Developer Tools
AddressSanitizer in CI: what it catches and what it costs
AddressSanitizer turns silent memory bugs into test failures. See which bugs it catches, the typical slowdown, and how to add it to a CI job.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
AddressSanitizer explained: what it catches and what it costs
AddressSanitizer turns silent memory bugs like overflows and use-after-free into crashes with stack traces. What it catches, what it costs, and its limits.
Oct 18, 20263 min read
Developer Tools
How do you add pre-commit secret scanning to catch AI-generated keys?
Add a pre-commit secret scan and server-side push protection so keys written by an assistant never reach the repository. Setup steps and bypass rules.
Oct 18, 20263 min read
Developer Tools
A/B slots or a single slot: how to design safe firmware updates
A/B slots keep a known good image to fall back on if an update fails to boot. What Android's design shows, and the trade-offs for embedded devices.
Oct 18, 20263 min read
Developer Tools
Which CI systems does Safeguard work with? A plain FAQ
Documented examples exist for GitHub Actions, GitLab CI, Jenkins and Azure DevOps. CircleCI is not documented, and no official Action yet. Plain answers.
Oct 18, 20263 min read
Developer Tools
Where the Safeguard CLI stores files, and how to reset or uninstall it
A map of the folders the Safeguard CLI uses for tokens, config and logs, how settings are layered, and the clean steps to reset or uninstall the tool.
Oct 18, 20263 min read
Developer Tools
Where Ollama stores models and how to move them to another drive
Ollama keeps models in a per OS folder you can relocate with OLLAMA_MODELS. Default paths on macOS, Linux and Windows, and the permission trap on Linux.
Oct 18, 20263 min read
Developer Tools
Where each scanner belongs: editor, pull request, build, registry, cloud
Place SAST, SCA, secrets, container, IaC and CSPM checks at the stage where the finding is cheapest to fix, from editor to the running cloud account.
Oct 18, 20263 min read
Developer Tools
Where AI helps in the SDLC, stage by stage, and where it needs a gate
A stage by stage view of AI in the software lifecycle: planning, coding, review, testing, release and operations, with the control each stage still needs.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.