh/resources/blog/no-code-vs-low-code-vs-rpa-what-differs-for-security 2026-10-19T05:50:10.472Z weekly 0.7 https://safeguard.sh/resources/blog/no-fix-available-in-sca-report 2026-10-19T05:50:10.585Z weekly 0.7 https://safeguard.sh/resources/blog/no-floating-promises-and-node-unhandled-rejections 2026-10-19T05:50:10.700Z weekly 0.7 https://safeguard.sh/resources/blog/no-license-unknown-or-custom-three-states-compared 2026-10-19T05:50:10.812Z weekly 0.7 https://safeguard.sh/resources/blog/no-lockfile-can-you-still-tell-which-version-you-installed 2026-10-19T05:50:10.909Z weekly 0.7 https://safeguard.sh/resources/blog/no-recent-commits-abandoned-or-finished-how-to-tell 2026-10-19T05:50:11.061Z weekly 0.7 https://safeguard.sh/resources/blog/no-shared-logins-in-a-nonprofit-what-to-use-instead 2026-10-19T05:50:11.178Z weekly 0.7 https://safeguard.sh/resources/blog/node-deprecation-flags-pending-trace-and-throw-explained 2026-10-19T05:50:11.279Z weekly 0.7 https://safeguard.sh/resources/blog/node-docker-tag-production-lts-major-exact 2026-10-19T05:50:11.388Z weekly 0.7 https://safeguard.sh/resources/blog/node-dockerfile-cmd-node-vs-npm-start 2026-10-19T05:50:11.502Z weekly 0.7 https://safeguard.sh/resources/blog/node-env-file-flag-vs-dotenv-package 2026-10-19T05:50:11.610Z weekly 0.7 https://safeguard.sh/resources/blog/node-golden-path-npm-scopes-and-private-registry-config 2026-10-19T05:50:11.734Z weekly 0.7 https://safeguard.sh/resources/blog/node-modules-package-lock-json-hidden-lockfile-explained 2026-10-19T05:50:11.837Z weekly 0.7 https://safeguard.sh/resources/blog/node-production-image-without-npm-yarn 2026-10-19T05:50:11.944Z weekly 0.7 https://safeguard.sh/resources/blog/node-runtime-hardening-flags-what-each-does 2026-10-19T05:50:12.040Z weekly 0.7 https://safeguard.sh/resources/blog/node-sass-is-deprecated-what-to-use-instead-and-why-it-matters 2026-10-19T05:50:12.139Z weekly 0.7 https://safeguard.sh/resources/blog/node-unhandled-rejections-modes-throw-strict-warn 2026-10-19T05:50:12.259Z weekly 0.7 https://safeguard.sh/resources/blog/nodejs-http-server-timeouts-headerstimeout-requesttimeout 2026-10-19T05:50:12.391Z weekly 0.7 https://safeguard.sh/resources/blog/nonce-or-hash-which-csp-method-fits-a-cached-store-page 2026-10-19T05:50:12.674Z weekly 0.7 https://safeguard.sh/resources/blog/not-affected-in-one-environment-affected-in-another-vex-guide 2026-10-19T05:50:12.786Z weekly 0.7 https://safeguard.sh/resources/blog/notarization-rejected-common-causes-and-how-to-fix-them 2026-10-19T05:50:12.891Z weekly 0.7 https://safeguard.sh/resources/blog/notarization-secure-timestamp-what-it-is-and-how-to-check-it 2026-10-19T05:50:13.062Z weekly 0.7 https://safeguard.sh/resources/blog/notify-downstream-users-of-affected-versions-open-source-maintainer 2026-10-19T05:50:13.173Z weekly 0.7 https://safeguard.sh/resources/blog/notify-fix-publish-three-clocks-in-vendor-vulnerability-response 2026-10-19T05:50:13.305Z weekly 0.7 https://safeguard.sh/resources/blog/npm-allowscripts-policy-approve-install-scripts 2026-10-19T05:50:13.417Z weekly 0.7 https://safeguard.sh/resources/blog/npm-audit-failed-on-my-first-pr-what-should-i-do 2026-10-19T05:50:13.518Z weekly 0.7 https://safeguard.sh/resources/blog/npm-audit-fix-force-in-ci-allow-it-or-ban-it 