https://safeguard.sh/resources/blog/one-time-funds-for-a-security-tool-plan-the-renewal-before-you-buy 2026-10-19T05:50:37.064Z weekly 0.7 https://safeguard.sh/resources/blog/one-version-policy-or-per-team-versions-for-shared-dependencies 2026-10-19T05:50:37.169Z weekly 0.7 https://safeguard.sh/resources/blog/one-vulnerability-forty-repos-group-alerts-into-one-work-item 2026-10-19T05:50:37.271Z weekly 0.7 https://safeguard.sh/resources/blog/one-webhook-endpoint-or-many-how-to-split-event-handlers 2026-10-19T05:50:37.512Z weekly 0.7 https://safeguard.sh/resources/blog/onnx-custom-operators-when-a-model-needs-a-native-library 2026-10-19T05:50:37.621Z weekly 0.7 https://safeguard.sh/resources/blog/open-database-licence-odbl-data-in-a-product-what-to-track 2026-10-19T05:50:37.744Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-acknowledgments-page-for-saas-what-to-publish 2026-10-19T05:50:38.044Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-cleanup-plan-before-a-funding-round-30-60-90-days 2026-10-19T05:50:38.154Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-component-intake-checklist-before-adoption 2026-10-19T05:50:38.256Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-governance-at-50-to-200-engineers-who-owns-what 2026-10-19T05:50:38.363Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-governance-for-1000-plus-engineers-central-or-federated 2026-10-19T05:50:38.517Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-governance-myths-vs-facts 2026-10-19T05:50:38.631Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-license-questions-investors-ask-in-a-funding-round 2026-10-19T05:50:38.869Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-obligations-release-checklist-saas-and-mobile 2026-10-19T05:50:38.997Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-pledge-explained-what-counts-as-a-payment 2026-10-19T05:50:39.095Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-policy-one-pager-for-a-startup-raising-money 2026-10-19T05:50:39.200Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-scanner-adoption-record-what-to-write-down 2026-10-19T05:50:39.428Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-scanner-vs-managed-platform-myths-and-facts 2026-10-19T05:50:39.591Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-security-page-vs-commercial-trust-page 2026-10-19T05:50:39.704Z weekly 0.7 https://safeguard.sh/resources/blog/open-source-usage-policy-what-customers-expect-to-see 2026-10-19T05:50:39.804Z weekly 0.7 https://safeguard.sh/resources/blog/open-vsx-publisher-revokes-agreement-what-happens-to-extensions 2026-10-19T05:50:39.922Z weekly 0.7 https://safeguard.sh/resources/blog/openai-code-interpreter-containers-expiry-memory-and-files 2026-10-19T05:50:40.143Z weekly 0.7 https://safeguard.sh/resources/blog/openai-responses-api-mcp-data-retention-store-true-30-days 2026-10-19T05:50:40.257Z weekly 0.7 https://safeguard.sh/resources/blog/openai-secure-mcp-tunnel-private-security-servers-responses-api 2026-10-19T05:50:40.362Z weekly 0.7 https://safeguard.sh/resources/blog/openapi-empty-security-array-how-a-route-becomes-public 2026-10-19T05:50:40.519Z weekly 0.7 https://safeguard.sh/resources/blog/openapi-generator-config-file-what-to-store-and-review 2026-10-19T05:50:40.630Z weekly 0.7 https://safeguard.sh/resources/blog/openapi-generator-ignore-file-hand-edits-and-security-fixes 2026-10-19T05:50:40.768Z weekly 0.7 https://safeguard.sh/resources/blog/openapi-generator-install-methods-compared-for-repeatable-builds 2026-10-19T05:50:40.871Z weekly 0.7 https://safeguard.sh/resources/blog/openapi-generator-post-process-file-what-runs-on-your-machine 2026-10-19T05:50:41.043Z weekly 0.7 https://safeguard.sh/resources/blog/openapi-servers-field-why-a-scanner-hits-the-wrong-host 2026-10-19T05:50:41.147Z weekly 0.7 https://safeguard.sh/resources/blog/openpyxl-and-read-xml-untrusted-spreadsheets-and-xml-in-pipelines 2026-10-19T05:50:41.263Z weekly 0.7 https://safeguard.sh/resources/blog/openssf-scorecard-for-a-volunteer-run-open-source-project 2026-10-19T05:50:41.392Z weekly 0.7 https://safeguard.sh/resources/blog/openssl-severity-levels-critical-high-moderate-low-and-patching 2026-10-19T05:50:41.506Z weekly 0.7 https://safeguard.sh/resources/blog/openvex-justification-labels-for-firmware-vulnerabilities 2026-10-19T05:50:41.623Z weekly 0.7 https://safeguard.sh/resources/blog/openvex-or-cyclonedx-vex-for-carrying-triage-decisions 2026-10-19T05:50:41.767Z weekly 0.7 https://safeguard.sh/resources/blog/oracle-patch-update-schedule-quarterly-cpu-and-new-cspu-cycle 2026-10-19T05:50:41.882Z weekly 0.7 https://safeguard.sh/resources/blog/org-wide-pip-constraints-file-who-owns-it 2026-10-19T05:50:41.995Z weekly 0.7 https://safeguard.sh/resources/blog/orm-escape-hatches-that-bypass-parameter-binding 2026-10-19T05:50:42.110Z weekly 0.7 https://safeguard.sh/resources/blog/orm-or-database-driver-security-upgrade-what-to-test 2026-10-19T05:50:42.204Z weekly 0.7 https://safeguard.sh/resources/blog/orm-sql-logging-leaks-parameters-hide-parameters 2026-10-19T05:50:42.300Z weekly 0.7 https://safeguard.sh/resources/blog/orphaned-shared-library-adopt-freeze-or-retire-decision-guide 2026-10-19T05:50:42.419Z weekly 0.7 https://safeguard.sh/resources/blog/os-packages-or-app-packages-who-fixes-which-container-finding 2026-10-19T05:50:42.552Z weekly 0.7 https://safeguard.sh/resources/blog/ospo-metrics-goal-question-metric-for-dependencies 2026-10-19T05:50:42.697Z weekly 0.7 https://safeguard.sh/resources/blog/ospo-or-security-team-who-owns-which-dependency-governance-task 2026-10-19T05:50:42.854Z weekly 0.7 https://safeguard.sh/resources/blog/ospo-roadmap-for-dependency-governance-3-months-to-5-years 2026-10-19T05:50:42.951Z weekly 0.7 https://safeguard.sh/resources/blog/osv-database-specific-fields-should-your-parser-use-them 2026-10-19T05:50:43.050Z weekly 0.7 https://safeguard.sh/resources/blog/osv-fields-for-the-advisory-side-of-an-exposure-timeline 2026-10-19T05:50:43.153Z weekly 0.7 https://safeguard.sh/resources/blog/owasp-ci-cd-risks-mapped-to-supply-chain-entry-points 2026-10-19T05:50:43.312Z weekly 0.7 https://safeguard.sh/resources/blog/package-approval-reviewer-notes-template 2026-10-19T05:50:43.409Z weekly 0.7 https://safeguard.sh/resources/blog/package-manager-supply-chain-settings-compared-npm-pnpm-yarn 2026-10-19T05:50:43.579Z weekly 0.7 https://safeguard.sh/resources/blog/package-mirror-disk-growth-how-to-size-it-and-clean-it-up 2026-10-19T05:50:43.680Z weekly 0.7 https://safeguard.sh/resources/blog/packer-required-plugins-pin-versions-and-vet-third-party-plugins 2026-10-19T05:50:43.863Z weekly 0.7 https://safeguard.sh/resources/blog/paired-delivery-and-security-metrics-to-stop-gaming 2026-10-19T05:50:43.973Z weekly 0.7 https://safeguard.sh/resources/blog/parametrize-security-tests-one-case-per-attacker-input-pytest 2026-10-19T05:50:44.086Z weekly 0.7 https://safeguard.sh/resources/blog/pass-a-cli-secret-as-flag-environment-variable-or-stdin 2026-10-19T05:50:44.196Z weekly 0.7 https://safeguard.sh/resources/blog/passkey-autofill-conditional-ui-how-it-works-for-developers 2026-10-19T05:50:44.311Z weekly 0.7 https://safeguard.sh/resources/blog/patch-a-transitive-dependency-for-a-client-with-npm-overrides 2026-10-19T05:50:44.421Z weekly 0.7 https://safeguard.sh/resources/blog/patch-a-vulnerable-dependency-in-a-go-module-step-by-step 2026-10-19T05:50:44.547Z weekly 0.7 https://safeguard.sh/resources/blog/patch-available-versus-patch-applied-what-reports-measure 2026-10-19T05:50:44.696Z weekly 0.7 https://safeguard.sh/resources/blog/patch-cadence-for-teams-that-ship-daily 2026-10-19T05:50:44.812Z weekly 0.7 https://safeguard.sh/resources/blog/patch-in-place-or-rebuild-and-redeploy-decision-guide 2026-10-19T05:50:44.910Z weekly 0.7 https://safeguard.sh/resources/blog/patch-metrics-two-clocks-os-and-dependency-time-to-fix 2026-10-19T05:50:45.015Z weekly 0.7 https://safeguard.sh/resources/blog/patch-queue-or-long-lived-fork-which-to-carry 2026-10-19T05:50:45.108Z weekly 0.7 https://safeguard.sh/resources/blog/patch-time-report-faq-short-answers-to-common-questions 2026-10-19T05:50:45.212Z weekly 0.7 https://safeguard.sh/resources/blog/patch-time-reports-myth-versus-fact 2026-10-19T05:50:45.325Z weekly 0.7 https://safeguard.sh/resources/blog/patch-versus-mitigation-explained-for-non-security-teams 2026-10-19T05:50:45.428Z weekly 0.7 https://safeguard.sh/resources/blog/patched-mitigated-or-closed-what-counts-as-done-in-a-report 2026-10-19T05:50:45.542Z weekly 0.7 https://safeguard.sh/resources/blog/patching-myths-about-os-and-dependency-updates-myth-vs-fact 2026-10-19T05:50:45.671Z weekly 0.7 https://safeguard.sh/resources/blog/patent-clauses-in-open-source-licenses-what-product-teams-should-know 2026-10-19T05:50:45.809Z weekly 0.7 https://safeguard.sh/resources/blog/path-scoped-sca-policy-in-a-monorepo-different-rules-per-directory 2026-10-19T05:50:45.906Z weekly 0.7 https://safeguard.sh/resources/blog/patient-identifiers-in-urls-and-access-logs 2026-10-19T05:50:46.032Z weekly 0.7 https://safeguard.sh/resources/blog/patient-portal-third-party-scripts-what-to-allow 2026-10-19T05:50:46.139Z weekly 0.7 https://safeguard.sh/resources/blog/pause-a-bad-mobile-release-first-hour-on-ios-and-android 2026-10-19T05:50:46.235Z weekly 0.7 https://safeguard.sh/resources/blog/pause-and-delay-controls-os-updates-versus-dependency-bots 2026-10-19T05:50:46.333Z weekly 0.7 https://safeguard.sh/resources/blog/pause-kubernetes-rollout-hold-back-bad-release 2026-10-19T05:50:46.436Z weekly 0.7 https://safeguard.sh/resources/blog/payment-api-timed-out-did-the-charge-go-through 2026-10-19T05:50:46.541Z weekly 0.7 https://safeguard.sh/resources/blog/peer-and-optional-dependencies-who-owns-the-security-fix 2026-10-19T05:50:46.661Z weekly 0.7 https://safeguard.sh/resources/blog/penetration-test-vs-vulnerability-scan-for-regulated-teams 2026-10-19T05:50:46.771Z weekly 0.7 https://safeguard.sh/resources/blog/pep-723-inline-script-metadata-for-one-off-analysis-scripts 2026-10-19T05:50:46.884Z weekly 0.7 https://safeguard.sh/resources/blog/per-device-encrypted-update-bundles-key-subsets-at-fleet-scale 2026-10-19T05:50:47.031Z weekly 0.7 https://safeguard.sh/resources/blog/per-language-dependency-gotchas-cheat-sheet 2026-10-19T05:50:47.126Z weekly 0.7 https://safeguard.sh/resources/blog/permissions-questions-for-agent-tools-in-a-security-demo 2026-10-19T05:50:47.397Z weekly 0.7 https://safeguard.sh/resources/blog/personal-access-token-policy-for-contractor-accounts 2026-10-19T05:50:47.578Z weekly 0.7 https://safeguard.sh/resources/blog/pgcrypto-column-encryption-or-application-side 2026-10-19T05:50:47.691Z weekly 0.7 https://safeguard.sh/resources/blog/phone-home-and-egress-inventory-for-on-premises-software 2026-10-19T05:50:47.802Z weekly 0.7 https://safeguard.sh/resources/blog/phone-hotspot-or-hotel-wifi-for-work-which-is-safer 2026-10-19T05:50:47.927Z weekly 0.7 https://safeguard.sh/resources/blog/php-active-support-vs-security-support-what-is-the-difference 2026-10-19T05:50:48.031Z weekly 0.7 https://safeguard.sh/resources/blog/php-file-upload-checks-finfo-move-uploaded-file 2026-10-19T05:50:48.163Z weekly 0.7 https://safeguard.sh/resources/blog/pick-the-scenario-for-your-first-dependency-compromise-tabletop 2026-10-19T05:50:48.313Z weekly 0.7 https://safeguard.sh/resources/blog/pii-in-urls-and-page-titles-sent-to-analytics 2026-10-19T05:50:48.417Z weekly 0.7 https://safeguard.sh/resources/blog/pin-a-forked-dependency-by-commit-in-pip-and-npm 2026-10-19T05:50:48.711Z weekly 0.7 https://safeguard.sh/resources/blog/pin-a-known-failure-with-hypothesis-example-regression-case 2026-10-19T05:50:48.995Z weekly 0.7 https://safeguard.sh/resources/blog/pin-a-unity-git-package-to-a-commit-hash 2026-10-19T05:50:49.097Z weekly 0.7 https://safeguard.sh/resources/blog/pin-build-toolchains-in-a-monorepo-checklist 2026-10-19T05:50:49.190Z weekly 0.7 https://safeguard.sh/resources/blog/pin-container-images-by-digest-in-helm-values-and-manifests 2026-10-19T05:50:49.358Z weekly 0.7 https://safeguard.sh/resources/blog/pin-fastlane-in-ci-with-bundler-and-a-committed-lockfile 2026-10-19T05:50:49.490Z weekly 0.7 https://safeguard.sh/resources/blog/pin-github-actions-to-a-sha-without-falling-behind 2026-10-19T05:50:49.641Z weekly 0.7 https://safeguard.sh/resources/blog/pin-golden-path-base-images-by-digest-or-tag 2026-10-19T05:50:49.784Z weekly 0.7 https://safeguard.sh/resources/blog/pin-or-float-internal-library-versions-guidance-for-consuming-teams 2026-10-19T05:50:49.908Z weekly 0.7 https://safeguard.sh/resources/blog/pin-or-range-decision-guide-by-package-manager 2026-10-19T05:50:50.007Z weekly 0.7 https://safeguard.sh/resources/blog/pin-the-node-version-on-client-projects-engines-is-only-advisory 2026-10-19T05:50:50.278Z weekly 0.7 https://safeguard.sh/resources/blog/pin-the-rust-toolchain-with-rust-toolchain-toml 2026-10-19T05:50:50.379Z weekly 0.7 https://safeguard.sh/resources/blog/pin-third-party-actions-in-security-automation-to-a-commit-sha 2026-10-19T05:50:50.500Z weekly 0.7 https://safeguard.sh/resources/blog/pin-third-party-actions-to-a-commit-sha-in-pr-workflows 2026-10-19T05:50:50.957Z weekly 0.7 https://safeguard.sh/resources/blog/pin-versions-for-reproducibility-without-freezing-vulnerabilities 2026-10-19T05:50:51.457Z weekly 0.7 https://safeguard.sh/resources/blog/pinned-dependencies-check-explained-for-founders 2026-10-19T05:50:51.587Z weekly 0.7 https://safeguard.sh/resources/blog/pip-audit-pypi-vs-osv-why-the-data-source-changes-your-results 2026-10-19T05:50:51.698Z weekly 0.7 https://safeguard.sh/resources/blog/pip-compatible-release-operator-pin-or-range 2026-10-19T05:50:51.804Z weekly 0.7 https://safeguard.sh/resources/blog/pip-constraints-file-force-safe-transitive-python-version 2026-10-19T05:50:51.909Z weekly 0.7 https://safeguard.sh/resources/blog/pip-credentials-for-an-internal-index-url-netrc-or-keyring 2026-10-19T05:50:52.000Z weekly 0.7 https://safeguard.sh/resources/blog/pip-extra-index-url-and-internal-mirrors-why-it-undermines-intake 2026-10-19T05:50:52.095Z weekly 0.7 https://safeguard.sh/resources/blog/pip-freeze-pins-and-hashes-keep-python-environments-aligned 2026-10-19T05:50:52.206Z weekly 0.7 https://safeguard.sh/resources/blog/pip-hash-checking-mode-for-client-python-projects 2026-10-19T05:50:52.566Z weekly 0.7 https://safeguard.sh/resources/blog/pip-hashes-from-your-index-are-not-tamper-protection 2026-10-19T05:50:52.684Z weekly 0.7 https://safeguard.sh/resources/blog/pip-install-dry-run-report-preview-a-dependency-upgrade 2026-10-19T05:50:52.992Z weekly 0.7 https://safeguard.sh/resources/blog/pip-install-fails-on-python-slim-image 2026-10-19T05:50:53.545Z weekly 0.7 https://safeguard.sh/resources/blog/pip-install-user-flag-or-virtual-environment-which-to-use 2026-10-19T05:50:54.088Z weekly 0.7 https://safeguard.sh/resources/blog/pip-install-vs-uv-pip-sync-extra-packages-after-migration 2026-10-19T05:50:54.201Z weekly 0.7 https://safeguard.sh/resources/blog/pip-no-require-hashes-when-to-turn-off-automatic-hash-enforcement 2026-10-19T05:50:54.330Z weekly 0.7 https://safeguard.sh/resources/blog/pip-only-binary-what-it-blocks-and-what-it-breaks 2026-10-19T05:50:54.691Z weekly 0.7 https://safeguard.sh/resources/blog/pip-or-python-m-pip-which-pip-are-you-running 2026-10-19T05:50:54.813Z weekly 0.7 https://safeguard.sh/resources/blog/pip-require-hashes-as-the-final-gate-of-dependency-intake 2026-10-19T05:50:55.103Z weekly 0.7 https://safeguard.sh/resources/blog/pip-require-hashes-pin-python-requirements 2026-10-19T05:50:55.487Z weekly 0.7 https://safeguard.sh/resources/blog/pip-upgrade-strategy-only-if-needed-vs-eager-security-fix 2026-10-19T05:50:55.593Z weekly 0.7 https://safeguard.sh/resources/blog/pipeline-evidence-on-demand-for-auditors 2026-10-19T05:50:55.708Z weekly 0.7 https://safeguard.sh/resources/blog/pipeline-security-dashboard-six-panels-that-answer-real-questions 2026-10-19T05:50:55.829Z weekly 0.7 https://safeguard.sh/resources/blog/pkg-config-which-c-library-version-did-i-link 2026-10-19T05:50:55.926Z weekly 0.7 https://safeguard.sh/resources/blog/plan-a-major-framework-upgrade-on-a-product-roadmap 2026-10-19T05:50:56.032Z weekly 0.7 https://safeguard.sh/resources/blog/plan-dependency-upgrades-when-test-coverage-is-thin 2026-10-19T05:50:56.132Z weekly 0.7 https://safeguard.sh/resources/blog/plan-for-free-security-updates-hardware-startup-support-model 2026-10-19T05:50:56.631Z weekly 0.7 https://safeguard.sh/resources/blog/plan-vulnerability-fix-capacity-around-holidays-and-release-freezes 2026-10-19T05:50:56.753Z weekly 0.7 https://safeguard.sh/resources/blog/plant-a-known-vulnerable-package-to-test-scanner-coverage 2026-10-19T05:50:56.859Z weekly 0.7 https://safeguard.sh/resources/blog/platform-team-or-product-team-who-should-own-shared-libraries 2026-10-19T05:50:56.953Z weekly 0.7 https://safeguard.sh/resources/blog/platform-vs-product-team-who-owns-dependency-upgrades 2026-10-19T05:50:57.047Z weekly 0.7 https://safeguard.sh/resources/blog/platformio-lib-deps-pinned-or-floating-for-firmware-sbom 2026-10-19T05:50:57.481Z weekly 0.7 https://safeguard.sh/resources/blog/plugin-author-stops-responding-to-security-reports 2026-10-19T05:50:57.849Z weekly 0.7 https://safeguard.sh/resources/blog/plugin-ecosystem-exit-plan-how-to-leave-a-marketplace-cleanly 2026-10-19T05:50:57.941Z weekly 0.7 https://safeguard.sh/resources/blog/plugin-marketplace-security-requirements-for-partners 2026-10-19T05:50:58.037Z weekly 0.7 https://safeguard.sh/resources/blog/plugin-review-evidence-for-auditors-what-to-keep 2026-10-19T05:50:58.128Z weekly 0.7 https://safeguard.sh/resources/blog/plugin-revocation-how-a-cli-pulls-a-malicious-plugin-from-users 2026-10-19T05:50:58.221Z weekly 0.7 https://safeguard.sh/resources/blog/plugins-installed-after-deploy-where-dependency-scanners-go-blind 2026-10-19T05:50:58.333Z weekly 0.7 https://safeguard.sh/resources/blog/pnpm-blockexoticsubdeps-stop-transitive-git-dependencies 2026-10-19T05:50:58.674Z weekly 0.7 https://safeguard.sh/resources/blog/pnpm-minimum-release-age-strict-mode-and-excludes 2026-10-19T05:50:58.910Z weekly 0.7 https://safeguard.sh/resources/blog/pnpm-nodelinker-isolated-or-hoisted-security-tradeoffs 2026-10-19T05:50:59.007Z weekly 0.7 https://safeguard.sh/resources/blog/pnpm-patch-fix-a-dependency-that-has-no-fixed-release 2026-10-19T05:50:59.101Z weekly 0.7 https://safeguard.sh/resources/blog/pnpm-project-npmrc-token-env-var-not-expanded 2026-10-19T05:50:59.190Z weekly 0.7 https://safeguard.sh/resources/blog/pnpm-store-cache-in-ci-who-may-write-it 2026-10-19T05:50:59.287Z weekly 0.7 https://safeguard.sh/resources/blog/pnpm-trustpolicy-no-downgrade-what-it-blocks 2026-10-19T05:50:59.391Z weekly 0.7 https://safeguard.sh/resources/blog/poc-found-real-vulnerabilities-who-owns-them 2026-10-19T05:50:59.496Z weekly 0.7 https://safeguard.sh/resources/blog/poc-vs-framework-module-vs-scanner-template-exploit-maturity 2026-10-19T05:50:59.599Z weekly 0.7 https://safeguard.sh/resources/blog/poetry-export-requirements-txt-during-migration 2026-10-19T05:50:59.707Z weekly 0.7 https://safeguard.sh/resources/blog/poetry-update-single-package-no-op-outside-version-constraint 2026-10-19T05:50:59.935Z weekly 0.7 https://safeguard.sh/resources/blog/point-every-package-client-at-your-mirror-npm-pip-maven-cargo-go 2026-10-19T05:51:01.340Z weekly 0.7 https://safeguard.sh/resources/blog/policies-alone-do-not-work-which-open-source-rules-to-automate-first 2026-10-19T05:51:01.442Z weekly 0.7 https://safeguard.sh/resources/blog/policy-conflict-matrix-when-two-companies-rules-disagree 2026-10-19T05:51:01.587Z weekly 0.7 https://safeguard.sh/resources/blog/policy-decision-point-vs-policy-enforcement-point-explained 2026-10-19T05:51:02.813Z weekly 0.7 https://safeguard.sh/resources/blog/policy-exceptions-in-code-not-in-chat 2026-10-19T05:51:02.908Z weekly 0.7 https://safeguard.sh/resources/blog/policy-standard-procedure-guideline-in-supply-chain-security 2026-10-19T05:51:03.003Z weekly 0.7 https://safeguard.sh/resources/blog/poll-osv-for-new-advisories-without-downloading-the-whole-database 2026-10-19T05:51:03.097Z weekly 0.7 https://safeguard.sh/resources/blog/polyglot-dependency-hygiene-myths-vs-facts 2026-10-19T05:51:03.211Z weekly 0.7 https://safeguard.sh/resources/blog/port-binding-in-containers-what-exposure-really-means 2026-10-19T05:51:03.310Z weekly 0.7 https://safeguard.sh/resources/blog/post-ci-security-findings-to-slack-with-an-incoming-webhook 2026-10-19T05:51:04.161Z weekly 0.7 https://safeguard.sh/resources/blog/post-fix-review-after-a-vulnerability-report 2026-10-19T05:51:04.593Z weekly 0.7 https://safeguard.sh/resources/blog/post-implementation-review-for-dependency-changes 2026-10-19T05:51:04.690Z weekly 0.7 https://safeguard.sh/resources/blog/post-incident-review-questions-your-sbom-should-answer 2026-10-19T05:51:04.786Z weekly 0.7 https://safeguard.sh/resources/blog/postgres-row-level-security-for-multi-tenant-saas-how-it-works 2026-10-19T05:51:04.883Z weekly 0.7 https://safeguard.sh/resources/blog/postgresql-pg-hba-conf-first-match-listen-addresses 2026-10-19T05:51:04.977Z weekly 0.7 https://safeguard.sh/resources/blog/postgresql-pg-hba-trust-method-risk 2026-10-19T05:51:05.074Z weekly 0.7 https://safeguard.sh/resources/blog/postgresql-public-pseudo-role-explained 2026-10-19T05:51:05.170Z weekly 0.7 https://safeguard.sh/resources/blog/postgresql-role-password-expiry-valid-until 2026-10-19T05:51:05.420Z weekly 0.7 https://safeguard.sh/resources/blog/postgresql-statement-timeout-connection-limit-per-role 2026-10-19T05:51:05.536Z weekly 0.7 https://safeguard.sh/resources/blog/postmortem-draft-reviewer-checklist 2026-10-19T05:51:06.535Z weekly 0.7 https://safeguard.sh/resources/blog/postmortem-follow-up-at-30-60-and-90-days-supply-chain-incident 2026-10-19T05:51:06.639Z weekly 0.7 https://safeguard.sh/resources/blog/postmortem-for-a-false-alarm-advisory-that-did-not-affect-you 2026-10-19T05:51:06.741Z weekly 0.7 https://safeguard.sh/resources/blog/postmortem-for-a-near-miss-when-a-policy-gate-blocked-the-package 2026-10-19T05:51:06.845Z weekly 0.7 https://safeguard.sh/resources/blog/postmortem-owner-vs-incident-commander-vs-approver 2026-10-19T05:51:06.939Z weekly 0.7 https://safeguard.sh/resources/blog/postmortem-questions-for-your-pipeline-after-a-registry-outage 2026-10-19T05:51:07.035Z weekly 0.7 https://safeguard.sh/resources/blog/postmortem-vs-rca-vs-after-action-report-what-is-the-difference 2026-10-19T05:51:07.130Z weekly 0.7 https://safeguard.sh/resources/blog/postmortem-when-the-bad-package-vanished-from-the-registry 2026-10-19T05:51:07.225Z weekly 0.7 https://safeguard.sh/resources/blog/powershell-history-and-secrets-filter-commands-with-psreadline 2026-10-19T05:51:07.320Z weekly 0.7 https://safeguard.sh/resources/blog/pre-announced-security-release-what-to-do-this-week 2026-10-19T05:51:07.426Z weekly 0.7 https://safeguard.sh/resources/blog/pre-approved-exception-categories-vs-case-by-case-review 2026-10-19T05:51:07.537Z weekly 0.7 https://safeguard.sh/resources/blog/pre-commit-autoupdate-and-why-rev-should-be-a-tag-or-sha 2026-10-19T05:51:07.644Z weekly 0.7 https://safeguard.sh/resources/blog/pre-commit-hook-or-pull-request-scan-for-dependency-checks 2026-10-19T05:51:08.265Z weekly 0.7 https://safeguard.sh/resources/blog/pre-commit-or-pull-request-dependency-checks-compared 2026-10-19T05:51:08.372Z weekly 0.7 https://safeguard.sh/resources/blog/pre-delivery-dependency-audit-checklist-for-agencies 2026-10-19T05:51:08.479Z weekly 0.7 https://safeguard.sh/resources/blog/pre-merge-checklist-for-ai-assisted-remediation-one-page 2026-10-19T05:51:08.583Z weekly 0.7 https://safeguard.sh/resources/blog/pre-production-security-checklist-for-low-code-apps 2026-10-19T05:51:08.853Z weekly 0.7 https://safeguard.sh/resources/blog/pre-production-vulnerability-baseline-before-go-live 2026-10-19T05:51:08.947Z weekly 0.7 https://safeguard.sh/resources/blog/pre-release-and-build-metadata-versions-scanner-differences 2026-10-19T05:51:09.042Z weekly 0.7 https://safeguard.sh/resources/blog/pre-release-dependency-checklist-for-open-source-maintainers 2026-10-19T05:51:09.134Z weekly 0.7 https://safeguard.sh/resources/blog/pre-release-security-checklist-for-a-small-engineering-team 2026-10-19T05:51:09.230Z weekly 0.7 https://safeguard.sh/resources/blog/preapproved-libraries-delivery-and-security 2026-10-19T05:51:09.327Z weekly 0.7 https://safeguard.sh/resources/blog/prefect-blocks-vs-variables-where-do-secrets-belong 2026-10-19T05:51:09.436Z weekly 0.7 https://safeguard.sh/resources/blog/prefect-deployment-pull-steps-git-branch-and-pip-at-run-time 2026-10-19T05:51:09.548Z weekly 0.7 https://safeguard.sh/resources/blog/prepare-for-first-enterprise-security-call-supply-chain 2026-10-19T05:51:09.651Z weekly 0.7 https://safeguard.sh/resources/blog/prevent-detect-mitigate-postmortem-action-types 2026-10-19T05:51:09.785Z weekly 0.7 https://safeguard.sh/resources/blog/prevent-open-redirects-express-res-redirect-steps 2026-10-19T05:51:10.130Z weekly 0.7 https://safeguard.sh/resources/blog/prevent-script-injection-in-security-automation-workflows 2026-10-19T05:51:10.284Z weekly 0.7 https://safeguard.sh/resources/blog/preventive-detective-and-corrective-controls-engineering-examples 2026-10-19T05:51:10.387Z weekly 0.7 https://safeguard.sh/resources/blog/preview-environments-per-pull-request-data-and-teardown 2026-10-19T05:51:10.494Z weekly 0.7 https://safeguard.sh/resources/blog/prioritize-cves-with-a-small-it-team-kev-and-epss 2026-10-19T05:51:10.605Z weekly 0.7 https://safeguard.sh/resources/blog/prisma-queryraw-vs-queryrawunsafe-sql-injection 2026-10-19T05:51:10.710Z weekly 0.7 https://safeguard.sh/resources/blog/private-custom-openapi-generator-supply-chain-checklist 2026-10-19T05:51:10.812Z weekly 0.7 https://safeguard.sh/resources/blog/private-key-jwt-vs-client-secret-for-oauth-clients 2026-10-19T05:51:10.907Z weekly 0.7 https://safeguard.sh/resources/blog/private-registry-credentials-for-a-scanner-in-a-legacy-monorepo 2026-10-19T05:51:11.001Z weekly 0.7 https://safeguard.sh/resources/blog/private-registry-credentials-for-client-builds-without-sharing-tokens 2026-10-19T05:51:11.096Z weekly 0.7 https://safeguard.sh/resources/blog/private-repo-fork-settings-send-write-tokens-and-send-secrets 2026-10-19T05:51:11.192Z weekly 0.7 https://safeguard.sh/resources/blog/private-true-and-files-stop-accidental-npm-publish 2026-10-19T05:51:11.284Z weekly 0.7 https://safeguard.sh/resources/blog/product-security-and-platform-disagree-on-a-blocking-gate 2026-10-19T05:51:11.389Z weekly 0.7 https://safeguard.sh/resources/blog/production-admin-tasks-migrations-and-consoles-security 2026-10-19T05:51:11.495Z weekly 0.7 https://safeguard.sh/resources/blog/promotion-gate-checks-before-staging-packages-reach-prod 2026-10-19T05:51:11.588Z weekly 0.7 https://safeguard.sh/resources/blog/prompt-hygiene-one-page-standard-for-security-teams 2026-10-19T05:51:11.676Z weekly 0.7 https://safeguard.sh/resources/blog/prompt-injection-and-scheduled-ai-tasks-when-nobody-reads-the-output 2026-10-19T05:51:11.770Z weekly 0.7 https://safeguard.sh/resources/blog/prompt-injection-test-for-a-vendors-ai-feature-in-a-sandbox 2026-10-19T05:51:11.871Z weekly 0.7 https://safeguard.sh/resources/blog/prompt-regression-tests-as-a-ci-gate-what-to-include 2026-10-19T05:51:11.964Z weekly 0.7 https://safeguard.sh/resources/blog/protect-deployment-secrets-from-contractors-with-environments 2026-10-19T05:51:12.054Z weekly 0.7 https://safeguard.sh/resources/blog/protect-internal-python-package-names-from-dependency-confusion 2026-10-19T05:51:12.148Z weekly 0.7 https://safeguard.sh/resources/blog/protect-release-branches-so-hotfixes-need-review 2026-10-19T05:51:12.240Z weekly 0.7 https://safeguard.sh/resources/blog/protect-release-tags-with-a-github-tag-ruleset 2026-10-19T05:51:12.338Z weekly 0.7 https://safeguard.sh/resources/blog/protect-secrets-from-external-prs-with-environment-required-reviewers 2026-10-19T05:51:12.458Z weekly 0.7 https://safeguard.sh/resources/blog/protect-the-signing-key-of-your-internal-browser-extension 2026-10-19T05:51:12.895Z weekly 0.7 https://safeguard.sh/resources/blog/prototype-cleanup-before-it-ships 2026-10-19T05:51:13.073Z weekly 0.7 https://safeguard.sh/resources/blog/prototype-pilot-production-tiers-what-controls-each-needs 2026-10-19T05:51:13.165Z weekly 0.7 https://safeguard.sh/resources/blog/prove-a-build-pulled-packages-from-the-internal-mirror 2026-10-19T05:51:13.258Z weekly 0.7 https://safeguard.sh/resources/blog/prove-a-dependency-is-unused-before-you-remove-it 2026-10-19T05:51:13.352Z weekly 0.7 https://safeguard.sh/resources/blog/prove-a-dependency-override-did-not-break-anything 2026-10-19T05:51:13.447Z weekly 0.7 https://safeguard.sh/resources/blog/prove-a-security-patch-actually-fixed-the-vulnerability 2026-10-19T05:51:13.541Z weekly 0.7 https://safeguard.sh/resources/blog/prove-an-audit-log-was-not-edited-cloudtrail-digests-object-lock 2026-10-19T05:51:13.633Z weekly 0.7 https://safeguard.sh/resources/blog/prove-dependency-scanning-runs-on-every-build 2026-10-19T05:51:13.728Z weekly 0.7 https://safeguard.sh/resources/blog/prove-external-contribution-controls-to-auditors-evidence-list 2026-10-19T05:51:13.827Z weekly 0.7 https://safeguard.sh/resources/blog/prove-test-data-deleted-after-a-test-run 2026-10-19T05:51:13.918Z weekly 0.7 https://safeguard.sh/resources/blog/prove-to-an-auditor-that-production-matches-the-tested-release 2026-10-19T05:51:14.010Z weekly 0.7 https://safeguard.sh/resources/blog/provenance-attestation-predicate-subject-plain-english 2026-10-19T05:51:14.100Z weekly 0.7 https://safeguard.sh/resources/blog/provenance-for-incident-response-which-fields-help 2026-10-19T05:51:14.196Z weekly 0.7 https://safeguard.sh/resources/blog/provider-version-constraints-for-shared-terraform-modules 2026-10-19T05:51:14.288Z weekly 0.7 https://safeguard.sh/resources/blog/prune-dependencies-before-you-upgrade-them-this-quarter 2026-10-19T05:51:14.383Z weekly 0.7 https://safeguard.sh/resources/blog/ptac-contract-provisions-districts-should-require-from-vendors 2026-10-19T05:51:14.474Z weekly 0.7 https://safeguard.sh/resources/blog/public-container-image-intake-checklist-before-you-adopt-one 2026-10-19T05:51:14.571Z weekly 0.7 https://safeguard.sh/resources/blog/public-or-first-party-graphql-api-which-controls-apply 2026-10-19T05:51:14.675Z weekly 0.7 https://safeguard.sh/resources/blog/public-or-gated-where-should-each-security-document-live 2026-10-19T05:51:14.776Z weekly 0.7 https://safeguard.sh/resources/blog/public-registry-container-images-faq-ten-questions-answered 2026-10-19T05:51:14.876Z weekly 0.7 https://safeguard.sh/resources/blog/public-vs-confidential-oauth-clients-how-to-decide 2026-10-19T05:51:14.967Z weekly 0.7 https://safeguard.sh/resources/blog/publish-your-maven-sbom-next-to-the-jar 2026-10-19T05:51:15.060Z weekly 0.7 https://safeguard.sh/resources/blog/pubspec-lock-in-dart-and-flutter-what-it-records-and-how-to-scan 2026-10-19T05:51:15.153Z weekly 0.7 https://safeguard.sh/resources/blog/pull-or-push-vulnerability-alerts-which-fits-your-team 2026-10-19T05:51:15.250Z weekly 0.7 https://safeguard.sh/resources/blog/pull-release-dates-and-deprecation-flags-from-deps-dev 2026-10-19T05:51:15.344Z weekly 0.7 https://safeguard.sh/resources/blog/pull-request-checklist-for-adopting-a-public-ci-template 2026-10-19T05:51:15.449Z weekly 0.7 https://safeguard.sh/resources/blog/pull-request-prompt-for-new-third-party-sdks-and-apis 2026-10-19T05:51:15.568Z weekly 0.7 https://safeguard.sh/resources/blog/pull-request-scan-or-nightly-scan-do-you-need-both 2026-10-19T05:51:15.667Z weekly 0.7 https://safeguard.sh/resources/blog/pull-request-scans-vs-scheduled-scans-keep-their-metrics-separate 2026-10-19T05:51:16.267Z weekly 0.7 https://safeguard.sh/resources/blog/pull-request-titles-and-branch-names-are-untrusted-input-in-workflows 2026-10-19T05:51:16.410Z weekly 0.7 https://safeguard.sh/resources/blog/pull-through-cache-proxy-settings-ttl-credentials-and-storage 2026-10-19T05:51:16.517Z weekly 0.7 https://safeguard.sh/resources/blog/purge-the-cdn-cache-after-a-security-fix-steps 2026-10-19T05:51:16.617Z weekly 0.7 https://safeguard.sh/resources/blog/purl-checks-for-a-received-sbom 2026-10-19T05:51:16.721Z weekly 0.7 https://safeguard.sh/resources/blog/purl-namespace-or-supplier-changed-in-an-sbom-diff 2026-10-19T05:51:16.822Z weekly 0.7 https://safeguard.sh/resources/blog/pyarrow-14-0-1-parquet-and-feather-upload-deserialization-advisory 2026-10-19T05:51:16.919Z weekly 0.7 https://safeguard.sh/resources/blog/pypi-pending-publisher-publish-a-new-project-without-a-token 2026-10-19T05:51:17.013Z weekly 0.7 https://safeguard.sh/resources/blog/pypi-verified-project-urls-and-the-security-link-what-they-mean 2026-10-19T05:51:17.110Z weekly 0.7 https://safeguard.sh/resources/blog/pyproject-build-system-requires-are-dependencies-too 2026-10-19T05:51:17.199Z weekly 0.7 https://safeguard.sh/resources/blog/python-alpine-image-production-services 2026-10-19T05:51:17.291Z weekly 0.7 https://safeguard.sh/resources/blog/python-bugfix-vs-security-vs-end-of-life-what-it-means 2026-10-19T05:51:17.388Z weekly 0.7 https://safeguard.sh/resources/blog/python-lock-files-poetry-lock-and-uv-lock-explained 2026-10-19T05:51:17.669Z weekly 0.7 https://safeguard.sh/resources/blog/python-package-names-differ-in-scans-normalization 2026-10-19T05:51:17.992Z weekly 0.7 https://safeguard.sh/resources/blog/python-packages-installed-by-apt-are-invisible-to-a-pip-scan 2026-10-19T05:51:18.084Z weekly 0.7 https://safeguard.sh/resources/blog/python-sbom-from-requirements-txt-or-installed-environment 2026-10-19T05:51:18.172Z weekly 0.7 https://safeguard.sh/resources/blog/python-service-template-dependency-defaults-hashes-binaries 2026-10-19T05:51:18.263Z weekly 0.7 https://safeguard.sh/resources/blog/python-setup-py-dependencies-missing-from-your-sbom 2026-10-19T05:51:18.481Z weekly 0.7 https://safeguard.sh/resources/blog/python-wheels-with-bundled-native-libraries-license-check 2026-10-19T05:51:18.591Z weekly 0.7 https://safeguard.sh/resources/blog/pythondontwritebytecode-pythonunbuffered-docker 2026-10-19T05:51:18.694Z weekly 0.7 https://safeguard.sh/resources/blog/quarantine-release-criteria-what-must-be-true-before-promotion 2026-10-19T05:51:18.796Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-access-review-for-a-small-engineering-team 2026-10-19T05:51:18.911Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-access-review-for-your-code-hosting-platform 2026-10-19T05:51:19.017Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-container-registry-hygiene-review-checklist 2026-10-19T05:51:19.148Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-dependency-upgrade-planning-checklist-for-managers 2026-10-19T05:51:19.259Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-end-of-life-check-for-runtimes-and-base-images 2026-10-19T05:51:19.370Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-joint-control-review-agenda 2026-10-19T05:51:19.472Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-owner-reattestation-for-active-security-exceptions 2026-10-19T05:51:19.574Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-remediation-capacity-review-agenda-for-engineering-leaders 2026-10-19T05:51:19.677Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-review-of-ai-assistant-use-in-a-security-team 2026-10-19T05:51:19.780Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-security-review-agenda-for-a-small-engineering-team 2026-10-19T05:51:19.880Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-tag-audit-checklist-for-marketing-ops 2026-10-19T05:51:19.971Z weekly 0.7 https://safeguard.sh/resources/blog/quarterly-vulnerability-review-agenda-that-produces-audit-evidence 2026-10-19T05:51:20.076Z weekly 0.7 https://safeguard.sh/resources/blog/questions-a-board-member-can-ask-about-vulnerability-management 2026-10-19T05:51:20.168Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-a-data-or-labeling-vendor-before-you-train 2026-10-19T05:51:20.273Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-a-vendor-that-ships-you-a-model-file 2026-10-19T05:51:20.402Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-a-vendor-that-uses-ai-nydfs-third-party-diligence 2026-10-19T05:51:20.531Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-about-the-model-behind-a-security-ai-feature 2026-10-19T05:51:20.631Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-an-ai-assistant-about-its-own-fix 2026-10-19T05:51:20.737Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-ask-before-buying-a-no-code-or-rpa-tool 2026-10-19T05:51:20.837Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-email-a-scanner-vendor-after-the-demo 2026-10-19T05:51:20.934Z weekly 0.7 https://safeguard.sh/resources/blog/questions-to-send-back-after-reading-a-supplier-sbom 2026-10-19T05:51:21.105Z weekly 0.7 https://safeguard.sh/resources/blog/questions-your-open-source-inventory-must-answer-in-an-incident 2026-10-19T05:51:21.214Z weekly 0.7 https://safeguard.sh/resources/blog/queue-time-or-run-time-where-security-scan-delay-comes-from 2026-10-19T05:51:21.307Z weekly 0.7 https://safeguard.sh/resources/blog/raci-for-vulnerability-remediation-security-platform-compliance 2026-10-19T05:51:21.417Z weekly 0.7 https://safeguard.sh/resources/blog/rails-active-job-arguments-globalid-and-secrets 2026-10-19T05:51:22.121Z weekly 0.7 https://safeguard.sh/resources/blog/rails-active-record-encryption-deterministic-or-not 2026-10-19T05:51:22.227Z weekly 0.7 https://safeguard.sh/resources/blog/rails-active-storage-files-are-public-by-default 2026-10-19T05:51:22.317Z weekly 0.7 https://safeguard.sh/resources/blog/rails-api-mode-what-is-removed-and-what-you-must-add 2026-10-19T05:51:22.412Z weekly 0.7 https://safeguard.sh/resources/blog/rails-content-security-policy-report-only-rollout 2026-10-19T05:51:22.517Z weekly 0.7 https://safeguard.sh/resources/blog/rails-maintenance-policy-explained-bug-fix-and-security-windows 2026-10-19T05:51:22.619Z weekly 0.7 https://safeguard.sh/resources/blog/rails-rate-limit-login-throttle-built-in 2026-10-19T05:51:22.721Z weekly 0.7 https://safeguard.sh/resources/blog/ramp-sca-from-advisory-mode-to-enforcement-across-hundreds-of-teams 2026-10-19T05:51:22.823Z weekly 0.7 https://safeguard.sh/resources/blog/rank-security-fixes-with-cost-of-delay-and-effort 2026-10-19T05:51:22.914Z weekly 0.7 https://safeguard.sh/resources/blog/rds-iam-database-authentication-token-instead-of-password 2026-10-19T05:51:23.007Z weekly 0.7 https://safeguard.sh/resources/blog/re-run-rate-as-a-developer-friction-signal-for-security-checks 2026-10-19T05:51:23.098Z weekly 0.7 https://safeguard.sh/resources/blog/reachability-and-plugins-callbacks-what-static-analysis-sees 2026-10-19T05:51:23.191Z weekly 0.7 