Developer Tools
How can users see what your CLI telemetry sends before it sends?
Add a debug switch that prints each telemetry event and sends nothing. Next.js and Homebrew both do this. Here is the pattern and what to test.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
How do I leave Pipenv and keep my Pipfile.lock versions?
Export Pipfile.lock with pipenv requirements, run pipenv verify first, then reuse the pinned file as constraints in your next tool so versions stay put.
Oct 19, 20263 min read
Developer Tools
What GITHUB_TOKEN permissions should security automation have?
Set the permissions key on every automation workflow and grant only what each job writes. A permission map for ticket, label, comment and report jobs.
Oct 19, 20263 min read
Developer Tools
How big can a Lambda deployment package be, and what should you trim?
Lambda allows 50 MB zipped and 250 MB unzipped including layers, or 10 GB for container images. See which dependencies to trim and why it helps security.
Oct 19, 20264 min read
Developer Tools
What does a kubernetes.io/tls Secret require, and what is checked?
A kubernetes.io/tls Secret needs tls.crt and tls.key keys, but the API server does not validate their contents. How to create one and check it yourself.
Oct 19, 20264 min read
Developer Tools
Why does my pod keep the old certificate after the Secret was renewed?
A Secret mounted with subPath never receives updates in Kubernetes. See why renewed certificates stay stale in pods, and how to fix mounts and reloads.
Oct 19, 20264 min read
Developer Tools
How far can kubectl be behind the cluster before it breaks?
kubectl is supported within one minor version of the API server, older or newer. See skew rules for kubelet and kube-proxy and how to keep clients aligned.
Oct 19, 20263 min read
Developer Tools
How do JetBrains IDE and plugin updates work, and who owns them?
JetBrains IDEs check for updates by default and usually patch in place. See update channels, Toolbox App policy and how to handle plugin updates in a team.
Oct 19, 20263 min read
Developer Tools
How do you keep vendored code and test fixtures out of update scans?
Vendored directories and sample manifests create bot pull requests nobody wants. Learn how path exclusion works in update tools and what not to hide.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.