2026-10-19T05:50:13.632Z weekly 0.7 https://safeguard.sh/resources/blog/npm-audit-level-sets-the-exit-code-not-the-report 2026-10-19T05:50:13.877Z weekly 0.7 https://safeguard.sh/resources/blog/npm-before-flag-install-versions-published-by-a-date 2026-10-19T05:50:14.166Z weekly 0.7 https://safeguard.sh/resources/blog/npm-before-option-rebuild-dependency-tree-as-of-a-date 2026-10-19T05:50:14.269Z weekly 0.7 https://safeguard.sh/resources/blog/npm-caret-tilde-or-exact-version-range-choice 2026-10-19T05:50:14.368Z weekly 0.7 https://safeguard.sh/resources/blog/npm-ci-vs-npm-install-which-one-in-ci 2026-10-19T05:50:14.482Z weekly 0.7 https://safeguard.sh/resources/blog/npm-ci-vs-npm-install-which-one-on-a-developer-laptop 2026-10-19T05:50:14.692Z weekly 0.7 https://safeguard.sh/resources/blog/npm-devengines-vs-engines-enforce-node-version 2026-10-19T05:50:14.797Z weekly 0.7 https://safeguard.sh/resources/blog/npm-eoverride-error-override-conflicts-with-direct-dependency 2026-10-19T05:50:14.919Z weekly 0.7 https://safeguard.sh/resources/blog/npm-granular-access-token-settings-solo-publisher-guide 2026-10-19T05:50:15.145Z weekly 0.7 https://safeguard.sh/resources/blog/npm-install-fails-on-node-alpine-native-addons 2026-10-19T05:50:15.248Z weekly 0.7 https://safeguard.sh/resources/blog/npm-install-or-npm-ci-which-should-a-new-developer-run 2026-10-19T05:50:15.445Z weekly 0.7 https://safeguard.sh/resources/blog/npm-install-prints-a-deprecation-message-what-to-do 2026-10-19T05:50:15.546Z weekly 0.7 https://safeguard.sh/resources/blog/npm-install-strategy-linked-catch-phantom-dependencies 2026-10-19T05:50:15.648Z weekly 0.7 https://safeguard.sh/resources/blog/npm-link-and-file-dependencies-what-lockfiles-record 2026-10-19T05:50:15.749Z weekly 0.7 https://safeguard.sh/resources/blog/npm-min-release-age-vs-before-how-to-delay-new-versions 2026-10-19T05:50:15.967Z weekly 0.7 https://safeguard.sh/resources/blog/npm-outdated-wanted-vs-latest-what-to-do-with-each-sbom-component 2026-10-19T05:50:16.062Z weekly 0.7 https://safeguard.sh/resources/blog/npm-overrides-in-a-library-do-not-reach-your-users 2026-10-19T05:50:16.296Z weekly 0.7 https://safeguard.sh/resources/blog/npm-overrides-in-workspaces-only-the-root-counts 2026-10-19T05:50:16.426Z weekly 0.7 https://safeguard.sh/resources/blog/npm-package-lock-only-update-a-lockfile-without-installing 2026-10-19T05:50:16.648Z weekly 0.7 https://safeguard.sh/resources/blog/npm-provenance-link-broken-repo-deleted-or-private 2026-10-19T05:50:16.751Z weekly 0.7 https://safeguard.sh/resources/blog/npm-provenance-on-self-hosted-runners-what-is-supported 2026-10-19T05:50:16.856Z weekly 0.7 https://safeguard.sh/resources/blog/npm-query-find-risky-dependencies-with-selectors 2026-10-19T05:50:16.989Z weekly 0.7 https://safeguard.sh/resources/blog/npm-replace-registry-host-lockfile-urls-and-private-mirrors 2026-10-19T05:50:17.095Z weekly 0.7 https://safeguard.sh/resources/blog/npm-run-build-also-runs-prebuild-and-postbuild-what-to-check 2026-10-19T05:50:17.196Z weekly 0.7 https://safeguard.sh/resources/blog/npm-sbom-command-or-cyclonedx-plugin-which-approach-fits 2026-10-19T05:50:17.318Z weekly 0.7 https://safeguard.sh/resources/blog/npm-sbom-from-package-lock-or-node-modules-which-is-right 2026-10-19T05:50:17.432Z weekly 0.7 