https://safeguard.sh/resources/blog/reachability-claims-in-a-scanner-demo-ask-for-the-call-path 2026-10-19T05:51:23.285Z weekly 0.7 https://safeguard.sh/resources/blog/reachability-on-source-vs-compiled-binary-what-changes 2026-10-19T05:51:23.387Z weekly 0.7 https://safeguard.sh/resources/blog/reachability-shortens-the-triage-stage-of-the-exposure-window 2026-10-19T05:51:24.974Z weekly 0.7 https://safeguard.sh/resources/blog/reachable-versus-total-vulnerability-counts-which-to-report 2026-10-19T05:51:25.078Z weekly 0.7 https://safeguard.sh/resources/blog/reachable-vs-total-open-vulnerabilities-which-number-to-report 2026-10-19T05:51:25.169Z weekly 0.7 https://safeguard.sh/resources/blog/read-a-dual-license-expression-spdx-and-or-with 2026-10-19T05:51:25.264Z weekly 0.7 https://safeguard.sh/resources/blog/read-a-scanner-community-profile-in-two-minutes 2026-10-19T05:51:25.364Z weekly 0.7 https://safeguard.sh/resources/blog/read-a-scanner-projects-security-policy-before-you-adopt-it 2026-10-19T05:51:25.467Z weekly 0.7 https://safeguard.sh/resources/blog/read-an-sbom-in-five-minutes-triage-order 2026-10-19T05:51:26.571Z weekly 0.7 https://safeguard.sh/resources/blog/read-an-sca-report-for-a-monorepo 2026-10-19T05:51:26.693Z weekly 0.7 https://safeguard.sh/resources/blog/read-hugging-face-license-tags-permissive-restricted-and-custom 2026-10-19T05:51:26.809Z weekly 0.7 https://safeguard.sh/resources/blog/read-release-notes-for-security-fixes-five-steps 2026-10-19T05:51:26.900Z weekly 0.7 https://safeguard.sh/resources/blog/read-the-diff-between-two-package-versions-before-you-merge 2026-10-19T05:51:26.992Z weekly 0.7 https://safeguard.sh/resources/blog/real-customer-data-committed-to-git-fixtures 2026-10-19T05:51:27.091Z weekly 0.7 https://safeguard.sh/resources/blog/real-time-vulnerability-monitoring-what-it-means-myth-vs-fact 2026-10-19T05:51:27.182Z weekly 0.7 https://safeguard.sh/resources/blog/rebuild-branch-protection-for-a-new-monorepo-checklist 2026-10-19T05:51:27.274Z weekly 0.7 https://safeguard.sh/resources/blog/rebuild-cadence-for-services-nobody-has-deployed-in-months 2026-10-19T05:51:27.377Z weekly 0.7 https://safeguard.sh/resources/blog/rebuild-patch-or-replace-the-image-decision-guide-for-scan-findings 2026-10-19T05:51:27.477Z weekly 0.7 https://safeguard.sh/resources/blog/rebuild-triggers-compared-schedule-digest-change-or-advisory 2026-10-19T05:51:27.584Z weekly 0.7 https://safeguard.sh/resources/blog/rebuilt-image-still-vulnerable-pull-and-no-cache 2026-10-19T05:51:27.686Z weekly 0.7 https://safeguard.sh/resources/blog/reconcile-different-dependency-versions-when-merging-repositories 2026-10-19T05:51:27.858Z weekly 0.7 https://safeguard.sh/resources/blog/reconcile-scanner-findings-to-fixed-counts-for-an-auditor 2026-10-19T05:51:27.958Z weekly 0.7 https://safeguard.sh/resources/blog/reconstruct-what-an-ai-agent-did-from-its-logs 2026-10-19T05:51:28.565Z weekly 0.7 https://safeguard.sh/resources/blog/record-a-dismissed-sca-finding-what-to-write 2026-10-19T05:51:28.666Z weekly 0.7 https://safeguard.sh/resources/blog/record-for-an-ai-triaged-finding-who-signed-off 2026-10-19T05:51:28.767Z weekly 0.7 https://safeguard.sh/resources/blog/record-why-you-chose-a-library-short-decision-record 2026-10-19T05:51:28.872Z weekly 0.7 https://safeguard.sh/resources/blog/red-amber-green-thresholds-for-vulnerability-metrics-how-to-set-them 2026-10-19T05:51:28.968Z weekly 0.7 https://safeguard.sh/resources/blog/red-flags-in-a-security-ai-demo-what-buyers-should-notice 2026-10-19T05:51:29.056Z weekly 0.7 https://safeguard.sh/resources/blog/red-hat-security-data-csaf-vex-osv-and-rss-which-feed-for-which-job 2026-10-19T05:51:29.149Z weekly 0.7 https://safeguard.sh/resources/blog/redact-logs-at-the-source-or-in-the-pipeline 2026-10-19T05:51:29.240Z weekly 0.7 https://safeguard.sh/resources/blog/redact-query-strings-and-credentials-in-opentelemetry-spans 2026-10-19T05:51:29.336Z weekly 0.7 https://safeguard.sh/resources/blog/redact-security-evidence-before-sharing-with-a-customer-checklist 2026-10-19T05:51:29.437Z weekly 0.7 https://safeguard.sh/resources/blog/registry-access-management-what-an-allowlist-cannot-stop 2026-10-19T05:51:29.543Z weekly 0.7 https://safeguard.sh/resources/blog/registry-and-package-account-ownership-checklist 2026-10-19T05:51:29.650Z weekly 0.7 https://safeguard.sh/resources/blog/registry-behind-a-load-balancer-headers-and-health-checks 2026-10-19T05:51:29.760Z weekly 0.7 https://safeguard.sh/resources/blog/registry-cleanup-dry-run-checklist-before-you-enable-retention 2026-10-19T05:51:29.862Z weekly 0.7 https://safeguard.sh/resources/blog/registry-default-config-is-for-development-what-to-change 2026-10-19T05:51:29.954Z weekly 0.7 https://safeguard.sh/resources/blog/registry-errors-in-ci-401-403-404-429-503-what-each-means 2026-10-19T05:51:30.044Z weekly 0.7 https://safeguard.sh/resources/blog/registry-notifications-as-an-audit-trail-what-they-can-and-cannot-do 2026-10-19T05:51:30.134Z weekly 0.7 https://safeguard.sh/resources/blog/registry-proxy-blocked-a-package-exception-workflow 2026-10-19T05:51:30.224Z weekly 0.7 https://safeguard.sh/resources/blog/registry-publish-access-review-for-saas-startups 2026-10-19T05:51:30.315Z weekly 0.7 https://safeguard.sh/resources/blog/registry-rate-limit-myths-five-things-ci-teams-get-wrong 2026-10-19T05:51:30.413Z weekly 0.7 https://safeguard.sh/resources/blog/registry-tls-settings-minimum-version-and-client-certificates 2026-10-19T05:51:30.519Z weekly 0.7 https://safeguard.sh/resources/blog/registry-token-policy-lessons-from-npm-granular-tokens 2026-10-19T05:51:30.620Z weekly 0.7 https://safeguard.sh/resources/blog/regulation-s-p-incident-response-program-what-engineering-builds 2026-10-19T05:51:30.727Z weekly 0.7 https://safeguard.sh/resources/blog/rehearse-the-diligence-call-ten-supply-chain-questions 2026-10-19T05:51:30.831Z weekly 0.7 https://safeguard.sh/resources/blog/rejected-package-register-keep-a-record-of-no 2026-10-19T05:51:31.500Z weekly 0.7 https://safeguard.sh/resources/blog/release-an-update-to-a-design-system-on-a-next-channel 2026-10-19T05:51:31.616Z weekly 0.7 https://safeguard.sh/resources/blog/release-evidence-a-healthtech-team-should-keep 2026-10-19T05:51:31.720Z weekly 0.7 https://safeguard.sh/resources/blog/release-lag-how-far-behind-staging-should-production-be 2026-10-19T05:51:31.829Z weekly 0.7 https://safeguard.sh/resources/blog/release-notes-for-security-rule-changes-developers-will-read 2026-10-19T05:51:31.948Z weekly 0.7 https://safeguard.sh/resources/blog/relink-jira-tickets-to-findings-after-a-dependency-scanner-migration 2026-10-19T05:51:32.041Z weekly 0.7 https://safeguard.sh/resources/blog/remediation-retrospective-after-a-hard-month-questions-to-ask 2026-10-19T05:51:32.133Z weekly 0.7 https://safeguard.sh/resources/blog/remote-tabletop-for-distributed-engineering-teams 2026-10-19T05:51:32.225Z weekly 0.7 https://safeguard.sh/resources/blog/remove-a-library-safely-step-by-step-migration-plan 2026-10-19T05:51:32.318Z weekly 0.7 https://safeguard.sh/resources/blog/remove-or-suppress-a-dependency-you-are-about-to-drop 2026-10-19T05:51:32.414Z weekly 0.7 https://safeguard.sh/resources/blog/remove-stale-fcm-registration-tokens 2026-10-19T05:51:32.514Z weekly 0.7 https://safeguard.sh/resources/blog/renew-or-re-review-an-expiring-vulnerability-exception 2026-10-19T05:51:32.616Z weekly 0.7 https://safeguard.sh/resources/blog/renv-lockfile-for-r-analytics-teams-what-it-records 2026-10-19T05:51:32.721Z weekly 0.7 https://safeguard.sh/resources/blog/replace-a-denied-open-source-dependency-without-a-rewrite 2026-10-19T05:51:32.821Z weekly 0.7 https://safeguard.sh/resources/blog/replay-a-past-dependency-incident-in-a-scanner-demo 2026-10-19T05:51:32.916Z weekly 0.7 https://safeguard.sh/resources/blog/replay-a-past-incident-as-a-training-exercise 2026-10-19T05:51:33.014Z weekly 0.7 https://safeguard.sh/resources/blog/replay-real-inputs-before-merging-a-parser-or-serializer-fix 2026-10-19T05:51:33.115Z weekly 0.7 https://safeguard.sh/resources/blog/report-a-wrong-affected-range-to-the-advisory-database 2026-10-19T05:51:33.226Z weekly 0.7 https://safeguard.sh/resources/blog/report-dependency-and-first-party-code-findings-separately 2026-10-19T05:51:33.335Z weekly 0.7 https://safeguard.sh/resources/blog/report-dependency-upgrade-progress-to-leadership-on-one-slide 2026-10-19T05:51:33.452Z weekly 0.7 https://safeguard.sh/resources/blog/report-internet-facing-vulnerabilities-separately-why-and-how 2026-10-19T05:51:33.579Z weekly 0.7 https://safeguard.sh/resources/blog/report-outcome-labels-valid-duplicate-informational-out-of-scope 2026-10-19T05:51:33.943Z weekly 0.7 https://safeguard.sh/resources/blog/report-scanner-comparison-results-per-ecosystem 2026-10-19T05:51:34.613Z weekly 0.7 https://safeguard.sh/resources/blog/report-unused-suppression-comments-so-old-exceptions-do-not-pile-up 2026-10-19T05:51:34.749Z weekly 0.7 https://safeguard.sh/resources/blog/reporting-cadence-for-vulnerability-metrics-by-audience 2026-10-19T05:51:34.867Z weekly 0.7 https://safeguard.sh/resources/blog/repository-baseline-settings-to-apply-in-the-first-month 2026-10-19T05:51:34.973Z weekly 0.7 https://safeguard.sh/resources/blog/repository-dispatch-for-security-automation-when-to-use-it 2026-10-19T05:51:35.066Z weekly 0.7 https://safeguard.sh/resources/blog/reproducibility-review-checklist-for-pull-requests 2026-10-19T05:51:35.180Z weekly 0.7 https://safeguard.sh/resources/blog/reproducible-builds-or-slsa-provenance-which-comes-first 2026-10-19T05:51:35.286Z weekly 0.7 https://safeguard.sh/resources/blog/reproducible-system-images-filesystems-iso-and-squashfs-traps 2026-10-19T05:51:35.386Z weekly 0.7 https://safeguard.sh/resources/blog/require-approval-before-a-package-publish-job-github-environments 2026-10-19T05:51:35.497Z weekly 0.7 https://safeguard.sh/resources/blog/require-approval-for-new-dependencies-from-outside-developers 2026-10-19T05:51:35.630Z weekly 0.7 https://safeguard.sh/resources/blog/require-approval-of-the-most-recent-push-on-infrastructure-prs 2026-10-19T05:51:35.742Z weekly 0.7 https://safeguard.sh/resources/blog/require-dependency-review-in-every-repo-with-org-rulesets 2026-10-19T05:51:35.857Z weekly 0.7 https://safeguard.sh/resources/blog/require-owner-labels-admission-findings-have-owner 2026-10-19T05:51:35.960Z weekly 0.7 https://safeguard.sh/resources/blog/require-two-factor-for-contractors-on-github 2026-10-19T05:51:36.071Z weekly 0.7 https://safeguard.sh/resources/blog/require-two-factor-in-a-github-org-what-happens-to-members 2026-10-19T05:51:36.180Z weekly 0.7 https://safeguard.sh/resources/blog/required-checks-for-external-contributor-pull-requests 2026-10-19T05:51:36.287Z weekly 0.7 https://safeguard.sh/resources/blog/requirements-per-platform-files-to-one-uv-lock 2026-10-19T05:51:36.393Z weekly 0.7 https://safeguard.sh/resources/blog/reqwest-default-client-has-no-timeout-set-one 2026-10-19T05:51:36.508Z weekly 0.7 https://safeguard.sh/resources/blog/rerun-the-original-proof-of-concept-after-a-vulnerability-fix 2026-10-19T05:51:36.622Z weekly 0.7 https://safeguard.sh/resources/blog/rescan-after-a-change-ask-a-scanner-demo-for-new-vs-existing-findings 2026-10-19T05:51:36.734Z weekly 0.7 https://safeguard.sh/resources/blog/rescan-after-an-ai-fix-closed-new-or-unchanged-findings 2026-10-19T05:51:36.850Z weekly 0.7 https://safeguard.sh/resources/blog/rescan-deployed-container-images-without-rebuilding 2026-10-19T05:51:36.963Z weekly 0.7 https://safeguard.sh/resources/blog/research-one-cve-exploit-status-in-ten-minutes 2026-10-19T05:51:37.079Z weekly 0.7 https://safeguard.sh/resources/blog/research-software-release-checklist-before-you-publish 2026-10-19T05:51:37.184Z weekly 0.7 https://safeguard.sh/resources/blog/reserve-a-buffer-for-unplanned-security-upgrades 2026-10-19T05:51:37.285Z weekly 0.7 https://safeguard.sh/resources/blog/reset-test-database-between-runs-safely 2026-10-19T05:51:37.396Z weekly 0.7 https://safeguard.sh/resources/blog/respond-to-webhooks-fast-then-process-from-a-queue 2026-10-19T05:51:38.411Z weekly 0.7 https://safeguard.sh/resources/blog/respond-when-buyer-scan-flags-your-product 2026-10-19T05:51:38.527Z weekly 0.7 https://safeguard.sh/resources/blog/restarting-dependency-updates-after-a-year-off-the-first-four-weeks 2026-10-19T05:51:38.643Z weekly 0.7 https://safeguard.sh/resources/blog/restore-database-dump-from-untrusted-source 2026-10-19T05:51:38.760Z weekly 0.7 https://safeguard.sh/resources/blog/restore-keys-fallbacks-and-stale-dependency-caches-the-risk 2026-10-19T05:51:38.876Z weekly 0.7 https://safeguard.sh/resources/blog/restrict-firefox-extensions-with-extensionsettings-policy 2026-10-19T05:51:39.962Z weekly 0.7 https://safeguard.sh/resources/blog/retention-by-count-or-by-age-for-container-images 2026-10-19T05:51:40.067Z weekly 0.7 https://safeguard.sh/resources/blog/retire-a-device-from-your-fleet-inventory-without-losing-the-record 2026-10-19T05:51:40.169Z weekly 0.7 https://safeguard.sh/resources/blog/retire-a-library-across-services-with-an-sbom-checklist 2026-10-19T05:51:40.272Z weekly 0.7 https://safeguard.sh/resources/blog/retire-an-internal-library-without-stranding-the-teams-that-use-it 2026-10-19T05:51:40.380Z weekly 0.7 https://safeguard.sh/resources/blog/retire-old-api-versions-and-their-docs-owasp-inventory-guidance 2026-10-19T05:51:40.493Z weekly 0.7 https://safeguard.sh/resources/blog/retire-old-security-guidance-archive-redirect-or-delete 2026-10-19T05:51:40.612Z weekly 0.7 https://safeguard.sh/resources/blog/retired-open-source-dependency-fork-adopt-or-replace-decision-guide 2026-10-19T05:51:40.730Z weekly 0.7 https://safeguard.sh/resources/blog/retrofit-existing-services-onto-a-golden-path-in-waves 2026-10-19T05:51:40.871Z weekly 0.7 https://safeguard.sh/resources/blog/reusable-workflow-secrets-inherit-or-named-secrets 2026-10-19T05:51:40.976Z weekly 0.7 https://safeguard.sh/resources/blog/revert-a-security-fix-without-bringing-the-bug-back 2026-10-19T05:51:41.082Z weekly 0.7 https://safeguard.sh/resources/blog/review-a-fastfile-like-production-code-what-to-look-for 2026-10-19T05:51:42.238Z weekly 0.7 https://safeguard.sh/resources/blog/review-a-lockfile-only-security-hotfix 2026-10-19T05:51:42.369Z weekly 0.7 https://safeguard.sh/resources/blog/review-a-logging-or-monitoring-vendor-for-health-data 2026-10-19T05:51:42.483Z weekly 0.7 https://safeguard.sh/resources/blog/review-a-new-dependency-in-30-minutes-openssf-practical-checks 2026-10-19T05:51:42.597Z weekly 0.7 https://safeguard.sh/resources/blog/review-a-pr-that-adds-a-new-integration-trust-boundary-checklist 2026-10-19T05:51:42.713Z weekly 0.7 https://safeguard.sh/resources/blog/review-a-pull-request-by-tracing-data-from-source-to-sink 2026-10-19T05:51:42.827Z weekly 0.7 https://safeguard.sh/resources/blog/review-ai-written-cryptography-code-checklist 2026-10-19T05:51:42.930Z weekly 0.7 https://safeguard.sh/resources/blog/review-an-ai-suggested-dependency-upgrade-for-breaking-changes 2026-10-19T05:51:43.032Z weekly 0.7 https://safeguard.sh/resources/blog/review-and-revoke-fine-grained-tokens-in-a-github-org 2026-10-19T05:51:43.138Z weekly 0.7 https://safeguard.sh/resources/blog/review-bazel-module-extensions-like-build-scripts 2026-10-19T05:51:43.244Z weekly 0.7 https://safeguard.sh/resources/blog/review-depth-by-risk-tier-one-reviewer-two-or-security-team 2026-10-19T05:51:43.350Z weekly 0.7 https://safeguard.sh/resources/blog/review-large-ai-generated-changes-for-security 2026-10-19T05:51:43.515Z weekly 0.7 https://safeguard.sh/resources/blog/review-redirect-and-header-rules-files-on-static-hosts 2026-10-19T05:51:43.636Z weekly 0.7 https://safeguard.sh/resources/blog/review-rules-for-an-urgent-security-hotfix 2026-10-19T05:51:43.762Z weekly 0.7 https://safeguard.sh/resources/blog/review-tag-manager-changes-like-application-code 2026-10-19T05:51:43.896Z weekly 0.7 https://safeguard.sh/resources/blog/review-the-red-lines-security-checks-deleted-in-a-diff 2026-10-19T05:51:44.000Z weekly 0.7 https://safeguard.sh/resources/blog/review-the-upstream-diff-before-merging-it-into-your-fork 2026-10-19T05:51:44.225Z weekly 0.7 https://safeguard.sh/resources/blog/review-your-response-to-a-vendor-incident-you-did-not-cause 2026-10-19T05:51:44.446Z weekly 0.7 https://safeguard.sh/resources/blog/review-your-security-testing-mix-every-year-checklist 2026-10-19T05:51:44.563Z weekly 0.7 https://safeguard.sh/resources/blog/reviewed-vs-unreviewed-advisories-why-your-alert-came-late 2026-10-19T05:51:44.681Z weekly 0.7 https://safeguard.sh/resources/blog/reviewer-checklist-os-patch-ticket-versus-dependency-pr 2026-10-19T05:51:44.795Z weekly 0.7 https://safeguard.sh/resources/blog/reviewer-follow-ups-after-we-have-an-ai-policy 2026-10-19T05:51:44.900Z weekly 0.7 https://safeguard.sh/resources/blog/reviewing-a-suppression-diff-in-a-pull-request-checklist 2026-10-19T05:51:45.002Z weekly 0.7 https://safeguard.sh/resources/blog/revoke-an-mcp-server-from-every-agent-checklist 2026-10-19T05:51:45.103Z weekly 0.7 https://safeguard.sh/resources/blog/revoke-aws-sessions-after-a-lost-laptop-step-by-step 2026-10-19T05:51:45.204Z weekly 0.7 https://safeguard.sh/resources/blog/revoke-customer-access-to-security-evidence-at-contract-end 2026-10-19T05:51:45.306Z weekly 0.7 https://safeguard.sh/resources/blog/revoke-github-access-after-losing-a-laptop-step-by-step 2026-10-19T05:51:45.421Z weekly 0.7 https://safeguard.sh/resources/blog/right-size-ai-agent-permissions-from-usage-logs 2026-10-19T05:51:45.533Z weekly 0.7 https://safeguard.sh/resources/blog/ring-fence-legacy-code-that-cannot-meet-the-merged-policy 2026-10-19T05:51:45.647Z weekly 0.7 https://safeguard.sh/resources/blog/risk-tier-your-apps-to-choose-security-testing-depth 2026-10-19T05:51:45.759Z weekly 0.7 https://safeguard.sh/resources/blog/role-demotion-test-for-admin-endpoints 2026-10-19T05:51:45.885Z weekly 0.7 https://safeguard.sh/resources/blog/roll-back-a-bad-dependency-upgrade-safely 2026-10-19T05:51:45.986Z weekly 0.7 https://safeguard.sh/resources/blog/roll-back-a-bad-prompt-change-a-short-runbook 2026-10-19T05:51:46.091Z weekly 0.7 https://safeguard.sh/resources/blog/roll-back-to-a-known-good-dependency-version-by-package-manager 2026-10-19T05:51:46.196Z weekly 0.7 https://safeguard.sh/resources/blog/roll-out-a-new-lint-rule-warn-first-then-error 2026-10-19T05:51:46.303Z weekly 0.7 https://safeguard.sh/resources/blog/roll-out-an-extension-blocklist-without-breaking-developers 2026-10-19T05:51:46.408Z weekly 0.7 https://safeguard.sh/resources/blog/roll-out-an-office-add-in-in-phases-and-control-updates 2026-10-19T05:51:46.681Z weekly 0.7 https://safeguard.sh/resources/blog/roll-out-dependency-scanning-in-stages-without-developer-pushback 2026-10-19T05:51:46.874Z weekly 0.7 https://safeguard.sh/resources/blog/rollback-plan-for-package-manager-migration 2026-10-19T05:51:46.980Z weekly 0.7 https://safeguard.sh/resources/blog/rotate-a-ci-registry-token-without-breaking-builds 2026-10-19T05:51:47.084Z weekly 0.7 https://safeguard.sh/resources/blog/rotating-security-owner-for-a-small-engineering-team 2026-10-19T05:51:47.193Z weekly 0.7 https://safeguard.sh/resources/blog/rotation-or-dedicated-squad-who-fixes-vulnerabilities 2026-10-19T05:51:47.299Z weekly 0.7 https://safeguard.sh/resources/blog/route-security-findings-to-the-author-of-the-change 2026-10-19T05:51:47.416Z weekly 0.7 https://safeguard.sh/resources/blog/route-supply-chain-questions-sales-engineer-vs-engineering 2026-10-19T05:51:47.531Z weekly 0.7 https://safeguard.sh/resources/blog/rpa-bot-access-review-quarterly-checklist 2026-10-19T05:51:47.650Z weekly 0.7 https://safeguard.sh/resources/blog/rpa-bot-least-privilege-instead-of-admin-rights 2026-10-19T05:51:47.770Z weekly 0.7 https://safeguard.sh/resources/blog/rpa-bots-with-custom-scripts-and-libraries-dependency-risk 2026-10-19T05:51:47.885Z weekly 0.7 https://safeguard.sh/resources/blog/rpa-vendor-lock-in-and-exit-plan-what-security-should-ask 2026-10-19T05:51:47.987Z weekly 0.7 https://safeguard.sh/resources/blog/ruby-advisory-database-and-bundler-audit-how-gem-advisories-work 2026-10-19T05:51:48.090Z weekly 0.7 https://safeguard.sh/resources/blog/rules-for-vendor-remote-support-sessions-into-your-network 2026-10-19T05:51:48.192Z weekly 0.7 https://safeguard.sh/resources/blog/rulesets-or-branch-protection-for-a-remediation-bot 2026-10-19T05:51:48.299Z weekly 0.7 https://safeguard.sh/resources/blog/run-a-dependency-compromise-tabletop-remotely-in-a-chat-channel 2026-10-19T05:51:48.415Z weekly 0.7 https://safeguard.sh/resources/blog/run-a-light-owasp-samm-assessment-to-find-first-year-gaps 2026-10-19T05:51:48.533Z weekly 0.7 https://safeguard.sh/resources/blog/run-a-mock-buyer-review-of-your-ssdf-evidence-in-an-afternoon 2026-10-19T05:51:48.652Z weekly 0.7 https://safeguard.sh/resources/blog/run-a-mock-customer-security-review-before-the-real-one 2026-10-19T05:51:48.769Z weekly 0.7 https://safeguard.sh/resources/blog/run-a-mock-sbom-security-review-with-your-team-in-45-minutes 2026-10-19T05:51:49.277Z weekly 0.7 https://safeguard.sh/resources/blog/run-a-platform-in-shadow-mode-beside-your-open-source-scanners 2026-10-19T05:51:49.394Z weekly 0.7 https://safeguard.sh/resources/blog/run-an-internal-security-newsletter-engineers-read 2026-10-19T05:51:49.506Z weekly 0.7 https://safeguard.sh/resources/blog/run-google-tag-manager-under-a-strict-csp 2026-10-19T05:51:49.619Z weekly 0.7 https://safeguard.sh/resources/blog/run-notebooks-in-ci-with-nbconvert-execute-what-to-lock-down 2026-10-19T05:51:49.729Z weekly 0.7 https://safeguard.sh/resources/blog/run-old-and-new-build-side-by-side-before-cutover 2026-10-19T05:51:49.841Z weekly 0.7 https://safeguard.sh/resources/blog/run-openssf-scorecard-on-your-repos-what-to-share 2026-10-19T05:51:49.944Z weekly 0.7 https://safeguard.sh/resources/blog/run-pip-check-after-upgrading-airflow-providers 2026-10-19T05:51:50.048Z weekly 0.7 https://safeguard.sh/resources/blog/run-security-scans-only-on-changed-paths-in-a-monorepo-pr 2026-10-19T05:51:50.150Z weekly 0.7 https://safeguard.sh/resources/blog/run-the-full-test-suite-for-a-patch-version-bump 2026-10-19T05:51:50.249Z weekly 0.7 https://safeguard.sh/resources/blog/runbook-vs-policy-vs-standard-vs-faq-which-security-document-to-write 2026-10-19T05:51:50.351Z weekly 0.7 https://safeguard.sh/resources/blog/runtime-version-drift-node-and-python-pins-that-hold 2026-10-19T05:51:50.461Z weekly 0.7 https://safeguard.sh/resources/blog/rust-handler-panics-catchpanic-layer-and-what-it-cannot-do 2026-10-19T05:51:50.579Z weekly 0.7 https://safeguard.sh/resources/blog/rust-remap-path-prefix-remove-build-paths-from-binaries 2026-10-19T05:51:50.696Z weekly 0.7 https://safeguard.sh/resources/blog/rust-secrecy-crate-what-it-protects-and-what-it-does-not 2026-10-19T05:51:50.806Z weekly 0.7 https://safeguard.sh/resources/blog/rust-sys-crates-links-key-native-libraries 2026-10-19T05:51:50.909Z weekly 0.7 https://safeguard.sh/resources/blog/rust-version-msrv-and-security-patches 2026-10-19T05:51:51.011Z weekly 0.7 https://safeguard.sh/resources/blog/s2c2f-maturity-levels-where-should-a-small-team-start 2026-10-19T05:51:51.111Z weekly 0.7 https://safeguard.sh/resources/blog/saas-and-tool-inventory-for-a-small-engineering-team 2026-10-19T05:51:51.216Z weekly 0.7 https://safeguard.sh/resources/blog/saas-or-on-prem-who-must-act-after-a-vendor-advisory 2026-10-19T05:51:51.328Z weekly 0.7 https://safeguard.sh/resources/blog/saas-or-self-hosted-dependency-scanning-which-fits 2026-10-19T05:51:51.443Z weekly 0.7 https://safeguard.sh/resources/blog/saas-private-vpc-on-prem-or-air-gapped-pick-by-data-class 2026-10-19T05:51:51.859Z weekly 0.7 https://safeguard.sh/resources/blog/safe-automation-of-dependency-fixes-ten-questions-answered 2026-10-19T05:51:52.838Z weekly 0.7 https://safeguard.sh/resources/blog/safe-default-page-size-for-api-list-endpoints 2026-10-19T05:51:52.947Z weekly 0.7 https://safeguard.sh/resources/blog/safe-defaults-for-new-api-keys-scope-and-expiry 2026-10-19T05:51:53.056Z weekly 0.7 https://safeguard.sh/resources/blog/safe-email-domains-for-test-data 2026-10-19T05:51:53.175Z weekly 0.7 https://safeguard.sh/resources/blog/safeguard-cli-local-agent-and-cloud-agent-what-each-is 2026-10-19T05:51:53.303Z weekly 0.7 https://safeguard.sh/resources/blog/safetensors-vs-pickle-which-model-format-should-you-load 2026-10-19T05:51:53.413Z weekly 0.7 https://safeguard.sh/resources/blog/same-cve-listed-many-times-in-sca-report 2026-10-19T05:51:53.522Z weekly 0.7 https://safeguard.sh/resources/blog/same-cve-three-servers-asset-context-worked-example 2026-10-19T05:51:53.636Z weekly 0.7 https://safeguard.sh/resources/blog/same-incident-twice-questions-to-ask-when-incidents-repeat 2026-10-19T05:51:53.745Z weekly 0.7 https://safeguard.sh/resources/blog/same-package-name-in-two-ecosystems-why-name-matches-mislead 2026-10-19T05:51:53.852Z weekly 0.7 https://safeguard.sh/resources/blog/same-service-different-versions-across-accounts-how-to-spot-drift 2026-10-19T05:51:53.998Z weekly 0.7 https://safeguard.sh/resources/blog/same-version-different-hash-in-an-sbom-diff-what-to-check 2026-10-19T05:51:54.121Z weekly 0.7 https://safeguard.sh/resources/blog/same-vulnerability-listed-twice-in-a-scan-aliases-and-deduplication 2026-10-19T05:51:54.232Z weekly 0.7 https://safeguard.sh/resources/blog/sample-vulnerability-exception-policy-clause-wording 2026-10-19T05:51:54.373Z weekly 0.7 https://safeguard.sh/resources/blog/sandbox-permissions-or-review-three-plugin-protections-compared 2026-10-19T05:51:54.487Z weekly 0.7 https://safeguard.sh/resources/blog/sandbox-to-live-go-live-security-checklist-for-saas-integrations 2026-10-19T05:51:56.574Z weekly 0.7 https://safeguard.sh/resources/blog/sanitize-html-in-react-with-dompurify-without-undoing-it 2026-10-19T05:51:56.684Z weekly 0.7 https://safeguard.sh/resources/blog/sap-security-patch-day-explained-what-operations-teams-should-do 2026-10-19T05:51:56.799Z weekly 0.7 https://safeguard.sh/resources/blog/sarif-baseline-state-new-unchanged-absent-trend-metrics 2026-10-19T05:51:56.898Z weekly 0.7 https://safeguard.sh/resources/blog/sarif-kind-and-level-what-to-count-in-security-metrics 2026-10-19T05:51:57.005Z weekly 0.7 https://safeguard.sh/resources/blog/save-exact-or-lockfile-which-one-pins-dependencies 2026-10-19T05:51:57.106Z weekly 0.7 https://safeguard.sh/resources/blog/say-what-the-security-check-did-not-scan 2026-10-19T05:51:57.209Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-alert-rules-who-should-be-told-when-a-new-advisory-hits 2026-10-19T05:51:57.311Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-diff-checklist-for-pull-request-review 2026-10-19T05:51:57.416Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-diff-for-a-hotfix-release-fast-review-rules 2026-10-19T05:51:57.522Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-diff-in-a-platform-or-a-script-what-a-useful-diff-reports 2026-10-19T05:51:57.910Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-diff-or-lockfile-diff-which-should-reviewers-read 2026-10-19T05:52:00.078Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-diff-shows-changes-when-nothing-changed-why 2026-10-19T05:52:00.394Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-drift-between-build-and-production-how-to-check 2026-10-19T05:52:00.506Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-drift-metrics-worth-tracking-without-vanity-numbers 2026-10-19T05:52:00.617Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-driven-incident-runbook-one-page-template 2026-10-19T05:52:00.722Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-driven-response-first-24-hours-timeline 2026-10-19T05:52:01.139Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-export-round-trip-test-does-your-platform-hand-your-data-back 2026-10-19T05:52:01.766Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-for-a-python-project-using-uv-pdm-or-conda 2026-10-19T05:52:03.238Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-for-research-software-cyclonedx-or-spdx 2026-10-19T05:52:03.343Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-governance-who-requests-stores-and-reviews-sboms 2026-10-19T05:52:03.453Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-hash-formats-spdx-checksum-vs-cyclonedx-hashes 2026-10-19T05:52:03.559Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-incident-drill-find-a-component-in-30-minutes 2026-10-19T05:52:03.658Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-lists-a-component-you-do-not-recognize-what-to-do 2026-10-19T05:52:03.752Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-main-component-type-application-library-or-firmware 2026-10-19T05:52:03.848Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-or-vex-which-to-attach-to-a-customer-security-review 2026-10-19T05:52:03.939Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-ownership-fields-product-team-owner-and-criticality 2026-10-19T05:52:04.032Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-per-environment-or-per-release-decision-guide 2026-10-19T05:52:04.124Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-platform-api-and-webhooks-what-to-check-before-you-integrate 2026-10-19T05:52:04.376Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-platform-exit-plan-how-to-keep-your-data-portable 2026-10-19T05:52:05.230Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-platform-roles-who-should-view-edit-approve-and-export 2026-10-19T05:52:06.143Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-says-fixed-version-but-scan-still-flags-it 2026-10-19T05:52:06.250Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-spreadsheet-columns-the-minimum-you-need-if-you-must-use-one 2026-10-19T05:52:06.352Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-spreadsheet-vs-platform-myths-and-facts 2026-10-19T05:52:06.470Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-story-for-a-saas-startup-with-nothing-to-download 2026-10-19T05:52:06.578Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-story-for-a-startup-with-ai-features-what-the-guidance-covers 2026-10-19T05:52:06.687Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-story-for-startups-that-ship-an-sdk-or-library 2026-10-19T05:52:06.794Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-story-for-startups-with-many-microservices-or-a-monorepo 2026-10-19T05:52:06.900Z weekly 0.7 https://safeguard.sh/resources/blog/sbom-vs-software-inventory-what-an-acquirer-wants 2026-10-19T05:52:07.005Z weekly 0.7 https://safeguard.sh/resources/blog/sca-build-fails-on-vulnerabilities-set-the-threshold 2026-10-19T05:52:07.114Z weekly 0.7 https://safeguard.sh/resources/blog/sca-manifest-and-lockfile-coverage-checklist-for-large-estates 2026-10-19T05:52:07.220Z weekly 0.7 https://safeguard.sh/resources/blog/sca-ownership-routing-codeowners-vs-service-catalog-vs-git-history 2026-10-19T05:52:07.337Z weekly 0.7 https://safeguard.sh/resources/blog/sca-report-coverage-check-did-it-scan-everything 2026-10-19T05:52:07.455Z weekly 0.7 https://safeguard.sh/resources/blog/sca-report-dependency-path-who-pulled-this-in 2026-10-19T05:52:07.573Z weekly 0.7 https://safeguard.sh/resources/blog/sca-report-evidence-for-auditors-and-customers 2026-10-19T05:52:07.695Z weekly 0.7 https://safeguard.sh/resources/blog/sca-report-release-go-no-go-checklist 2026-10-19T05:52:07.810Z weekly 0.7 https://safeguard.sh/resources/blog/sca-reports-for-executives-vs-engineering-teams-which-metrics 2026-10-19T05:52:08.943Z weekly 0.7 https://safeguard.sh/resources/blog/scan-a-legacy-monorepo-that-no-longer-builds 2026-10-19T05:52:09.399Z weekly 0.7 https://safeguard.sh/resources/blog/scan-conda-and-pip-environments-for-known-vulnerabilities 2026-10-19T05:52:09.504Z weekly 0.7 https://safeguard.sh/resources/blog/scan-exceptions-and-waivers-how-to-handle-them-by-team-size 2026-10-19T05:52:09.611Z weekly 0.7 https://safeguard.sh/resources/blog/scan-fork-pull-requests-without-secrets-two-workflow-pattern 2026-10-19T05:52:09.720Z weekly 0.7 https://safeguard.sh/resources/blog/scan-lists-a-package-you-do-not-use-remove-or-patch 2026-10-19T05:52:09.825Z weekly 0.7 https://safeguard.sh/resources/blog/scan-only-affected-bazel-targets-in-a-monorepo 2026-10-19T05:52:09.933Z weekly 0.7 https://safeguard.sh/resources/blog/scan-pull-requests-from-forks-without-exposing-secrets 2026-10-19T05:52:10.050Z weekly 0.7 https://safeguard.sh/resources/blog/scan-r-projects-for-vulnerable-packages-renv-lock 2026-10-19T05:52:10.177Z weekly 0.7 https://safeguard.sh/resources/blog/scan-results-changed-overnight-with-no-code-change-why 2026-10-19T05:52:10.301Z weekly 0.7 https://safeguard.sh/resources/blog/scan-serverless-functions-inside-a-static-site-repo 2026-10-19T05:52:10.410Z weekly 0.7 https://safeguard.sh/resources/blog/scan-the-built-output-or-the-source-repo-for-a-static-site 2026-10-19T05:52:10.522Z weekly 0.7 https://safeguard.sh/resources/blog/scan-the-merged-result-not-only-the-pull-request-branch 2026-10-19T05:52:10.639Z weekly 0.7 https://safeguard.sh/resources/blog/scan-the-same-sbom-with-a-second-tool-what-changes-and-what-does-not 2026-10-19T05:52:10.788Z weekly 0.7 https://safeguard.sh/resources/blog/scan-university-research-lab-software-for-vulnerabilities 2026-10-19T05:52:10.914Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-cannot-identify-a-component-what-happens-next 2026-10-19T05:52:11.032Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-comparison-spreadsheet-columns-to-use 2026-10-19T05:52:11.142Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-configuration-parity-checklist-for-comparisons 2026-10-19T05:52:11.250Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-demo-for-grc-and-finance-what-to-watch 2026-10-19T05:52:11.369Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-demo-scorecard-template-with-scoring-table 2026-10-19T05:52:11.475Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-does-not-support-your-ecosystem-three-workarounds 2026-10-19T05:52:11.594Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-output-questions-answered-in-one-line-faq 2026-10-19T05:52:11.694Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-project-is-active-but-its-data-is-stale-two-things-to-check 2026-10-19T05:52:11.790Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-shows-no-fixed-version-check-the-vendor-tracker-yourself 2026-10-19T05:52:11.898Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-still-flags-a-package-after-you-upgraded-it 2026-10-19T05:52:12.096Z weekly 0.7 https://safeguard.sh/resources/blog/scanner-update-created-hundreds-of-findings-bulk-exception-or-triage 2026-10-19T05:52:13.134Z weekly 0.7 https://safeguard.sh/resources/blog/scanning-distroless-and-scratch-images-where-findings-come-from 2026-10-19T05:52:13.233Z weekly 0.7 https://safeguard.sh/resources/blog/scanning-game-code-that-sits-next-to-console-sdks-under-nda 2026-10-19T05:52:13.331Z weekly 0.7 https://safeguard.sh/resources/blog/scanning-plan-for-100-plus-engineers-and-hundreds-of-repositories 2026-10-19T05:52:13.435Z weekly 0.7 https://safeguard.sh/resources/blog/scanning-plan-for-a-team-of-20-to-50-engineers 2026-10-19T05:52:13.539Z weekly 0.7 https://safeguard.sh/resources/blog/scanning-redis-kafka-and-rabbitmq-container-images-before-you-deploy 2026-10-19T05:52:13.637Z weekly 0.7 https://safeguard.sh/resources/blog/scanning-windows-container-images-what-to-ask 2026-10-19T05:52:13.734Z weekly 0.7 https://safeguard.sh/resources/blog/scheduled-github-workflow-that-opens-recurring-control-tickets 2026-10-19T05:52:13.832Z weekly 0.7 https://safeguard.sh/resources/blog/scheduled-github-workflows-stop-after-60-days-of-inactivity 2026-10-19T05:52:13.928Z weekly 0.7 https://safeguard.sh/resources/blog/scheduled-patch-releases-or-ship-security-fixes-when-ready 2026-10-19T05:52:14.023Z weekly 0.7 https://safeguard.sh/resources/blog/scheduled-security-scans-that-silently-stop-github-actions-gotchas 2026-10-19T05:52:14.121Z weekly 0.7 https://safeguard.sh/resources/blog/scheduled-tasks-in-an-ai-assistant-ten-questions-to-ask 2026-10-19T05:52:14.224Z weekly 0.7 https://safeguard.sh/resources/blog/scope-changes-in-an-sbom-diff-dev-dependency-reaches-runtime 2026-10-19T05:52:14.331Z weekly 0.7 https://safeguard.sh/resources/blog/scope-of-a-buyers-supply-chain-security-review 2026-10-19T05:52:14.432Z weekly 0.7 https://safeguard.sh/resources/blog/score-a-security-vendors-data-handling-answers-with-a-rubric 2026-10-19T05:52:14.529Z weekly 0.7 https://safeguard.sh/resources/blog/score-upgrade-candidates-with-a-simple-risk-and-effort-matrix 2026-10-19T05:52:14.630Z weekly 0.7 https://safeguard.sh/resources/blog/scoring-vendor-security-questionnaire-answers-by-evidence 2026-10-19T05:52:14.737Z weekly 0.7 https://safeguard.sh/resources/blog/screenshots-exports-or-logs-which-ssdf-evidence-holds-up 2026-10-19T05:52:14.835Z weekly 0.7 https://safeguard.sh/resources/blog/scrub-customer-data-from-bug-reports 2026-10-19T05:52:14.932Z weekly 0.7 https://safeguard.sh/resources/blog/sdk-approval-workflow-for-mobile-teams-five-steps 2026-10-19T05:52:15.026Z weekly 0.7 https://safeguard.sh/resources/blog/sdk-error-messages-what-never-to-include 2026-10-19T05:52:15.128Z weekly 0.7 https://safeguard.sh/resources/blog/sdk-inventory-myths-vs-facts-for-product-teams 2026-10-19T05:52:15.224Z weekly 0.7 https://safeguard.sh/resources/blog/sdk-logging-defaults-redact-by-default 2026-10-19T05:52:15.318Z weekly 0.7 https://safeguard.sh/resources/blog/sdk-retries-which-requests-are-safe-to-retry 2026-10-19T05:52:15.409Z weekly 0.7 https://safeguard.sh/resources/blog/sdk-risk-tiers-which-mobile-sdks-need-a-full-review 2026-10-19T05:52:15.503Z weekly 0.7 https://safeguard.sh/resources/blog/sdk-webhook-signature-helper-design 2026-10-19T05:52:15.594Z weekly 0.7 https://safeguard.sh/resources/blog/search-before-you-create-dedupe-tickets-from-security-automation 2026-10-19T05:52:15.696Z weekly 0.7 https://safeguard.sh/resources/blog/secret-scanning-alerts-and-audit-evidence-rotate-not-just-remove 2026-10-19T05:52:15.788Z weekly 0.7 https://safeguard.sh/resources/blog/secure-build-hooks-that-trigger-static-site-rebuilds 2026-10-19T05:52:15.882Z weekly 0.7 https://safeguard.sh/resources/blog/secure-by-design-principles-as-themes-for-a-first-year-roadmap 2026-10-19T05:52:15.985Z weekly 0.7 https://safeguard.sh/resources/blog/secure-defaults-for-ai-built-prototypes-deny-by-default 2026-10-19T05:52:16.079Z weekly 0.7 https://safeguard.sh/resources/blog/secure-defaults-for-new-container-repositories-templates 2026-10-19T05:52:16.169Z weekly 0.7 https://safeguard.sh/resources/blog/secure-npm-publish-access-for-soc-2-readiness 2026-10-19T05:52:16.263Z weekly 0.7 https://safeguard.sh/resources/blog/securing-the-package-mirror-admin-account-and-break-glass-access 2026-10-19T05:52:16.358Z weekly 0.7 https://safeguard.sh/resources/blog/security-acceptance-criteria-for-a-client-statement-of-work 