Developer Tools
libc++ hardening modes: fast, extensive or debug, which to pick
libc++ can check preconditions such as valid element access at run time. The four hardening modes, what each adds, and which one fits production.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
How do you test certificate issuance without using up rate limits?
Test ACME issuance against the Let's Encrypt staging environment: the URL, certbot flags, separate accounts, and why staging roots are not in trust stores.
Oct 18, 20263 min read
Developer Tools
Lambda zip or container image: which is easier to keep patched?
Zip packages get automatic runtime patches. Container images give version consistency but need rebuilds. A comparison of the patch work each one creates.
Oct 18, 20264 min read
Developer Tools
Kubernetes secrets encryption at rest: what it covers and what it misses
Encryption at rest protects Secret data stored via the Kubernetes API, but not mounted volumes or anyone with API access. What it covers, in plain terms.
Oct 18, 20264 min read
Developer Tools
kubectl dry run client or server: which one catches policy errors?
Client dry run only prints the object. Server dry run runs admission and validation without saving. Use server mode to test policy before rollout.
Oct 18, 20263 min read
Developer Tools
How do I use kubectl diff safely before applying a change?
kubectl diff compares the live object with what apply would produce. Exit code 1 means differences, not failure. Secrets are masked unless you ask.
Oct 18, 20263 min read
Developer Tools
Where do Kotlin Multiplatform dependencies live, and what gets scanned?
Kotlin Multiplatform declares dependencies per source set such as commonMain and iosMain, so a complete inventory must read every source set, not one list.
Oct 18, 20264 min read
Developer Tools
Kotlin Multiplatform SwiftPM import: what to commit and what is alpha?
Kotlin's SwiftPM import is Alpha. Commit the generated .swiftpm-locks directory and pick version specifiers deliberately for repeatable iOS dependencies.
Oct 18, 20263 min read
Developer Tools
How do you scan dependencies in a Kotlin Multiplatform project?
Kotlin Multiplatform declares dependencies per source set across Gradle and SwiftPM. Learn how to build one inventory so iOS and Android are both covered.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.