https://safeguard.sh/resources/blog/npm-scan-without-a-lockfile-why-results-change-between-runs 2026-10-19T05:50:17.550Z weekly 0.7 https://safeguard.sh/resources/blog/npm-self-signed-certificate-error-on-your-mirror-fix-it-safely 2026-10-19T05:50:17.683Z weekly 0.7 https://safeguard.sh/resources/blog/npm-to-pnpm-ci-changes-checklist 2026-10-19T05:50:17.791Z weekly 0.7 https://safeguard.sh/resources/blog/npm-trusted-publishing-in-a-monorepo-one-config-per-package 2026-10-19T05:50:17.916Z weekly 0.7 https://safeguard.sh/resources/blog/npm-two-factor-modes-and-recovery-codes-for-solo-publishers 2026-10-19T05:50:18.050Z weekly 0.7 https://safeguard.sh/resources/blog/npm-update-did-not-fix-vulnerable-dependency-semver-ranges 2026-10-19T05:50:18.179Z weekly 0.7 https://safeguard.sh/resources/blog/npm-version-command-bump-commit-and-tag-in-one-step 2026-10-19T05:50:18.289Z weekly 0.7 https://safeguard.sh/resources/blog/npm-workspaces-sbom-one-file-per-package-or-one-for-the-repo 2026-10-19T05:50:18.410Z weekly 0.7 https://safeguard.sh/resources/blog/npmrc-precedence-which-file-wins-and-where-tokens-belong 2026-10-19T05:50:18.529Z weekly 0.7 https://safeguard.sh/resources/blog/ntia-minimum-elements-mapped-to-cyclonedx-and-spdx-fields 2026-10-19T05:50:18.670Z weekly 0.7 https://safeguard.sh/resources/blog/nuget-audit-settings-which-vulnerabilities-dotnet-restore-reports 2026-10-19T05:50:18.813Z weekly 0.7 https://safeguard.sh/resources/blog/nuget-lock-files-and-locked-mode-for-repeatable-restores 2026-10-19T05:50:18.938Z weekly 0.7 https://safeguard.sh/resources/blog/nuget-package-source-mapping-for-a-team-with-one-private-feed 2026-10-19T05:50:19.054Z weekly 0.7 https://safeguard.sh/resources/blog/nuget-version-normalization-1-0-0-0-equals-1-0-0 2026-10-19T05:50:19.179Z weekly 0.7 https://safeguard.sh/resources/blog/nuget-version-ranges-floating-versions-and-upper-bounds 2026-10-19T05:50:19.299Z weekly 0.7 https://safeguard.sh/resources/blog/nvd-api-response-shape-configurations-and-cpe-matches 2026-10-19T05:50:19.411Z weekly 0.7 https://safeguard.sh/resources/blog/nx-task-hash-what-goes-in-and-what-the-cache-stores 2026-10-19T05:50:19.539Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-11-what-engineering-checks-before-a-vendor-gets-data 2026-10-19T05:50:19.702Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-13-asset-inventory-what-to-track-for-each-system 2026-10-19T05:50:19.845Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-15-encryption-at-rest-infeasible-compensating-controls 2026-10-19T05:50:20.019Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-16-annual-backup-restore-test-what-to-record 2026-10-19T05:50:20.141Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-16-incident-response-plan-contents-checklist 2026-10-19T05:50:20.272Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-17-annual-certification-engineering-evidence-to-keep 2026-10-19T05:50:20.396Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-19-limited-exemption-which-sections-still-apply 2026-10-19T05:50:20.500Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-3-fifteen-policy-topics-mapped-to-engineering-documents 2026-10-19T05:50:20.612Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-5-vulnerability-management-three-duties-in-plain-words 