2026-10-19T05:52:16.451Z weekly 0.7 https://safeguard.sh/resources/blog/security-acceptance-criteria-for-an-api-endpoint-examples 2026-10-19T05:52:16.542Z weekly 0.7 https://safeguard.sh/resources/blog/security-acceptance-test-before-go-live-for-commercial-software 2026-10-19T05:52:16.639Z weekly 0.7 https://safeguard.sh/resources/blog/security-ai-feature-scorecard-for-buyers-template 2026-10-19T05:52:16.739Z weekly 0.7 https://safeguard.sh/resources/blog/security-champion-in-a-pull-request-approve-or-escalate 2026-10-19T05:52:16.837Z weekly 0.7 https://safeguard.sh/resources/blog/security-comments-on-generated-and-vendored-code 2026-10-19T05:52:16.928Z weekly 0.7 https://safeguard.sh/resources/blog/security-debt-vs-tech-debt-what-is-the-difference 2026-10-19T05:52:17.029Z weekly 0.7 https://safeguard.sh/resources/blog/security-decision-log-for-a-small-engineering-team 2026-10-19T05:52:17.134Z weekly 0.7 https://safeguard.sh/resources/blog/security-definer-function-search-path-postgresql 2026-10-19T05:52:17.247Z weekly 0.7 https://safeguard.sh/resources/blog/security-design-review-of-a-plugin-ecosystem-in-60-minutes 2026-10-19T05:52:17.344Z weekly 0.7 https://safeguard.sh/resources/blog/security-documentation-vs-evidence-what-auditors-want-from-your-docs 2026-10-19T05:52:17.438Z weekly 0.7 https://safeguard.sh/resources/blog/security-drills-for-on-call-engineers 2026-10-19T05:52:17.529Z weekly 0.7 https://safeguard.sh/resources/blog/security-fix-only-in-a-new-major-backport-or-jump 2026-10-19T05:52:17.733Z weekly 0.7 https://safeguard.sh/resources/blog/security-fix-service-levels-for-an-internal-library-by-severity 2026-10-19T05:52:18.415Z weekly 0.7 https://safeguard.sh/resources/blog/security-headers-rollout-order-low-risk-to-high-risk 2026-10-19T05:52:18.527Z weekly 0.7 https://safeguard.sh/resources/blog/security-jargon-translated-to-plain-words-twelve-terms 2026-10-19T05:52:18.622Z weekly 0.7 https://safeguard.sh/resources/blog/security-kickoff-agenda-for-a-new-project-15-minutes 2026-10-19T05:52:18.715Z weekly 0.7 https://safeguard.sh/resources/blog/security-news-vocabulary-advisory-bulletin-notice-release-note 2026-10-19T05:52:18.809Z weekly 0.7 https://safeguard.sh/resources/blog/security-patch-or-full-upgrade-which-should-you-take 2026-10-19T05:52:18.906Z weekly 0.7 https://safeguard.sh/resources/blog/security-program-first-quarter-deliverables-20-to-200-engineers 2026-10-19T05:52:19.001Z weekly 0.7 https://safeguard.sh/resources/blog/security-program-fourth-quarter-review-and-year-two-plan 2026-10-19T05:52:19.109Z weekly 0.7 https://safeguard.sh/resources/blog/security-program-second-quarter-ci-controls-and-fix-routine 2026-10-19T05:52:19.221Z weekly 0.7 https://safeguard.sh/resources/blog/security-program-third-quarter-incident-readiness-and-customer-proof 2026-10-19T05:52:19.317Z weekly 0.7 https://safeguard.sh/resources/blog/security-questions-for-a-departing-developers-exit-conversation 2026-10-19T05:52:19.410Z weekly 0.7 https://safeguard.sh/resources/blog/security-questions-for-a-pull-request-template 2026-10-19T05:52:19.503Z weekly 0.7 https://safeguard.sh/resources/blog/security-questions-for-every-sprint-retrospective 2026-10-19T05:52:19.595Z weekly 0.7 https://safeguard.sh/resources/blog/security-review-comment-template-finding-impact-fix 2026-10-19T05:52:19.693Z weekly 0.7 https://safeguard.sh/resources/blog/security-review-of-a-scanner-before-pointing-it-at-your-monorepo 2026-10-19T05:52:19.789Z weekly 0.7 https://safeguard.sh/resources/blog/security-says-override-dev-says-it-will-break-what-now 2026-10-19T05:52:19.892Z weekly 0.7 https://safeguard.sh/resources/blog/security-says-upgrade-platform-says-wait-how-to-break-the-standoff 2026-10-19T05:52:19.997Z weekly 0.7 https://safeguard.sh/resources/blog/security-scan-time-average-or-percentile-which-to-report 2026-10-19T05:52:20.090Z weekly 0.7 https://safeguard.sh/resources/blog/security-scanning-plan-for-a-solo-developer-or-two-person-startup 2026-10-19T05:52:20.182Z weekly 0.7 https://safeguard.sh/resources/blog/security-teamwork-myths-vs-facts-security-platform-compliance 2026-10-19T05:52:20.276Z weekly 0.7 https://safeguard.sh/resources/blog/security-testing-an-internal-tool-behind-a-vpn 2026-10-19T05:52:20.370Z weekly 0.7 https://safeguard.sh/resources/blog/security-testing-for-open-source-library-maintainers 2026-10-19T05:52:20.464Z weekly 0.7 https://safeguard.sh/resources/blog/security-testing-stack-by-engineering-team-size 2026-10-19T05:52:20.562Z weekly 0.7 https://safeguard.sh/resources/blog/security-tool-trial-myths-vs-facts 2026-10-19T05:52:20.667Z weekly 0.7 https://safeguard.sh/resources/blog/security-tooling-categories-for-5-to-20-engineers 2026-10-19T05:52:20.772Z weekly 0.7 https://safeguard.sh/resources/blog/security-training-for-ai-agent-and-llm-app-builders 2026-10-19T05:52:20.872Z weekly 0.7 https://safeguard.sh/resources/blog/security-training-for-api-developers-what-to-cover 2026-10-19T05:52:20.964Z weekly 0.7 https://safeguard.sh/resources/blog/security-training-for-data-and-ml-engineers 2026-10-19T05:52:21.069Z weekly 0.7 https://safeguard.sh/resources/blog/security-training-for-devops-and-platform-engineers 2026-10-19T05:52:21.160Z weekly 0.7 https://safeguard.sh/resources/blog/security-training-for-engineering-managers-what-they-need 2026-10-19T05:52:21.253Z weekly 0.7 https://safeguard.sh/resources/blog/security-training-for-frontend-developers-topics 2026-10-19T05:52:21.345Z weekly 0.7 https://safeguard.sh/resources/blog/security-training-for-infrastructure-as-code-authors 2026-10-19T05:52:21.446Z weekly 0.7 https://safeguard.sh/resources/blog/security-training-for-mobile-developers-what-to-teach 2026-10-19T05:52:21.547Z weekly 0.7 https://safeguard.sh/resources/blog/security-training-for-qa-and-test-engineers 2026-10-19T05:52:21.656Z weekly 0.7 https://safeguard.sh/resources/blog/security-training-metrics-to-stop-tracking 2026-10-19T05:52:21.779Z weekly 0.7 https://safeguard.sh/resources/blog/security-txt-and-security-md-for-sdk-repos 2026-10-19T05:52:21.884Z weekly 0.7 https://safeguard.sh/resources/blog/security-txt-expires-field-what-it-means-and-how-to-set-it 2026-10-19T05:52:21.981Z weekly 0.7 https://safeguard.sh/resources/blog/security-txt-not-found-hosting-checklist-well-known-path 2026-10-19T05:52:22.088Z weekly 0.7 https://safeguard.sh/resources/blog/security-txt-optional-fields-policy-acknowledgments-languages 2026-10-19T05:52:22.185Z weekly 0.7 https://safeguard.sh/resources/blog/security-txt-signing-and-canonical-field-explained 2026-10-19T05:52:22.282Z weekly 0.7 https://safeguard.sh/resources/blog/security-vendor-data-handling-red-flags-and-better-answers 2026-10-19T05:52:22.386Z weekly 0.7 https://safeguard.sh/resources/blog/see-an-epss-score-on-a-past-date-api-and-archive 2026-10-19T05:52:22.491Z weekly 0.7 https://safeguard.sh/resources/blog/seed-fake-test-data-so-failures-reproduce-with-faker 2026-10-19T05:52:22.597Z weekly 0.7 https://safeguard.sh/resources/blog/seed-script-staging-fake-data-reproducible 2026-10-19T05:52:22.708Z weekly 0.7 https://safeguard.sh/resources/blog/self-hosted-mac-runner-keychain-and-profile-cleanup-checklist 2026-10-19T05:52:22.858Z weekly 0.7 https://safeguard.sh/resources/blog/self-hosted-nx-remote-cache-security-checklist 2026-10-19T05:52:22.950Z weekly 0.7 https://safeguard.sh/resources/blog/self-hosted-or-vendor-hosted-agent-sandbox-who-owns-isolation 2026-10-19T05:52:23.045Z weekly 0.7 https://safeguard.sh/resources/blog/self-service-dependency-security-in-a-platform-what-it-means 2026-10-19T05:52:23.137Z weekly 0.7 https://safeguard.sh/resources/blog/self-signed-code-signing-certificate-when-is-it-acceptable 2026-10-19T05:52:23.229Z weekly 0.7 https://safeguard.sh/resources/blog/semver-or-calver-for-a-python-library-how-to-choose 2026-10-19T05:52:23.325Z weekly 0.7 https://safeguard.sh/resources/blog/send-a-correction-when-an-old-questionnaire-answer-is-now-wrong 2026-10-19T05:52:24.064Z weekly 0.7 https://safeguard.sh/resources/blog/sending-webhooks-safely-provider-side-checklist 2026-10-19T05:52:24.734Z weekly 0.7 https://safeguard.sh/resources/blog/sent-one-customers-security-evidence-to-another-what-to-do 2026-10-19T05:52:24.841Z weekly 0.7 https://safeguard.sh/resources/blog/separate-database-migration-role-from-app-role 2026-10-19T05:52:24.935Z weekly 0.7 https://safeguard.sh/resources/blog/separate-transactional-and-marketing-email-streams 2026-10-19T05:52:25.031Z weekly 0.7 https://safeguard.sh/resources/blog/separating-sboms-by-business-unit-and-customer-in-one-platform 2026-10-19T05:52:25.129Z weekly 0.7 https://safeguard.sh/resources/blog/separation-of-duties-in-a-ten-person-fintech-who-holds-which-access 2026-10-19T05:52:25.225Z weekly 0.7 https://safeguard.sh/resources/blog/separation-of-duties-in-patch-approval-and-deployment 2026-10-19T05:52:25.317Z weekly 0.7 https://safeguard.sh/resources/blog/sequelize-replacements-vs-bind-parameters 2026-10-19T05:52:25.407Z weekly 0.7 https://safeguard.sh/resources/blog/serverless-and-edge-dependency-security-faq 2026-10-19T05:52:25.500Z weekly 0.7 https://safeguard.sh/resources/blog/service-containers-in-ci-what-security-questions-to-ask 2026-10-19T05:52:25.597Z weekly 0.7 https://safeguard.sh/resources/blog/service-levels-for-license-findings-by-tier 2026-10-19T05:52:25.690Z weekly 0.7 https://safeguard.sh/resources/blog/session-cookie-vs-persistent-cookie-expires-max-age 2026-10-19T05:52:25.784Z weekly 0.7 https://safeguard.sh/resources/blog/set-a-personal-access-token-policy-for-your-github-org 2026-10-19T05:52:25.875Z weekly 0.7 https://safeguard.sh/resources/blog/set-a-rollback-time-budget-for-dependency-fixes 2026-10-19T05:52:25.966Z weekly 0.7 https://safeguard.sh/resources/blog/set-an-alert-budget-how-many-security-alerts-is-too-many 2026-10-19T05:52:26.057Z weekly 0.7 https://safeguard.sh/resources/blog/set-local-vs-set-tenant-context-with-connection-pools 2026-10-19T05:52:26.150Z weekly 0.7 https://safeguard.sh/resources/blog/set-quarterly-vulnerability-targets-without-encouraging-gaming 2026-10-19T05:52:26.245Z weekly 0.7 https://safeguard.sh/resources/blog/set-vulnerability-targets-without-outside-benchmarks 2026-10-19T05:52:26.343Z weekly 0.7 https://safeguard.sh/resources/blog/seven-day-watch-plan-for-an-ios-phased-release-of-an-sdk-update 2026-10-19T05:52:26.438Z weekly 0.7 https://safeguard.sh/resources/blog/seven-epss-misuses-myth-versus-fact 2026-10-19T05:52:26.533Z weekly 0.7 https://safeguard.sh/resources/blog/seven-places-an-infrastructure-repo-hides-dependencies 2026-10-19T05:52:26.635Z weekly 0.7 https://safeguard.sh/resources/blog/severity-labels-developers-trust-map-labels-to-actions 2026-10-19T05:52:26.745Z weekly 0.7 https://safeguard.sh/resources/blog/severity-vs-priority-in-a-security-bug-ticket-who-decides 2026-10-19T05:52:26.843Z weekly 0.7 https://safeguard.sh/resources/blog/sha-256-or-sha-3-which-hash-should-app-developers-use 2026-10-19T05:52:26.948Z weekly 0.7 https://safeguard.sh/resources/blog/shaded-jar-license-and-notice-files-in-maven 2026-10-19T05:52:27.043Z weekly 0.7 https://safeguard.sh/resources/blog/share-a-90-day-supply-chain-roadmap-with-a-buyer 2026-10-19T05:52:27.137Z weekly 0.7 https://safeguard.sh/resources/blog/share-a-model-cache-between-ci-jobs-without-sharing-your-token 2026-10-19T05:52:27.227Z weekly 0.7 https://safeguard.sh/resources/blog/share-one-renovate-config-across-many-repos-with-presets 2026-10-19T05:52:27.317Z weekly 0.7 https://safeguard.sh/resources/blog/share-security-evidence-with-a-customers-auditor-or-consultant 2026-10-19T05:52:27.411Z weekly 0.7 https://safeguard.sh/resources/blog/shared-component-library-across-client-sites-supply-chain-risk 2026-10-19T05:52:27.504Z weekly 0.7 https://safeguard.sh/resources/blog/shared-credential-or-per-user-sign-in-for-an-mcp-connector 2026-10-19T05:52:27.595Z weekly 0.7 https://safeguard.sh/resources/blog/shared-library-with-one-maintainer-bus-factor-plan 2026-10-19T05:52:27.693Z weekly 0.7 https://safeguard.sh/resources/blog/shared-tables-schemas-or-databases-for-tenant-isolation 2026-10-19T05:52:27.787Z weekly 0.7 https://safeguard.sh/resources/blog/sharedarraybuffer-undefined-cross-origin-isolation-checklist 2026-10-19T05:52:27.891Z weekly 0.7 https://safeguard.sh/resources/blog/shell-completion-scripts-from-your-cli-are-code-the-shell-runs 2026-10-19T05:52:27.985Z weekly 0.7 https://safeguard.sh/resources/blog/shelve-and-dbm-caches-are-pickle-what-to-use-for-pipeline-state 2026-10-19T05:52:29.139Z weekly 0.7 https://safeguard.sh/resources/blog/shift-down-vs-shift-left-what-platform-engineering-means-for-security 2026-10-19T05:52:29.727Z weekly 0.7 https://safeguard.sh/resources/blog/short-lived-ssh-certificates-for-contractor-git-access 2026-10-19T05:52:29.821Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-bot-be-allowed-to-close-security-tickets 2026-10-19T05:52:29.923Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-cli-check-for-updates-on-every-run-ci-offline-rules 2026-10-19T05:52:30.017Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-container-sbom-include-build-stages-or-only-the-final-image 2026-10-19T05:52:30.110Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-free-security-scanner-go-through-the-same-school-approval 2026-10-19T05:52:30.203Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-health-app-send-errors-to-a-third-party-tracker 2026-10-19T05:52:30.292Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-known-exploited-listing-change-a-vendors-response-priority 2026-10-19T05:52:30.387Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-legacy-system-have-internet-access-egress-rules 2026-10-19T05:52:30.479Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-new-component-fail-the-release-sbom-gate 2026-10-19T05:52:30.571Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-plugin-marketplace-ban-obfuscated-and-minified-code 2026-10-19T05:52:30.661Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-provenance-verifier-ignore-or-reject-unknown-fields 2026-10-19T05:52:30.755Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-quickstart-and-a-production-guide-be-separate-pages 2026-10-19T05:52:30.850Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-reachable-vulnerability-block-a-new-dependency 2026-10-19T05:52:30.944Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-revert-pull-request-go-through-the-security-gate 2026-10-19T05:52:31.038Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-roadmap-feature-depend-on-a-0-x-library 2026-10-19T05:52:31.131Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-rust-service-commit-cargo-lock 2026-10-19T05:52:31.227Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-scanner-outage-block-pull-requests-fail-open-or-closed 2026-10-19T05:52:31.317Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-security-bot-reply-to-developers-in-the-thread 2026-10-19T05:52:31.411Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-security-bot-stay-silent-when-the-check-passes 2026-10-19T05:52:31.515Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-security-bug-be-a-confidential-issue-in-your-tracker 2026-10-19T05:52:32.895Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-security-check-failure-stop-the-line 2026-10-19T05:52:33.262Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-security-fix-commit-say-it-is-a-security-fix 2026-10-19T05:52:33.358Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-security-fix-ship-as-a-patch-release 2026-10-19T05:52:33.453Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-security-scan-block-the-pull-request-or-only-comment 2026-10-19T05:52:33.543Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-shared-terraform-module-contain-provider-blocks 2026-10-19T05:52:33.637Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-single-page-app-keep-session-tokens-in-localstorage 2026-10-19T05:52:33.729Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-small-team-use-self-hosted-ci-runners 2026-10-19T05:52:33.820Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-small-team-vendor-its-dependencies 2026-10-19T05:52:33.914Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-team-share-one-jupyter-notebook-signatures-database 2026-10-19T05:52:34.007Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-team-standardize-on-one-language-to-cut-dependency-risk 2026-10-19T05:52:34.097Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-tutorial-add-a-dependency-for-five-lines-of-code 2026-10-19T05:52:34.189Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-vendor-rescore-a-cve-for-its-own-product 2026-10-19T05:52:34.279Z weekly 0.7 https://safeguard.sh/resources/blog/should-a-wifi-or-bluetooth-module-blob-be-in-your-sbom 2026-10-19T05:52:34.372Z weekly 0.7 https://safeguard.sh/resources/blog/should-agency-staff-use-mfa-on-client-dashboards 2026-10-19T05:52:34.464Z weekly 0.7 https://safeguard.sh/resources/blog/should-ai-agent-approvals-expire 2026-10-19T05:52:34.555Z weekly 0.7 https://safeguard.sh/resources/blog/should-ai-agent-read-tools-and-write-tools-live-on-separate-servers 2026-10-19T05:52:34.644Z weekly 0.7 https://safeguard.sh/resources/blog/should-ai-coding-agents-start-from-golden-path-templates 2026-10-19T05:52:34.744Z weekly 0.7 https://safeguard.sh/resources/blog/should-ai-written-fix-prs-ever-auto-merge 2026-10-19T05:52:34.836Z weekly 0.7 https://safeguard.sh/resources/blog/should-airflow-workers-reach-pypi-at-task-run-time 2026-10-19T05:52:34.936Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-agency-fork-an-open-source-package-for-a-client 2026-10-19T05:52:35.918Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-agency-turn-on-wordpress-plugin-auto-updates 2026-10-19T05:52:36.248Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-ai-agent-be-allowed-to-suppress-findings 2026-10-19T05:52:36.345Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-ai-prototype-have-an-expiry-date 2026-10-19T05:52:36.444Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-api-return-403-or-404-for-another-tenants-object 2026-10-19T05:52:36.554Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-artifact-bucket-use-versioning-or-object-lock 2026-10-19T05:52:36.656Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-auditor-worry-if-you-have-zero-vulnerability-exceptions 2026-10-19T05:52:36.760Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-internal-developer-tool-auto-update 2026-10-19T05:52:36.861Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-llm-see-your-sbom 2026-10-19T05:52:36.962Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-open-source-library-commit-a-lockfile 2026-10-19T05:52:37.055Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-sbom-keep-the-dependency-graph-or-just-a-flat-list 2026-10-19T05:52:37.162Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-sdk-forward-credentials-on-redirects 2026-10-19T05:52:37.273Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-sdk-have-zero-dependencies 2026-10-19T05:52:37.395Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-sdk-let-users-disable-tls-verification 2026-10-19T05:52:37.514Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-sdk-send-api-keys-in-the-url 2026-10-19T05:52:37.625Z weekly 0.7 https://safeguard.sh/resources/blog/should-an-update-tool-refresh-your-lockfile-on-a-schedule 2026-10-19T05:52:37.748Z weekly 0.7 https://safeguard.sh/resources/blog/should-bot-dependency-updates-auto-merge-under-soc-2 2026-10-19T05:52:38.021Z weekly 0.7 https://safeguard.sh/resources/blog/should-ci-be-able-to-release-your-mobile-app-to-production 2026-10-19T05:52:38.925Z weekly 0.7 https://safeguard.sh/resources/blog/should-ci-deploy-with-stored-cloud-keys-or-oidc-for-payments 2026-10-19T05:52:39.034Z weekly 0.7 https://safeguard.sh/resources/blog/should-ci-fall-back-to-the-public-registry-when-the-mirror-is-down 2026-10-19T05:52:39.144Z weekly 0.7 https://safeguard.sh/resources/blog/should-ci-job-containers-run-as-root 2026-10-19T05:52:39.245Z weekly 0.7 https://safeguard.sh/resources/blog/should-ci-job-pods-mount-a-kubernetes-service-account-token 2026-10-19T05:52:39.347Z weekly 0.7 https://safeguard.sh/resources/blog/should-ci-pods-have-cpu-and-memory-limits 2026-10-19T05:52:39.450Z weekly 0.7 https://safeguard.sh/resources/blog/should-ci-tools-be-baked-into-the-runner-image-or-downloaded 2026-10-19T05:52:39.554Z weekly 0.7 https://safeguard.sh/resources/blog/should-ci-use-pip-install-editable-or-a-regular-install 2026-10-19T05:52:39.656Z weekly 0.7 https://safeguard.sh/resources/blog/should-coding-agents-run-in-ci-or-on-laptops 2026-10-19T05:52:39.760Z weekly 0.7 https://safeguard.sh/resources/blog/should-contractors-work-from-forks-or-branches 2026-10-19T05:52:39.863Z weekly 0.7 https://safeguard.sh/resources/blog/should-dependency-intake-block-install-scripts 2026-10-19T05:52:39.964Z weekly 0.7 https://safeguard.sh/resources/blog/should-dependency-scans-fail-the-build-or-only-warn 2026-10-19T05:52:40.065Z weekly 0.7 https://safeguard.sh/resources/blog/should-deploy-gate-require-sbom-or-attestation 2026-10-19T05:52:40.172Z weekly 0.7 https://safeguard.sh/resources/blog/should-dev-and-prod-get-the-same-vulnerability-sla 2026-10-19T05:52:40.272Z weekly 0.7 https://safeguard.sh/resources/blog/should-developer-laptops-use-the-package-mirror 2026-10-19T05:52:40.373Z weekly 0.7 https://safeguard.sh/resources/blog/should-developers-travel-with-production-access-decision-guide 2026-10-19T05:52:40.475Z weekly 0.7 https://safeguard.sh/resources/blog/should-developers-use-a-separate-browser-profile-for-work 2026-10-19T05:52:40.579Z weekly 0.7 https://safeguard.sh/resources/blog/should-docs-examples-use-example-com-and-test-net-addresses 2026-10-19T05:52:40.683Z weekly 0.7 https://safeguard.sh/resources/blog/should-encryption-keys-be-stored-apart-from-the-data 2026-10-19T05:52:40.787Z weekly 0.7 https://safeguard.sh/resources/blog/should-engineers-turn-on-lockdown-mode-for-travel 2026-10-19T05:52:40.892Z weekly 0.7 https://safeguard.sh/resources/blog/should-ephemeral-ci-runners-keep-a-warm-pool 2026-10-19T05:52:40.993Z weekly 0.7 https://safeguard.sh/resources/blog/should-every-ai-agent-have-its-own-identity 2026-10-19T05:52:41.098Z weekly 0.7 https://safeguard.sh/resources/blog/should-every-ci-pipeline-share-one-registry-read-token 2026-10-19T05:52:41.198Z weekly 0.7 https://safeguard.sh/resources/blog/should-fix-pr-approvals-happen-in-chat 2026-10-19T05:52:41.300Z weekly 0.7 https://safeguard.sh/resources/blog/should-github-actions-be-allowed-to-approve-pull-requests 2026-10-19T05:52:41.403Z weekly 0.7 https://safeguard.sh/resources/blog/should-health-check-endpoints-be-public-liveness-readiness 2026-10-19T05:52:41.507Z weekly 0.7 https://safeguard.sh/resources/blog/should-i-run-npm-install-with-ignore-scripts-on-a-laptop 2026-10-19T05:52:41.624Z weekly 0.7 https://safeguard.sh/resources/blog/should-individual-developers-get-a-security-score 2026-10-19T05:52:41.738Z weekly 0.7 https://safeguard.sh/resources/blog/should-library-maintainers-pin-dependencies-or-use-ranges 2026-10-19T05:52:41.842Z weekly 0.7 https://safeguard.sh/resources/blog/should-marketing-use-custom-html-tags-in-a-tag-manager 2026-10-19T05:52:41.946Z weekly 0.7 https://safeguard.sh/resources/blog/should-new-hires-get-temporary-credentials-from-day-one 2026-10-19T05:52:42.055Z weekly 0.7 https://safeguard.sh/resources/blog/should-one-ci-role-build-test-and-deploy 2026-10-19T05:52:42.158Z weekly 0.7 https://safeguard.sh/resources/blog/should-os-and-dependency-patches-share-one-sla 2026-10-19T05:52:42.264Z weekly 0.7 https://safeguard.sh/resources/blog/should-partners-share-one-api-key-or-get-one-each 2026-10-19T05:52:42.367Z weekly 0.7 https://safeguard.sh/resources/blog/should-preview-deployments-of-a-static-site-be-public 2026-10-19T05:52:42.472Z weekly 0.7 https://safeguard.sh/resources/blog/should-product-email-use-a-separate-sending-subdomain 2026-10-19T05:52:42.585Z weekly 0.7 https://safeguard.sh/resources/blog/should-production-depend-on-a-preview-or-beta-api-from-a-vendor 2026-10-19T05:52:42.705Z weekly 0.7 https://safeguard.sh/resources/blog/should-public-repository-pull-requests-run-on-self-hosted-runners 2026-10-19T05:52:43.139Z weekly 0.7 https://safeguard.sh/resources/blog/should-pull-request-workflows-get-cloud-credentials 2026-10-19T05:52:43.304Z weekly 0.7 https://safeguard.sh/resources/blog/should-reachability-decide-which-fixes-get-automated 2026-10-19T05:52:43.407Z weekly 0.7 https://safeguard.sh/resources/blog/should-research-mode-be-allowed-to-call-security-connector-tools 2026-10-19T05:52:43.515Z weekly 0.7 https://safeguard.sh/resources/blog/should-rust-libraries-commit-cargo-lock 2026-10-19T05:52:43.793Z weekly 0.7 https://safeguard.sh/resources/blog/should-sample-code-disable-tls-verification 2026-10-19T05:52:43.898Z weekly 0.7 https://safeguard.sh/resources/blog/should-sdk-telemetry-be-opt-in 2026-10-19T05:52:44.001Z weekly 0.7 https://safeguard.sh/resources/blog/should-secure-coding-training-be-mandatory-or-opt-in 2026-10-19T05:52:44.106Z weekly 0.7 https://safeguard.sh/resources/blog/should-security-checks-be-default-on-or-opt-in 2026-10-19T05:52:44.210Z weekly 0.7 https://safeguard.sh/resources/blog/should-security-fixes-count-toward-team-velocity 2026-10-19T05:52:44.318Z weekly 0.7 https://safeguard.sh/resources/blog/should-security-fixes-wait-for-the-release-train 2026-10-19T05:52:44.420Z weekly 0.7 https://safeguard.sh/resources/blog/should-security-standards-use-must-and-should-rfc-2119-explained 2026-10-19T05:52:44.522Z weekly 0.7 https://safeguard.sh/resources/blog/should-servers-install-security-updates-automatically-decision-guide 2026-10-19T05:52:44.626Z weekly 0.7 https://safeguard.sh/resources/blog/should-staging-and-production-share-any-keys-in-a-fintech-app 2026-10-19T05:52:44.733Z weekly 0.7 https://safeguard.sh/resources/blog/should-stars-and-downloads-decide-your-dependency-choice 2026-10-19T05:52:44.844Z weekly 0.7 https://safeguard.sh/resources/blog/should-suppressed-and-accepted-vulnerabilities-be-counted 2026-10-19T05:52:44.946Z weekly 0.7 https://safeguard.sh/resources/blog/should-suppression-expiry-depend-on-the-reason 2026-10-19T05:52:45.051Z weekly 0.7 https://safeguard.sh/resources/blog/should-swagger-ui-be-exposed-in-production 2026-10-19T05:52:45.155Z weekly 0.7 https://safeguard.sh/resources/blog/should-teams-be-ranked-on-a-security-leaderboard 2026-10-19T05:52:45.257Z weekly 0.7 https://safeguard.sh/resources/blog/should-tenant-id-come-from-the-jwt-header-or-url 2026-10-19T05:52:45.364Z weekly 0.7 https://safeguard.sh/resources/blog/should-the-bootloader-be-listed-in-a-firmware-sbom 2026-10-19T05:52:45.466Z weekly 0.7 https://safeguard.sh/resources/blog/should-the-fix-bot-be-on-the-branch-protection-bypass-list 2026-10-19T05:52:45.569Z weekly 0.7 https://safeguard.sh/resources/blog/should-the-vendor-run-your-security-tool-trial-for-you 2026-10-19T05:52:45.672Z weekly 0.7 https://safeguard.sh/resources/blog/should-the-vendor-see-your-repo-before-a-scanner-demo 2026-10-19T05:52:45.778Z weekly 0.7 https://safeguard.sh/resources/blog/should-third-party-embeds-on-product-pages-get-an-iframe-allow-list 2026-10-19T05:52:45.883Z weekly 0.7 https://safeguard.sh/resources/blog/should-tutorials-pin-dependency-versions 2026-10-19T05:52:45.989Z weekly 0.7 https://safeguard.sh/resources/blog/should-two-teams-run-the-same-dependency-scanning-poc 2026-10-19T05:52:46.092Z weekly 0.7 https://safeguard.sh/resources/blog/should-update-tools-split-minor-and-patch-updates-into-separate-prs 2026-10-19T05:52:46.197Z weekly 0.7 https://safeguard.sh/resources/blog/should-vendor-updates-install-automatically-in-your-environment 2026-10-19T05:52:46.299Z weekly 0.7 https://safeguard.sh/resources/blog/should-volunteers-turn-on-automatic-updates 2026-10-19T05:52:46.407Z weekly 0.7 https://safeguard.sh/resources/blog/should-vulnerability-alert-dismissal-need-approval 2026-10-19T05:52:46.521Z weekly 0.7 https://safeguard.sh/resources/blog/should-vulnerability-fixes-be-batched-or-one-pull-request-per-cve 2026-10-19T05:52:46.624Z weekly 0.7 https://safeguard.sh/resources/blog/should-we-ban-shadow-ai-or-run-an-amnesty-decision-guide 2026-10-19T05:52:46.731Z weekly 0.7 https://safeguard.sh/resources/blog/should-we-open-source-an-internal-project-a-decision-guide 2026-10-19T05:52:46.836Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-accept-an-ai-fix-for-an-unreachable-vulnerability 2026-10-19T05:52:46.942Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-add-scanners-before-you-have-fix-capacity 2026-10-19T05:52:47.047Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-adopt-the-code-scanning-starter-workflow 2026-10-19T05:52:47.150Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-assign-vulnerability-alerts-to-an-ai-agent 2026-10-19T05:52:47.259Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-auto-update-vs-code-extensions 2026-10-19T05:52:47.391Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-cap-the-number-of-security-exceptions-teams-can-request 2026-10-19T05:52:47.859Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-commit-the-cocoapods-pods-directory-for-ci 2026-10-19T05:52:47.978Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-enable-delete-on-a-docker-registry 2026-10-19T05:52:48.083Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-encrypt-passwords-or-hash-them 2026-10-19T05:52:48.189Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-flatten-your-spf-record 2026-10-19T05:52:48.301Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-fork-a-dependency-when-upstream-is-slow-to-fix 2026-10-19T05:52:48.408Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-fork-a-third-party-github-action-and-use-your-fork 2026-10-19T05:52:48.517Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-freeze-dependency-updates-during-exams-and-enrollment 2026-10-19T05:52:48.623Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-install-github-cli-extensions 2026-10-19T05:52:48.726Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-load-prompts-from-a-database-or-keep-them-in-the-build 2026-10-19T05:52:48.835Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-log-an-ai-agents-reasoning-text 2026-10-19T05:52:48.950Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-merge-a-security-fix-on-friday-or-wait 2026-10-19T05:52:49.059Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-move-wp-config-php-above-the-web-root 2026-10-19T05:52:49.164Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-notify-customers-when-your-shared-sbom-changes 2026-10-19T05:52:49.267Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-offer-an-sbom-before-a-customer-asks 2026-10-19T05:52:49.367Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-patch-the-monolith-or-wait-for-the-rewrite 2026-10-19T05:52:49.476Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-pay-developers-per-vulnerability-fixed 2026-10-19T05:52:49.584Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-pin-build-tools-to-exact-versions-or-use-caret-ranges 2026-10-19T05:52:49.687Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-pin-scanner-and-database-versions 2026-10-19T05:52:49.792Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-pin-the-api-version-of-a-saas-integration 2026-10-19T05:52:49.898Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-rank-developers-by-vulnerabilities-introduced 2026-10-19T05:52:50.008Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-rank-teams-by-vulnerability-counts 2026-10-19T05:52:50.109Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-request-a-cve-id-for-a-reported-vulnerability 2026-10-19T05:52:50.214Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-require-signed-commits-from-contractors 2026-10-19T05:52:50.316Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-rescan-a-build-that-shipped-last-year 2026-10-19T05:52:50.427Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-restrict-addon-types-themes-dictionaries 2026-10-19T05:52:50.540Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-run-a-security-hardening-sprint 2026-10-19T05:52:50.643Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-run-two-dependency-scanners-on-purpose-a-decision-guide 2026-10-19T05:52:50.743Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-send-customers-a-full-pentest-report-or-a-summary 2026-10-19T05:52:50.846Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-set-conda-ssl-verify-to-false-behind-a-proxy 2026-10-19T05:52:50.937Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-show-an-auditor-a-working-exploit 2026-10-19T05:52:51.028Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-suppress-all-low-severity-dependency-findings 2026-10-19T05:52:51.123Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-switch-to-six-day-lets-encrypt-certificates 2026-10-19T05:52:51.222Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-test-the-optional-preview-update-before-patch-tuesday 2026-10-19T05:52:51.336Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-tick-expose-daemon-on-tcp-2375-in-docker-desktop 2026-10-19T05:52:51.435Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-turn-on-wordpress-plugin-auto-updates-decision-guide 2026-10-19T05:52:52.111Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-use-conference-wi-fi-a-decision-guide 2026-10-19T05:52:52.496Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-use-sudo-with-npm-install-g 2026-10-19T05:52:52.596Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-use-two-dns-providers 2026-10-19T05:52:52.709Z weekly 0.7 https://safeguard.sh/resources/blog/should-you-wrap-a-mobile-sdk-behind-your-own-interface 2026-10-19T05:52:52.872Z weekly 0.7 https://safeguard.sh/resources/blog/should-your-advisory-say-exploited-in-the-wild-using-kev 2026-10-19T05:52:52.999Z weekly 0.7 https://safeguard.sh/resources/blog/should-your-cli-refuse-repos-owned-by-someone-else-git-safe-directory 2026-10-19T05:52:53.104Z weekly 0.7 https://safeguard.sh/resources/blog/should-your-device-app-force-users-to-update-minimum-version-policy 2026-10-19T05:52:53.202Z weekly 0.7 https://safeguard.sh/resources/blog/should-your-mobile-app-pin-certificates-decision-guide 2026-10-19T05:52:53.294Z weekly 0.7 https://safeguard.sh/resources/blog/should-your-startup-sign-its-sbom-the-new-author-signature-field 2026-10-19T05:52:53.397Z weekly 0.7 https://safeguard.sh/resources/blog/should-your-team-run-an-internal-homebrew-tap 2026-10-19T05:52:53.495Z weekly 0.7 https://safeguard.sh/resources/blog/show-a-monitoring-process-for-new-vulnerabilities-nydfs-500-5-b 2026-10-19T05:52:53.599Z weekly 0.7 https://safeguard.sh/resources/blog/show-auditors-golden-path-as-a-dependency-control 2026-10-19T05:52:53.699Z weekly 0.7 https://safeguard.sh/resources/blog/show-the-fix-not-just-the-problem-in-security-findings 2026-10-19T05:52:53.804Z weekly 0.7 https://safeguard.sh/resources/blog/signed-commits-and-required-checks-what-they-prove-and-do-not 2026-10-19T05:52:53.905Z weekly 0.7 https://safeguard.sh/resources/blog/signs-your-team-has-outgrown-its-vulnerability-triage-process 2026-10-19T05:52:54.006Z weekly 0.7 https://safeguard.sh/resources/blog/signtool-sign-warning-fd-td-flags-what-they-do 2026-10-19T05:52:54.098Z weekly 0.7 https://safeguard.sh/resources/blog/single-maintainer-or-foundation-backed-a-decision-guide-for-adopters 2026-10-19T05:52:54.193Z weekly 0.7 https://safeguard.sh/resources/blog/single-point-of-contact-for-auditor-questions 2026-10-19T05:52:54.287Z weekly 0.7 https://safeguard.sh/resources/blog/single-tenant-or-multi-tenant-hosting-which-to-buy 2026-10-19T05:52:54.383Z weekly 0.7 https://safeguard.sh/resources/blog/six-myths-about-reproducible-builds 2026-10-19T05:52:54.488Z weekly 0.7 https://safeguard.sh/resources/blog/six-questions-to-ask-before-calling-an-sca-finding-a-false-positive 2026-10-19T05:52:54.591Z weekly 0.7 https://safeguard.sh/resources/blog/six-rules-for-an-open-source-usage-policy-what-to-include 2026-10-19T05:52:54.697Z weekly 0.7 https://safeguard.sh/resources/blog/six-triggers-that-should-start-an-open-source-review 2026-10-19T05:52:54.802Z weekly 0.7 https://safeguard.sh/resources/blog/skops-vs-pickle-for-saving-scikit-learn-models 2026-10-19T05:52:54.897Z weekly 0.7 https://safeguard.sh/resources/blog/slim-a-container-image-using-its-sbom 2026-10-19T05:52:54.994Z weekly 0.7 https://safeguard.sh/resources/blog/slsa-build-l1-what-provenance-exists-gives-you 2026-10-19T05:52:55.087Z weekly 0.7 https://safeguard.sh/resources/blog/slsa-source-level-4-two-party-review-what-it-requires 2026-10-19T05:52:55.179Z weekly 0.7 https://safeguard.sh/resources/blog/slurm-security-basics-munge-slurmd-root-and-login-nodes 2026-10-19T05:52:55.359Z weekly 0.7 https://safeguard.sh/resources/blog/small-batches-make-security-review-easier 2026-10-19T05:52:55.465Z weekly 0.7 https://safeguard.sh/resources/blog/small-healthtech-team-no-security-hire-answering-dependency-questions 2026-10-19T05:52:55.571Z weekly 0.7 https://safeguard.sh/resources/blog/smoke-test-after-a-dependency-upgrade-what-to-check 2026-10-19T05:52:55.680Z weekly 0.7 https://safeguard.sh/resources/blog/snapshot-tests-fail-after-a-security-bump-update-or-investigate 2026-10-19T05:52:55.793Z weekly 0.7 https://safeguard.sh/resources/blog/snowflake-pypi-artifact-repository-role-granted-to-public-by-default 2026-10-19T05:52:55.898Z weekly 0.7 https://safeguard.sh/resources/blog/soc-2-assertion-vs-representation-letter-vs-description 2026-10-19T05:52:56.053Z weekly 0.7 https://safeguard.sh/resources/blog/soc-2-auditor-sample-walkthrough-for-one-vulnerable-dependency 2026-10-19T05:52:57.372Z weekly 0.7 https://safeguard.sh/resources/blog/soc-2-dependency-controls-startup-minimum-set 2026-10-19T05:52:58.180Z weekly 0.7 https://safeguard.sh/resources/blog/soc-2-evidence-what-to-automate-first-small-saas 2026-10-19T05:52:58.272Z weekly 0.7 https://safeguard.sh/resources/blog/solo-developer-vulnerability-alerts-a-15-minute-weekly-loop 2026-10-19T05:52:58.372Z weekly 0.7 https://safeguard.sh/resources/blog/solo-publisher-release-day-checklist-npm-and-pypi 2026-10-19T05:52:58.470Z weekly 0.7 https://safeguard.sh/resources/blog/sort-tabletop-findings-into-tool-process-and-knowledge-gaps 2026-10-19T05:52:58.566Z weekly 0.7 https://safeguard.sh/resources/blog/source-build-or-deployed-which-sbom-did-you-get 2026-10-19T05:52:58.669Z weekly 0.7 https://safeguard.sh/resources/blog/source-date-epoch-zero-or-commit-time-which-value 2026-10-19T05:52:58.773Z weekly 0.7 https://safeguard.sh/resources/blog/source-integrity-vs-build-integrity-explained 2026-10-19T05:52:58.875Z weekly 0.7 https://safeguard.sh/resources/blog/source-or-precompiled-plugin-which-is-easier-to-trust-in-a-game 2026-10-19T05:52:58.968Z weekly 0.7 https://safeguard.sh/resources/blog/spark-on-kubernetes-who-can-see-the-authentication-secret 2026-10-19T05:52:59.062Z