Developer Tools
Semver patch, minor, major: how risky is this fix PR?
What patch, minor and major version bumps promise under semantic versioning, where the promise breaks, and how to size the risk of a security fix PR.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
security.txt Expires and signing: how to keep the file trusted
A security.txt file with a stale Expires date should be ignored. How to set Expires, sign the file, scope it to the right host and keep it current.
Oct 18, 20263 min read
Developer Tools
Add a SECURITY.md to your repositories in ten minutes
A SECURITY.md tells researchers how to report a vulnerability privately. What to put in it, what GitHub offers on every plan, and the traps to avoid.
Oct 18, 20263 min read
Developer Tools
Secure password reset flow: a checklist for developers
Build a password reset that does not become an account takeover path: token rules, generic messages, rate limits, notifications and session invalidation.
Oct 18, 20263 min read
Developer Tools
Secure, HttpOnly and SameSite cookie flags: what each one does
Secure keeps cookies off plain HTTP, HttpOnly hides them from scripts and SameSite limits cross-site sending. Safe defaults for session cookies explained.
Oct 18, 20263 min read
Developer Tools
Secure coding training: what to teach developers first
Start secure coding training with the few flaws your own code actually has: secrets, injection, access control and dependencies. A short, ordered syllabus.
Oct 18, 20263 min read
Developer Tools
A 30-minute secure code review kata for your team
A repeatable 30-minute team exercise: review one small pull request seeded with security flaws, compare findings, and build a shared checklist.
Oct 18, 20263 min read
Developer Tools
Secret scanning for a small team: what is free and what is not
What GitHub secret scanning covers, where it is free, where it needs a paid add on, and what to do the moment a credential leaks into a repository.
Oct 18, 20263 min read
Developer Tools
Scripting with Safeguard CLI output: JSON, stdout, stderr and jq
Practical rules for scripting the Safeguard CLI: send JSON to a file, keep stdout clean, read the scan folder with jq, and handle redaction and exit codes.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.