2026-10-19T05:50:20.865Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-6-audit-trails-and-five-year-records-for-engineers 2026-10-19T05:50:20.973Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-7-annual-access-review-steps-for-engineering-teams 2026-10-19T05:50:21.168Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-8-secure-development-procedures-what-to-write-down 2026-10-19T05:50:21.285Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-500-9-risk-assessment-what-engineering-contributes 2026-10-19T05:50:21.389Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-ai-guidance-engineering-checklist-for-using-ai-coding-tools 2026-10-19T05:50:21.494Z weekly 0.7 https://safeguard.sh/resources/blog/nydfs-class-a-companies-extra-engineering-duties 2026-10-19T05:50:21.605Z weekly 0.7 https://safeguard.sh/resources/blog/oauth-authorization-codes-single-use-and-short-lived 2026-10-19T05:50:21.717Z weekly 0.7 https://safeguard.sh/resources/blog/oauth-state-vs-nonce-vs-pkce-what-each-one-stops 2026-10-19T05:50:21.819Z weekly 0.7 https://safeguard.sh/resources/blog/object-storage-keys-and-tenant-isolation-naming-is-not-authorization 2026-10-19T05:50:21.915Z weekly 0.7 https://safeguard.sh/resources/blog/obligations-checklist-by-license-family 2026-10-19T05:50:22.026Z weekly 0.7 https://safeguard.sh/resources/blog/observability-vs-monitoring-what-is-the-difference 2026-10-19T05:50:22.131Z weekly 0.7 https://safeguard.sh/resources/blog/oci-registry-tag-or-digest-what-pull-and-delete-guarantee 2026-10-19T05:50:22.397Z weekly 0.7 https://safeguard.sh/resources/blog/offboard-a-developer-from-github-checklist 2026-10-19T05:50:22.496Z weekly 0.7 https://safeguard.sh/resources/blog/offboard-a-marketing-agency-from-your-tag-container 2026-10-19T05:50:22.592Z weekly 0.7 https://safeguard.sh/resources/blog/offboarding-a-developer-from-the-package-mirror-what-to-revoke 2026-10-19T05:50:22.697Z weekly 0.7 https://safeguard.sh/resources/blog/offboarding-ai-coding-assistants-and-mcp-configs-for-leavers 2026-10-19T05:50:22.802Z weekly 0.7 https://safeguard.sh/resources/blog/official-container-image-myths-versus-facts 2026-10-19T05:50:23.346Z weekly 0.7 https://safeguard.sh/resources/blog/official-node-docker-image-non-root-user 2026-10-19T05:50:23.572Z weekly 0.7 https://safeguard.sh/resources/blog/oidc-rp-initiated-logout-what-happens-when-a-user-clicks-log-out 2026-10-19T05:50:23.686Z weekly 0.7 https://safeguard.sh/resources/blog/oidc-trust-policies-after-repository-consolidation 2026-10-19T05:50:23.797Z weekly 0.7 https://safeguard.sh/resources/blog/oidc-trust-policy-wildcard-sub-who-can-assume-your-role 2026-10-19T05:50:23.899Z weekly 0.7 https://safeguard.sh/resources/blog/old-npm-lockfiles-in-a-legacy-monorepo-what-to-check 2026-10-19T05:50:23.995Z weekly 0.7 https://safeguard.sh/resources/blog/omnibus-scopes-for-ai-agent-tokens-why-wildcards-hurt 2026-10-19T05:50:24.111Z weekly 0.7 https://safeguard.sh/resources/blog/on-call-while-travelling-access-and-network-options-for-engineers 2026-10-19T05:50:24.585Z weekly 0.7 https://safeguard.sh/resources/blog/onboard-a-new-reviewer-to-secure-code-review-in-one-week 2026-10-19T05:50:25.527Z weekly 0.7 https://safeguard.sh/resources/blog/onboard-hundreds-of-repositories-to-sca-in-waves-a-runbook 