weekly 0.7 https://safeguard.sh/resources/blog/spark-redaction-regex-what-it-hides-and-what-it-misses 2026-10-19T05:52:59.152Z weekly 0.7 https://safeguard.sh/resources/blog/spark-rpc-encryption-ssl-or-aes-which-settings-to-choose 2026-10-19T05:52:59.252Z weekly 0.7 https://safeguard.sh/resources/blog/spark-submit-repositories-credentials-in-the-uri-what-to-do-instead 2026-10-19T05:52:59.347Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-3-profiles-which-to-declare-in-profile-conformance 2026-10-19T05:52:59.445Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-and-cyclonedx-copyright-fields-none-vs-noassertion 2026-10-19T05:52:59.548Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-creator-created-license-list-version-fields-explained 2026-10-19T05:52:59.658Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-dependency-scope-relationships-build-dev-test-runtime 2026-10-19T05:52:59.771Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-depends-on-vs-dependency-of-vs-contains-which-to-use 2026-10-19T05:52:59.877Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-describes-relationship-what-the-document-describes 2026-10-19T05:52:59.979Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-externalref-purl-cpe-and-other-identifiers-how-to-add 2026-10-19T05:53:00.076Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-license-list-json-pin-version-and-validate-ids 2026-10-19T05:53:00.169Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-package-download-location-vcs-syntax-and-pinning 2026-10-19T05:53:00.277Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-package-originator-vs-supplier-who-goes-where 2026-10-19T05:53:00.377Z weekly 0.7 https://safeguard.sh/resources/blog/spdx-primary-package-purpose-for-firmware-components 2026-10-19T05:53:00.476Z weekly 0.7 https://safeguard.sh/resources/blog/split-front-end-build-and-deploy-into-separate-github-jobs 2026-10-19T05:53:00.582Z weekly 0.7 https://safeguard.sh/resources/blog/spot-blame-in-a-postmortem-draft-before-and-after 2026-10-19T05:53:00.687Z weekly 0.7 https://safeguard.sh/resources/blog/spot-check-imported-triage-decisions-with-a-20-finding-sample 2026-10-19T05:53:00.794Z weekly 0.7 https://safeguard.sh/resources/blog/spreadsheet-catalog-or-database-where-the-integration-inventory-lives 2026-10-19T05:53:01.101Z weekly 0.7 https://safeguard.sh/resources/blog/spreadsheet-or-sbom-platform-task-by-task-comparison 2026-10-19T05:53:01.206Z weekly 0.7 https://safeguard.sh/resources/blog/spring-boot-configtree-secrets-vs-environment-variables 2026-10-19T05:53:01.299Z weekly 0.7 https://safeguard.sh/resources/blog/spring-boot-generated-security-password-production 2026-10-19T05:53:01.400Z weekly 0.7 https://safeguard.sh/resources/blog/spring-boot-layered-docker-image-jarmode-extract 2026-10-19T05:53:02.315Z weekly 0.7 https://safeguard.sh/resources/blog/spring-boot-ssl-bundles-explained 2026-10-19T05:53:02.438Z weekly 0.7 https://safeguard.sh/resources/blog/spring-security-cors-must-run-before-security 2026-10-19T05:53:02.590Z weekly 0.7 https://safeguard.sh/resources/blog/spring-security-rule-order-first-match-wins-and-denyall 2026-10-19T05:53:02.700Z weekly 0.7 https://safeguard.sh/resources/blog/spring-security-session-fixation-protection 2026-10-19T05:53:02.817Z weekly 0.7 https://safeguard.sh/resources/blog/sql-injection-vs-xss-vs-command-injection-where-attacker-input-runs 2026-10-19T05:53:02.918Z weekly 0.7 https://safeguard.sh/resources/blog/sqs-vpc-endpoint-policy-keep-queue-traffic-off-the-internet 2026-10-19T05:53:03.038Z weekly 0.7 https://safeguard.sh/resources/blog/squash-merge-and-required-signed-commits-what-github-checks 2026-10-19T05:53:03.131Z weekly 0.7 https://safeguard.sh/resources/blog/squash-or-merge-commit-for-a-dependency-fix-pr-which-reverts-cleaner 2026-10-19T05:53:03.432Z weekly 0.7 https://safeguard.sh/resources/blog/ssdf-po-1-written-security-requirements-what-to-document 2026-10-19T05:53:03.574Z weekly 0.7 https://safeguard.sh/resources/blog/ssh-agent-on-the-road-lifetimes-confirmation-and-security-keys 2026-10-19T05:53:03.686Z weekly 0.7 https://safeguard.sh/resources/blog/ssvc-explained-in-plain-words-mission-prevalence-and-well-being 2026-10-19T05:53:03.796Z weekly 0.7 https://safeguard.sh/resources/blog/stable-beta-nightly-update-channels-for-a-cli-security-rules 2026-10-19T05:53:03.896Z weekly 0.7 https://safeguard.sh/resources/blog/staged-rollout-or-phased-release-for-a-sdk-upgrade 2026-10-19T05:53:04.275Z weekly 0.7 https://safeguard.sh/resources/blog/stages-of-supply-chain-governance-maturity-ad-hoc-to-managed 2026-10-19T05:53:04.380Z weekly 0.7 https://safeguard.sh/resources/blog/staging-passes-production-breaks-after-an-upgrade 2026-10-19T05:53:04.485Z weekly 0.7 https://safeguard.sh/resources/blog/staging-test-data-checklist-for-software-teams 2026-10-19T05:53:04.608Z weekly 0.7 https://safeguard.sh/resources/blog/stale-vulnerability-data-in-ci-scan-caches-and-ephemeral-runners 2026-10-19T05:53:04.713Z weekly 0.7 https://safeguard.sh/resources/blog/stamp-the-base-image-digest-into-your-image-with-oci-annotations 2026-10-19T05:53:04.822Z weekly 0.7 https://safeguard.sh/resources/blog/standard-change-vs-normal-change-for-dependency-updates 2026-10-19T05:53:04.929Z weekly 0.7 https://safeguard.sh/resources/blog/standard-normal-and-emergency-changes-how-to-classify-in-pull-requests 2026-10-19T05:53:05.028Z weekly 0.7 https://safeguard.sh/resources/blog/start-a-postmortem-reading-club 2026-10-19T05:53:05.124Z weekly 0.7 https://safeguard.sh/resources/blog/starter-ai-agent-permissions-for-a-small-team-one-page 2026-10-19T05:53:05.217Z weekly 0.7 https://safeguard.sh/resources/blog/starter-workflow-uses-a-secret-what-to-store-and-where 2026-10-19T05:53:05.317Z weekly 0.7 https://safeguard.sh/resources/blog/starter-workflows-vs-organization-workflow-templates 2026-10-19T05:53:05.414Z weekly 0.7 https://safeguard.sh/resources/blog/startups-too-small-for-supply-chain-attacks-myth-vs-fact 2026-10-19T05:53:05.519Z weekly 0.7 https://safeguard.sh/resources/blog/stateful-property-tests-for-multi-step-workflows-with-hypothesis 2026-10-19T05:53:05.629Z weekly 0.7 https://safeguard.sh/resources/blog/static-analysis-or-build-and-test-which-is-safe-for-untrusted-code 2026-10-19T05:53:05.900Z weekly 0.7 https://safeguard.sh/resources/blog/static-or-dynamic-linking-which-is-easier-to-patch-c-cpp 2026-10-19T05:53:05.998Z weekly 0.7 https://safeguard.sh/resources/blog/static-site-security-checklist-before-launch 2026-10-19T05:53:06.109Z weekly 0.7 https://safeguard.sh/resources/blog/static-site-vulnerability-scanning-faq-ten-questions 2026-10-19T05:53:06.207Z weekly 0.7 https://safeguard.sh/resources/blog/status-board-for-an-sbom-driven-incident-columns-to-track 2026-10-19T05:53:06.309Z weekly 0.7 https://safeguard.sh/resources/blog/staying-on-an-end-of-life-base-image-how-to-write-a-time-boxed-exception 2026-10-19T05:53:06.493Z weekly 0.7 https://safeguard.sh/resources/blog/steps-in-a-public-sector-security-tool-purchase-what-to-expect 2026-10-19T05:53:06.659Z weekly 0.7 https://safeguard.sh/resources/blog/sticky-sessions-and-stateless-processes-security-view 2026-10-19T05:53:06.770Z weekly 0.7 https://safeguard.sh/resources/blog/stop-a-ci-build-using-the-network-after-dependencies-install 2026-10-19T05:53:06.878Z weekly 0.7 https://safeguard.sh/resources/blog/stop-accidental-public-exposure-kubernetes-services-deploy 2026-10-19T05:53:06.978Z weekly 0.7 https://safeguard.sh/resources/blog/stop-collecting-the-same-security-evidence-twice 2026-10-19T05:53:07.075Z weekly 0.7 https://safeguard.sh/resources/blog/stop-developers-bypassing-the-package-mirror 2026-10-19T05:53:07.173Z weekly 0.7 https://safeguard.sh/resources/blog/stop-security-automation-running-twice-github-actions-concurrency 2026-10-19T05:53:07.269Z weekly 0.7 https://safeguard.sh/resources/blog/stop-staging-from-emailing-real-customers 2026-10-19T05:53:07.366Z weekly 0.7 https://safeguard.sh/resources/blog/store-a-certificate-or-key-file-as-a-ci-secret-size-limits-and-base64 2026-10-19T05:53:07.470Z weekly 0.7 https://safeguard.sh/resources/blog/store-apple-signing-certificate-in-github-actions-safely 2026-10-19T05:53:07.576Z weekly 0.7 https://safeguard.sh/resources/blog/store-malware-scan-vs-policy-review-what-each-promises-for-extensions 2026-10-19T05:53:07.690Z weekly 0.7 https://safeguard.sh/resources/blog/store-the-sbom-and-match-it-again-continuous-matching-explained 2026-10-19T05:53:07.808Z weekly 0.7 https://safeguard.sh/resources/blog/store-vulnerability-timestamps-in-utc-rfc3339 2026-10-19T05:53:07.914Z weekly 0.7 https://safeguard.sh/resources/blog/storybook-and-build-tools-in-the-design-system-supply-chain 2026-10-19T05:53:08.034Z weekly 0.7 https://safeguard.sh/resources/blog/stream-github-audit-and-git-events-to-your-own-storage 2026-10-19T05:53:08.149Z weekly 0.7 https://safeguard.sh/resources/blog/stripe-test-keys-vs-live-keys-what-belongs-on-a-dev-laptop 2026-10-19T05:53:08.313Z weekly 0.7 https://safeguard.sh/resources/blog/student-and-postdoc-offboarding-checklist-for-lab-software-and-access 2026-10-19T05:53:08.484Z weekly 0.7 https://safeguard.sh/resources/blog/student-capstone-dependency-check-checklist 2026-10-19T05:53:08.595Z weekly 0.7 https://safeguard.sh/resources/blog/subscribe-to-cisco-security-advisories-which-ones-send-email 2026-10-19T05:53:08.705Z weekly 0.7 https://safeguard.sh/resources/blog/success-and-error-thresholds-when-to-halt-an-iot-fleet-update 2026-10-19T05:53:08.813Z weekly 0.7 https://safeguard.sh/resources/blog/supabase-exposed-schema-row-level-security-checklist 2026-10-19T05:53:08.963Z weekly 0.7 https://safeguard.sh/resources/blog/supplier-renamed-or-acquired-sbom-supplier-names-change 2026-10-19T05:53:09.062Z weekly 0.7 https://safeguard.sh/resources/blog/supplier-sbom-and-your-own-scan-disagree-which-to-trust 2026-10-19T05:53:09.157Z weekly 0.7 https://safeguard.sh/resources/blog/supplier-sbom-flags-a-vulnerable-component-who-has-to-act 2026-10-19T05:53:09.272Z weekly 0.7 https://safeguard.sh/resources/blog/supplier-sbom-has-no-dependency-relationships-what-to-do 2026-10-19T05:53:09.389Z weekly 0.7 https://safeguard.sh/resources/blog/supplier-sbom-lists-an-unmaintained-library-what-to-ask 2026-10-19T05:53:09.638Z weekly 0.7 https://safeguard.sh/resources/blog/supplier-security-requirements-in-software-contracts-what-to-ask 2026-10-19T05:53:09.993Z weekly 0.7 https://safeguard.sh/resources/blog/supplier-sent-an-sbom-as-a-pdf-or-spreadsheet-what-now 2026-10-19T05:53:10.090Z weekly 0.7 https://safeguard.sh/resources/blog/supplier-ships-many-products-which-sboms-do-you-need 2026-10-19T05:53:10.184Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-checklist-for-teams-that-only-consume-packages 2026-10-19T05:53:10.279Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-checklist-for-teams-that-publish-packages 2026-10-19T05:53:10.377Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-decision-rights-matrix-who-approves-what 2026-10-19T05:53:10.482Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-drill-metrics-what-to-measure 2026-10-19T05:53:10.589Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-governance-calendar-weekly-monthly-quarterly-yearly 2026-10-19T05:53:10.697Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-governance-evidence-what-an-auditor-can-ask-for 2026-10-19T05:53:10.802Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-governance-myths-vs-facts 2026-10-19T05:53:10.905Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-postmortem-anti-patterns-and-fixes 2026-10-19T05:53:11.000Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-postmortem-for-open-source-maintainers 2026-10-19T05:53:11.093Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-readiness-self-assessment-before-enterprise-deal 2026-10-19T05:53:11.187Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-section-of-a-startup-security-whitepaper 2026-10-19T05:53:11.282Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-sections-to-add-to-your-postmortem-template 2026-10-19T05:53:11.379Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-security-first-vs-second-enterprise-customer 2026-10-19T05:53:11.476Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-security-mistakes-small-teams-make-in-the-first-month 2026-10-19T05:53:11.580Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-security-program-office-what-it-does 2026-10-19T05:53:11.675Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-security-quick-wins-and-how-to-measure-them 2026-10-19T05:53:11.773Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-security-quick-wins-for-a-saas-startup-in-one-week 2026-10-19T05:53:11.874Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-security-self-check-twelve-questions-small-teams 2026-10-19T05:53:11.967Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-security-vs-application-security-where-to-start 2026-10-19T05:53:12.063Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-tabletop-preparation-checklist-one-week-out 2026-10-19T05:53:12.155Z weekly 0.7 https://safeguard.sh/resources/blog/supply-chain-tabletop-roles-facilitator-scribe-observer 2026-10-19T05:53:12.254Z weekly 0.7 https://safeguard.sh/resources/blog/support-desk-script-for-a-dependency-compromise-what-agents-can-say 2026-10-19T05:53:12.354Z weekly 0.7 https://safeguard.sh/resources/blog/suppress-by-package-advisory-or-path-choosing-scope 2026-10-19T05:53:12.462Z weekly 0.7 https://safeguard.sh/resources/blog/suppress-ignore-dismiss-snooze-mute-what-the-words-mean 2026-10-19T05:53:12.639Z weekly 0.7 https://safeguard.sh/resources/blog/suppression-policy-template-for-dependency-scanning 2026-10-19T05:53:12.813Z weekly 0.7 https://safeguard.sh/resources/blog/suppression-record-as-yaml-fields-and-an-example 2026-10-19T05:53:12.916Z weekly 0.7 https://safeguard.sh/resources/blog/suppression-stopped-matching-after-an-alias-change-cve-ghsa 2026-10-19T05:53:13.122Z weekly 0.7 https://safeguard.sh/resources/blog/surge-capacity-plan-for-a-zero-day-week 2026-10-19T05:53:13.216Z weekly 0.7 https://safeguard.sh/resources/blog/survivorship-bias-in-time-to-patch-statistics 2026-10-19T05:53:13.310Z weekly 0.7 https://safeguard.sh/resources/blog/swagger-annotations-dependency-in-generated-java-clients 2026-10-19T05:53:13.411Z weekly 0.7 https://safeguard.sh/resources/blog/switching-dependency-scanners-how-to-run-a-parallel-period 2026-10-19T05:53:13.514Z weekly 0.7 https://safeguard.sh/resources/blog/synthetic-data-for-ai-prototypes-instead-of-production-data 2026-10-19T05:53:13.616Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-a-force-installed-browser-extension-is-compromised 2026-10-19T05:53:13.708Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-drill-for-sbom-driven-vulnerability-response-30-minutes 2026-10-19T05:53:13.807Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-exercise-for-a-10-person-engineering-team 2026-10-19T05:53:13.902Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-for-executives-vs-engineers-supply-chain-incident 2026-10-19T05:53:14.002Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-scenario-an-ai-coding-agent-installs-a-lookalike-package 2026-10-19T05:53:14.095Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-scenario-internal-package-name-on-a-public-registry 2026-10-19T05:53:14.187Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-scenario-the-compromised-package-is-a-dev-dependency 2026-10-19T05:53:14.279Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-script-a-connected-mcp-server-starts-acting-strangely 2026-10-19T05:53:14.374Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-script-ai-assistant-suggests-a-package-that-does-not-exist 2026-10-19T05:53:14.475Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-script-compromised-github-action-in-60-minutes 2026-10-19T05:53:14.576Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-script-internal-package-name-appears-on-a-public-registry 2026-10-19T05:53:14.668Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-script-malicious-editor-extension-on-developer-machines 2026-10-19T05:53:14.765Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-script-npm-worm-steals-developer-credentials 2026-10-19T05:53:14.866Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-script-poisoned-base-image-in-your-registry 2026-10-19T05:53:14.959Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-script-someone-publishes-a-malicious-release-of-your-package 2026-10-19T05:53:15.061Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-script-vendor-breach-notice-for-a-saas-dependency 2026-10-19T05:53:15.152Z weekly 0.7 https://safeguard.sh/resources/blog/tabletop-vs-functional-drill-vs-game-day-which-to-run 2026-10-19T05:53:15.245Z weekly 0.7 https://safeguard.sh/resources/blog/tag-database-columns-that-hold-patient-identifiers 2026-10-19T05:53:15.457Z weekly 0.7 https://safeguard.sh/resources/blog/tag-manager-glossary-tag-pixel-container-data-layer-cmp 2026-10-19T05:53:15.592Z weekly 0.7 https://safeguard.sh/resources/blog/tag-naming-scheme-that-makes-retention-rules-possible 2026-10-19T05:53:15.713Z weekly 0.7 https://safeguard.sh/resources/blog/tag-past-incidents-so-you-can-search-and-spot-patterns 2026-10-19T05:53:15.813Z weekly 0.7 https://safeguard.sh/resources/blog/tag-security-hotfixes-for-deployment-rework-rate 2026-10-19T05:53:15.915Z weekly 0.7 https://safeguard.sh/resources/blog/tag-semver-range-or-digest-pinning-across-iac-and-gitops-tools 2026-10-19T05:53:16.006Z weekly 0.7 https://safeguard.sh/resources/blog/take-an-ai-built-prototype-to-production-safely 2026-10-19T05:53:16.098Z weekly 0.7 https://safeguard.sh/resources/blog/teach-developers-secrets-hygiene-habits 2026-10-19T05:53:16.189Z weekly 0.7 https://safeguard.sh/resources/blog/teach-developers-secure-code-review 2026-10-19T05:53:16.279Z weekly 0.7 https://safeguard.sh/resources/blog/teams-app-governance-block-allow-and-org-wide-settings-explained 2026-10-19T05:53:16.369Z weekly 0.7 https://safeguard.sh/resources/blog/telemetry-or-survey-where-patch-statistics-come-from 2026-10-19T05:53:16.460Z weekly 0.7 https://safeguard.sh/resources/blog/tell-customers-a-cve-does-not-affect-your-product 2026-10-19T05:53:16.553Z weekly 0.7 https://safeguard.sh/resources/blog/tell-customers-about-accepted-security-risks-exception-register 2026-10-19T05:53:16.662Z weekly 0.7 https://safeguard.sh/resources/blog/tell-customers-not-affected-by-a-dependency-issue-wording 2026-10-19T05:53:16.768Z weekly 0.7 https://safeguard.sh/resources/blog/tell-on-call-before-you-merge-a-security-fix-a-five-line-note 2026-10-19T05:53:16.874Z weekly 0.7 https://safeguard.sh/resources/blog/temporary-debug-logging-in-a-health-app-rules 2026-10-19T05:53:16.969Z weekly 0.7 https://safeguard.sh/resources/blog/temporary-overrides-need-an-expiry-how-to-avoid-override-debt 2026-10-19T05:53:17.066Z weekly 0.7 https://safeguard.sh/resources/blog/ten-exception-questions-auditors-ask-and-how-to-answer 2026-10-19T05:53:17.161Z weekly 0.7 https://safeguard.sh/resources/blog/ten-minute-checklist-for-a-live-scanner-demo-on-your-repo 2026-10-19T05:53:17.258Z weekly 0.7 https://safeguard.sh/resources/blog/ten-open-source-questions-customers-ask-and-short-replies 2026-10-19T05:53:17.354Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-auditors-ask-about-risk-based-vulnerability-triage 2026-10-19T05:53:17.453Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-before-adding-a-data-pipeline-connector 2026-10-19T05:53:17.555Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-before-adding-a-new-dependency 2026-10-19T05:53:17.675Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-for-a-new-scanner-vendor-about-importing-history 2026-10-19T05:53:17.783Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-for-the-kickoff-call-of-a-security-tool-trial 2026-10-19T05:53:17.884Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-leaders-should-ask-about-dependency-updates 2026-10-19T05:53:17.986Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-on-managing-dependencies-in-many-languages-answered-fast 2026-10-19T05:53:18.080Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-to-ask-after-a-slow-fix 2026-10-19T05:53:18.177Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-to-ask-before-choosing-a-dependency-update-tool 2026-10-19T05:53:18.273Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-to-test-how-fresh-your-scanner-data-is 2026-10-19T05:53:18.369Z weekly 0.7 https://safeguard.sh/resources/blog/ten-questions-to-test-if-a-vulnerability-metric-is-decision-grade 2026-10-19T05:53:18.469Z weekly 0.7 https://safeguard.sh/resources/blog/ten-safety-questions-to-ask-about-autonomous-remediation 2026-10-19T05:53:18.567Z weekly 0.7 https://safeguard.sh/resources/blog/ten-things-to-confirm-before-a-dependency-compromise-tabletop 2026-10-19T05:53:18.668Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-dev-overrides-turn-off-provider-checksum-checks 2026-10-19T05:53:18.772Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-git-module-source-without-ref-follows-the-default-branch 2026-10-19T05:53:18.876Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-init-upgrade-what-moves-in-module-versions 2026-10-19T05:53:18.970Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-module-repository-review-checklist-readme-examples-outputs 2026-10-19T05:53:19.066Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-plugin-cache-in-ci-what-it-saves-and-what-it-risks 2026-10-19T05:53:19.157Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-provider-version-constraints-and-lock-file 2026-10-19T05:53:19.253Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-providers-and-modules-what-the-lock-file-covers-for-scans 2026-10-19T05:53:19.347Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-required-version-and-provider-constraints-explained 2026-10-19T05:53:19.448Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-saved-plan-as-change-evidence 2026-10-19T05:53:19.558Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-test-for-shared-modules-plan-or-apply 2026-10-19T05:53:19.660Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-tfvars-secrets-what-to-ignore-and-what-state-keeps 2026-10-19T05:53:19.764Z weekly 0.7 https://safeguard.sh/resources/blog/terraform-variable-validation-guardrails-for-shared-modules 2026-10-19T05:53:19.868Z weekly 0.7 https://safeguard.sh/resources/blog/terragrunt-source-ref-pin-the-module-behind-each-unit 2026-10-19T05:53:19.967Z weekly 0.7 https://safeguard.sh/resources/blog/test-a-base-image-upgrade-before-rolling-it-out 2026-10-19T05:53:20.062Z weekly 0.7 https://safeguard.sh/resources/blog/test-a-language-runtime-upgrade-with-a-ci-matrix 2026-10-19T05:53:20.157Z weekly 0.7 https://safeguard.sh/resources/blog/test-a-public-workflow-template-in-a-throwaway-repo 2026-10-19T05:53:20.418Z weekly 0.7 https://safeguard.sh/resources/blog/test-a-regex-or-detection-rule-an-ai-wrote 2026-10-19T05:53:20.516Z weekly 0.7 https://safeguard.sh/resources/blog/test-a-transitive-dependency-bump-nobody-asked-for 2026-10-19T05:53:20.619Z weekly 0.7 https://safeguard.sh/resources/blog/test-admission-policies-in-ci-before-cluster 2026-10-19T05:53:20.721Z weekly 0.7 https://safeguard.sh/resources/blog/test-after-a-dependency-upgrade-what-to-run-and-in-what-order 2026-10-19T05:53:20.824Z weekly 0.7 https://safeguard.sh/resources/blog/test-against-latest-dependencies-in-ci-without-blocking-merges 2026-10-19T05:53:20.986Z weekly 0.7 https://safeguard.sh/resources/blog/test-audit-evidence-and-reports-during-a-security-tool-trial 2026-10-19T05:53:21.148Z weekly 0.7 https://safeguard.sh/resources/blog/test-gates-for-a-major-framework-upgrade-a-checklist 2026-10-19T05:53:21.241Z weekly 0.7 https://safeguard.sh/resources/blog/test-log-redaction-with-canary-values 2026-10-19T05:53:21.339Z weekly 0.7 https://safeguard.sh/resources/blog/test-payment-cards-and-sandbox-data-in-staging 2026-10-19T05:53:21.441Z weekly 0.7 https://safeguard.sh/resources/blog/test-scanner-suggested-fix-versions-on-your-repositories 2026-10-19T05:53:21.552Z weekly 0.7 https://safeguard.sh/resources/blog/test-the-published-artifact-in-a-clean-install-before-you-announce 2026-10-19T05:53:21.657Z weekly 0.7 https://safeguard.sh/resources/blog/test-whether-your-scanner-finds-a-vendored-library-in-15-minutes 2026-10-19T05:53:21.768Z weekly 0.7 https://safeguard.sh/resources/blog/test-your-librarys-lowest-supported-dependency-versions 2026-10-19T05:53:21.867Z weekly 0.7 https://safeguard.sh/resources/blog/tflint-plugins-pin-the-version-and-keep-signature-checks-on 2026-10-19T05:53:21.961Z weekly 0.7 https://safeguard.sh/resources/blog/the-90-day-review-of-a-newly-adopted-library 2026-10-19T05:53:22.054Z weekly 0.7 https://safeguard.sh/resources/blog/the-compromised-version-already-shipped-to-customers-what-now 2026-10-19T05:53:22.149Z weekly 0.7 https://safeguard.sh/resources/blog/the-hidden-work-in-tracking-sboms-by-hand 2026-10-19T05:53:22.239Z weekly 0.7 https://safeguard.sh/resources/blog/the-test-oracle-problem-how-do-you-know-a-security-test-should-fail 2026-10-19T05:53:22.332Z weekly 0.7 https://safeguard.sh/resources/blog/thin-or-full-webhook-payloads-which-leaks-less 2026-10-19T05:53:22.428Z weekly 0.7 https://safeguard.sh/resources/blog/third-party-embeds-on-a-static-site-what-attributes-to-set 2026-10-19T05:53:22.535Z weekly 0.7 https://safeguard.sh/resources/blog/third-party-library-selection-checklist-license-security-maintenance 2026-10-19T05:53:22.642Z weekly 0.7 https://safeguard.sh/resources/blog/third-party-models-in-ai-prototypes-supply-chain-checks 2026-10-19T05:53:22.748Z weekly 0.7 https://safeguard.sh/resources/blog/third-party-notices-file-how-to-build-one-from-your-sbom 2026-10-19T05:53:22.850Z weekly 0.7 https://safeguard.sh/resources/blog/thirty-minute-security-review-for-a-prototype-before-launch 2026-10-19T05:53:22.947Z weekly 0.7 https://safeguard.sh/resources/blog/threat-modeling-in-30-minutes-for-a-small-engineering-team 2026-10-19T05:53:23.039Z weekly 0.7 https://safeguard.sh/resources/blog/threat-modeling-skills-for-architects-and-tech-leads 2026-10-19T05:53:23.133Z weekly 0.7 https://safeguard.sh/resources/blog/three-clocks-for-a-base-image-fix-upstream-rebuild-deploy 2026-10-19T05:53:23.245Z weekly 0.7 https://safeguard.sh/resources/blog/three-funding-options-to-put-in-front-of-executives 2026-10-19T05:53:23.364Z weekly 0.7 https://safeguard.sh/resources/blog/three-point-estimates-for-security-fixes-worked-example 2026-10-19T05:53:23.459Z weekly 0.7 https://safeguard.sh/resources/blog/three-public-faq-answers-about-how-you-prioritize-vulnerabilities 2026-10-19T05:53:23.560Z weekly 0.7 https://safeguard.sh/resources/blog/three-questions-before-you-share-an-sbom-discovery-access-transport 2026-10-19T05:53:24.054Z weekly 0.7 https://safeguard.sh/resources/blog/three-ways-to-decide-what-provenance-to-expect 2026-10-19T05:53:24.150Z weekly 0.7 https://safeguard.sh/resources/blog/tie-a-firmware-sbom-to-the-exact-image-with-a-hash 2026-10-19T05:53:24.249Z weekly 0.7 https://safeguard.sh/resources/blog/tier-low-code-apps-by-risk-personal-team-sensitive 2026-10-19T05:53:24.343Z weekly 0.7 https://safeguard.sh/resources/blog/tier-vulnerability-alerts-page-ticket-or-digest 2026-10-19T05:53:24.441Z weekly 0.7 https://safeguard.sh/resources/blog/time-boxed-library-evaluation-spike-two-hour-plan 2026-10-19T05:53:24.540Z weekly 0.7 https://safeguard.sh/resources/blog/time-boxed-open-source-scanner-experiment-decision-guide 2026-10-19T05:53:24.645Z weekly 0.7 https://safeguard.sh/resources/blog/time-dependency-scanners-fairly-cold-and-warm-runs 2026-10-19T05:53:24.746Z weekly 0.7 https://safeguard.sh/resources/blog/time-to-awareness-metric-how-fast-do-you-learn-a-new-cve-affects-you 2026-10-19T05:53:24.847Z weekly 0.7 https://safeguard.sh/resources/blog/time-to-exploit-average-of-five-days-how-outliers-change-it 2026-10-19T05:53:24.938Z weekly 0.7 https://safeguard.sh/resources/blog/time-to-first-security-feedback-metric-for-developers 2026-10-19T05:53:25.036Z weekly 0.7 https://safeguard.sh/resources/blog/time-to-first-useful-finding-how-to-measure-it-in-a-trial 2026-10-19T05:53:25.131Z weekly 0.7 https://safeguard.sh/resources/blog/timebox-a-spike-before-committing-to-a-major-upgrade 2026-10-19T05:53:25.566Z weekly 0.7 https://safeguard.sh/resources/blog/timed-secret-rotation-drill-for-a-supply-chain-incident 2026-10-19T05:53:25.918Z weekly 0.7 https://safeguard.sh/resources/blog/timeouts-and-failure-behavior-for-security-automation-jobs 2026-10-19T05:53:26.031Z weekly 0.7 https://safeguard.sh/resources/blog/timezone-and-locale-settings-change-build-output 2026-10-19T05:53:26.124Z weekly 0.7 https://safeguard.sh/resources/blog/tool-error-or-finding-reason-codes-for-security-build-metrics 2026-10-19T05:53:26.217Z weekly 0.7 https://safeguard.sh/resources/blog/tower-http-timeout-layers-request-vs-body-timeouts 2026-10-19T05:53:26.309Z weekly 0.7 https://safeguard.sh/resources/blog/trace-abuse-case-ids-to-tests-and-code-simple-traceability 2026-10-19T05:53:26.402Z weekly 0.7 https://safeguard.sh/resources/blog/track-commercial-and-proprietary-components-in-your-license-inventory 2026-10-19T05:53:26.502Z weekly 0.7 https://safeguard.sh/resources/blog/track-which-customers-run-an-affected-version-you-shipped 2026-10-19T05:53:26.605Z weekly 0.7 https://safeguard.sh/resources/blog/tracking-vulnerability-status-per-component-sheet-or-platform 2026-10-19T05:53:26.705Z weekly 0.7 https://safeguard.sh/resources/blog/train-support-staff-to-spot-and-forward-security-reports 2026-10-19T05:53:26.805Z weekly 0.7 https://safeguard.sh/resources/blog/training-data-retrieval-corpus-or-prompt-which-input-is-riskier 2026-10-19T05:53:26.913Z weekly 0.7 https://safeguard.sh/resources/blog/transferring-a-client-repo-what-moves-and-what-to-rotate 2026-10-19T05:53:27.010Z weekly 0.7 https://safeguard.sh/resources/blog/transitive-dependency-depth-test-for-a-scanner-poc 2026-10-19T05:53:27.264Z weekly 0.7 https://safeguard.sh/resources/blog/transitive-dependency-spike-in-an-sbom-diff-what-to-do 2026-10-19T05:53:27.667Z weekly 0.7 https://safeguard.sh/resources/blog/transitive-dependency-vulnerability-in-a-payments-service-who-acts 2026-10-19T05:53:27.777Z weekly 0.7 https://safeguard.sh/resources/blog/translate-cvss-severity-into-business-language 2026-10-19T05:53:28.013Z weekly 0.7 https://safeguard.sh/resources/blog/translate-path-based-ignore-rules-when-you-change-dependency-scanners 2026-10-19T05:53:28.111Z weekly 0.7 https://safeguard.sh/resources/blog/treat-ai-suggested-fixes-as-untrusted-input 2026-10-19T05:53:28.203Z weekly 0.7 https://safeguard.sh/resources/blog/triage-history-in-a-spreadsheet-how-to-bring-it-into-a-new-scanner 2026-10-19T05:53:28.300Z weekly 0.7 https://safeguard.sh/resources/blog/triage-order-for-the-first-scan-of-a-legacy-monorepo 2026-10-19T05:53:28.403Z weekly 0.7 https://safeguard.sh/resources/blog/triage-security-findings-on-outside-contributor-pull-requests 2026-10-19T05:53:28.504Z weekly 0.7 https://safeguard.sh/resources/blog/triage-vulnerability-report-on-an-ai-built-prototype-in-20-minutes 2026-10-19T05:53:28.605Z weekly 0.7 https://safeguard.sh/resources/blog/trial-evidence-log-what-to-record-each-week 2026-10-19T05:53:28.703Z weekly 0.7 https://safeguard.sh/resources/blog/trial-success-criteria-for-small-teams-with-no-security-staff 2026-10-19T05:53:28.807Z weekly 0.7 https://safeguard.sh/resources/blog/trial-wrap-up-scorecard-scoring-scale-and-tie-breakers 2026-10-19T05:53:28.911Z weekly 0.7 https://safeguard.sh/resources/blog/trunk-based-development-and-security-checks-on-every-merge 2026-10-19T05:53:29.008Z weekly 0.7 https://safeguard.sh/resources/blog/trusting-proxy-headers-django-flask-fastapi-compared 2026-10-19T05:53:29.109Z weekly 0.7 https://safeguard.sh/resources/blog/tsc-noemit-or-noemitonerror-fail-the-build-on-type-errors 2026-10-19T05:53:29.212Z weekly 0.7 https://safeguard.sh/resources/blog/tsconfig-flags-beyond-strict-worth-turning-on 2026-10-19T05:53:29.306Z weekly 0.7 https://safeguard.sh/resources/blog/ttl-for-pull-request-and-branch-image-tags 2026-10-19T05:53:29.401Z weekly 0.7 https://safeguard.sh/resources/blog/turbo-prune-docker-smaller-build-context-and-pinned-lockfile 2026-10-19T05:53:29.495Z weekly 0.7 https://safeguard.sh/resources/blog/turborepo-cache-read-only-ci-and-what-the-cache-flag-controls 2026-10-19T05:53:29.596Z weekly 0.7 https://safeguard.sh/resources/blog/turborepo-remote-cache-signing-how-to-enable-and-what-it-covers 2026-10-19T05:53:29.707Z weekly 0.7 https://safeguard.sh/resources/blog/turborepo-strict-vs-loose-env-mode-cache-correctness 2026-10-19T05:53:29.814Z weekly 0.7 https://safeguard.sh/resources/blog/turn-a-global-epss-score-into-a-local-decision 2026-10-19T05:53:29.975Z weekly 0.7 https://safeguard.sh/resources/blog/turn-a-supplier-sbom-finding-into-a-ticket-template 2026-10-19T05:53:30.105Z weekly 0.7 https://safeguard.sh/resources/blog/turn-dependency-risk-signals-into-an-allow-review-block-rule 2026-10-19T05:53:30.208Z weekly 0.7 https://safeguard.sh/resources/blog/turn-on-dependabot-alerts-for-a-volunteer-maintained-repo 2026-10-19T05:53:30.302Z weekly 0.7 https://safeguard.sh/resources/blog/turn-on-npm-provenance-when-a-release-tool-runs-publish 2026-10-19T05:53:30.410Z weekly 0.7 https://safeguard.sh/resources/blog/turn-sca-report-into-tickets-by-fix 2026-10-19T05:53:30.513Z weekly 0.7 https://safeguard.sh/resources/blog/turn-slack-security-questions-into-a-knowledge-base-a-weekly-loop 2026-10-19T05:53:30.619Z weekly 0.7 https://safeguard.sh/resources/blog/twenty-engineers-vulnerability-alerts-rotating-owner-and-service-map 2026-10-19T05:53:30.718Z weekly 0.7 https://safeguard.sh/resources/blog/two-advisory-sources-disagree-which-one-do-you-trust 2026-10-19T05:53:30.820Z weekly 0.7 https://safeguard.sh/resources/blog/two-databases-disagree-on-affected-versions-fixed-vs-last-affected 2026-10-19T05:53:30.920Z weekly 0.7 https://safeguard.sh/resources/blog/two-scanners-recommend-different-fix-versions-which-upgrade-to-pick 2026-10-19T05:53:31.013Z weekly 0.7 https://safeguard.sh/resources/blog/two-teams-need-different-versions-of-the-same-library-which-wins 2026-10-19T05:53:31.105Z weekly 0.7 https://safeguard.sh/resources/blog/two-user-test-for-object-level-authorization-in-a-pull-request 2026-10-19T05:53:31.196Z weekly 0.7 https://safeguard.sh/resources/blog/typescript-eslint-recommended-or-strict-type-checked 2026-10-19T05:53:31.289Z weekly 0.7 https://safeguard.sh/resources/blog/typescript-type-assertions-are-not-runtime-validation-in-review 2026-10-19T05:53:31.382Z weekly 0.7 https://safeguard.sh/resources/blog/ubuntu-22-04-container-base-images-support-window-through-may-2027 2026-10-19T05:53:31.490Z weekly 0.7 https://safeguard.sh/resources/blog/ubuntu-cve-statuses-in-a-container-scan-deferred-ignored-explained 2026-10-19T05:53:31.597Z weekly 0.7 https://safeguard.sh/resources/blog/ubuntu-priority-levels-vs-cvss-which-rating-should-you-follow 2026-10-19T05:53:31.699Z weekly 0.7 https://safeguard.sh/resources/blog/ui-tags-or-analytics-tags-which-store-scripts-can-leave-the-browser 2026-10-19T05:53:31.806Z weekly 0.7 https://safeguard.sh/resources/blog/unidentified-binaries-in-an-inventory-how-to-close-them 2026-10-19T05:53:31.917Z weekly 0.7 https://safeguard.sh/resources/blog/unowned-vulnerability-findings-ownership-coverage-metric 2026-10-19T05:53:32.011Z weekly 0.7 https://safeguard.sh/resources/blog/unpinned-python-requirements-in-a-monorepo-scanning-risks 2026-10-19T05:53:32.105Z weekly 0.7 https://safeguard.sh/resources/blog/unreal-plugin-editor-module-or-runtime-module-what-to-check 2026-10-19T05:53:32.195Z weekly 0.7 https://safeguard.sh/resources/blog/unreal-plugin-install-engine-level-or-project-level 2026-10-19T05:53:32.290Z weekly 0.7 https://safeguard.sh/resources/blog/unscoped-internal-package-names-and-dependency-confusion-risk 2026-10-19T05:53:32.387Z weekly 0.7 https://safeguard.sh/resources/blog/unstable-ordering-hash-maps-and-readdir-in-builds 2026-10-19T05:53:32.490Z weekly 0.7 https://safeguard.sh/resources/blog/untag-delete-by-tag-or-delete-by-digest-in-a-registry 2026-10-19T05:53:32.598Z weekly 0.7 https://safeguard.sh/resources/blog/update-app-privacy-details-after-adding-an-sdk-without-a-new-build 2026-10-19T05:53:32.697Z weekly 0.7 https://safeguard.sh/resources/blog/update-debt-or-feature-debt-which-should-leadership-fund-first 2026-10-19T05:53:32.795Z weekly 0.7 https://safeguard.sh/resources/blog/update-npm-itself-and-the-windows-path-gotcha 2026-10-19T05:53:32.932Z weekly 0.7 https://safeguard.sh/resources/blog/update-one-vulnerable-python-package-with-pip-compile-upgrade-package 2026-10-19T05:53:33.044Z weekly 0.7 https://safeguard.sh/resources/blog/update-pr-controls-in-an-sca-tool-grouping-limits-cooldown 2026-10-19T05:53:33.162Z weekly 0.7 https://safeguard.sh/resources/blog/upgrade-a-dependency-one-major-at-a-time-stepwise-plan 2026-10-19T05:53:33.267Z weekly 0.7 https://safeguard.sh/resources/blog/upgrade-an-sdk-for-an-api-you-do-not-control 2026-10-19T05:53:33.364Z weekly 0.7 https://safeguard.sh/resources/blog/upgrade-or-buy-extended-support-how-to-decide-when-a-window-closes 2026-10-19T05:53:33.463Z weekly 0.7 https://safeguard.sh/resources/blog/upgrade-or-replace-a-library-you-are-far-behind-on 2026-10-19T05:53:33.591Z weekly 0.7 https://safeguard.sh/resources/blog/upgrade-order-in-a-frontend-monorepo-tokens-library-apps 2026-10-19T05:53:33.704Z weekly 0.7 https://safeguard.sh/resources/blog/upgrade-password-hashes-on-login-without-forcing-resets 2026-10-19T05:53:33.812Z weekly 0.7 https://safeguard.sh/resources/blog/upgrade-readiness-scorecard-how-ready-is-your-app-for-the-next-major 2026-10-19T05:53:33.929Z weekly 0.7 https://safeguard.sh/resources/blog/upgrade-testing-myths-versus-facts 2026-10-19T05:53:34.054Z weekly 0.7 https://safeguard.sh/resources/blog/upgrade-the-gradle-wrapper-and-verify-its-checksum 2026-10-19T05:53:34.148Z weekly 0.7 https://safeguard.sh/resources/blog/upgrade-wait-or-replace-an-sdk-decision-guide 2026-10-19T05:53:34.238Z weekly 0.7 https://safeguard.sh/resources/blog/upstream-repo-archived-what-it-means-for-your-fork 2026-10-19T05:53:34.335Z weekly 0.7 https://safeguard.sh/resources/blog/urgent-fix-past-deploy-gate-without-disabling-it 2026-10-19T05:53:34.532Z weekly 0.7 https://safeguard.sh/resources/blog/use-an-sbom-in-an-architecture-review-questions-to-ask 2026-10-19T05:53:34.636Z weekly 0.7 https://safeguard.sh/resources/blog/use-an-sbom-to-onboard-a-new-engineer-to-a-codebase 2026-10-19T05:53:34.732Z weekly 0.7 https://safeguard.sh/resources/blog/use-codeowners-to-protect-workflow-files-from-outside-contributors 2026-10-19T05:53:34.828Z weekly 0.7 https://safeguard.sh/resources/blog/use-codeowners-to-route-dependency-changes-to-the-right-reviewer 