Developer Tools
How do you ban risky modules in Node code with ESLint?
Use no-restricted-imports and no-eval to block child_process, eval and other risky APIs in a Node project, with a note on what the rules miss.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
Bake the model into the container image or download it at startup?
A decision guide for model delivery in containers: image size, scanning, reproducibility, startup network access and rollback, with a comparison table.
Oct 19, 20263 min read
Developer Tools
Azure Pipelines templates: what do extends and includes change?
In Azure Pipelines, an extends template fixes the pipeline structure while an includes template inserts steps. Which to use when adopting shared templates.
Oct 19, 20263 min read
Developer Tools
How do you avoid registry rate limits when scanning images at scale?
Image scanners pull a lot. Authenticate, scan by digest, pull once through an internal cache and reuse layer analysis to stay under pull limits.
Oct 19, 20264 min read
Developer Tools
Automatic update defaults: what OS tools and dependency bots do
Ubuntu applies security updates daily but does not reboot. Dependabot waits three days and limits open PRs. Know the defaults before you rely on them.
Oct 19, 20263 min read
Developer Tools
Automatic or manual code signing for iOS CI builds?
Automatic signing is fine on a developer laptop, but CI release builds are more predictable with explicit profiles. Here is why and how teams mix the two.
Oct 19, 20264 min read
Developer Tools
Automated dependency fixes: grouped PR, canary, gate and rollback defined
Plain definitions of the terms used when automating dependency fixes: fix PR, grouped PR, gate, canary, rollback, roll forward, blast radius and exception.
Oct 19, 20264 min read
Developer Tools
How do auto-triage rules decide which alerts get a fix PR?
Auto-triage rules dismiss, snooze or route alerts before a human sees them. Here is what they can do, what to automate, and what to keep a person on.
Oct 19, 20264 min read
Developer Tools
Is it safe to auto-merge security fix pull requests?
Auto-merge can remove review wait from low risk security fixes if required checks and reviews gate it. Here is a safe setup and the limits to know.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.