2026-10-19T05:50:28.774Z weekly 0.7 https://safeguard.sh/resources/blog/onboarding-an-engineer-to-vulnerability-fixing-first-week-plan 2026-10-19T05:50:30.087Z weekly 0.7 https://safeguard.sh/resources/blog/one-advisory-many-repositories-how-to-dedupe-dependency-alerts 2026-10-19T05:50:30.256Z weekly 0.7 https://safeguard.sh/resources/blog/one-advisory-three-languages-go-rust-cpp-response-steps 2026-10-19T05:50:30.708Z weekly 0.7 https://safeguard.sh/resources/blog/one-audit-for-third-party-script-speed-and-security 2026-10-19T05:50:30.961Z weekly 0.7 https://safeguard.sh/resources/blog/one-channel-or-many-for-vulnerability-alerts-by-team-size 2026-10-19T05:50:31.107Z weekly 0.7 https://safeguard.sh/resources/blog/one-codebase-many-deploys-shared-code-as-libraries 2026-10-19T05:50:31.203Z weekly 0.7 https://safeguard.sh/resources/blog/one-debian-cve-lists-several-packages-in-an-image-scan-why 2026-10-19T05:50:31.310Z weekly 0.7 https://safeguard.sh/resources/blog/one-fix-many-alerts-group-findings-by-root-cause 2026-10-19T05:50:31.422Z weekly 0.7 https://safeguard.sh/resources/blog/one-funnel-for-prioritization-metrics-kev-epss-and-reachability 2026-10-19T05:50:31.522Z weekly 0.7 https://safeguard.sh/resources/blog/one-github-environment-per-client-deploy-protection-and-secrets 2026-10-19T05:50:31.650Z weekly 0.7 https://safeguard.sh/resources/blog/one-go-sbom-per-build-target-goos-goarch-and-tags 2026-10-19T05:50:31.896Z weekly 0.7 https://safeguard.sh/resources/blog/one-hosting-account-or-many-for-client-sites 2026-10-19T05:50:31.990Z weekly 0.7 https://safeguard.sh/resources/blog/one-hour-exploratory-security-testing-session-charter-for-qa 2026-10-19T05:50:32.087Z weekly 0.7 https://safeguard.sh/resources/blog/one-intake-queue-for-security-work-labels-and-owners 2026-10-19T05:50:32.187Z weekly 0.7 https://safeguard.sh/resources/blog/one-integration-inventory-or-three-web-backend-and-mobile 2026-10-19T05:50:32.293Z weekly 0.7 https://safeguard.sh/resources/blog/one-kubernetes-service-account-per-workload-why-and-how 2026-10-19T05:50:32.410Z weekly 0.7 https://safeguard.sh/resources/blog/one-large-library-or-several-small-ones-security-tradeoffs 2026-10-19T05:50:32.660Z weekly 0.7 https://safeguard.sh/resources/blog/one-library-many-teams-who-owns-the-shared-exception 2026-10-19T05:50:32.767Z weekly 0.7 https://safeguard.sh/resources/blog/one-owner-field-per-service-single-source-of-truth 2026-10-19T05:50:33.074Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-ai-coding-agent-rules-for-developers 2026-10-19T05:50:33.178Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-checklist-before-you-turn-on-a-vendors-ai-feature 2026-10-19T05:50:33.427Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-delivery-and-security-scorecard-checklist 2026-10-19T05:50:33.531Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-dependency-evidence-pack-for-a-game-build 2026-10-19T05:50:33.632Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-exposure-dashboard-what-to-show 2026-10-19T05:50:33.745Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-incident-plan-for-a-small-nonprofit-who-to-call 2026-10-19T05:50:33.901Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-memo-to-move-from-open-source-scanners-to-a-platform 