2026-10-19T05:53:34.931Z weekly 0.7 https://safeguard.sh/resources/blog/use-kev-and-epss-to-check-scanner-prioritization-in-a-poc 2026-10-19T05:53:35.025Z weekly 0.7 https://safeguard.sh/resources/blog/use-openssf-scorecard-to-audit-your-own-dependency-hygiene 2026-10-19T05:53:35.119Z weekly 0.7 https://safeguard.sh/resources/blog/use-owasp-cheat-sheets-in-developer-training 2026-10-19T05:53:35.228Z weekly 0.7 https://safeguard.sh/resources/blog/use-patch-reports-to-set-a-patch-sla-decision-guide 2026-10-19T05:53:35.335Z weekly 0.7 https://safeguard.sh/resources/blog/use-pull-request-target-safely-in-label-automation 2026-10-19T05:53:35.445Z weekly 0.7 https://safeguard.sh/resources/blog/use-the-cisa-kev-catalog-as-your-first-patch-priority-in-year-one 2026-10-19T05:53:35.548Z weekly 0.7 https://safeguard.sh/resources/blog/use-unknown-in-catch-typescript-error-handling 2026-10-19T05:53:35.678Z weekly 0.7 https://safeguard.sh/resources/blog/use-your-integration-inventory-to-build-an-egress-allowlist 2026-10-19T05:53:35.788Z weekly 0.7 https://safeguard.sh/resources/blog/using-nist-ai-600-1-to-structure-generative-ai-questionnaire-answers 2026-10-19T05:53:35.891Z weekly 0.7 https://safeguard.sh/resources/blog/using-nist-csf-2-0-to-organize-a-first-year-security-roadmap 2026-10-19T05:53:35.982Z weekly 0.7 https://safeguard.sh/resources/blog/using-the-nist-ai-rmf-to-evaluate-ai-security-features 2026-10-19T05:53:36.078Z weekly 0.7 https://safeguard.sh/resources/blog/uv-dockerfile-locked-sync-cache-mount 2026-10-19T05:53:36.171Z weekly 0.7 https://safeguard.sh/resources/blog/uv-index-strategy-with-an-internal-index-which-setting-is-safe 2026-10-19T05:53:36.263Z weekly 0.7 https://safeguard.sh/resources/blog/uv-override-dependencies-vs-constraint-dependencies-security-fix 2026-10-19T05:53:36.356Z weekly 0.7 https://safeguard.sh/resources/blog/uvx-or-uv-tool-install-which-to-use-for-python-tools 2026-10-19T05:53:36.459Z weekly 0.7 https://safeguard.sh/resources/blog/valid-and-invalid-reasons-to-suppress-a-dependency-finding 2026-10-19T05:53:36.574Z weekly 0.7 https://safeguard.sh/resources/blog/validate-ai-generated-patches-with-deterministic-checks 2026-10-19T05:53:36.726Z weekly 0.7 https://safeguard.sh/resources/blog/validate-an-openapi-spec-before-generating-code-in-ci 2026-10-19T05:53:36.844Z weekly 0.7 https://safeguard.sh/resources/blog/validate-environment-variables-at-startup-in-node 2026-10-19T05:53:36.947Z weekly 0.7 https://safeguard.sh/resources/blog/validate-twilio-webhook-signatures-without-hardcoding-parameters 2026-10-19T05:53:37.045Z weekly 0.7 https://safeguard.sh/resources/blog/vault-jwt-auth-bound-claims-for-ci-jobs 2026-10-19T05:53:37.148Z weekly 0.7 https://safeguard.sh/resources/blog/vcpkg-binary-caching-who-gets-write-access 2026-10-19T05:53:37.239Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-script-on-page-hotlinked-or-via-tag-manager-three-setups-compared 2026-10-19T05:53:37.331Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-sent-an-sbom-what-to-check-first 2026-10-19T05:53:37.427Z weekly 0.7 https://safeguard.sh/resources/blog/vendor-vulnerability-response-metrics-time-to-match-and-time-to-vex 2026-10-19T05:53:37.528Z weekly 0.7 https://safeguard.sh/resources/blog/vendored-code-provenance-file-what-fields-to-record 2026-10-19T05:53:37.633Z weekly 0.7 https://safeguard.sh/resources/blog/verbose-error-messages-and-stack-traces-what-scanners-flag 2026-10-19T05:53:37.736Z weekly 0.7 https://safeguard.sh/resources/blog/verdaccio-package-access-rules-all-authenticated-anonymous 2026-10-19T05:53:37.925Z weekly 0.7 https://safeguard.sh/resources/blog/verdaccio-security-defaults-to-review-before-exposing-it 2026-10-19T05:53:38.022Z weekly 0.7 https://safeguard.sh/resources/blog/verdaccio-uplink-auth-token-env-or-inline-in-config 2026-10-19T05:53:38.112Z weekly 0.7 https://safeguard.sh/resources/blog/verdaccio-uplink-settings-maxage-timeout-and-failure-behavior 2026-10-19T05:53:38.203Z weekly 0.7 https://safeguard.sh/resources/blog/verify-a-reproducible-build-when-the-release-is-signed 2026-10-19T05:53:38.296Z weekly 0.7 https://safeguard.sh/resources/blog/verify-a-scanner-binary-before-you-run-it-in-ci 2026-10-19T05:53:38.409Z weekly 0.7 https://safeguard.sh/resources/blog/verify-a-security-fix-before-closing-the-ticket-qa-checklist 2026-10-19T05:53:38.513Z weekly 0.7 https://safeguard.sh/resources/blog/verify-a-shared-sbom-was-not-altered-checksum-or-signature 2026-10-19T05:53:38.610Z weekly 0.7 https://safeguard.sh/resources/blog/verify-a-slack-request-signature-and-reject-replays 2026-10-19T05:53:38.717Z weekly 0.7 https://safeguard.sh/resources/blog/verify-an-open-source-scanner-download-before-you-run-it 2026-10-19T05:53:38.820Z weekly 0.7 https://safeguard.sh/resources/blog/verify-an-sca-finding-by-hand 2026-10-19T05:53:38.926Z weekly 0.7 https://safeguard.sh/resources/blog/verify-node-js-download-in-ci-shasums-signature 2026-10-19T05:53:39.042Z weekly 0.7 https://safeguard.sh/resources/blog/verify-resolved-versions-after-switching-package-managers 2026-10-19T05:53:39.143Z weekly 0.7 https://safeguard.sh/resources/blog/verify-scanner-reachability-labels-by-hand 2026-10-19T05:53:39.240Z weekly 0.7 https://safeguard.sh/resources/blog/verify-the-package-version-an-ai-fix-recommends 2026-10-19T05:53:39.337Z weekly 0.7 https://safeguard.sh/resources/blog/verify-upstream-signed-tags-before-syncing-your-fork 2026-10-19T05:53:39.455Z weekly 0.7 https://safeguard.sh/resources/blog/version-and-changelog-for-a-merged-dependency-policy 2026-10-19T05:53:39.576Z weekly 0.7 https://safeguard.sh/resources/blog/version-numbers-for-shared-sboms-and-security-evidence 2026-10-19T05:53:39.688Z weekly 0.7 https://safeguard.sh/resources/blog/vet-a-new-open-source-package-in-ten-minutes 2026-10-19T05:53:39.799Z weekly 0.7 https://safeguard.sh/resources/blog/vet-a-package-an-ai-tool-added-in-five-minutes 2026-10-19T05:53:39.914Z weekly 0.7 https://safeguard.sh/resources/blog/vex-follow-up-after-a-customer-notice-what-to-send-and-when 2026-10-19T05:53:40.019Z weekly 0.7 https://safeguard.sh/resources/blog/vex-publication-workflow-roles-approvals-and-steps 2026-10-19T05:53:40.234Z weekly 0.7 https://safeguard.sh/resources/blog/vex-status-in-sca-reports-not-affected 2026-10-19T05:53:40.341Z weekly 0.7 https://safeguard.sh/resources/blog/vite-dev-server-host-and-allowedhosts-is-it-safe-to-expose 2026-10-19T05:53:40.452Z weekly 0.7 https://safeguard.sh/resources/blog/vllm-allowed-media-domains-ssrf-multimodal-inputs 2026-10-19T05:53:40.564Z weekly 0.7 https://safeguard.sh/resources/blog/vllm-api-key-does-not-protect-every-endpoint 2026-10-19T05:53:40.676Z weekly 0.7 https://safeguard.sh/resources/blog/vllm-dev-mode-profiler-flags-never-in-production 2026-10-19T05:53:40.786Z weekly 0.7 https://safeguard.sh/resources/blog/vllm-multi-node-inference-network-isolation 2026-10-19T05:53:41.024Z weekly 0.7 https://safeguard.sh/resources/blog/volunteer-onboarding-security-checklist-first-day 2026-10-19T05:53:41.206Z weekly 0.7 https://safeguard.sh/resources/blog/vs-code-allowedextensions-policy-not-applying-checks 2026-10-19T05:53:41.310Z weekly 0.7 https://safeguard.sh/resources/blog/vs-code-publisher-trust-prompt-and-command-line-installs 2026-10-19T05:53:41.427Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerabilities-per-thousand-lines-of-code-is-it-a-fair-comparison 2026-10-19T05:53:41.538Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-age-histogram-what-executives-should-see 2026-10-19T05:53:41.647Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-alerts-at-1000-engineers-policy-as-code-and-escalation 2026-10-19T05:53:41.931Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-alerts-at-200-engineers-route-by-service-owner 2026-10-19T05:53:42.046Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-backlog-inflow-vs-outflow-is-it-growing 2026-10-19T05:53:42.160Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-database-or-scanner-what-is-the-difference 2026-10-19T05:53:42.264Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-exception-for-a-dev-only-dependency 2026-10-19T05:53:42.379Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-exception-for-end-of-life-software-with-no-patch 2026-10-19T05:53:42.633Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-exception-for-software-your-customers-run-on-premises 2026-10-19T05:53:42.748Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-finding-fields-engineers-need 2026-10-19T05:53:42.884Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-finding-statuses-open-mitigated-accepted-fixed-verified 2026-10-19T05:53:42.987Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-fix-windows-by-tier-and-team-size 2026-10-19T05:53:43.089Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-management-evidence-package-for-an-exam 2026-10-19T05:53:43.190Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-management-for-saas-and-vendor-run-systems 2026-10-19T05:53:43.298Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-management-metrics-glossary-mttd-mttr-mtta 2026-10-19T05:53:43.498Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-management-narrative-template-situation-change-ask 2026-10-19T05:53:43.612Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-metrics-data-dictionary-template 2026-10-19T05:53:43.723Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-metrics-for-quarterly-reviews-with-engineering 2026-10-19T05:53:43.963Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-metrics-that-trigger-a-decision-not-just-a-chart 2026-10-19T05:53:44.121Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-policy-wording-for-reachability-and-exploitability 2026-10-19T05:53:44.228Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-prioritization-for-small-teams-without-a-cmdb 2026-10-19T05:53:44.332Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-report-tracker-fields-for-a-small-team 2026-10-19T05:53:44.440Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-response-metrics-for-a-small-product-team 2026-10-19T05:53:44.552Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-response-terms-a-public-buyer-can-ask-a-software-vendor 2026-10-19T05:53:44.663Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-scan-cadence-on-commit-on-schedule-or-both 2026-10-19T05:53:44.777Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-scan-vs-penetration-test-on-campus-who-approves 2026-10-19T05:53:44.892Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-sla-clock-start-and-stop-rules 2026-10-19T05:53:45.000Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-triage-faq-page-for-engineers-what-to-answer 2026-10-19T05:53:45.106Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-vs-exploit-vs-malware-what-is-the-difference 2026-10-19T05:53:45.214Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerability-words-non-security-teams-misread 2026-10-19T05:53:45.318Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerable-dependency-with-no-patch-what-a-payments-team-can-do 2026-10-19T05:53:45.424Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerable-function-column-in-sca-report 2026-10-19T05:53:45.540Z weekly 0.7 https://safeguard.sh/resources/blog/vulnerable-transitive-dependency-in-your-sbom-fix-options 2026-10-19T05:53:45.656Z weekly 0.7 https://safeguard.sh/resources/blog/warm-ci-dependency-caches-before-a-release-day-burst 2026-10-19T05:53:45.771Z weekly 0.7 https://safeguard.sh/resources/blog/watch-a-github-repo-for-security-alerts-and-releases-only 2026-10-19T05:53:45.882Z weekly 0.7 https://safeguard.sh/resources/blog/watch-an-open-source-scanner-repo-for-releases-and-security-alerts 2026-10-19T05:53:45.990Z weekly 0.7 https://safeguard.sh/resources/blog/we-found-an-unknown-service-or-tool-first-day-triage 2026-10-19T05:53:46.091Z weekly 0.7 https://safeguard.sh/resources/blog/web-push-payload-encryption-what-the-push-service-sees 2026-10-19T05:53:46.292Z weekly 0.7 https://safeguard.sh/resources/blog/web-push-ttl-and-urgency-headers-explained 2026-10-19T05:53:46.404Z weekly 0.7 https://safeguard.sh/resources/blog/webauthn-registration-ceremony-what-your-server-must-check 2026-10-19T05:53:46.517Z weekly 0.7 https://safeguard.sh/resources/blog/webauthn-rp-id-and-origin-why-a-passkey-works-only-on-your-domain 2026-10-19T05:53:46.634Z weekly 0.7 https://safeguard.sh/resources/blog/webauthn-signature-counter-what-to-do-when-it-does-not-increase 2026-10-19T05:53:46.748Z weekly 0.7 https://safeguard.sh/resources/blog/webhook-events-arrive-out-of-order-how-to-handle-them 2026-10-19T05:53:46.925Z weekly 0.7 https://safeguard.sh/resources/blog/webhook-or-polling-for-security-automation-which-to-use 2026-10-19T05:53:47.046Z weekly 0.7 https://safeguard.sh/resources/blog/webhook-retry-schedule-backoff-and-jitter-explained 2026-10-19T05:53:47.158Z weekly 0.7 https://safeguard.sh/resources/blog/weekly-dependency-update-day-or-continuous-updates 2026-10-19T05:53:47.261Z weekly 0.7 https://safeguard.sh/resources/blog/weekly-exception-queue-review-checklist 2026-10-19T05:53:47.373Z weekly 0.7 https://safeguard.sh/resources/blog/weekly-incident-report-share-learnings-inside-the-company 2026-10-19T05:53:47.480Z weekly 0.7 https://safeguard.sh/resources/blog/weekly-multi-environment-vulnerability-review-agenda-for-app-teams 2026-10-19T05:53:47.627Z weekly 0.7 https://safeguard.sh/resources/blog/weekly-patch-review-agenda-for-os-and-dependency-updates 2026-10-19T05:53:47.736Z weekly 0.7 https://safeguard.sh/resources/blog/weekly-security-sync-agenda-product-security-platform-compliance 2026-10-19T05:53:47.852Z weekly 0.7 https://safeguard.sh/resources/blog/weekly-vulnerability-triage-time-budget-by-team-size 2026-10-19T05:53:47.959Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-ci-runner-image-should-not-contain 2026-10-19T05:53:48.060Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-data-processing-addendum-for-a-security-tool-should-cover 2026-10-19T05:53:48.231Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-dependency-scanning-poc-cannot-tell-you 2026-10-19T05:53:48.334Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-funding-yml-file-tells-you-about-a-dependency 2026-10-19T05:53:48.445Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-github-release-page-should-contain-for-security-minded-users 2026-10-19T05:53:48.556Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-jwt-access-token-should-contain-rfc-9068-profile 2026-10-19T05:53:48.665Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-leaver-ticket-should-record-for-engineering-offboarding 2026-10-19T05:53:48.777Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-major-version-bump-means-for-your-scanner-in-ci 2026-10-19T05:53:49.001Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-no-copyleft-clause-means-technically 2026-10-19T05:53:49.107Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-payment-sandbox-cannot-tell-you-before-launch 2026-10-19T05:53:49.209Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-private-terraform-module-registry-must-implement 2026-10-19T05:53:49.445Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-reviewer-checks-first-when-you-hand-over-an-sbom 2026-10-19T05:53:49.560Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-roadmap-risk-register-entry-for-a-dependency-should-say 2026-10-19T05:53:49.985Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-security-bug-report-should-include-for-developers 2026-10-19T05:53:50.399Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-security-document-request-form-should-collect 2026-10-19T05:53:50.516Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-security-md-file-tells-you-about-a-dependency 2026-10-19T05:53:50.632Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-test-gate-on-a-fix-pr-cannot-catch 2026-10-19T05:53:50.746Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-verified-commit-badge-means-for-dependency-trust 2026-10-19T05:53:50.864Z weekly 0.7 https://safeguard.sh/resources/blog/what-a-wildcard-extension-blocklist-does-to-installed-extensions 2026-10-19T05:53:50.969Z weekly 0.7 https://safeguard.sh/resources/blog/what-access-should-a-new-developer-get-on-day-one 2026-10-19T05:53:51.415Z weekly 0.7 https://safeguard.sh/resources/blog/what-acquirers-do-with-your-sbom-after-signing 2026-10-19T05:53:52.323Z weekly 0.7 https://safeguard.sh/resources/blog/what-advisory-data-licenses-mean-for-your-scanner-stack 2026-10-19T05:53:53.432Z weekly 0.7 https://safeguard.sh/resources/blog/what-alwayspullimages-admission-plugin-does 2026-10-19T05:53:54.245Z weekly 0.7 https://safeguard.sh/resources/blog/what-an-exception-audit-export-should-contain 2026-10-19T05:53:54.941Z weekly 0.7 https://safeguard.sh/resources/blog/what-an-llm-should-not-decide-alone-in-vulnerability-management 2026-10-19T05:53:55.064Z weekly 0.7 https://safeguard.sh/resources/blog/what-an-ollama-modelfile-controls-and-what-to-review 2026-10-19T05:53:55.924Z weekly 0.7 https://safeguard.sh/resources/blog/what-an-sbom-does-not-tell-you 2026-10-19T05:53:56.028Z weekly 0.7 https://safeguard.sh/resources/blog/what-an-sbom-download-link-on-a-trust-page-needs 2026-10-19T05:53:56.132Z weekly 0.7 https://safeguard.sh/resources/blog/what-api-stability-signals-to-check-before-adopting-a-library 2026-10-19T05:53:56.239Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-cedar-permit-and-forbid-policies 2026-10-19T05:53:56.343Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-externalparameters-in-slsa-provenance 2026-10-19T05:53:56.448Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-github-artifact-attestations-do-small-teams-need-them 2026-10-19T05:53:57.082Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-incoming-and-outgoing-licenses-in-an-open-source-review 2026-10-19T05:53:57.227Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-npm-lifecycle-scripts-and-why-should-new-developers-care 2026-10-19T05:53:57.342Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-omniborid-and-swhid-in-a-cyclonedx-component 2026-10-19T05:53:57.440Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-shadow-it-shadow-ai-and-shadow-dependencies 2026-10-19T05:53:57.533Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-the-lifecycle-phases-of-cloud-native-security 2026-10-19T05:53:57.626Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-the-owasp-citizen-development-top-10-risks 2026-10-19T05:53:57.729Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-wordpress-drop-ins-and-why-list-them-in-a-plugin-audit 2026-10-19T05:53:57.835Z weekly 0.7 https://safeguard.sh/resources/blog/what-are-wordpress-mu-plugins-and-who-should-own-them 2026-10-19T05:53:57.936Z weekly 0.7 https://safeguard.sh/resources/blog/what-artifacts-can-an-agency-ask-for-besides-the-attestation 2026-10-19T05:53:58.171Z weekly 0.7 https://safeguard.sh/resources/blog/what-audit-evidence-disappears-with-ephemeral-ci-runners 2026-10-19T05:53:59.111Z weekly 0.7 https://safeguard.sh/resources/blog/what-audit-trail-should-security-automation-keep 2026-10-19T05:53:59.202Z weekly 0.7 https://safeguard.sh/resources/blog/what-auditors-ask-about-ai-agent-access-and-evidence-to-bring 2026-10-19T05:53:59.297Z weekly 0.7 https://safeguard.sh/resources/blog/what-baseline-should-you-diff-an-sbom-against 2026-10-19T05:53:59.405Z weekly 0.7 https://safeguard.sh/resources/blog/what-belongs-in-a-disclosure-and-remediation-policy-ssdf-rv-1-3 2026-10-19T05:53:59.507Z weekly 0.7 https://safeguard.sh/resources/blog/what-belongs-in-a-helm-chart-sbom 2026-10-19T05:53:59.610Z weekly 0.7 https://safeguard.sh/resources/blog/what-belongs-in-a-pre-commit-hook-for-security-checks 2026-10-19T05:53:59.715Z weekly 0.7 https://safeguard.sh/resources/blog/what-belongs-in-scanner-configuration-as-code 2026-10-19T05:53:59.815Z weekly 0.7 https://safeguard.sh/resources/blog/what-blocks-enterprise-saas-deals-in-security-review 2026-10-19T05:53:59.927Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-a-babel-plugin-or-preset-do-to-your-build 2026-10-19T05:54:00.019Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-a-backstage-software-template-do-to-your-repos 2026-10-19T05:54:00.111Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-a-recorded-security-demo-prove 2026-10-19T05:54:00.202Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-a-vs-code-extension-access-on-your-machine 2026-10-19T05:54:00.294Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-an-ai-coding-assistant-see-and-change-on-my-computer 2026-10-19T05:54:00.388Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-an-ai-desktop-app-see-on-your-computer 2026-10-19T05:54:01.446Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-an-atlassian-forge-app-not-do-runtime-limits 2026-10-19T05:54:01.667Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-an-attacker-do-with-a-leaked-ios-signing-certificate 2026-10-19T05:54:01.768Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-an-attacker-do-with-a-stolen-ci-secret 2026-10-19T05:54:01.868Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-an-attacker-do-with-a-taken-over-subdomain 2026-10-19T05:54:01.972Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-an-ide-security-scan-catch-and-what-does-it-miss 2026-10-19T05:54:02.066Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-built-in-click-and-form-variables-capture-in-tag-manager 2026-10-19T05:54:02.158Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-go-wrong-with-an-ai-agent-five-kinds-of-failure 2026-10-19T05:54:02.253Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-product-managers-learn-from-an-sbom-for-roadmap-planning 2026-10-19T05:54:02.348Z weekly 0.7 https://safeguard.sh/resources/blog/what-can-renovate-update-in-terraform-and-helm-repositories 2026-10-19T05:54:02.449Z weekly 0.7 https://safeguard.sh/resources/blog/what-causes-open-source-maintainer-burnout-and-what-consumers-can-do 2026-10-19T05:54:02.553Z weekly 0.7 https://safeguard.sh/resources/blog/what-certificate-identity-and-issuer-mean-when-verifying-a-release 2026-10-19T05:54:02.659Z weekly 0.7 https://safeguard.sh/resources/blog/what-changed-in-the-2026-07-28-mcp-spec-for-buyers 2026-10-19T05:54:02.775Z weekly 0.7 https://safeguard.sh/resources/blog/what-changes-when-a-lambda-uses-a-non-aws-base-image 2026-10-19T05:54:03.296Z weekly 0.7 https://safeguard.sh/resources/blog/what-changes-when-you-network-activate-a-wordpress-plugin 2026-10-19T05:54:04.115Z weekly 0.7 https://safeguard.sh/resources/blog/what-changes-when-you-upgrade-a-third-party-sdk-in-a-shopping-app 2026-10-19T05:54:04.206Z weekly 0.7 https://safeguard.sh/resources/blog/what-cisa-product-security-bad-practices-mean-for-software-buyers 2026-10-19T05:54:04.300Z weekly 0.7 https://safeguard.sh/resources/blog/what-code-does-a-security-vendors-ai-see-data-handling-questions 2026-10-19T05:54:04.394Z weekly 0.7 https://safeguard.sh/resources/blog/what-controls-should-a-new-plugin-store-have-on-launch-day 2026-10-19T05:54:04.492Z weekly 0.7 https://safeguard.sh/resources/blog/what-controls-the-deploy-stage-of-an-exposure-window 2026-10-19T05:54:04.597Z weekly 0.7 https://safeguard.sh/resources/blog/what-counts-as-a-breaking-change-semver-major-explained 2026-10-19T05:54:05.432Z weekly 0.7 https://safeguard.sh/resources/blog/what-counts-as-a-malicious-package-in-the-openssf-reports 2026-10-19T05:54:05.553Z weekly 0.7 https://safeguard.sh/resources/blog/what-counts-as-a-material-change-that-triggers-a-rescan 2026-10-19T05:54:05.675Z weekly 0.7 https://safeguard.sh/resources/blog/what-counts-as-one-vulnerability-cve-finding-or-instance 2026-10-19T05:54:05.777Z weekly 0.7 https://safeguard.sh/resources/blog/what-counts-as-open-source-the-osd-ten-criteria 2026-10-19T05:54:05.890Z weekly 0.7 https://safeguard.sh/resources/blog/what-counts-as-patched-restart-redeploy-verify 2026-10-19T05:54:05.986Z weekly 0.7 https://safeguard.sh/resources/blog/what-counts-as-remediated-fixed-mitigated-or-accepted 2026-10-19T05:54:06.083Z weekly 0.7 https://safeguard.sh/resources/blog/what-counts-as-sensitive-customer-information-under-regulation-s-p 2026-10-19T05:54:06.193Z weekly 0.7 https://safeguard.sh/resources/blog/what-counts-as-triage-history-when-you-switch-dependency-scanners 2026-10-19T05:54:06.296Z weekly 0.7 https://safeguard.sh/resources/blog/what-cvss-score-counts-as-critical-rating-bands-table 2026-10-19T05:54:06.395Z weekly 0.7 https://safeguard.sh/resources/blog/what-data-does-a-dependency-scanner-send-out 2026-10-19T05:54:06.509Z weekly 0.7 https://safeguard.sh/resources/blog/what-data-does-a-security-platform-store-about-you 2026-10-19T05:54:06.609Z weekly 0.7 https://safeguard.sh/resources/blog/what-data-goes-into-an-epss-score 2026-10-19T05:54:06.709Z weekly 0.7 https://safeguard.sh/resources/blog/what-data-leaves-your-network-in-a-dependency-scan 2026-10-19T05:54:06.812Z weekly 0.7 https://safeguard.sh/resources/blog/what-data-should-a-read-only-ai-agent-be-able-to-see 2026-10-19T05:54:06.925Z weekly 0.7 https://safeguard.sh/resources/blog/what-default-timeout-should-an-sdk-ship 2026-10-19T05:54:07.038Z weekly 0.7 https://safeguard.sh/resources/blog/what-dependency-changes-should-trigger-a-hipaa-security-re-evaluation 2026-10-19T05:54:07.140Z weekly 0.7 https://safeguard.sh/resources/blog/what-dependency-risk-signals-exist-beyond-cves 2026-10-19T05:54:07.451Z weekly 0.7 https://safeguard.sh/resources/blog/what-dependency-scan-evidence-to-give-a-soc-2-auditor 2026-10-19T05:54:07.704Z weekly 0.7 https://safeguard.sh/resources/blog/what-developer-personal-data-does-a-security-platform-hold 2026-10-19T05:54:07.821Z weekly 0.7 https://safeguard.sh/resources/blog/what-developers-should-learn-about-dependencies-training-outline 2026-10-19T05:54:07.987Z weekly 0.7 https://safeguard.sh/resources/blog/what-developers-should-see-about-dependency-risk-in-a-portal 2026-10-19T05:54:08.119Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-advisory-ids-like-cve-ghsa-usn-and-dsa-mean 2026-10-19T05:54:08.235Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-coop-and-coep-do-cross-origin-isolation 2026-10-19T05:54:08.336Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-customers-do-with-an-sbom-you-send-them 2026-10-19T05:54:08.438Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-enterprise-buyers-see-about-your-domain-before-the-first-call 2026-10-19T05:54:08.543Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-git-transfer-fsckobjects-and-protocol-allow-do 2026-10-19T05:54:08.662Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-maintainer-contributor-and-committer-mean-in-open-source 2026-10-19T05:54:08.775Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-npm-trusted-publishers-mean-for-someone-adopting-a-package 2026-10-19T05:54:08.877Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-pypi-attestations-prove-for-a-scientific-python-package 2026-10-19T05:54:09.060Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-scanner-terms-like-match-enrich-and-triage-mean 2026-10-19T05:54:09.413Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-slim-bookworm-and-dated-tags-mean-in-a-from-line 2026-10-19T05:54:09.516Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-ssvc-decisions-track-attend-and-act-mean 2026-10-19T05:54:09.622Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-the-id-prefixes-ghsa-cve-dsa-debian-tell-you-in-a-scan 2026-10-19T05:54:09.736Z weekly 0.7 https://safeguard.sh/resources/blog/what-do-we-tell-suppliers-about-security-requirements-ssdf-po-1-3 2026-10-19T05:54:09.841Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-0-x-sdk-version-mean-for-upgrade-risk 2026-10-19T05:54:09.940Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-conditional-approval-from-a-security-review-mean 2026-10-19T05:54:10.041Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-coverage-count-in-a-vendor-claim-measure 2026-10-19T05:54:10.140Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-customer-logo-wall-prove-about-a-security-vendor 2026-10-19T05:54:10.232Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-cvss-9-8-mean-to-an-executive 2026-10-19T05:54:10.327Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-deprecated-helm-chart-mean-for-your-cluster 2026-10-19T05:54:10.455Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-failed-dependency-review-check-mean-on-your-pr 2026-10-19T05:54:10.559Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-free-dependency-scan-actually-check 2026-10-19T05:54:10.669Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-github-actions-oidc-sub-claim-look-like 2026-10-19T05:54:10.778Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-marketplace-trust-badge-actually-prove 2026-10-19T05:54:10.877Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-percent-reduction-claim-in-a-vendor-case-study-measure 2026-10-19T05:54:10.972Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-play-integrity-verdict-tell-your-server 2026-10-19T05:54:11.067Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-policy-gate-read-from-scan-output 2026-10-19T05:54:11.157Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-product-owner-own-in-secure-development 2026-10-19T05:54:11.257Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-red-amber-green-security-status-hide 2026-10-19T05:54:11.350Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-removed-component-in-an-sbom-diff-mean 2026-10-19T05:54:11.522Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-scrum-master-do-for-security 2026-10-19T05:54:11.628Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-security-ide-plugin-send-home 2026-10-19T05:54:11.823Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-stable-branch-accept-the-linux-kernel-rules-as-a-model 2026-10-19T05:54:11.922Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-student-data-privacy-agreement-say-about-subprocessors 2026-10-19T05:54:12.015Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-third-party-vendor-learn-when-your-page-loads-its-script 2026-10-19T05:54:12.107Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-unity-package-signature-status-mean-and-what-to-do 2026-10-19T05:54:12.197Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-verified-plugin-publisher-badge-prove-and-what-not 2026-10-19T05:54:12.290Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-vulnerability-disclosure-policy-tell-you-about-a-vendor 2026-10-19T05:54:12.387Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-a-webassembly-plugin-sandbox-not-protect-you-from 2026-10-19T05:54:12.488Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-actively-exploited-mean-in-a-security-notice 2026-10-19T05:54:12.589Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-ai-agent-identity-answer-who-what-and-what-happened 2026-10-19T05:54:12.696Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-allow-always-mean-for-an-mcp-connector-tool 2026-10-19T05:54:12.803Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-an-sbom-consumer-do-in-the-cisa-sharing-lifecycle 2026-10-19T05:54:12.906Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-an-sbom-show-for-a-distroless-or-minimal-container-image 2026-10-19T05:54:13.001Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-an-unresolved-component-mean-in-a-scan-or-sbom 2026-10-19T05:54:13.090Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-cargo-locked-do-and-when-to-use-it 2026-10-19T05:54:13.181Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-complete-and-accurate-mean-for-an-exported-report 2026-10-19T05:54:13.272Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-compliant-with-nist-ssdf-or-slsa-mean-on-a-vendor-page 2026-10-19T05:54:13.367Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-cran-check-before-accepting-an-r-package 2026-10-19T05:54:13.495Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-deb12u1-mean-in-a-package-version-container-scan 2026-10-19T05:54:13.592Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-default-allow-false-do-in-rego 2026-10-19T05:54:13.690Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-defaultstatus-unknown-mean-in-a-cve-record 2026-10-19T05:54:13.781Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-docker-host-networking-expose-to-a-container 2026-10-19T05:54:13.874Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-docker-official-image-review-actually-check 2026-10-19T05:54:13.982Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-each-build-system-sbom-generator-read-cheat-sheet 2026-10-19T05:54:14.077Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-epss-mean-for-a-non-security-manager 2026-10-19T05:54:14.166Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-exploitability-mean-in-cvss-vex-and-kev 2026-10-19T05:54:14.259Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-ferpa-mean-for-the-dependencies-in-a-student-data-app 2026-10-19T05:54:14.350Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-fix-available-mean-and-when-can-we-tell-customers 2026-10-19T05:54:14.441Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-fixed-in-mean-in-an-sca-report 2026-10-19T05:54:14.536Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-flaw-half-life-mean-in-a-patch-report 2026-10-19T05:54:14.636Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-force-installing-a-browser-extension-grant-it 2026-10-19T05:54:14.738Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-go-mod-verify-actually-check-on-your-machine 2026-10-19T05:54:14.838Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-google-consent-mode-do-and-not-do 2026-10-19T05:54:14.934Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-gradio-share-true-expose-from-your-notebook 2026-10-19T05:54:15.031Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-id-token-write-permission-do 2026-10-19T05:54:15.133Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-incompatible-mean-on-a-go-module-version 2026-10-19T05:54:15.413Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-insecure-registries-do-in-docker-and-what-to-use-instead 2026-10-19T05:54:15.511Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-ios-app-attest-prove-to-your-api 2026-10-19T05:54:15.611Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-it-cost-to-leave-a-dependency 2026-10-19T05:54:15.711Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-legal-need-to-know-about-a-vulnerability-fact-sheet 2026-10-19T05:54:15.813Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-library-mean-in-a-docker-hub-image-name 2026-10-19T05:54:15.923Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-managed-mean-in-a-security-platform-five-levels 2026-10-19T05:54:16.024Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-manual-mean-as-a-default-for-automated-remediation 2026-10-19T05:54:16.123Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-mean-time-to-detect-hide-about-what-you-never-detected 2026-10-19T05:54:16.225Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-network-activated-mean-for-wordpress-plugin-risk 2026-10-19T05:54:16.325Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-nist-ps-4-expect-when-a-developer-is-terminated 2026-10-19T05:54:16.423Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-npm-audit-signatures-verify-and-what-it-does-not 2026-10-19T05:54:16.529Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-nvd-lowest-priority-not-scheduled-mean 2026-10-19T05:54:16.666Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-owasp-a05-injection-cover-in-2025 2026-10-19T05:54:16.768Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-papermill-run-when-you-parameterize-a-notebook 2026-10-19T05:54:16.879Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-pinned-mean-in-each-package-ecosystem 2026-10-19T05:54:17.000Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-presently-makes-consistent-use-mean-in-the-attestation 2026-10-19T05:54:17.102Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-real-time-mean-in-a-security-vendor-claim 2026-10-19T05:54:17.206Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-resolveddependencies-in-provenance-promise 2026-10-19T05:54:17.305Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-secure-by-design-mean-for-a-small-fintech-engineering-team 2026-10-19T05:54:17.508Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-security-mode-mean-for-a-python-release-branch 2026-10-19T05:54:17.789Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-slsa-mean-on-a-software-vendors-page 2026-10-19T05:54:17.881Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-spdxref-mean-spdx-identifier-rules 2026-10-19T05:54:17.976Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-ssdf-pw-1-3-mean-by-standardized-security-features 2026-10-19T05:54:18.069Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-stapling-a-notarization-ticket-do 2026-10-19T05:54:18.160Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-supports-npm-mean-ecosystem-support-levels 2026-10-19T05:54:18.253Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-apache-attic-mean-for-a-dependency 2026-10-19T05:54:18.345Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-caret-mean-in-package-json-versions 2026-10-19T05:54:18.435Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-fixed-version-mean-in-a-container-scan-finding 2026-10-19T05:54:18.524Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-nodejs-security-disclosure-policy-promise-reporters 2026-10-19T05:54:18.617Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-nvm-install-script-change-on-your-machine 2026-10-19T05:54:18.714Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-nydfs-ciso-report-need-from-engineering 2026-10-19T05:54:18.812Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-openssf-best-practices-badge-tell-you-about-a-project 2026-10-19T05:54:18.909Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-requires-plugins-header-do-in-wordpress 2026-10-19T05:54:19.005Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-spark-packages-option-download-at-submit-time 2026-10-19T05:54:19.096Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-terraform-lock-file-protect 2026-10-19T05:54:19.186Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-update-uri-header-do-for-custom-wordpress-plugins 2026-10-19T05:54:19.277Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-vs-code-marketplace-check-before-an-extension-goes-live 2026-10-19T05:54:19.372Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-the-year-in-a-cve-id-mean 2026-10-19T05:54:19.468Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-trust-remote-code-true-actually-do 2026-10-19T05:54:19.568Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-unknown-mean-in-an-sbom-you-send-a-customer 2026-10-19T05:54:19.668Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-upstream-first-mean-for-open-source-security-patches 2026-10-19T05:54:19.767Z weekly 0.7 https://safeguard.sh/resources/blog/what-does-xcode-sdk-signature-validation-check-and-not-check 