Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
A short shell script using gh api can pull branch protection, rulesets, code scanning alerts and artifact lists into dated files. Steps and caveats.
Estimate a dependency upgrade by sorting your past upgrades into patch, minor and major classes and reading the range, not by guessing from the changelog.
eslint-plugin-security ships 15 rules and warns about false positives. Which flag real risk in Node code and which need a plan before you enable them.
Use the API for lookups of one CVE or a small batch, and the daily CSV for bulk loads. FIRST says the API is not for syncing a full local copy. Setup steps.
The FIRST API returns an EPSS score, percentile and date per CVE, as strings. Learn the query, time series scope, paging and rate limit rules.
Envoy secret discovery service pushes new certificates to proxies, so expiry does not need a redeploy. How it works, failure behaviour and a safe setup.
Send to people who signed up, skip pre-checked boxes, make leaving easy and ramp volume slowly. A list hygiene checklist grounded in Google guidance.
Google's guidance on display names: identify the sender first, never imitate a reply, never use a recipient's name. A checklist for app and campaign emails.
Electron supports the latest three stable major versions and only the newest minor of each. What that means for desktop apps and your dependency inventory.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