2026-10-19T05:50:34.006Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-open-source-policy-for-a-10-person-team 2026-10-19T05:50:34.100Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-patch-calendar-vendor-release-rhythms-for-ops-teams 2026-10-19T05:50:34.220Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-policy-for-ai-generated-code-in-production 2026-10-19T05:50:34.314Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-reachability-briefing-for-an-audit-committee 2026-10-19T05:50:34.427Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-runbook-for-an-internal-package-mirror-owner-and-escalation 2026-10-19T05:50:34.529Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-sbom-review-worksheet-template 2026-10-19T05:50:34.657Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-security-training-for-citizen-developers 2026-10-19T05:50:34.751Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-summary-of-a-supplier-sbom-for-an-executive-sponsor 2026-10-19T05:50:34.848Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-supply-chain-security-policy-for-a-small-team 2026-10-19T05:50:34.942Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-supply-chain-summary-for-an-investor-memo 2026-10-19T05:50:35.047Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-travel-policy-for-software-teams-template 2026-10-19T05:50:35.146Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-vulnerability-brief-template-for-executives 2026-10-19T05:50:35.240Z weekly 0.7 https://safeguard.sh/resources/blog/one-page-vulnerability-exception-process-for-a-ten-person-startup 2026-10-19T05:50:35.336Z weekly 0.7 https://safeguard.sh/resources/blog/one-platform-or-several-tools-for-ai-heavy-engineering-teams 2026-10-19T05:50:35.437Z weekly 0.7 https://safeguard.sh/resources/blog/one-report-for-many-languages-how-to-read-findings-by-advisory-not-by-ecosystem 2026-10-19T05:50:35.572Z weekly 0.7 https://safeguard.sh/resources/blog/one-sbom-per-hardware-variant-or-one-per-product 2026-10-19T05:50:35.687Z weekly 0.7 https://safeguard.sh/resources/blog/one-sbom-per-image-digest-or-one-per-release-for-customers 2026-10-19T05:50:35.781Z weekly 0.7 https://safeguard.sh/resources/blog/one-scanner-flagged-a-dependency-the-other-missed-how-to-triage 2026-10-19T05:50:35.871Z weekly 0.7 https://safeguard.sh/resources/blog/one-security-dashboard-three-audiences-views 2026-10-19T05:50:35.977Z weekly 0.7 https://safeguard.sh/resources/blog/one-security-md-for-every-repo-in-a-github-organization 2026-10-19T05:50:36.086Z weekly 0.7 https://safeguard.sh/resources/blog/one-service-three-patch-layers-host-image-and-app 2026-10-19T05:50:36.200Z weekly 0.7 https://safeguard.sh/resources/blog/one-severity-scale-and-timeline-for-security-platform-compliance 2026-10-19T05:50:36.316Z weekly 0.7 https://safeguard.sh/resources/blog/one-shared-runtime-fix-for-many-services-who-patches 2026-10-19T05:50:36.422Z weekly 0.7 https://safeguard.sh/resources/blog/one-shared-tracker-or-separate-queues-for-security-teams 2026-10-19T05:50:36.519Z weekly 0.7 https://safeguard.sh/resources/blog/one-ticket-for-a-vulnerability-in-many-environments-how-to-write-it 2026-10-19T05:50:36.702Z weekly 0.7 https://safeguard.sh/resources/blog/one-time-email-links-and-automatic-get-requests 2026-10-19T05:50:36.800Z weekly 0.7