2026-10-19T05:54:19.984Z weekly 0.7 https://safeguard.sh/resources/blog/what-each-security-incident-timeline-entry-needs 2026-10-19T05:54:20.235Z weekly 0.7 https://safeguard.sh/resources/blog/what-engineering-evidence-can-a-fintech-share-with-a-bank-partner 2026-10-19T05:54:20.326Z weekly 0.7 https://safeguard.sh/resources/blog/what-enrichment-adds-to-a-vulnerability-finding 2026-10-19T05:54:20.571Z weekly 0.7 https://safeguard.sh/resources/blog/what-events-should-trigger-a-re-review-of-an-adopted-dependency 2026-10-19T05:54:20.673Z weekly 0.7 https://safeguard.sh/resources/blog/what-evidence-ends-a-dependency-severity-dispute 2026-10-19T05:54:20.775Z weekly 0.7 https://safeguard.sh/resources/blog/what-evidence-proves-a-vulnerability-was-fixed 2026-10-19T05:54:20.876Z weekly 0.7 https://safeguard.sh/resources/blog/what-evidence-should-an-ai-security-tool-produce 2026-10-19T05:54:20.970Z weekly 0.7 https://safeguard.sh/resources/blog/what-evidence-should-dependency-intake-keep-for-auditors 2026-10-19T05:54:21.062Z weekly 0.7 https://safeguard.sh/resources/blog/what-evidence-shows-an-auditor-you-control-third-party-models 2026-10-19T05:54:21.154Z weekly 0.7 https://safeguard.sh/resources/blog/what-evidence-supports-each-vulnerability-exception-reason 2026-10-19T05:54:21.244Z weekly 0.7 https://safeguard.sh/resources/blog/what-fields-a-third-party-integration-record-needs 2026-10-19T05:54:21.334Z weekly 0.7 https://safeguard.sh/resources/blog/what-fields-belong-on-an-approved-software-list 2026-10-19T05:54:21.429Z weekly 0.7 https://safeguard.sh/resources/blog/what-fields-should-a-risk-acceptance-ticket-have 2026-10-19T05:54:21.526Z weekly 0.7 https://safeguard.sh/resources/blog/what-fields-should-a-vulnerability-finding-contain 2026-10-19T05:54:21.622Z weekly 0.7 https://safeguard.sh/resources/blog/what-github-actions-secret-masking-cannot-hide 2026-10-19T05:54:21.721Z weekly 0.7 https://safeguard.sh/resources/blog/what-github-secret-scanning-covers-and-what-it-leaves-to-you 2026-10-19T05:54:21.821Z weekly 0.7 https://safeguard.sh/resources/blog/what-goes-in-a-dependency-risk-packet-for-hospital-security-reviewers 2026-10-19T05:54:21.922Z weekly 0.7 https://safeguard.sh/resources/blog/what-goes-in-a-security-advisory-after-you-fix-a-reported-bug 2026-10-19T05:54:22.018Z weekly 0.7 https://safeguard.sh/resources/blog/what-goes-in-a-software-supply-chain-security-charter 2026-10-19T05:54:22.113Z weekly 0.7 https://safeguard.sh/resources/blog/what-goes-in-a-supply-chain-evidence-pack-for-a-customer-review 2026-10-19T05:54:22.208Z weekly 0.7 https://safeguard.sh/resources/blog/what-goes-in-an-emergency-security-change-request 2026-10-19T05:54:22.300Z weekly 0.7 https://safeguard.sh/resources/blog/what-goes-in-an-offline-fallback-bundle-for-ci-builds 2026-10-19T05:54:22.633Z weekly 0.7 https://safeguard.sh/resources/blog/what-goes-in-an-sbom-for-a-wordpress-site 2026-10-19T05:54:22.802Z weekly 0.7 https://safeguard.sh/resources/blog/what-happened-to-http-token-binding-and-what-replaced-it 2026-10-19T05:54:23.219Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-between-a-plugin-policy-warning-and-takedown 2026-10-19T05:54:23.700Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-if-you-ignore-dependency-updates-for-a-year 2026-10-19T05:54:23.799Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-a-contractors-local-clone-after-removal 2026-10-19T05:54:23.899Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-a-developers-forks-and-local-copies-after-removal 2026-10-19T05:54:23.996Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-a-low-code-app-when-its-creator-leaves 2026-10-19T05:54:24.090Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-customer-data-when-a-contract-ends 2026-10-19T05:54:24.180Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-sca-finding-ownership-after-a-reorg 2026-10-19T05:54:24.275Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-security-comments-when-the-code-moves 2026-10-19T05:54:24.371Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-your-build-when-a-hugging-face-model-repo-moves 2026-10-19T05:54:24.467Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-to-your-data-when-you-cancel-a-security-platform 2026-10-19T05:54:24.698Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-a-cloud-run-functions-runtime-is-deprecated 2026-10-19T05:54:24.818Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-a-customer-forwards-your-security-document-link 2026-10-19T05:54:26.234Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-a-domain-expires-redemption-and-risk 2026-10-19T05:54:26.331Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-a-github-action-repository-is-renamed-or-deleted 2026-10-19T05:54:26.433Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-a-signing-certificate-expires-by-platform 2026-10-19T05:54:26.536Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-a-vendors-ai-feature-goes-wrong-questions-to-ask 2026-10-19T05:54:26.636Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-an-ios-distribution-certificate-expires 2026-10-19T05:54:26.738Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-an-open-source-component-reaches-end-of-life 2026-10-19T05:54:26.840Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-an-rpa-bot-sees-an-unexpected-screen 2026-10-19T05:54:26.940Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-cran-archives-an-r-package 2026-10-19T05:54:27.040Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-someone-moves-a-git-tag-you-already-pulled 2026-10-19T05:54:27.130Z weekly 0.7 https://safeguard.sh/resources/blog/what-happens-when-you-transfer-an-npm-package-to-the-npm-account 2026-10-19T05:54:27.224Z weekly 0.7 https://safeguard.sh/resources/blog/what-hidden-state-does-a-long-lived-ci-agent-hold 2026-10-19T05:54:27.316Z weekly 0.7 https://safeguard.sh/resources/blog/what-hugging-face-gated-models-do-and-do-not-mean 2026-10-19T05:54:29.042Z weekly 0.7 https://safeguard.sh/resources/blog/what-if-a-customer-wants-an-sbom-in-a-format-you-do-not-produce 2026-10-19T05:54:29.139Z weekly 0.7 https://safeguard.sh/resources/blog/what-if-a-dependency-vanishes-from-the-registry-can-you-still-build 2026-10-19T05:54:29.552Z weekly 0.7 https://safeguard.sh/resources/blog/what-if-a-security-tool-trial-finds-almost-nothing 2026-10-19T05:54:30.879Z weekly 0.7 https://safeguard.sh/resources/blog/what-if-a-security-tool-trial-finds-too-much 2026-10-19T05:54:30.982Z weekly 0.7 https://safeguard.sh/resources/blog/what-if-the-package-registry-itself-is-compromised 2026-10-19T05:54:31.077Z weekly 0.7 https://safeguard.sh/resources/blog/what-input-does-each-security-testing-method-need 2026-10-19T05:54:31.170Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-build-graph-and-why-security-teams-should-care 2026-10-19T05:54:31.261Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-caiq-and-how-to-fill-it-in-honestly 2026-10-19T05:54:31.354Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-captive-portal-and-is-it-safe-to-sign-in 2026-10-19T05:54:31.449Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-citizen-developer-and-why-does-security-care 2026-10-19T05:54:31.546Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-codemod-and-when-to-use-one-for-a-framework-upgrade 2026-10-19T05:54:31.648Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-compensating-control-for-a-legacy-system 2026-10-19T05:54:31.825Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-compensating-control-in-vulnerability-management 2026-10-19T05:54:32.405Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-control-narrative-and-how-do-engineers-write-one 2026-10-19T05:54:32.792Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-counter-metric-and-how-does-it-stop-gaming 2026-10-19T05:54:33.076Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-dependency-exit-plan-and-what-should-it-say 2026-10-19T05:54:33.175Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-dns-zone-transfer-axfr-and-should-you-block-it 2026-10-19T05:54:33.267Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-fourth-party-startup-supply-chain-review 2026-10-19T05:54:33.361Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-generated-api-client-and-who-is-responsible-for-it 2026-10-19T05:54:33.459Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-gpg-revocation-certificate-and-when-to-create-it 2026-10-19T05:54:33.556Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-helm-library-chart-and-who-should-own-it 2026-10-19T05:54:33.662Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-hybrid-dependency-scanning-model 2026-10-19T05:54:33.765Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-hybrid-estate-for-vulnerability-management 2026-10-19T05:54:33.866Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-just-in-time-ci-runner-and-why-use-one 2026-10-19T05:54:33.963Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-libyear-and-should-you-set-a-quarterly-target 2026-10-19T05:54:34.058Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-libyear-and-should-you-track-dependency-freshness 2026-10-19T05:54:34.149Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-meta-vulnerability-in-npm-audit-output 2026-10-19T05:54:34.241Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-normal-epss-score-mean-median-and-base-rate 2026-10-19T05:54:34.341Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-paved-road-in-security-and-is-it-a-guardrail 2026-10-19T05:54:34.438Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-pickle-file-and-why-do-ml-teams-worry-about-it 2026-10-19T05:54:34.572Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-plugin-kill-switch-and-how-do-marketplace-blocklists-work 2026-10-19T05:54:34.672Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-plugin-permission-manifest-and-what-should-it-declare 2026-10-19T05:54:34.771Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-poisoned-update-vs-a-vulnerability 2026-10-19T05:54:34.868Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-provisioning-profile-and-what-does-it-authorize 2026-10-19T05:54:34.963Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-registry-lock-and-do-you-need-one 2026-10-19T05:54:35.057Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-remote-cloud-sandbox-for-coding-agents 2026-10-19T05:54:35.149Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-remote-sandbox-for-an-ai-agent-and-what-to-ask 2026-10-19T05:54:35.248Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-security-txt-file-and-why-should-a-software-vendor-have-one 2026-10-19T05:54:35.344Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-service-catalog-and-why-vulnerability-management-needs-one 2026-10-19T05:54:35.453Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-soc-2-management-assertion 2026-10-19T05:54:35.738Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-swhid-and-how-is-it-different-from-a-doi 2026-10-19T05:54:35.840Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-tech-leads-role-in-a-secure-sdlc 2026-10-19T05:54:35.933Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-vendor-security-assessment-vs-an-audit 2026-10-19T05:54:36.023Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-a-webhook-and-how-do-security-tools-use-it 2026-10-19T05:54:36.112Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-ai-washing-in-security-products 2026-10-19T05:54:36.205Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-acr-vpat-and-why-public-buyers-ask-for-one 2026-10-19T05:54:36.305Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-ai-agent-and-how-is-it-different-from-a-chatbot 2026-10-19T05:54:36.398Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-apache-incubator-podling-before-you-adopt-it 2026-10-19T05:54:36.495Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-ast-and-why-do-static-analysis-rules-use-it-not-regex 2026-10-19T05:54:36.734Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-audience-restricted-access-token-for-partner-apis 2026-10-19T05:54:36.836Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-evil-twin-wi-fi-network-and-how-to-spot-one 2026-10-19T05:54:36.935Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-incremental-scan-and-what-can-it-safely-skip 2026-10-19T05:54:37.028Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-intake-sla-for-new-dependencies 2026-10-19T05:54:37.122Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-mcp-connector-host-client-server-for-buyers 2026-10-19T05:54:37.217Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-mcp-guardrail-and-what-does-it-do-in-plain-language 2026-10-19T05:54:37.315Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-open-source-review-board-and-who-sits-on-it 2026-10-19T05:54:37.414Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-openrail-license-and-can-you-use-the-model-commercially 2026-10-19T05:54:37.514Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-out-of-band-security-update-and-when-do-you-deploy-it 2026-10-19T05:54:37.613Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-sbom-management-platform-plain-definition 2026-10-19T05:54:37.716Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-an-unintentional-input-in-a-software-build 2026-10-19T05:54:37.822Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-build-cache-poisoning-and-how-to-recover 2026-10-19T05:54:37.924Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-builder-id-in-slsa-provenance 2026-10-19T05:54:38.022Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-context-sensitivity-in-reachability-in-plain-words 2026-10-19T05:54:38.116Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-corepack-and-why-pin-the-package-manager-version 2026-10-19T05:54:38.208Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-corepack-and-why-pin-your-package-manager-version 2026-10-19T05:54:38.299Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-dependency-drift-between-dev-staging-and-prod 2026-10-19T05:54:38.396Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-dependency-hygiene-for-a-team-using-many-languages 2026-10-19T05:54:38.494Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-developer-experience-in-security-tooling 2026-10-19T05:54:38.593Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-envelope-encryption-and-does-a-payments-startup-need-it 2026-10-19T05:54:38.691Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-fickling-and-how-do-teams-use-it-on-pickle-model-files 2026-10-19T05:54:38.798Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-grc-engineering-and-what-does-the-role-do 2026-10-19T05:54:39.199Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-iam-passrole-and-why-does-a-deploy-role-need-it 2026-10-19T05:54:39.728Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-inside-the-hugging-face-cache-folder-and-who-can-write-to-it 2026-10-19T05:54:39.824Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-keras-safe-mode-and-when-is-it-ok-to-turn-it-off 2026-10-19T05:54:39.926Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-nist-sp-800-218a-and-does-it-cover-ai-written-code 2026-10-19T05:54:40.031Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-node-modules-package-lock-json-and-flags-dev-optional-link 2026-10-19T05:54:40.139Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-openchain-iso-5230-should-a-startup-care 2026-10-19T05:54:40.244Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-par-pushed-authorization-requests-and-when-to-use-it 2026-10-19T05:54:40.353Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-patch-tuesday-and-when-does-it-happen 2026-10-19T05:54:40.471Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-pnpm-trust-policy-no-downgrade-and-release-age 2026-10-19T05:54:40.583Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-rbac-role-explosion 2026-10-19T05:54:40.700Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-rdap-and-how-does-it-differ-from-whois 2026-10-19T05:54:40.831Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-rekor-and-what-does-a-transparency-log-entry-prove 2026-10-19T05:54:40.942Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-remediation-throughput-and-how-do-you-measure-it 2026-10-19T05:54:41.039Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-repo2docker-and-does-it-make-research-reproducible 2026-10-19T05:54:41.157Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-rpa-and-what-security-risks-does-it-bring 2026-10-19T05:54:41.257Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-s2c2f-eight-practices-for-consuming-open-source-securely 2026-10-19T05:54:41.357Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-scan-freshness-and-how-to-measure-it 2026-10-19T05:54:41.464Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-script-injection-in-github-actions 2026-10-19T05:54:41.570Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-secure-by-design-for-an-edtech-vendor 2026-10-19T05:54:42.137Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-security-txt-should-a-vendor-publish-one 2026-10-19T05:54:42.378Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-shadow-automation-and-how-do-you-find-it 2026-10-19T05:54:42.481Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-shrinking-in-property-based-testing 2026-10-19T05:54:42.586Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-sms-pumping-and-how-do-you-stop-it 2026-10-19T05:54:42.685Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-software-supply-chain-governance 2026-10-19T05:54:42.792Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-aud-claim-in-a-ci-oidc-token 2026-10-19T05:54:42.897Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-cert-cc-vulnerability-notes-database-and-when-to-use-it 2026-10-19T05:54:42.992Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-gcloud-application-default-credentials-file 2026-10-19T05:54:43.095Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-hardened-runtime-and-when-do-you-need-an-exception 2026-10-19T05:54:43.192Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-jamstack-attack-surface-explained 2026-10-19T05:54:43.289Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-linux-distros-list-and-when-can-a-maintainer-use-it 2026-10-19T05:54:43.387Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-ndpa-and-why-districts-ask-software-vendors-to-sign 2026-10-19T05:54:43.507Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-openid-configuration-discovery-document 2026-10-19T05:54:43.702Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-osps-baseline-and-how-consumers-can-use-it 2026-10-19T05:54:44.440Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-rabbitmq-erlang-cookie-and-how-to-protect-it 2026-10-19T05:54:44.550Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-the-strangler-fig-pattern-security-view 2026-10-19T05:54:44.643Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-toil-in-vulnerability-management-and-what-to-automate 2026-10-19T05:54:44.737Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-trusted-types-and-does-it-help-with-tag-scripts 2026-10-19T05:54:44.830Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-vapid-for-web-push 2026-10-19T05:54:44.921Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-vs-code-restricted-mode-and-when-should-you-use-it 2026-10-19T05:54:45.017Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-windows-hotpatch-and-does-it-remove-the-reboot 2026-10-19T05:54:45.112Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-workload-identity-federation-in-plain-words 2026-10-19T05:54:45.203Z weekly 0.7 https://safeguard.sh/resources/blog/what-is-wpa3-enhanced-open-and-does-it-fix-public-wi-fi 2026-10-19T05:54:45.298Z weekly 0.7 https://safeguard.sh/resources/blog/what-iso-27001-expects-from-top-management 2026-10-19T05:54:45.394Z weekly 0.7 https://safeguard.sh/resources/blog/what-kev-epss-and-exploit-databases-cannot-tell-you 2026-10-19T05:54:45.487Z weekly 0.7 https://safeguard.sh/resources/blog/what-kev-style-deadlines-teach-fleet-owners-about-patch-targets 2026-10-19T05:54:45.581Z weekly 0.7 https://safeguard.sh/resources/blog/what-key-sizes-should-you-use-for-aes-and-rsa 2026-10-19T05:54:45.675Z weekly 0.7 https://safeguard.sh/resources/blog/what-kubectl-rollout-undo-restores-and-what-it-misses 2026-10-19T05:54:45.769Z weekly 0.7 https://safeguard.sh/resources/blog/what-limits-should-a-scan-worker-have-time-memory-and-network 2026-10-19T05:54:45.862Z weekly 0.7 https://safeguard.sh/resources/blog/what-logs-should-a-commercial-product-give-you 2026-10-19T05:54:45.961Z weekly 0.7 https://safeguard.sh/resources/blog/what-machine-readable-customer-notification-means-in-the-cra 2026-10-19T05:54:46.059Z weekly 0.7 https://safeguard.sh/resources/blog/what-makes-a-good-static-analysis-rule-message 2026-10-19T05:54:46.265Z weekly 0.7 https://safeguard.sh/resources/blog/what-makes-a-security-data-room-folder-easy-to-review 2026-10-19T05:54:46.444Z weekly 0.7 https://safeguard.sh/resources/blog/what-makes-the-chrome-web-store-review-an-extension-more-closely 2026-10-19T05:54:46.549Z weekly 0.7 https://safeguard.sh/resources/blog/what-must-a-regulation-s-p-customer-breach-notice-say 2026-10-19T05:54:46.649Z weekly 0.7 https://safeguard.sh/resources/blog/what-must-a-vendor-publish-after-a-vulnerability-is-fixed 2026-10-19T05:54:46.749Z weekly 0.7 https://safeguard.sh/resources/blog/what-must-never-appear-in-application-logs-checklist 2026-10-19T05:54:46.851Z weekly 0.7 https://safeguard.sh/resources/blog/what-never-to-put-on-a-public-security-page 2026-10-19T05:54:46.943Z weekly 0.7 https://safeguard.sh/resources/blog/what-nist-800-53-cm-3-means-for-dependency-updates 2026-10-19T05:54:47.138Z weekly 0.7 https://safeguard.sh/resources/blog/what-npm-audit-signatures-verifies-in-your-intake-pipeline 2026-10-19T05:54:47.229Z weekly 0.7 https://safeguard.sh/resources/blog/what-npm-provenance-requires-and-what-it-makes-public 2026-10-19T05:54:47.325Z weekly 0.7 https://safeguard.sh/resources/blog/what-nvd-lowest-priority-means-for-your-scanner-findings 2026-10-19T05:54:47.424Z weekly 0.7 https://safeguard.sh/resources/blog/what-open-source-material-belongs-in-a-deal-data-room 2026-10-19T05:54:47.527Z weekly 0.7 https://safeguard.sh/resources/blog/what-open-source-scanners-leave-to-you-the-triage-gap 2026-10-19T05:54:47.627Z weekly 0.7 https://safeguard.sh/resources/blog/what-outcomes-can-a-security-gate-have-define-the-states 2026-10-19T05:54:47.729Z weekly 0.7 https://safeguard.sh/resources/blog/what-owasp-api9-says-about-the-third-parties-your-api-talks-to 2026-10-19T05:54:47.828Z weekly 0.7 https://safeguard.sh/resources/blog/what-owasp-says-about-securing-a-backend-database 2026-10-19T05:54:47.927Z weekly 0.7 https://safeguard.sh/resources/blog/what-patch-evidence-to-keep-for-os-and-dependencies 2026-10-19T05:54:48.020Z weekly 0.7 https://safeguard.sh/resources/blog/what-pep-658-metadata-means-for-pip-and-your-package-mirror 2026-10-19T05:54:48.113Z weekly 0.7 https://safeguard.sh/resources/blog/what-permissions-does-a-security-vendors-ai-agent-hold-in-your-environment 2026-10-19T05:54:48.216Z weekly 0.7 https://safeguard.sh/resources/blog/what-permissions-should-a-release-workflow-have 2026-10-19T05:54:48.307Z weekly 0.7 https://safeguard.sh/resources/blog/what-permissions-should-a-security-automation-token-have 2026-10-19T05:54:48.412Z weekly 0.7 https://safeguard.sh/resources/blog/what-permissions-should-the-github-actions-token-have 2026-10-19T05:54:48.518Z weekly 0.7 https://safeguard.sh/resources/blog/what-prior-to-release-means-for-continuously-deployed-saas 2026-10-19T05:54:48.622Z weekly 0.7 https://safeguard.sh/resources/blog/what-proves-management-commitment-to-secure-development-ssdf-po-2-3 2026-10-19T05:54:48.821Z weekly 0.7 https://safeguard.sh/resources/blog/what-pull-request-dependency-review-sees-that-nightly-scans-miss 2026-10-19T05:54:48.915Z weekly 0.7 https://safeguard.sh/resources/blog/what-pytorch-security-policy-counts-as-a-vulnerability 2026-10-19T05:54:49.010Z weekly 0.7 https://safeguard.sh/resources/blog/what-reaches-end-of-life-before-january-2027-a-90-day-watchlist 2026-10-19T05:54:49.106Z weekly 0.7 https://safeguard.sh/resources/blog/what-registry-proxy-scanning-catches-that-ci-scanning-misses 2026-10-19T05:54:49.204Z weekly 0.7 https://safeguard.sh/resources/blog/what-repo2docker-installs-from-your-repo-requirements-txt-and-friends 2026-10-19T05:54:49.297Z weekly 0.7 https://safeguard.sh/resources/blog/what-runs-when-a-fork-opens-a-pull-request-on-your-template-ci 2026-10-19T05:54:49.391Z weekly 0.7 https://safeguard.sh/resources/blog/what-runs-when-you-open-an-unreal-project-init-unreal-py 2026-10-19T05:54:49.493Z weekly 0.7 https://safeguard.sh/resources/blog/what-sbom-does-a-hardware-startup-need-before-first-shipment 2026-10-19T05:54:49.593Z weekly 0.7 https://safeguard.sh/resources/blog/what-sbom-terms-should-account-managers-know 2026-10-19T05:54:49.693Z weekly 0.7 https://safeguard.sh/resources/blog/what-scopes-should-a-security-mcp-connector-ask-for 2026-10-19T05:54:49.807Z weekly 0.7 https://safeguard.sh/resources/blog/what-security-build-failure-rate-is-too-high 2026-10-19T05:54:49.912Z weekly 0.7 https://safeguard.sh/resources/blog/what-security-md-should-say-about-vulnerable-dependencies 2026-10-19T05:54:50.009Z weekly 0.7 https://safeguard.sh/resources/blog/what-security-questions-belong-in-a-pull-request-template 2026-10-19T05:54:50.116Z weekly 0.7 https://safeguard.sh/resources/blog/what-security-training-should-an-ospo-require 2026-10-19T05:54:50.352Z weekly 0.7 https://safeguard.sh/resources/blog/what-security-work-belongs-in-a-website-maintenance-retainer 2026-10-19T05:54:50.457Z weekly 0.7 https://safeguard.sh/resources/blog/what-security-work-can-safely-wait-until-year-two 2026-10-19T05:54:50.576Z weekly 0.7 https://safeguard.sh/resources/blog/what-shopify-app-requirements-say-about-scopes-and-session-tokens 2026-10-19T05:54:50.682Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-bot-opened-upgrade-pr-need-before-merge 2026-10-19T05:54:50.787Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-build-record-so-you-can-trace-a-release-later 2026-10-19T05:54:50.889Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-change-ticket-contain-fields-auditors-look-for 2026-10-19T05:54:50.982Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-ci-pipeline-credential-to-a-secrets-manager-look-like 2026-10-19T05:54:51.075Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-cli-doctor-or-bug-report-command-redact 2026-10-19T05:54:51.169Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-cli-telemetry-page-say-fields-retention-opt-out 2026-10-19T05:54:51.263Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-copy-button-on-a-code-block-copy 2026-10-19T05:54:51.359Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-dependency-health-scorecard-for-leadership-include 2026-10-19T05:54:51.464Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-dependency-review-check-block-on-a-payments-repo 2026-10-19T05:54:51.571Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-developer-handover-document-contain 2026-10-19T05:54:51.680Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-failed-security-check-tell-the-developer 2026-10-19T05:54:51.790Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-health-app-never-write-to-its-logs 2026-10-19T05:54:51.892Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-human-reviewer-skip-when-a-scanner-already-runs 2026-10-19T05:54:51.985Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-marketing-tag-vendor-contract-say-about-code-integrity 2026-10-19T05:54:52.080Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-marketplace-security-reporting-page-say 2026-10-19T05:54:52.184Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-new-developers-first-pull-request-run-through 2026-10-19T05:54:52.290Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-platform-do-when-an-ai-agent-adds-a-dependency 2026-10-19T05:54:52.390Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-plugin-marketplace-review-pipeline-automate 2026-10-19T05:54:52.662Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-post-incident-review-add-to-the-security-knowledge-base 2026-10-19T05:54:52.967Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-pull-request-security-check-summary-say 2026-10-19T05:54:53.061Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-reachability-report-contain-checklist 2026-10-19T05:54:53.155Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-saas-trust-page-say-about-its-sbom 2026-10-19T05:54:53.248Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-secrets-audit-log-record-for-a-fintech-team 2026-10-19T05:54:53.344Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-security-alert-in-slack-contain 2026-10-19T05:54:53.629Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-security-check-do-on-a-huge-pull-request 2026-10-19T05:54:54.728Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-security-comment-say-when-no-fix-exists 2026-10-19T05:54:54.825Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-security-tool-cover-for-an-ai-heavy-team 2026-10-19T05:54:54.922Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-service-template-ask-and-what-should-it-decide 2026-10-19T05:54:55.019Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-standup-say-about-security-blockers 2026-10-19T05:54:55.114Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-startup-not-promise-about-dependencies-to-customers 2026-10-19T05:54:55.211Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-startup-vendor-register-include-for-a-supply-chain-review 2026-10-19T05:54:55.306Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-vulnerability-scan-report-include-for-each-reader 2026-10-19T05:54:55.404Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-website-handover-document-include 2026-10-19T05:54:55.505Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-a-written-vulnerability-management-policy-cover 2026-10-19T05:54:55.609Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-agency-hand-over-with-a-client-codebase 2026-10-19T05:54:55.715Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-ai-prototype-never-touch 2026-10-19T05:54:55.817Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-api-do-when-its-policy-engine-is-down 2026-10-19T05:54:55.915Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-app-do-when-config-is-missing-or-invalid 2026-10-19T05:54:56.012Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-edtech-security-page-say-about-software-supply-chain 2026-10-19T05:54:56.111Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-engineering-ticket-for-an-sbom-request-contain 2026-10-19T05:54:56.207Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-error-report-scrub-before-it-leaves-your-app 2026-10-19T05:54:56.301Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-internal-tool-threat-model-ask 2026-10-19T05:54:56.395Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-ml-bom-include-for-a-model-you-ship 2026-10-19T05:54:57.799Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-npm-deprecation-message-say 2026-10-19T05:54:57.907Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-sbom-diff-show-when-you-extract-a-service 2026-10-19T05:54:58.010Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-sbom-platform-audit-log-record 2026-10-19T05:54:58.129Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-an-sbom-tool-api-let-you-do-evaluation-questions 2026-10-19T05:54:58.222Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-happen-when-a-container-gets-sigterm-security-view 2026-10-19T05:54:58.315Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-low-code-apps-log-and-what-must-never-be-logged 2026-10-19T05:54:58.413Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-never-go-in-a-security-wiki 2026-10-19T05:54:58.511Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-qa-test-for-security 2026-10-19T05:54:58.616Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-rpa-audit-logs-record 2026-10-19T05:54:58.721Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-sales-say-about-a-headline-vulnerability 2026-10-19T05:54:58.838Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-sales-say-first-when-a-customer-asks-for-an-sbom 2026-10-19T05:54:59.009Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-security-tool-onboarding-docs-include 2026-10-19T05:54:59.105Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-senior-leaders-see-about-vulnerability-management 2026-10-19T05:54:59.203Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-support-say-when-a-customer-asks-are-you-affected 2026-10-19T05:54:59.296Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-the-cover-note-with-an-sbom-say 2026-10-19T05:54:59.391Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-trigger-a-re-review-of-a-legacy-system-exception 2026-10-19T05:55:00.711Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-you-ask-a-maintainer-before-you-depend-on-them 2026-10-19T05:55:02.395Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-you-check-on-a-registry-page-before-installing-a-package 2026-10-19T05:55:02.494Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-you-check-when-a-package-changes-owner-or-maintainer 2026-10-19T05:55:02.595Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-you-monitor-on-a-scanning-platform-slis-and-slos 2026-10-19T05:55:02.696Z weekly 0.7 https://safeguard.sh/resources/blog/what-should-your-crm-record-about-an-sbom-request 2026-10-19T05:55:02.800Z weekly 0.7 https://safeguard.sh/resources/blog/what-signals-should-autoscale-scan-workers 2026-10-19T05:55:02.977Z weekly 0.7 https://safeguard.sh/resources/blog/what-small-teams-can-ignore-in-supply-chain-security-at-first 2026-10-19T05:55:03.100Z weekly 0.7 https://safeguard.sh/resources/blog/what-split-view-and-frontrunning-poisoning-mean-for-your-dataset 2026-10-19T05:55:04.152Z weekly 0.7 https://safeguard.sh/resources/blog/what-static-analysis-rules-cannot-find-and-what-to-use-instead 2026-10-19T05:55:04.782Z weekly 0.7 https://safeguard.sh/resources/blog/what-steps-does-a-mature-open-source-security-process-follow 2026-10-19T05:55:04.901Z weekly 0.7 https://safeguard.sh/resources/blog/what-student-data-should-never-reach-logs-and-error-trackers 2026-10-19T05:55:04.999Z weekly 0.7 https://safeguard.sh/resources/blog/what-supply-chain-questions-come-first-on-a-startup-questionnaire 2026-10-19T05:55:05.101Z weekly 0.7 https://safeguard.sh/resources/blog/what-systems-belong-in-the-scope-of-vulnerability-management 2026-10-19T05:55:05.340Z weekly 0.7 https://safeguard.sh/resources/blog/what-the-attestation-forms-fine-print-says-omb-number-and-privacy-act 2026-10-19T05:55:06.329Z weekly 0.7 https://safeguard.sh/resources/blog/what-the-csrb-log4j-review-said-about-finding-vulnerable-software 2026-10-19T05:55:06.651Z weekly 0.7 https://safeguard.sh/resources/blog/what-the-known-exploited-count-does-and-does-not-tell-you 2026-10-19T05:55:06.752Z weekly 0.7 https://safeguard.sh/resources/blog/what-the-linux-stable-rules-teach-about-backporting-security-fixes 2026-10-19T05:55:06.885Z weekly 0.7 https://safeguard.sh/resources/blog/what-the-python-pickle-docs-say-that-ml-engineers-should-read 2026-10-19T05:55:07.002Z weekly 0.7 https://safeguard.sh/resources/blog/what-the-report-a-vulnerability-section-of-a-trust-page-needs 2026-10-19T05:55:07.106Z weekly 0.7 https://safeguard.sh/resources/blog/what-the-verified-account-badge-means-on-amazon-ecr-public-gallery 2026-10-19T05:55:07.211Z weekly 0.7 https://safeguard.sh/resources/blog/what-three-conditions-put-a-cve-in-the-cisa-kev-catalog 2026-10-19T05:55:07.316Z weekly 0.7 https://safeguard.sh/resources/blog/what-timeout-should-you-set-on-calls-to-a-vendor-api 2026-10-19T05:55:07.421Z weekly 0.7 https://safeguard.sh/resources/blog/what-timezone-and-hours-should-dependency-update-schedules-use 2026-10-19T05:55:07.537Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-ask-a-customer-before-sending-them-your-sbom 2026-10-19T05:55:07.644Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-ask-a-software-vendor-about-patching-and-vulnerabilities 2026-10-19T05:55:07.754Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-ask-about-outages-and-upgrades-in-a-security-tool-trial 2026-10-19T05:55:07.934Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-automate-first-in-vulnerability-remediation 2026-10-19T05:55:08.934Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-automate-in-vulnerability-triage-first-by-team-size 2026-10-19T05:55:09.041Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-back-up-and-escrow-before-a-trip 2026-10-19T05:55:09.145Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-back-up-on-a-client-wordpress-site 2026-10-19T05:55:09.242Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-back-up-on-a-self-hosted-package-mirror-and-what-to-skip 2026-10-19T05:55:09.337Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-cache-in-mobile-ci-and-what-must-never-be-cached 2026-10-19T05:55:09.435Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-before-adding-a-dependency-to-a-payments-service 2026-10-19T05:55:09.531Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-before-adding-a-new-r-package-dependency 2026-10-19T05:55:09.635Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-in-a-self-hosted-extension-update-setup 2026-10-19T05:55:09.739Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-in-a-third-party-helm-chart-before-first-install 2026-10-19T05:55:09.844Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-in-an-sdk-regeneration-diff 2026-10-19T05:55:09.949Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-in-slsa-provenance-before-deploy 2026-10-19T05:55:10.057Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-check-when-a-pr-changes-config-or-environment-settings 2026-10-19T05:55:10.168Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-cover-in-a-one-hour-open-source-class-for-new-engineers 2026-10-19T05:55:10.281Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-cut-when-security-work-does-not-fit-the-sprint 2026-10-19T05:55:10.393Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-diff-in-a-mobile-sdk-upgrade-pull-request 2026-10-19T05:55:10.499Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-before-the-only-organization-owner-leaves 2026-10-19T05:55:10.608Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-if-your-open-source-scanner-is-archived 2026-10-19T05:55:10.728Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-in-the-first-hour-after-a-coding-agent-misfires 2026-10-19T05:55:10.844Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-customer-asks-you-to-skip-a-security-control 2026-10-19T05:55:10.952Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-developer-fails-security-training 2026-10-19T05:55:11.062Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-developer-says-the-scanner-is-wrong 2026-10-19T05:55:11.176Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-legacy-app-still-needs-tls-1-0 2026-10-19T05:55:11.282Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-mobile-sdk-is-abandoned-or-end-of-life 2026-10-19T05:55:11.390Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-research-tool-maintainer-disappears 2026-10-19T05:55:11.493Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-security-researcher-breaks-your-disclosure-rules 2026-10-19T05:55:11.603Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-target-has-no-lockfiles 2026-10-19T05:55:12.452Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-tool-covers-most-but-not-all-ai-risks 2026-10-19T05:55:12.566Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-vulnerability-goes-public-before-your-fix 2026-10-19T05:55:12.677Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-a-vulnerability-reporter-stops-responding 2026-10-19T05:55:12.801Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-an-asset-pack-or-plugin-vendor-goes-quiet 2026-10-19T05:55:12.918Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-an-enterprise-security-review-stalls 2026-10-19T05:55:13.033Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-the-security-scanner-breaks-your-pipeline 2026-10-19T05:55:13.148Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-two-approvers-disagree-on-a-security-exception 2026-10-19T05:55:13.259Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-two-researchers-report-the-same-vulnerability 2026-10-19T05:55:13.370Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-your-open-source-scanner-is-archived 2026-10-19T05:55:13.545Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-when-your-release-signing-key-expires 2026-10-19T05:55:13.660Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-with-an-out-of-scope-vulnerability-report 2026-10-19T05:55:13.783Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-with-triaged-findings-the-new-scanner-cannot-match 2026-10-19T05:55:13.900Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-with-vendor-claims-you-cannot-verify 2026-10-19T05:55:14.079Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-with-vulnerable-systems-you-cannot-rebuild 2026-10-19T05:55:14.198Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-do-with-your-data-when-a-security-tool-trial-ends 2026-10-19T05:55:14.317Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-edit-in-a-starter-workflow-before-first-commit 2026-10-19T05:55:14.432Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-fix-before-buying-your-first-security-scanner 2026-10-19T05:55:14.544Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-fix-first-kev-epss-small-engineering-team 2026-10-19T05:55:14.655Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-give-a-contractor-instead-of-a-production-dump 2026-10-19T05:55:14.830Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-hand-your-grc-team-for-ssdf-questions-a-checklist 2026-10-19T05:55:15.273Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-keep-out-of-ai-agent-logs 2026-10-19T05:55:15.386Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-log-about-prompts-and-datasets-for-an-ai-incident 2026-10-19T05:55:15.494Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-log-and-not-log-from-payment-and-messaging-api-calls 2026-10-19T05:55:15.602Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-log-from-a-cloud-coding-agent-session 2026-10-19T05:55:15.719Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-log-from-ai-coding-agent-sessions-and-how-long 2026-10-19T05:55:15.827Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-measure-during-a-manual-period-before-automating-fixes 2026-10-19T05:55:15.935Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-measure-in-a-dependency-intake-queue 2026-10-19T05:55:16.049Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-monitor-after-promoting-an-ai-built-prototype 2026-10-19T05:55:16.158Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-monitor-on-an-internal-package-mirror-five-signals 2026-10-19T05:55:16.262Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-pin-for-a-reproducible-data-pipeline-environment 2026-10-19T05:55:16.367Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-pin-leaf-intermediate-or-public-key 2026-10-19T05:55:16.475Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-prepare-before-day-one-of-a-security-tool-trial 2026-10-19T05:55:16.582Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-promise-customers-about-patching-and-keep-it 2026-10-19T05:55:16.692Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-publish-when-a-vulnerability-has-no-fix-yet 2026-10-19T05:55:16.810Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-put-in-a-customer-notice-about-a-vulnerable-component 2026-10-19T05:55:16.925Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-put-in-a-security-architecture-diagram-for-buyers 2026-10-19T05:55:17.023Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-put-in-a-wordpress-maintenance-plan-for-plugin-risk 2026-10-19T05:55:17.118Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-put-in-contributing-md-about-bot-pull-requests 2026-10-19T05:55:17.215Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-put-in-the-dependencies-section-of-your-onboarding-doc 2026-10-19T05:55:17.310Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-put-in-the-ownership-section-of-a-shared-library-readme 2026-10-19T05:55:17.412Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-put-on-a-cli-install-page-to-make-verification-easy 2026-10-19T05:55:17.510Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-put-on-the-page-a-security-comment-links-to 2026-10-19T05:55:17.844Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-re-request-from-a-supplier-at-contract-renewal-sbom 2026-10-19T05:55:17.942Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-read-in-an-action-yml-before-you-trust-the-action 2026-10-19T05:55:18.034Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-record-about-a-build-buildinfo-fields 2026-10-19T05:55:18.282Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-record-about-credentials-for-each-third-party-integration 2026-10-19T05:55:18.381Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-record-about-how-a-monorepo-sbom-was-generated 2026-10-19T05:55:18.478Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-record-about-the-bad-package-in-a-supply-chain-postmortem 2026-10-19T05:55:18.576Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-record-for-a-dataset-in-an-ai-bill-of-materials 2026-10-19T05:55:18.681Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-record-in-a-cryptographic-key-inventory 2026-10-19T05:55:18.786Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-record-in-your-sbom-the-day-you-adopt-a-library 2026-10-19T05:55:18.893Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-record-when-an-sbom-search-finds-nothing 2026-10-19T05:55:18.991Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-record-when-you-act-on-an-open-source-advisory 2026-10-19T05:55:19.090Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-record-when-you-buy-commercial-software 2026-10-19T05:55:19.182Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-remove-from-a-prompt-template-before-you-commit-it 2026-10-19T05:55:19.274Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-reply-in-the-first-48-hours-of-a-vulnerability-report 2026-10-19T05:55:19.366Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-request-from-your-old-scanner-vendor-before-leaving 2026-10-19T05:55:19.463Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-review-30-days-after-a-release 2026-10-19T05:55:19.578Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-review-when-a-mobile-sdk-vendor-changes-owner-or-terms 2026-10-19T05:55:19.684Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-rotate-when-a-developer-tool-is-compromised 2026-10-19T05:55:19.786Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-say-about-third-party-software-in-a-soc-2-system-description 2026-10-19T05:55:19.891Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-say-on-a-trust-page-while-soc-2-or-iso-27001-is-in-progress 2026-10-19T05:55:19.992Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-say-when-a-customer-asks-for-a-fresh-sbom-at-renewal 2026-10-19T05:55:20.091Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-say-when-a-customer-asks-for-an-sbom-on-a-live-call 2026-10-19T05:55:20.196Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-say-when-a-customer-finds-a-component-missing-from-an-sbom 2026-10-19T05:55:20.295Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-scan-on-every-pull-request-and-what-to-save-for-release 2026-10-19T05:55:20.393Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-send-a-customer-who-asks-about-your-supply-chain-security 2026-10-19T05:55:20.484Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-send-your-contract-manufacturer-and-what-to-keep 2026-10-19T05:55:20.589Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-strip-from-a-scan-report-before-sharing-with-ai 2026-10-19T05:55:20.701Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-tell-an-executive-who-asks-are-we-affected-by-todays-news 2026-10-19T05:55:20.806Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-tell-customers-after-an-ai-agent-incident 2026-10-19T05:55:20.907Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-tell-customers-an-sbom-does-not-show 2026-10-19T05:55:21.002Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-tell-customers-on-end-of-support-versions-after-an-advisory 2026-10-19T05:55:21.136Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-tell-customers-when-your-sbom-changes 2026-10-19T05:55:21.306Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-tell-customers-while-a-security-fix-rolls-out 2026-10-19T05:55:21.400Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-tell-hospitals-when-a-library-you-use-has-an-advisory 2026-10-19T05:55:21.494Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-tell-leadership-when-you-will-miss-a-remediation-sla 2026-10-19T05:55:21.592Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-track-in-a-mobile-sdk-register-fields-that-matter 2026-10-19T05:55:21.828Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-watch-during-a-trial-when-models-and-mcp-servers-change 2026-10-19T05:55:21.970Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-watch-for-24-hours-after-merging-a-dependency-fix 2026-10-19T05:55:22.080Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-write-in-a-changelog-when-a-dependency-bump-matters 2026-10-19T05:55:22.201Z weekly 0.7 https://safeguard.sh/resources/blog/what-to-write-in-the-how-to-report-section-of-a-vdp 2026-10-19T05:55:22.306Z weekly 0.7 https://safeguard.sh/resources/blog/what-token-scopes-should-backstage-use-for-github 2026-10-19T05:55:22.411Z weekly 0.7 https://safeguard.sh/resources/blog/what-token-scopes-should-docs-examples-ask-for 2026-10-19T05:55:22.528Z weekly 0.7 https://safeguard.sh/resources/blog/what-usage-data-does-a-security-tool-collect-questions-for-edu-buyers 2026-10-19T05:55:22.649Z weekly 0.7 https://safeguard.sh/resources/blog/what-vulnerability-metrics-will-an-acquirer-or-investor-ask-for 2026-10-19T05:55:22.766Z weekly 0.7 https://safeguard.sh/resources/blog/what-vulnerability-sla-fits-each-phase-of-modernization 2026-10-19T05:55:22.881Z weekly 0.7 https://safeguard.sh/resources/blog/what-was-critical-software-in-the-federal-attestation-rules 2026-10-19T05:55:22.992Z weekly 0.7 https://safeguard.sh/resources/blog/what-we-know-and-what-we-dont-know-in-a-supply-chain-postmortem 2026-10-19T05:55:23.099Z weekly 0.7 https://safeguard.sh/resources/blog/what-went-well-and-where-we-got-lucky-in-a-postmortem 2026-10-19T05:55:23.207Z weekly 0.7 https://safeguard.sh/resources/blog/what-workflow-statuses-should-a-vulnerability-ticket-have 2026-10-19T05:55:23.315Z weekly 0.7 https://safeguard.sh/resources/blog/what-you-see-is-what-you-sign-approving-payments-in-your-app 2026-10-19T05:55:23.427Z weekly 0.7 https://safeguard.sh/resources/blog/whats-your-sbom-story-a-four-sentence-answer-for-startups 2026-10-19T05:55:23.653Z weekly 0.7 https://safeguard.sh/resources/blog/wheels-that-bundle-shared-libraries-auditwheel-and-your-sbom 2026-10-19T05:55:23.765Z weekly 0.7 https://safeguard.sh/resources/blog/when-a-dependency-matches-two-grouping-rules-which-group-wins 2026-10-19T05:55:24.083Z weekly 0.7 https://safeguard.sh/resources/blog/when-a-platform-team-pins-a-version-and-product-teams-object 2026-10-19T05:55:24.200Z weekly 0.7 https://safeguard.sh/resources/blog/when-a-plugin-update-adds-permissions-should-it-auto-update 2026-10-19T05:55:24.309Z weekly 0.7 https://safeguard.sh/resources/blog/when-a-tabletop-answer-is-we-do-not-know-facilitator-moves 2026-10-19T05:55:24.424Z weekly 0.7 https://safeguard.sh/resources/blog/when-a-vendor-sdk-advisory-lands-how-an-inventory-speeds-response 2026-10-19T05:55:24.528Z weekly 0.7 https://safeguard.sh/resources/blog/when-asset-context-should-not-lower-vulnerability-priority 2026-10-19T05:55:24.645Z weekly 0.7 https://safeguard.sh/resources/blog/when-does-a-dependency-vulnerability-alert-fire 2026-10-19T05:55:24.766Z weekly 0.7 https://safeguard.sh/resources/blog/when-does-a-github-actions-cron-security-scan-actually-run 2026-10-19T05:55:24.876Z weekly 0.7 https://safeguard.sh/resources/blog/when-does-an-sbom-management-platform-pay-off-five-measures 2026-10-19T05:55:24.985Z weekly 0.7 https://safeguard.sh/resources/blog/when-does-an-sbom-spreadsheet-stop-working-ten-warning-signs 2026-10-19T05:55:25.089Z weekly 0.7 https://safeguard.sh/resources/blog/when-does-an-unacknowledged-vulnerability-alert-escalate 2026-10-19T05:55:25.194Z weekly 0.7 https://safeguard.sh/resources/blog/when-does-the-patch-sla-clock-start 2026-10-19T05:55:25.297Z weekly 0.7 https://safeguard.sh/resources/blog/when-does-the-vulnerability-remediation-clock-start 2026-10-19T05:55:25.404Z weekly 0.7 https://safeguard.sh/resources/blog/when-in-the-pipeline-should-you-generate-an-image-sbom 2026-10-19T05:55:25.505Z weekly 0.7 https://safeguard.sh/resources/blog/when-is-an-iam-user-access-key-still-ok-for-ci 2026-10-19T05:55:25.610Z weekly 0.7 https://safeguard.sh/resources/blog/when-is-cli-only-dependency-scanning-enough 2026-10-19T05:55:25.714Z weekly 0.7 https://safeguard.sh/resources/blog/when-is-mutual-tls-worth-it-for-apis 2026-10-19T05:55:25.819Z weekly 0.7 https://safeguard.sh/resources/blog/when-is-vendoring-a-library-the-right-choice 2026-10-19T05:55:25.919Z weekly 0.7 https://safeguard.sh/resources/blog/when-should-a-company-form-an-open-source-program-office 2026-10-19T05:55:26.016Z weekly 0.7 https://safeguard.sh/resources/blog/when-should-a-dependency-fix-wait-for-a-human-five-signals 2026-10-19T05:55:26.115Z weekly 0.7 https://safeguard.sh/resources/blog/when-should-a-security-check-first-comment-draft-or-ready 2026-10-19T05:55:26.213Z weekly 0.7 https://safeguard.sh/resources/blog/when-should-a-terraform-module-live-in-its-own-repository 2026-10-19T05:55:26.311Z weekly 0.7 https://safeguard.sh/resources/blog/when-should-an-imported-suppression-reopen-five-triggers 2026-10-19T05:55:26.542Z weekly 0.7 https://safeguard.sh/resources/blog/when-should-you-retire-a-security-metric 2026-10-19T05:55:26.649Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-accept-a-visual-diff-in-a-dependency-update-pr 2026-10-19T05:55:26.755Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-disable-a-failing-webhook-endpoint-410-gone 2026-10-19T05:55:26.861Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-end-security-backports-for-an-old-release-line 2026-10-19T05:55:26.960Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-let-a-security-fix-bypass-a-release-freeze 2026-10-19T05:55:27.059Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-reject-an-ai-fix-and-write-it-by-hand 2026-10-19T05:55:27.170Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-retire-a-security-scan-or-testing-method 2026-10-19T05:55:27.485Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-retire-or-rewrite-a-custom-static-analysis-rule 2026-10-19T05:55:27.587Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-retire-your-fork-exit-criteria 2026-10-19T05:55:27.688Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-run-security-scans-from-the-cli-instead-of-ci 2026-10-19T05:55:27.790Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-send-vulnerability-exception-expiry-reminders 2026-10-19T05:55:27.890Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-share-which-security-evidence-in-a-sales-cycle 2026-10-19T05:55:27.981Z weekly 0.7 https://safeguard.sh/resources/blog/when-to-stop-a-security-tool-trial-early 2026-10-19T05:55:28.074Z weekly 0.7 https://safeguard.sh/resources/blog/when-two-scanners-disagree-which-one-should-the-ci-gate-follow 2026-10-19T05:55:28.169Z weekly 0.7 https://safeguard.sh/resources/blog/when-two-teams-merge-repos-dependency-policy-checklist 2026-10-19T05:55:28.259Z weekly 0.7 https://safeguard.sh/resources/blog/where-can-a-small-nonprofit-find-volunteer-cybersecurity-help 2026-10-19T05:55:28.356Z weekly 0.7 https://safeguard.sh/resources/blog/where-checkout-integrations-break-the-five-step-payment-flow 2026-10-19T05:55:28.456Z weekly 0.7 https://safeguard.sh/resources/blog/where-cis-controls-ig1-fits-in-a-first-year-security-plan 2026-10-19T05:55:28.565Z weekly 0.7 https://safeguard.sh/resources/blog/where-did-your-few-shot-examples-come-from-a-provenance-check 2026-10-19T05:55:28.671Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-claude-scheduled-tasks-run-cowork-code-desktop-cloud 2026-10-19T05:55:28.778Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-cli-tools-store-your-credentials-on-a-laptop 2026-10-19T05:55:28.938Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-image-attestations-live-in-a-registry 2026-10-19T05:55:29.043Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-maintainers-announce-security-fixes-channels-to-watch 2026-10-19T05:55:29.142Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-pipeline-secrets-go-orchestrator-approaches-compared 2026-10-19T05:55:29.240Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-postgres-dev-passwords-go-the-pgpass-file-and-its-rules 2026-10-19T05:55:29.336Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-secrets-go-in-angular-vue-and-nuxt-config 2026-10-19T05:55:29.435Z weekly 0.7 https://safeguard.sh/resources/blog/where-do-security-checks-go-in-build-release-run 2026-10-19T05:55:29.547Z weekly 0.7 https://safeguard.sh/resources/blog/where-docker-stores-registry-credentials-on-your-laptop 2026-10-19T05:55:29.661Z weekly 0.7 https://safeguard.sh/resources/blog/where-does-a-saas-vendor-keep-your-backups-and-failover-copies 2026-10-19T05:55:29.768Z weekly 0.7 https://safeguard.sh/resources/blog/where-does-cargo-install-put-binaries-and-how-to-list-them 2026-10-19T05:55:29.894Z weekly 0.7 https://safeguard.sh/resources/blog/where-does-code-go-when-a-scanner-runs-data-flow-questions-for-buyers 2026-10-19T05:55:30.189Z weekly 0.7 https://safeguard.sh/resources/blog/where-does-npm-install-g-put-packages-and-what-runs 2026-10-19T05:55:30.294Z weekly 0.7 https://safeguard.sh/resources/blog/where-does-npm-read-its-config-four-files-and-environment-variables 2026-10-19T05:55:30.401Z weekly 0.7 https://safeguard.sh/resources/blog/where-does-pip-read-configuration-and-who-can-change-it 2026-10-19T05:55:30.849Z weekly 0.7 https://safeguard.sh/resources/blog/where-does-reachability-analysis-fit-in-a-vulnerability-scan 2026-10-19T05:55:30.946Z weekly 0.7 https://safeguard.sh/resources/blog/where-does-the-risk-live-in-a-model-repository-weights-code-or-config 2026-10-19T05:55:31.039Z weekly 0.7 https://safeguard.sh/resources/blog/where-does-vulnerability-data-delay-come-from-four-stages 2026-10-19T05:55:31.137Z weekly 0.7 https://safeguard.sh/resources/blog/where-force-installed-extensions-get-updates-from 2026-10-19T05:55:31.231Z weekly 0.7 https://safeguard.sh/resources/blog/where-open-source-hides-outside-the-lockfile 2026-10-19T05:55:31.332Z weekly 0.7 https://safeguard.sh/resources/blog/where-runtime-versions-hide-in-a-repo-and-how-to-search-for-them 2026-10-19T05:55:31.431Z weekly 0.7 https://safeguard.sh/resources/blog/where-scanners-get-component-lists-five-inventory-sources 2026-10-19T05:55:31.531Z weekly 0.7 https://safeguard.sh/resources/blog/where-should-a-cli-store-its-api-token-keychain-or-file 2026-10-19T05:55:31.639Z weekly 0.7 https://safeguard.sh/resources/blog/where-should-a-fintech-app-encrypt-data-app-database-or-disk 2026-10-19T05:55:31.750Z weekly 0.7 https://safeguard.sh/resources/blog/where-should-a-nodejs-app-keep-secrets-env-vars-files-or-a-manager 2026-10-19T05:55:31.854Z weekly 0.7 https://safeguard.sh/resources/blog/where-should-a-security-scan-run-in-container-based-ci 2026-10-19T05:55:31.949Z weekly 0.7 https://safeguard.sh/resources/blog/where-should-dependency-alerts-go-ticket-chat-or-pull-request 2026-10-19T05:55:32.046Z weekly 0.7 https://safeguard.sh/resources/blog/where-should-low-code-apps-keep-secrets-and-api-keys 2026-10-19T05:55:32.144Z weekly 0.7 https://safeguard.sh/resources/blog/where-should-spark-jdbc-drivers-come-from-and-where-do-passwords-go 2026-10-19T05:55:32.368Z weekly 0.7 https://safeguard.sh/resources/blog/where-spring-boot-serves-openapi-docs-and-how-to-disable-them 2026-10-19T05:55:32.478Z weekly 0.7 https://safeguard.sh/resources/blog/where-the-bola-check-lives-in-a-framework-api 2026-10-19T05:55:32.591Z weekly 0.7 https://safeguard.sh/resources/blog/where-the-kev-flag-shows-up-in-an-nvd-record 2026-10-19T05:55:32.697Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-ask-whether-an-apache-project-advisory-applies-to-you 2026-10-19T05:55:32.803Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-find-evidence-to-reconstruct-a-supply-chain-incident 2026-10-19T05:55:32.901Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-get-end-of-life-dates-upstream-pages-versus-trackers 2026-10-19T05:55:32.999Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-hook-a-scanner-when-a-monorepo-has-several-ci-systems 2026-10-19T05:55:33.096Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-publish-vex-and-advisories-so-customers-can-find-them 2026-10-19T05:55:33.195Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-run-dependency-scans-in-a-monorepo 2026-10-19T05:55:33.533Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-scan-private-packages-and-prevent-dependency-confusion 2026-10-19T05:55:33.815Z weekly 0.7 https://safeguard.sh/resources/blog/where-to-set-pip-index-url-so-developers-cannot-skip-it 2026-10-19T05:55:33.923Z weekly 0.7 https://safeguard.sh/resources/blog/which-accessibility-rule-applies-section-508-or-ada-title-ii 2026-10-19T05:55:34.021Z weekly 0.7 https://safeguard.sh/resources/blog/which-affected-product-to-fix-first-with-reachability 2026-10-19T05:55:34.118Z weekly 0.7 https://safeguard.sh/resources/blog/which-ai-assistant-agent-feature-to-turn-on-first 2026-10-19T05:55:34.215Z weekly 0.7 https://safeguard.sh/resources/blog/which-apple-upload-requirements-can-an-old-sdk-break 2026-10-19T05:55:34.309Z weekly 0.7 https://safeguard.sh/resources/blog/which-apps-still-use-an-old-design-system-version 2026-10-19T05:55:34.408Z weekly 0.7 https://safeguard.sh/resources/blog/which-authentication-flaws-can-a-scanner-confirm 2026-10-19T05:55:34.511Z weekly 0.7 https://safeguard.sh/resources/blog/which-azure-cli-sign-in-method-should-you-use 2026-10-19T05:55:34.609Z weekly 0.7 https://safeguard.sh/resources/blog/which-bazel-lockfile-mode-should-ci-use 2026-10-19T05:55:34.705Z weekly 0.7 https://safeguard.sh/resources/blog/which-branch-protection-rules-a-five-person-team-needs 2026-10-19T05:55:34.800Z weekly 0.7 https://safeguard.sh/resources/blog/which-build-integrity-control-first-pin-provenance-or-reproduce 2026-10-19T05:55:34.895Z weekly 0.7 https://safeguard.sh/resources/blog/which-ci-credential-should-a-small-team-use 2026-10-19T05:55:34.987Z weekly 0.7 https://safeguard.sh/resources/blog/which-claude-code-isolation-option-bash-sandbox-container-vm-or-cloud 2026-10-19T05:55:35.087Z weekly 0.7 https://safeguard.sh/resources/blog/which-coding-agent-actions-need-human-approval 2026-10-19T05:55:35.180Z weekly 0.7 https://safeguard.sh/resources/blog/which-container-images-should-a-retention-policy-never-delete 2026-10-19T05:55:35.276Z weekly 0.7 https://safeguard.sh/resources/blog/which-controls-do-you-inherit-from-your-cloud-provider-evidence-guide 2026-10-19T05:55:35.370Z weekly 0.7 https://safeguard.sh/resources/blog/which-customers-to-notify-first-tier-by-exposure 2026-10-19T05:55:35.468Z weekly 0.7 https://safeguard.sh/resources/blog/which-cvss-version-is-my-scanner-showing-3-0-3-1-or-4-0 2026-10-19T05:55:35.571Z weekly 0.7 https://safeguard.sh/resources/blog/which-cwe-ids-map-to-common-web-vulnerabilities-scanners-report 2026-10-19T05:55:35.674Z weekly 0.7 https://safeguard.sh/resources/blog/which-cyclonedx-version-should-your-build-emit 2026-10-19T05:55:35.779Z weekly 0.7 https://safeguard.sh/resources/blog/which-databases-feed-osv-native-vs-converted-sources 2026-10-19T05:55:35.881Z weekly 0.7 https://safeguard.sh/resources/blog/which-dependencies-need-a-baa-hosted-services-or-libraries 2026-10-19T05:55:35.989Z weekly 0.7 https://safeguard.sh/resources/blog/which-dependencies-to-replace-first-using-sbom-and-scorecard 2026-10-19T05:55:36.088Z weekly 0.7 https://safeguard.sh/resources/blog/which-dependency-drift-is-a-security-risk-and-which-is-noise 2026-10-19T05:55:36.191Z weekly 0.7 https://safeguard.sh/resources/blog/which-dependency-requests-can-be-auto-approved 2026-10-19T05:55:36.294Z weekly 0.7 https://safeguard.sh/resources/blog/which-dependency-risk-signals-matter-most-for-build-tools 2026-10-19T05:55:36.969Z weekly 0.7 https://safeguard.sh/resources/blog/which-dependency-scan-stage-small-team-should-add-first 2026-10-19T05:55:37.066Z weekly 0.7 https://safeguard.sh/resources/blog/which-dependency-vulnerabilities-matter-most-in-a-student-records-app 2026-10-19T05:55:37.167Z weekly 0.7 https://safeguard.sh/resources/blog/which-dev-tooling-can-dependabot-update-for-you 2026-10-19T05:55:37.261Z weekly 0.7 https://safeguard.sh/resources/blog/which-developer-journeys-should-a-security-paved-road-cover-first 2026-10-19T05:55:37.360Z weekly 0.7 https://safeguard.sh/resources/blog/which-developers-should-join-an-ai-coding-agent-pilot-first 2026-10-19T05:55:37.462Z weekly 0.7 https://safeguard.sh/resources/blog/which-device-models-ship-a-vulnerable-library-sbom-search 2026-10-19T05:55:37.569Z weekly 0.7 https://safeguard.sh/resources/blog/which-devices-in-my-fleet-run-the-vulnerable-component-lookup-steps 2026-10-19T05:55:37.676Z weekly 0.7 https://safeguard.sh/resources/blog/which-dockerfile-step-added-the-vulnerable-package-in-an-image 2026-10-19T05:55:37.786Z weekly 0.7 https://safeguard.sh/resources/blog/which-document-answers-which-buyer-question-sbom-vex-or-report 2026-10-19T05:55:37.886Z weekly 0.7 https://safeguard.sh/resources/blog/which-ecosystems-does-github-review-advisories-for-and-what-about-others 2026-10-19T05:55:37.979Z weekly 0.7 https://safeguard.sh/resources/blog/which-ecosystems-does-osv-cover-and-what-the-gaps-mean 2026-10-19T05:55:38.085Z weekly 0.7 https://safeguard.sh/resources/blog/which-environments-should-a-vulnerability-count-include 2026-10-19T05:55:38.180Z weekly 0.7 https://safeguard.sh/resources/blog/which-eslint-rules-flag-xss-sinks-in-react-and-vue 2026-10-19T05:55:38.275Z weekly 0.7 https://safeguard.sh/resources/blog/which-events-should-renew-or-end-a-web-session 2026-10-19T05:55:38.371Z weekly 0.7 https://safeguard.sh/resources/blog/which-fastlane-ci-environment-variables-are-secrets 2026-10-19T05:55:38.471Z weekly 0.7 https://safeguard.sh/resources/blog/which-files-on-a-developer-laptop-hold-credentials 2026-10-19T05:55:38.575Z weekly 0.7 https://safeguard.sh/resources/blog/which-files-to-commit-in-a-wordpress-project-using-composer-and-npm 2026-10-19T05:55:38.679Z weekly 0.7 https://safeguard.sh/resources/blog/which-fleet-vulnerabilities-matter-reachability-for-embedded-components 2026-10-19T05:55:38.780Z weekly 0.7 https://safeguard.sh/resources/blog/which-frameworks-serve-api-docs-by-default-four-compared 2026-10-19T05:55:38.886Z weekly 0.7 https://safeguard.sh/resources/blog/which-frontend-dependency-updates-are-safe-to-automerge 2026-10-19T05:55:38.979Z weekly 0.7 https://safeguard.sh/resources/blog/which-github-actions-trigger-for-security-automation-decision-guide 2026-10-19T05:55:39.075Z weekly 0.7 https://safeguard.sh/resources/blog/which-github-environment-protections-should-a-payments-deploy-use 2026-10-19T05:55:39.340Z weekly 0.7 https://safeguard.sh/resources/blog/which-github-repository-role-should-a-contractor-get 2026-10-19T05:55:39.555Z weekly 0.7 https://safeguard.sh/resources/blog/which-github-role-should-a-contractor-get 2026-10-19T05:55:39.661Z weekly 0.7 https://safeguard.sh/resources/blog/which-go-versions-still-get-security-fixes-the-two-release-rule 2026-10-19T05:55:39.761Z weekly 0.7 https://safeguard.sh/resources/blog/which-hipaa-safeguard-does-a-vulnerable-dependency-undermine 2026-10-19T05:55:39.860Z weekly 0.7 https://safeguard.sh/resources/blog/which-iframe-sandbox-tokens-does-a-store-widget-need 2026-10-19T05:55:39.954Z weekly 0.7 https://safeguard.sh/resources/blog/which-image-tags-in-a-registry-should-you-scan 2026-10-19T05:55:40.047Z weekly 0.7 https://safeguard.sh/resources/blog/which-kubernetes-admission-plugins-are-on-by-default 2026-10-19T05:55:40.143Z weekly 0.7 https://safeguard.sh/resources/blog/which-legacy-libraries-block-a-modernization-project 2026-10-19T05:55:40.236Z weekly 0.7 https://safeguard.sh/resources/blog/which-legacy-system-to-retire-first-a-simple-risk-ranking 2026-10-19T05:55:40.333Z weekly 0.7 https://safeguard.sh/resources/blog/which-license-should-research-software-use 2026-10-19T05:55:40.423Z weekly 0.7 https://safeguard.sh/resources/blog/which-lockfile-do-i-commit-for-each-ecosystem 2026-10-19T05:55:40.514Z weekly 0.7 https://safeguard.sh/resources/blog/which-lockfile-does-each-language-use-and-should-you-commit-it 2026-10-19T05:55:40.608Z weekly 0.7 https://safeguard.sh/resources/blog/which-maintenance-questions-does-the-openssf-evaluation-guide-ask 2026-10-19T05:55:40.698Z weekly 0.7 https://safeguard.sh/resources/blog/which-manifest-files-did-your-scanner-actually-read-a-coverage-check 2026-10-19T05:55:40.791Z weekly 0.7 https://safeguard.sh/resources/blog/which-maven-scopes-end-up-in-your-sbom-by-default 2026-10-19T05:55:41.074Z weekly 0.7 https://safeguard.sh/resources/blog/which-method-finds-business-logic-and-access-control-bugs 2026-10-19T05:55:41.306Z weekly 0.7 https://safeguard.sh/resources/blog/which-node-js-version-should-your-team-run 2026-10-19T05:55:41.423Z weekly 0.7 https://safeguard.sh/resources/blog/which-npm-packages-work-in-the-vercel-edge-runtime 2026-10-19T05:55:41.544Z weekly 0.7 https://safeguard.sh/resources/blog/which-npmrc-files-does-npm-read-and-which-one-wins 2026-10-19T05:55:41.662Z weekly 0.7 https://safeguard.sh/resources/blog/which-open-source-dependencies-should-your-company-fund-a-tiering-method 2026-10-19T05:55:41.766Z weekly 0.7 https://safeguard.sh/resources/blog/which-open-source-license-policy-wins-after-a-merger 2026-10-19T05:55:41.882Z weekly 0.7 https://safeguard.sh/resources/blog/which-pages-should-not-run-marketing-tags 2026-10-19T05:55:41.988Z weekly 0.7 https://safeguard.sh/resources/blog/which-pen-test-document-to-share-at-each-enterprise-deal-stage 2026-10-19T05:55:42.080Z weekly 0.7 https://safeguard.sh/resources/blog/which-php-version-should-a-wordpress-site-run-late-2026 2026-10-19T05:55:42.175Z weekly 0.7 https://safeguard.sh/resources/blog/which-pip-configuration-is-in-effect-config-files-env-vars-and-flags 2026-10-19T05:55:42.268Z weekly 0.7 https://safeguard.sh/resources/blog/which-pip-index-url-wins-in-ci-command-line-env-or-config-file 2026-10-19T05:55:42.361Z weekly 0.7 https://safeguard.sh/resources/blog/which-ports-does-rabbitmq-use-and-which-should-stay-private 2026-10-19T05:55:42.462Z weekly 0.7 https://safeguard.sh/resources/blog/which-ports-does-redis-cluster-need-open-and-to-whom 2026-10-19T05:55:42.556Z weekly 0.7 https://safeguard.sh/resources/blog/which-products-use-this-component-sbom-questions-answered-in-minutes 2026-10-19T05:55:42.649Z weekly 0.7 https://safeguard.sh/resources/blog/which-prototype-dependencies-to-replace-before-launch 2026-10-19T05:55:42.757Z weekly 0.7 https://safeguard.sh/resources/blog/which-pytest-plugins-load-automatically 2026-10-19T05:55:42.866Z weekly 0.7 https://safeguard.sh/resources/blog/which-registry-does-an-image-name-without-a-host-pull-from 2026-10-19T05:55:42.957Z weekly 0.7 https://safeguard.sh/resources/blog/which-repos-belong-in-sca-scope-forks-archived-sandboxes 2026-10-19T05:55:43.053Z weekly 0.7 https://safeguard.sh/resources/blog/which-repositories-should-ai-coding-agents-be-allowed-to-touch 2026-10-19T05:55:43.165Z weekly 0.7 https://safeguard.sh/resources/blog/which-repository-should-you-secure-first 2026-10-19T05:55:43.270Z weekly 0.7 https://safeguard.sh/resources/blog/which-runtime-support-dates-should-you-check-when-updates-slip 2026-10-19T05:55:43.722Z weekly 0.7 https://safeguard.sh/resources/blog/which-safeguard-surface-should-i-use 2026-10-19T05:55:43.823Z weekly 0.7 https://safeguard.sh/resources/blog/which-sbom-fields-can-a-tool-fill-and-which-need-a-human 2026-10-19T05:55:43.918Z weekly 0.7 https://safeguard.sh/resources/blog/which-sbom-formats-should-a-platform-import-test-before-you-buy 2026-10-19T05:55:44.012Z weekly 0.7 https://safeguard.sh/resources/blog/which-sbom-phrases-should-sales-never-use 2026-10-19T05:55:44.111Z weekly 0.7 https://safeguard.sh/resources/blog/which-sbom-request-should-sales-escalate-to-engineering 2026-10-19T05:55:44.237Z weekly 0.7 https://safeguard.sh/resources/blog/which-sbom-to-share-the-deployed-release-or-the-latest 2026-10-19T05:55:44.356Z weekly 0.7 https://safeguard.sh/resources/blog/which-sca-column-to-sort-by-first 2026-10-19T05:55:44.529Z weekly 0.7 https://safeguard.sh/resources/blog/which-scan-stage-should-a-five-person-team-set-up-first 2026-10-19T05:55:44.976Z weekly 0.7 https://safeguard.sh/resources/blog/which-scans-should-jump-the-queue-priority-rules-for-scan-jobs 2026-10-19T05:55:45.069Z weekly 0.7 https://safeguard.sh/resources/blog/which-security-checks-can-you-skip-for-a-hotfix 2026-10-19T05:55:45.164Z weekly 0.7 https://safeguard.sh/resources/blog/which-security-events-should-a-microservice-log 2026-10-19T05:55:45.265Z weekly 0.7 https://safeguard.sh/resources/blog/which-security-evidence-goes-stale-during-diligence 2026-10-19T05:55:45.357Z weekly 0.7 https://safeguard.sh/resources/blog/which-security-incidents-need-a-postmortem-trigger-criteria 2026-10-19T05:55:45.453Z weekly 0.7 https://safeguard.sh/resources/blog/which-security-policies-does-a-software-company-need-in-year-one 2026-10-19T05:55:45.544Z weekly 0.7 https://safeguard.sh/resources/blog/which-security-tasks-can-be-part-time-and-which-need-an-owner 2026-10-19T05:55:45.634Z weekly 0.7 https://safeguard.sh/resources/blog/which-security-testing-methods-fit-a-serverless-app 2026-10-19T05:55:45.726Z weekly 0.7 https://safeguard.sh/resources/blog/which-severity-score-does-the-scanner-demo-show 2026-10-19T05:55:45.819Z weekly 0.7 https://safeguard.sh/resources/blog/which-shared-libraries-need-stricter-rules-auth-crypto-logging-tiers 2026-10-19T05:55:45.910Z weekly 0.7 https://safeguard.sh/resources/blog/which-shipped-builds-contained-the-bad-dependency-postmortem-section 2026-10-19T05:55:46.124Z weekly 0.7 https://safeguard.sh/resources/blog/which-slack-scopes-should-a-bot-request-least-privilege 2026-10-19T05:55:46.296Z weekly 0.7 https://safeguard.sh/resources/blog/which-slsa-version-should-you-cite-v1-0-or-v1-2 2026-10-19T05:55:46.388Z weekly 0.7 https://safeguard.sh/resources/blog/which-spark-ports-must-never-face-the-internet 2026-10-19T05:55:46.492Z weekly 0.7 https://safeguard.sh/resources/blog/which-ssdf-practices-can-a-ci-pipeline-evidence-and-which-need-people 2026-10-19T05:55:46.629Z weekly 0.7 https://safeguard.sh/resources/blog/which-static-site-dependencies-ship-to-visitors-and-which-are-build-only 2026-10-19T05:55:46.727Z weekly 0.7 https://safeguard.sh/resources/blog/which-supply-chain-entry-point-should-you-fix-first 2026-10-19T05:55:46.825Z weekly 0.7 https://safeguard.sh/resources/blog/which-supported-versions-are-affected-by-an-advisory 2026-10-19T05:55:46.923Z weekly 0.7 https://safeguard.sh/resources/blog/which-teams-lag-on-internal-library-versions-an-adoption-metric 2026-10-19T05:55:47.019Z weekly 0.7 https://safeguard.sh/resources/blog/which-three-repositories-to-bring-to-a-scanner-demo 2026-10-19T05:55:47.110Z weekly 0.7 https://safeguard.sh/resources/blog/which-time-zone-should-audit-evidence-use 2026-10-19T05:55:47.203Z weekly 0.7 https://safeguard.sh/resources/blog/which-tls-versions-should-your-app-support 2026-10-19T05:55:47.295Z weekly 0.7 https://safeguard.sh/resources/blog/which-tool-for-which-job-chat-assistant-coding-agent-or-scanner 2026-10-19T05:55:47.387Z weekly 0.7 https://safeguard.sh/resources/blog/which-trace-attributes-are-safe-user-id-tenant-and-session 2026-10-19T05:55:47.486Z weekly 0.7 https://safeguard.sh/resources/blog/which-triggers-in-a-copied-workflow-need-a-second-look 2026-10-19T05:55:47.588Z weekly 0.7 https://safeguard.sh/resources/blog/which-unity-code-ships-in-your-game-and-which-only-runs-in-the-editor 2026-10-19T05:55:47.729Z weekly 0.7 https://safeguard.sh/resources/blog/which-vendor-contract-clauses-a-first-year-security-program-needs 2026-10-19T05:55:47.827Z weekly 0.7 https://safeguard.sh/resources/blog/which-versions-of-an-internal-library-should-get-security-fixes 2026-10-19T05:55:47.929Z weekly 0.7 https://safeguard.sh/resources/blog/which-versions-to-patch-after-a-vulnerability-report 2026-10-19T05:55:48.022Z weekly 0.7 https://safeguard.sh/resources/blog/which-vex-formats-should-an-sbom-tool-export 2026-10-19T05:55:48.111Z weekly 0.7 https://safeguard.sh/resources/blog/which-vulnerabilities-does-a-patch-statistic-include 2026-10-19T05:55:48.202Z weekly 0.7 https://safeguard.sh/resources/blog/which-vulnerability-fixes-should-you-automate-first 2026-10-19T05:55:48.295Z weekly 0.7 https://safeguard.sh/resources/blog/which-vulnerability-metrics-should-executives-see 2026-10-19T05:55:48.388Z weekly 0.7 https://safeguard.sh/resources/blog/which-vulnerability-metrics-work-as-audit-evidence 2026-10-19T05:55:48.487Z weekly 0.7 https://safeguard.sh/resources/blog/who-answers-the-questionnaire-when-the-mcp-server-is-open-source 2026-10-19T05:55:48.750Z weekly 0.7 https://safeguard.sh/resources/blog/who-approves-a-change-to-a-security-policy-or-gate-rule 2026-10-19T05:55:48.848Z weekly 0.7 https://safeguard.sh/resources/blog/who-approves-a-dependency-override-in-a-monorepo 2026-10-19T05:55:48.945Z weekly 0.7 https://safeguard.sh/resources/blog/who-approves-a-new-dependency-added-to-a-shared-library 2026-10-19T05:55:49.038Z weekly 0.7 https://safeguard.sh/resources/blog/who-approves-a-new-dependency-lightweight-intake-policy 2026-10-19T05:55:49.134Z weekly 0.7 https://safeguard.sh/resources/blog/who-approves-open-source-policy-exceptions-by-company-size 2026-10-19T05:55:49.226Z weekly 0.7 https://safeguard.sh/resources/blog/who-approves-security-evidence-before-it-goes-to-a-customer 2026-10-19T05:55:49.314Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-accept-a-risk-in-iso-27001 2026-10-19T05:55:49.409Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-add-a-custom-connector-on-claude-team-and-enterprise 2026-10-19T05:55:49.511Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-block-a-compromised-package-during-an-incident 2026-10-19T05:55:49.611Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-change-an-open-source-projects-license-or-add-an-exception 2026-10-19T05:55:49.712Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-change-the-remediation-mode-change-control-for-the-setting 2026-10-19T05:55:49.816Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-deploy-to-production-evidence-for-enterprise-buyers 2026-10-19T05:55:50.028Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-edit-your-package-mirror-access-controls 2026-10-19T05:55:50.132Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-invite-outside-collaborators-to-your-repos 2026-10-19T05:55:50.224Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-publish-an-internal-library-release-two-person-rule 2026-10-19T05:55:50.317Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-push-code-to-your-users-through-a-plugin-update-path-review 2026-10-19T05:55:50.413Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-reach-the-kafka-connect-rest-api-on-port-8083 2026-10-19T05:55:50.515Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-read-a-supply-chain-postmortem-access-rules 2026-10-19T05:55:50.613Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-read-or-change-actions-secrets-by-github-repo-role 2026-10-19T05:55:50.715Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-read-your-github-actions-secrets-write-access 2026-10-19T05:55:50.814Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-read-your-repository-secrets-in-github-actions 2026-10-19T05:55:51.041Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-turn-on-github-actions-debug-logging-and-why-it-matters 2026-10-19T05:55:51.134Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-use-your-shared-self-hosted-runners-runner-groups 2026-10-19T05:55:51.225Z weekly 0.7 https://safeguard.sh/resources/blog/who-can-write-to-my-github-actions-cache 2026-10-19T05:55:51.345Z weekly 0.7 https://safeguard.sh/resources/blog/who-controls-your-conda-channels-condarc-search-order 2026-10-19T05:55:51.436Z weekly 0.7 https://safeguard.sh/resources/blog/who-counts-as-an-independent-reviewer-for-code-changes 2026-10-19T05:55:51.532Z weekly 0.7 https://safeguard.sh/resources/blog/who-covers-when-the-exception-approver-is-on-leave 2026-10-19T05:55:51.632Z weekly 0.7 https://safeguard.sh/resources/blog/who-decides-what-an-ai-agent-may-do-complete-mediation 2026-10-19T05:55:51.734Z weekly 0.7 https://safeguard.sh/resources/blog/who-decides-when-two-teams-disagree-on-a-shared-dependency-version 2026-10-19T05:55:51.915Z weekly 0.7 https://safeguard.sh/resources/blog/who-dismissed-this-finding-keep-the-audit-trail-in-a-migration 2026-10-19T05:55:52.009Z weekly 0.7 https://safeguard.sh/resources/blog/who-does-what-for-ssdf-practices-when-you-build-on-cloud-platforms 2026-10-19T05:55:52.100Z weekly 0.7 https://safeguard.sh/resources/blog/who-does-what-in-vulnerability-handling-roles-for-a-small-team 2026-10-19T05:55:52.194Z weekly 0.7 https://safeguard.sh/resources/blog/who-funds-open-source-security-work-besides-individual-sponsors 2026-10-19T05:55:52.287Z weekly 0.7 https://safeguard.sh/resources/blog/who-gets-dependabot-alert-emails-and-when-they-are-sent 2026-10-19T05:55:52.386Z weekly 0.7 https://safeguard.sh/resources/blog/who-gets-paged-for-a-zero-day-in-a-shared-transitive-dependency 2026-10-19T05:55:52.497Z weekly 0.7 https://safeguard.sh/resources/blog/who-gets-the-vulnerability-alert-on-friday-night-weekend-coverage 2026-10-19T05:55:52.614Z weekly 0.7 https://safeguard.sh/resources/blog/who-gets-write-access-when-repositories-merge-into-a-monorepo 2026-10-19T05:55:52.713Z weekly 0.7 https://safeguard.sh/resources/blog/who-is-accountable-for-ai-generated-code-you-submit 2026-10-19T05:55:52.813Z weekly 0.7 https://safeguard.sh/resources/blog/who-is-accountable-for-code-a-contractor-wrote 2026-10-19T05:55:52.908Z weekly 0.7 https://safeguard.sh/resources/blog/who-is-on-call-when-an-auto-merged-fix-breaks-production 2026-10-19T05:55:53.000Z weekly 0.7 https://safeguard.sh/resources/blog/who-is-responsible-for-a-vulnerability-in-open-source-you-ship 2026-10-19T05:55:53.095Z weekly 0.7 https://safeguard.sh/resources/blog/who-is-responsible-for-an-sdks-data-in-your-app-privacy-answers 2026-10-19T05:55:53.194Z weekly 0.7 https://safeguard.sh/resources/blog/who-is-responsible-for-security-answer-when-you-have-no-ciso 2026-10-19T05:55:53.287Z weekly 0.7 https://safeguard.sh/resources/blog/who-is-responsible-for-what-in-a-secure-sdlc-raci 2026-10-19T05:55:53.380Z weekly 0.7 https://safeguard.sh/resources/blog/who-is-the-author-in-an-sbom-the-software-or-the-data 2026-10-19T05:55:53.474Z weekly 0.7 https://safeguard.sh/resources/blog/who-is-the-owner-of-record-for-a-version-override 2026-10-19T05:55:53.570Z weekly 0.7 https://safeguard.sh/resources/blog/who-keeps-scanner-vulnerability-data-fresh-open-source-vs-managed 2026-10-19T05:55:53.670Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-a-groupid-on-maven-central-namespace-verification 2026-10-19T05:55:53.778Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-a-model-dependency-a-simple-responsibility-table 2026-10-19T05:55:53.878Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-a-prompt-in-production-an-ownership-model 2026-10-19T05:55:53.975Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-a-security-doc-owners-review-dates-and-codeowners 2026-10-19T05:55:54.099Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-a-shared-internal-library-owner-maintainer-consumer 2026-10-19T05:55:54.215Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-a-transitive-dependency-when-two-teams-disagree 2026-10-19T05:55:54.332Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-a-vulnerable-sidecar-image-in-kubernetes 2026-10-19T05:55:54.433Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-an-ai-built-prototype-when-the-builder-moves-on 2026-10-19T05:55:54.540Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-an-end-of-life-runtime-when-no-team-owns-the-service 2026-10-19T05:55:54.939Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-base-image-vulnerabilities-platform-or-app-team 2026-10-19T05:55:55.060Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-ci-security-gates-platform-or-product-security 2026-10-19T05:55:55.168Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-dependency-hygiene-in-a-small-edtech-company 2026-10-19T05:55:55.273Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-dependency-intake-security-platform-or-developers 2026-10-19T05:55:55.374Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-dependency-updates-after-an-agency-launches-a-client-site 2026-10-19T05:55:55.476Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-dependency-upgrades-when-every-service-uses-a-different-language 2026-10-19T05:55:55.968Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-each-ssdf-practice-a-role-map-for-engineering-teams 2026-10-19T05:55:56.068Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-open-source-risk-governance-answer-for-customers 2026-10-19T05:55:56.185Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-os-patches-and-who-owns-dependency-patches 2026-10-19T05:55:56.280Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-plugin-and-asset-pack-updates-in-a-game-studio 2026-10-19T05:55:56.405Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-resolving-a-scanner-disagreement-roles-and-sla 2026-10-19T05:55:56.879Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-scanner-configuration-in-a-shared-monorepo 2026-10-19T05:55:57.924Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-security-when-a-40-engineer-company-has-no-security-team 2026-10-19T05:55:58.495Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-supply-chain-security-with-no-security-team 2026-10-19T05:55:58.855Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-the-central-version-list-in-a-monorepo 2026-10-19T05:55:58.948Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-the-dependency-policy-after-a-consolidation 2026-10-19T05:55:59.040Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-the-golden-path-platform-team-or-security-team 2026-10-19T05:55:59.131Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-the-scanner-the-owner-role-in-a-small-engineering-team 2026-10-19T05:55:59.222Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-the-security-regression-suite-qa-or-developers 2026-10-19T05:55:59.317Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-the-software-asset-inventory-platform-security-compliance 2026-10-19T05:55:59.440Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-this-finding-ownership-in-vulnerability-prioritization 2026-10-19T05:55:59.541Z weekly 0.7 https://safeguard.sh/resources/blog/who-owns-what-for-website-tags-marketing-security-it-raci 2026-10-19T05:55:59.679Z weekly 0.7 https://safeguard.sh/resources/blog/who-patches-a-bundled-library-in-on-premises-health-software 2026-10-19T05:56:00.099Z weekly 0.7 https://safeguard.sh/resources/blog/who-patches-a-jlink-custom-java-runtime 2026-10-19T05:56:00.195Z weekly 0.7 https://safeguard.sh/resources/blog/who-patches-a-self-hosted-ci-runner 2026-10-19T05:56:00.294Z weekly 0.7 https://safeguard.sh/resources/blog/who-patches-a-shared-hpc-cluster-owner-guide 2026-10-19T05:56:00.393Z weekly 0.7 https://safeguard.sh/resources/blog/who-patches-a-vulnerable-lambda-layer-shared-by-many-functions 2026-10-19T05:56:00.504Z weekly 0.7 https://safeguard.sh/resources/blog/who-pays-for-security-fixes-product-team-or-central-budget 2026-10-19T05:56:01.005Z weekly 0.7 https://safeguard.sh/resources/blog/who-pays-for-the-upgrade-when-a-shared-dependency-bump-breaks-teams 2026-10-19T05:56:01.102Z weekly 0.7 https://safeguard.sh/resources/blog/who-rated-this-finding-nvd-cna-or-self-severity-source 2026-10-19T05:56:01.205Z weekly 0.7 https://safeguard.sh/resources/blog/who-reads-the-advisory-feeds-set-up-an-intake-rota 2026-10-19T05:56:01.305Z weekly 0.7 https://safeguard.sh/resources/blog/who-receives-dependabot-alerts-and-how-to-widen-the-audience 2026-10-19T05:56:01.412Z weekly 0.7 https://safeguard.sh/resources/blog/who-retires-an-rpa-bot-offboarding-checklist 2026-10-19T05:56:01.541Z weekly 0.7 https://safeguard.sh/resources/blog/who-reviews-dependency-updates-in-a-design-system-codeowners 2026-10-19T05:56:01.655Z weekly 0.7 https://safeguard.sh/resources/blog/who-reviews-your-saas-inside-a-large-enterprise-and-what-they-want 2026-10-19T05:56:02.425Z weekly 0.7 https://safeguard.sh/resources/blog/who-secures-what-on-a-client-website-host-or-agency 2026-10-19T05:56:02.519Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-a-security-comment-notify-author-reviewer-or-team 2026-10-19T05:56:02.632Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-an-ospo-talk-to-about-dependencies-a-stakeholder-map 2026-10-19T05:56:02.748Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-approve-a-fleet-wide-firmware-rollout-before-it-starts 2026-10-19T05:56:03.536Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-approve-a-new-dependency-a-decision-guide 2026-10-19T05:56:04.371Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-approve-a-new-plugin-the-user-an-admin-or-security 2026-10-19T05:56:04.471Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-approve-an-ai-agent-access-request 2026-10-19T05:56:04.573Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-attend-the-postmortem-meeting 2026-10-19T05:56:04.672Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-be-on-a-security-tool-trial-team 2026-10-19T05:56:04.784Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-be-on-an-ai-security-tool-evaluation-team 2026-10-19T05:56:04.905Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-click-accept-on-a-developer-tool-terms-in-schools 2026-10-19T05:56:05.002Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-drive-the-keyboard-in-a-security-tool-trial 2026-10-19T05:56:06.198Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-edit-your-organization-workflow-template-repo 2026-10-19T05:56:07.216Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-generate-provenance-the-build-step-or-the-platform 2026-10-19T05:56:07.331Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-get-sbom-drift-alerts-and-when 2026-10-19T05:56:07.435Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-govern-low-code-apps-a-small-governance-group 2026-10-19T05:56:07.535Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-have-access-to-staging 2026-10-19T05:56:07.704Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-have-access-to-vulnerability-reports 2026-10-19T05:56:08.412Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-have-publish-access-in-google-tag-manager 2026-10-19T05:56:08.516Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-hold-live-payment-and-messaging-api-keys 2026-10-19T05:56:08.634Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-hold-your-ota-signing-key-at-a-ten-person-startup 2026-10-19T05:56:08.757Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-join-a-dependency-compromise-tabletop-exercise 2026-10-19T05:56:08.878Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-own-client-hosting-domain-and-code-accounts 2026-10-19T05:56:08.971Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-own-custom-static-analysis-rules-in-a-team 2026-10-19T05:56:09.069Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-own-mobile-sdk-governance-a-simple-raci 2026-10-19T05:56:09.190Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-own-software-supply-chain-risk-in-an-enterprise 2026-10-19T05:56:09.292Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-own-the-security-inbox-a-small-vendor-rota 2026-10-19T05:56:09.396Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-own-the-third-party-sdk-and-api-inventory 2026-10-19T05:56:09.502Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-own-the-trust-page-and-approve-its-claims 2026-10-19T05:56:09.606Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-read-which-part-of-an-sbom-by-role 2026-10-19T05:56:09.700Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-review-a-pull-request-an-agent-wrote 2026-10-19T05:56:09.800Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-sign-a-soc-2-management-assertion 2026-10-19T05:56:09.913Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-sign-off-a-not-reachable-decision 2026-10-19T05:56:10.017Z weekly 0.7 https://safeguard.sh/resources/blog/who-should-write-to-a-bazel-remote-cache 2026-10-19T05:56:10.173Z weekly 0.7 https://safeguard.sh/resources/blog/who-signs-the-cisa-secure-software-attestation-form 2026-10-19T05:56:10.330Z weekly 0.7 https://safeguard.sh/resources/blog/who-supports-an-open-source-component-in-production-three-options 2026-10-19T05:56:10.446Z weekly 0.7 https://safeguard.sh/resources/blog/who-to-notify-first-after-an-sbom-match-customer-tiers 2026-10-19T05:56:10.865Z weekly 0.7 https://safeguard.sh/resources/blog/who-updates-the-sri-hash-when-a-vendor-ships-a-new-script 2026-10-19T05:56:12.568Z weekly 0.7 https://safeguard.sh/resources/blog/who-vets-python-packages-in-snowflake-udfs 2026-10-19T05:56:12.663Z weekly 0.7 https://safeguard.sh/resources/blog/who-vets-third-party-scripts-on-a-client-website 2026-10-19T05:56:12.770Z weekly 0.7 https://safeguard.sh/resources/blog/who-writes-the-advisories-an-open-source-scanner-relies-on 2026-10-19T05:56:12.863Z weekly 0.7 https://safeguard.sh/resources/blog/who-writes-the-control-description-compliance-or-engineering 2026-10-19T05:56:12.969Z weekly 0.7 https://safeguard.sh/resources/blog/whose-problem-is-a-vulnerable-dependency-inside-a-shared-library 2026-10-19T05:56:13.062Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-bot-commit-did-not-trigger-ci-github-token-recursion 2026-10-19T05:56:13.172Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-code-scanning-alert-is-missing-from-the-pull-request 2026-10-19T05:56:13.306Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-container-scan-reports-a-package-you-deleted 2026-10-19T05:56:13.434Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-days-since-last-incident-counter-backfires 2026-10-19T05:56:13.534Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-free-scanner-is-not-free-how-to-explain-it-to-leadership 2026-10-19T05:56:13.652Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-new-cve-shows-no-severity-score-nvd-enrichment 2026-10-19T05:56:13.797Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-reachability-verdict-needs-a-commit-and-a-date 2026-10-19T05:56:14.911Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-remote-mcp-security-connector-must-be-public 2026-10-19T05:56:15.394Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-scanner-shows-a-different-severity-than-the-advisory 2026-10-19T05:56:15.501Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-scanner-shows-no-fixed-version-and-the-other-does 2026-10-19T05:56:15.614Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-skipped-required-check-can-leave-a-pull-request-blocked 2026-10-19T05:56:15.778Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-skipped-security-check-can-still-let-a-pull-request-merge 2026-10-19T05:56:15.904Z weekly 0.7 https://safeguard.sh/resources/blog/why-a-year-of-skipped-updates-makes-the-next-emergency-patch-slower 2026-10-19T05:56:16.042Z weekly 0.7 https://safeguard.sh/resources/blog/why-accuracy-is-the-wrong-way-to-judge-a-prioritization-score 2026-10-19T05:56:16.143Z weekly 0.7 https://safeguard.sh/resources/blog/why-agencies-should-commit-lockfiles-and-use-npm-ci 2026-10-19T05:56:16.249Z weekly 0.7 https://safeguard.sh/resources/blog/why-ai-built-frontends-leak-api-keys-through-env-variables 2026-10-19T05:56:16.357Z weekly 0.7 https://safeguard.sh/resources/blog/why-am-i-still-exposed-after-a-security-fix-is-released 2026-10-19T05:56:17.759Z weekly 0.7 https://safeguard.sh/resources/blog/why-an-image-sbom-from-build-time-and-registry-time-can-differ 2026-10-19T05:56:17.878Z weekly 0.7 https://safeguard.sh/resources/blog/why-an-image-scan-of-a-scratch-image-shows-no-packages 2026-10-19T05:56:19.607Z weekly 0.7 https://safeguard.sh/resources/blog/why-an-llm-cvss-score-is-not-a-risk-score 2026-10-19T05:56:19.828Z weekly 0.7 https://safeguard.sh/resources/blog/why-an-llm-misses-last-weeks-vulnerability 2026-10-19T05:56:19.951Z weekly 0.7 https://safeguard.sh/resources/blog/why-architecture-review-matters-for-open-source-license-obligations 2026-10-19T05:56:20.070Z weekly 0.7 https://safeguard.sh/resources/blog/why-aws-advises-against-layers-for-go-and-rust-lambda 2026-10-19T05:56:20.204Z weekly 0.7 https://safeguard.sh/resources/blog/why-cant-you-use-secrets-in-an-if-condition-github-actions 2026-10-19T05:56:20.362Z weekly 0.7 https://safeguard.sh/resources/blog/why-cap-sys-admin-is-the-capability-to-avoid-in-containers 2026-10-19T05:56:20.509Z weekly 0.7 https://safeguard.sh/resources/blog/why-cve-based-scanning-misses-malicious-packages 2026-10-19T05:56:20.638Z weekly 0.7 https://safeguard.sh/resources/blog/why-dast-rarely-finds-insecure-deserialization 2026-10-19T05:56:20.764Z weekly 0.7 https://safeguard.sh/resources/blog/why-deleting-images-did-not-free-registry-space 2026-10-19T05:56:20.967Z weekly 0.7 https://safeguard.sh/resources/blog/why-did-a-vulnerability-severity-change-overnight-in-my-scanner 2026-10-19T05:56:21.085Z weekly 0.7 https://safeguard.sh/resources/blog/why-did-an-unchanged-container-image-gain-new-vulnerabilities 2026-10-19T05:56:22.210Z weekly 0.7 https://safeguard.sh/resources/blog/why-did-dependabot-alert-on-a-dependency-i-did-not-change 2026-10-19T05:56:22.317Z weekly 0.7 https://safeguard.sh/resources/blog/why-did-my-ci-oidc-role-assumption-fail-troubleshooting 2026-10-19T05:56:22.444Z weekly 0.7 https://safeguard.sh/resources/blog/why-did-my-jira-webhook-stop-firing-checklist 2026-10-19T05:56:22.580Z weekly 0.7 https://safeguard.sh/resources/blog/why-did-thousands-of-cve-records-change-at-once 2026-10-19T05:56:22.683Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-apps-keep-asking-for-security-updates 2026-10-19T05:56:22.790Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-ci-jobs-hit-pull-rate-limits-on-a-shared-runner-ip 2026-10-19T05:56:22.905Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-developers-ignore-security-alerts 2026-10-19T05:56:23.039Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-developers-skip-the-paved-road-and-how-to-fix-it 2026-10-19T05:56:23.147Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-people-log-in-as-the-bot-and-how-to-stop-it 2026-10-19T05:56:23.384Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-scan-results-change-when-no-code-changed 2026-10-19T05:56:23.488Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-security-checks-fail-ci-builds-cause-taxonomy 2026-10-19T05:56:23.595Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-some-projects-not-publish-a-severity-score-for-their-cves 2026-10-19T05:56:24.466Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-supply-chain-attackers-target-maintainers-first 2026-10-19T05:56:24.574Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-supply-chain-attacks-go-unnoticed-for-days 2026-10-19T05:56:24.683Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-tutorials-with-admin-admin-logins-cause-real-incidents 2026-10-19T05:56:24.794Z weekly 0.7 https://safeguard.sh/resources/blog/why-do-update-bot-pull-requests-keep-getting-rebased 2026-10-19T05:56:24.902Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-a-beta-api-host-bypass-your-rate-limit 2026-10-19T05:56:25.042Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-a-closed-update-pull-request-keep-coming-back 2026-10-19T05:56:25.174Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-a-cve-record-list-the-same-reference-twice 2026-10-19T05:56:25.300Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-a-strict-csp-block-eval-in-a-checkout-widget 2026-10-19T05:56:25.409Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-aes-gcm-decryption-fail-with-an-authentication-error 2026-10-19T05:56:25.517Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-an-ios-ci-job-need-a-temporary-keychain 2026-10-19T05:56:25.627Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-an-npm-sbom-list-the-same-package-twice 2026-10-19T05:56:25.740Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-ci-cache-miss-after-a-quiet-week-eviction-and-size-limits 2026-10-19T05:56:25.858Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-gradle-pick-a-newer-sdk-version-than-i-declared 2026-10-19T05:56:25.969Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-my-build-differ-on-my-laptop-and-in-ci 2026-10-19T05:56:26.075Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-npm-run-node-gyp-when-a-package-has-a-binding-gyp 2026-10-19T05:56:26.192Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-reachability-analysis-say-unknown 2026-10-19T05:56:26.297Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-ssh-offer-all-your-keys-to-every-server 2026-10-19T05:56:27.702Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-the-same-commit-build-a-different-docker-image 2026-10-19T05:56:27.846Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-the-security-scan-pass-locally-but-fail-in-ci 2026-10-19T05:56:27.967Z weekly 0.7 https://safeguard.sh/resources/blog/why-does-webhook-signature-verification-fail-common-causes 2026-10-19T05:56:28.076Z weekly 0.7 https://safeguard.sh/resources/blog/why-engineers-say-we-cannot-update-yet-and-how-to-respond 2026-10-19T05:56:28.195Z weekly 0.7 https://safeguard.sh/resources/blog/why-extra-index-url-is-risky-for-ml-teams-using-gpu-wheels 2026-10-19T05:56:28.302Z weekly 0.7 https://safeguard.sh/resources/blog/why-git-describe-skips-your-tag-in-version-strings 2026-10-19T05:56:28.407Z weekly 0.7 https://safeguard.sh/resources/blog/why-has-renovate-not-automerged-my-passing-fix-pr-yet 2026-10-19T05:56:28.519Z weekly 0.7 https://safeguard.sh/resources/blog/why-ide-and-ci-dependency-scan-results-differ 2026-10-19T05:56:28.633Z weekly 0.7 https://safeguard.sh/resources/blog/why-is-an-exploited-cve-not-in-the-kev-catalog 2026-10-19T05:56:28.761Z weekly 0.7 https://safeguard.sh/resources/blog/why-is-curl-pipe-bash-in-install-docs-risky 2026-10-19T05:56:28.896Z weekly 0.7 https://safeguard.sh/resources/blog/why-is-my-build-failing-on-a-vulnerability-i-did-not-add 2026-10-19T05:56:29.007Z weekly 0.7 https://safeguard.sh/resources/blog/why-is-this-package-in-my-build-trace-it-from-your-sbom 2026-10-19T05:56:29.127Z weekly 0.7 https://safeguard.sh/resources/blog/why-is-update-bot-automerge-so-slow-and-merging-one-pr-at-a-time 2026-10-19T05:56:29.243Z weekly 0.7 https://safeguard.sh/resources/blog/why-language-audit-commands-give-different-answers-and-what-to-do 2026-10-19T05:56:29.353Z weekly 0.7 https://safeguard.sh/resources/blog/why-llm-triage-needs-a-deterministic-gate 2026-10-19T05:56:29.470Z weekly 0.7 https://safeguard.sh/resources/blog/why-maven-blocks-http-repositories-and-how-to-fix-it 2026-10-19T05:56:29.588Z weekly 0.7 https://safeguard.sh/resources/blog/why-maven-picks-an-older-library-version-and-why-it-matters 2026-10-19T05:56:29.697Z weekly 0.7 https://safeguard.sh/resources/blog/why-mounting-the-docker-socket-into-a-container-is-dangerous 2026-10-19T05:56:30.109Z weekly 0.7 https://safeguard.sh/resources/blog/why-must-firefox-extensions-be-signed-by-mozilla 2026-10-19T05:56:31.448Z weekly 0.7 https://safeguard.sh/resources/blog/why-native-apps-should-use-the-system-browser-for-oauth 2026-10-19T05:56:31.578Z weekly 0.7 https://safeguard.sh/resources/blog/why-no-fix-pr-for-transitive-dependency-alert 2026-10-19T05:56:31.691Z weekly 0.7 https://safeguard.sh/resources/blog/why-no-known-vulnerabilities-is-the-wrong-customer-answer 2026-10-19T05:56:31.812Z weekly 0.7 https://safeguard.sh/resources/blog/why-open-source-projects-need-two-github-org-owners 2026-10-19T05:56:31.930Z weekly 0.7 https://safeguard.sh/resources/blog/why-os-and-dependency-patching-need-different-tools 2026-10-19T05:56:32.042Z weekly 0.7 https://safeguard.sh/resources/blog/why-pip-reports-a-hash-mismatch-only-when-install-options-change 2026-10-19T05:56:32.169Z weekly 0.7 https://safeguard.sh/resources/blog/why-plugin-author-account-security-is-your-agencys-risk 2026-10-19T05:56:32.290Z weekly 0.7 https://safeguard.sh/resources/blog/why-process-env-is-string-or-undefined-in-typescript 2026-10-19T05:56:32.405Z weekly 0.7 https://safeguard.sh/resources/blog/why-python-setup-py-install-undermines-pip-hash-checking 2026-10-19T05:56:32.554Z weekly 0.7 https://safeguard.sh/resources/blog/why-sbom-storage-should-be-append-only-never-overwrite 2026-10-19T05:56:32.678Z weekly 0.7 https://safeguard.sh/resources/blog/why-scanners-miss-business-logic-flaws-and-what-qa-can-do 2026-10-19T05:56:32.803Z weekly 0.7 https://safeguard.sh/resources/blog/why-scoped-npm-packages-need-access-public-on-first-publish 2026-10-19T05:56:32.918Z weekly 0.7 https://safeguard.sh/resources/blog/why-separate-build-and-publish-jobs-for-pypi-releases 2026-10-19T05:56:33.040Z weekly 0.7 https://safeguard.sh/resources/blog/why-sharp-installs-platform-binaries-as-optional-dependencies 2026-10-19T05:56:33.196Z weekly 0.7 https://safeguard.sh/resources/blog/why-should-each-payment-service-have-its-own-credentials 2026-10-19T05:56:34.945Z weekly 0.7 https://safeguard.sh/resources/blog/why-skipping-upgrades-erodes-the-knowledge-to-do-them 2026-10-19T05:56:35.073Z weekly 0.7 https://safeguard.sh/resources/blog/why-sla-compliance-looks-better-when-you-count-only-closed-findings 2026-10-19T05:56:35.195Z weekly 0.7 https://safeguard.sh/resources/blog/why-slsa-l3-wants-a-fresh-build-environment-every-time 2026-10-19T05:56:35.310Z weekly 0.7 https://safeguard.sh/resources/blog/why-the-same-code-gets-different-reachability-answers-by-build 2026-10-19T05:56:35.433Z weekly 0.7 https://safeguard.sh/resources/blog/why-the-same-library-appears-in-many-versions-after-a-split 2026-10-19T05:56:35.547Z weekly 0.7 https://safeguard.sh/resources/blog/why-there-is-no-debian-security-advisory-for-your-scanner-cve 2026-10-19T05:56:35.666Z weekly 0.7 https://safeguard.sh/resources/blog/why-two-license-scans-show-different-results 2026-10-19T05:56:35.785Z weekly 0.7 https://safeguard.sh/resources/blog/why-two-patch-reports-disagree-32-days-versus-months 2026-10-19T05:56:35.918Z weekly 0.7 https://safeguard.sh/resources/blog/why-two-pythons-appear-in-one-container-scan 2026-10-19T05:56:36.033Z weekly 0.7 https://safeguard.sh/resources/blog/why-two-security-scanners-disagree-on-the-same-app 2026-10-19T05:56:36.153Z weekly 0.7 https://safeguard.sh/resources/blog/why-unity-installed-a-different-package-version-than-you-asked 2026-10-19T05:56:36.270Z weekly 0.7 https://safeguard.sh/resources/blog/why-updates-break-things-explaining-patching-risk-to-executives 2026-10-19T05:56:36.384Z weekly 0.7 https://safeguard.sh/resources/blog/why-use-a-python-virtual-environment-on-your-first-day 2026-10-19T05:56:36.598Z weekly 0.7 https://safeguard.sh/resources/blog/why-vm-and-disk-image-builds-differ-and-how-to-fix 2026-10-19T05:56:36.725Z weekly 0.7 https://safeguard.sh/resources/blog/why-was-my-package-blocked-guide-for-developers 2026-10-19T05:56:36.854Z weekly 0.7 https://safeguard.sh/resources/blog/why-you-cannot-change-a-tagged-go-module-version 2026-10-19T05:56:38.079Z weekly 0.7 https://safeguard.sh/resources/blog/widen-or-increase-what-version-range-should-an-update-bot-write 2026-10-19T05:56:38.822Z weekly 0.7 https://safeguard.sh/resources/blog/will-a-golden-path-slow-us-down-at-first-the-j-curve-explained 2026-10-19T05:56:38.945Z weekly 0.7 https://safeguard.sh/resources/blog/will-a-hospital-review-your-build-pipeline-what-to-prepare 2026-10-19T05:56:39.055Z weekly 0.7 https://safeguard.sh/resources/blog/will-a-public-records-request-expose-vendor-security-documents 2026-10-19T05:56:39.171Z weekly 0.7 https://safeguard.sh/resources/blog/will-ai-assistants-repeat-an-insecure-example-from-your-docs 2026-10-19T05:56:39.293Z weekly 0.7 https://safeguard.sh/resources/blog/will-an-sdk-upgrade-force-a-newer-xcode-or-ios-minimum 2026-10-19T05:56:39.406Z weekly 0.7 https://safeguard.sh/resources/blog/will-ci-log-masking-hide-a-google-play-json-key 2026-10-19T05:56:39.525Z weekly 0.7 https://safeguard.sh/resources/blog/will-hiring-more-people-clear-a-vulnerability-backlog-myth-vs-fact 2026-10-19T05:56:39.640Z weekly 0.7 https://safeguard.sh/resources/blog/will-old-hashes-and-encrypted-data-survive-a-crypto-library-upgrade 2026-10-19T05:56:39.758Z weekly 0.7 https://safeguard.sh/resources/blog/will-scanners-flag-vulnerabilities-in-a-renamed-fork 2026-10-19T05:56:39.885Z weekly 0.7 https://safeguard.sh/resources/blog/will-the-sbom-plugin-run-on-your-build-compatibility-check 2026-10-19T05:56:40.002Z weekly 0.7 https://safeguard.sh/resources/blog/will-your-vendor-tell-you-about-vulnerabilities-notification-terms 2026-10-19T05:56:40.127Z weekly 0.7 https://safeguard.sh/resources/blog/winget-upgrade-all-should-you-run-it-on-a-dev-machine 2026-10-19T05:56:40.260Z weekly 0.7 https://safeguard.sh/resources/blog/wip-limits-for-a-security-fix-queue 2026-10-19T05:56:40.393Z weekly 0.7 https://safeguard.sh/resources/blog/wire-kev-and-epss-into-an-open-source-scanner-workflow 2026-10-19T05:56:40.527Z weekly 0.7 https://safeguard.sh/resources/blog/withdrawn-rejected-and-disputed-records-what-each-label-means 2026-10-19T05:56:40.673Z weekly 0.7 https://safeguard.sh/resources/blog/wordpress-guideline-7-plugins-need-opt-in-before-contacting-servers 2026-10-19T05:56:40.868Z weekly 0.7 https://safeguard.sh/resources/blog/wordpress-guideline-8-why-plugins-must-not-update-from-elsewhere 2026-10-19T05:56:41.005Z weekly 0.7 https://safeguard.sh/resources/blog/wordpress-org-plugin-release-cooldown-and-automated-review 2026-10-19T05:56:41.467Z weekly 0.7 https://safeguard.sh/resources/blog/words-that-cause-audit-findings-in-vulnerability-records 2026-10-19T05:56:41.585Z weekly 0.7 https://safeguard.sh/resources/blog/work-backwards-from-a-customer-deadline-compliance-plan 2026-10-19T05:56:41.707Z weekly 0.7 https://safeguard.sh/resources/blog/worked-example-scoring-a-hypothetical-library-with-a-rubric 2026-10-19T05:56:41.829Z weekly 0.7 https://safeguard.sh/resources/blog/workflow-template-or-reusable-workflow-for-a-golden-path 2026-10-19T05:56:41.944Z weekly 0.7 https://safeguard.sh/resources/blog/working-from-a-rental-or-coworking-space-network-checklist 2026-10-19T05:56:42.057Z weekly 0.7 https://safeguard.sh/resources/blog/wrap-a-library-behind-an-interface-to-keep-exits-cheap 2026-10-19T05:56:42.173Z weekly 0.7 https://safeguard.sh/resources/blog/wrap-a-third-party-library-or-call-it-directly 2026-10-19T05:56:42.295Z weekly 0.7 https://safeguard.sh/resources/blog/wrap-third-party-ui-dependencies-in-a-design-system 2026-10-19T05:56:42.418Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-40-to-60-word-answer-first-paragraph-for-an-advisory 2026-10-19T05:56:42.529Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-blocked-extension-message-that-gets-requests 2026-10-19T05:56:42.659Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-go-analyzer-and-test-it-with-analysistest 2026-10-19T05:56:42.772Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-not-affected-vex-statement-for-your-library 2026-10-19T05:56:42.895Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-one-page-decision-memo-for-a-security-tool-approval 2026-10-19T05:56:43.923Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-one-page-security-test-plan-for-a-release 2026-10-19T05:56:44.105Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-postmortem-for-readers-outside-your-team 2026-10-19T05:56:44.228Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-python-security-check-with-the-ast-module 2026-10-19T05:56:44.341Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-regression-test-for-a-vulnerability-fix 2026-10-19T05:56:44.461Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-roslyn-analyzer-for-a-custom-dotnet-check 2026-10-19T05:56:44.586Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-security-alert-in-chat-that-people-act-on 2026-10-19T05:56:44.708Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-security-bug-report-a-vendor-can-act-on 2026-10-19T05:56:44.845Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-security-exception-renewal-request-that-gets-a-fair-review 2026-10-19T05:56:44.975Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-security-options-memo-with-a-clear-recommendation 2026-10-19T05:56:45.089Z weekly 0.7 https://safeguard.sh/resources/blog/write-a-security-report-as-a-github-actions-job-summary 2026-10-19T05:56:45.222Z weekly 0.7 https://safeguard.sh/resources/blog/write-an-sns-to-sqs-queue-policy-without-a-confused-deputy-gap 2026-10-19T05:56:45.345Z weekly 0.7 https://safeguard.sh/resources/blog/write-an-upgrade-runbook-for-a-vulnerable-dependency-template 2026-10-19T05:56:45.461Z weekly 0.7 https://safeguard.sh/resources/blog/write-golden-path-docs-developers-read-dependency-security 2026-10-19T05:56:45.581Z weekly 0.7 https://safeguard.sh/resources/blog/write-release-notes-from-an-sbom-diff 2026-10-19T05:56:45.751Z weekly 0.7 https://safeguard.sh/resources/blog/write-your-scanner-decision-rule-before-the-first-scan 2026-10-19T05:56:45.874Z weekly 0.7 https://safeguard.sh/resources/blog/writing-the-ai-section-of-a-security-tool-requirements-doc 2026-10-19T05:56:45.993Z weekly 0.7 https://safeguard.sh/resources/blog/wrong-affected-versions-in-an-advisory-how-to-get-it-corrected 2026-10-19T05:56:46.113Z weekly 0.7 https://safeguard.sh/resources/blog/x-content-type-options-nosniff-what-it-blocks 2026-10-19T05:56:46.227Z weekly 0.7 https://safeguard.sh/resources/blog/x-xss-protection-and-expect-ct-should-you-remove-them 2026-10-19T05:56:46.801Z weekly 0.7 https://safeguard.sh/resources/blog/xss-sink-review-table-react-vue-angular 2026-10-19T05:56:46.917Z weekly 0.7 https://safeguard.sh/resources/blog/yanked-retracted-deprecated-archived-which-flag-should-block-a-build 2026-10-19T05:56:47.405Z weekly 0.7 https://safeguard.sh/resources/blog/yarn-approvedgitrepositories-allowlist-git-dependencies 2026-10-19T05:56:47.524Z weekly 0.7 https://safeguard.sh/resources/blog/yarn-classic-to-berry-npmrc-is-ignored 2026-10-19T05:56:47.659Z weekly 0.7 https://safeguard.sh/resources/blog/yarn-lock-v1-one-entry-many-ranges-how-to-read-it 2026-10-19T05:56:47.774Z weekly 0.7 https://safeguard.sh/resources/blog/yarn-npmminimalagegate-set-a-package-age-gate 2026-10-19T05:56:47.917Z weekly 0.7 https://safeguard.sh/resources/blog/yarn-registry-config-npmscopes-and-http-whitelist 2026-10-19T05:56:48.039Z weekly 0.7 https://safeguard.sh/resources/blog/yearly-audit-calendar-for-a-small-saas-team 2026-10-19T05:56:48.158Z weekly 0.7 https://safeguard.sh/resources/blog/you-inherited-a-repo-with-no-lockfile-what-to-do-first 2026-10-19T05:56:48.273Z weekly 0.7 https://safeguard.sh/resources/blog/you-loaded-an-untrusted-pickle-model-what-to-do-in-the-first-hour 2026-10-19T05:56:48.389Z weekly 0.7 https://safeguard.sh/resources/blog/your-dependency-has-a-cve-do-you-need-to-publish-an-advisory 2026-10-19T05:56:48.503Z weekly 0.7 https://safeguard.sh/resources/blog/your-first-enterprise-security-review-the-sbom-folder-to-prepare 2026-10-19T05:56:48.618Z weekly 0.7 https://safeguard.sh/resources/blog/your-fix-will-miss-the-date-how-to-tell-the-researcher 2026-10-19T05:56:48.741Z weekly 0.7 https://safeguard.sh/resources/blog/your-payment-provider-is-down-how-should-checkout-behave 2026-10-19T05:56:48.860Z weekly 0.7 https://safeguard.sh/resources/blog/zero-trust-for-legacy-systems-protect-the-resource-not-the-segment 2026-10-19T05:56:48.978Z weekly 0.7 https://safeguard.sh/resources/blog/zombie-connections-in-low-code-platforms-find-and-retire-them 2026-10-19T05:56:49.109Z weekly 0.7