Security Guides
How do you review tag manager changes like application code?
Treat each tag manager release as a code change: a named reviewer, a read of the version diff, a staged test and a rollback plan. A workable routine.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What review rules should an urgent security hotfix still follow?
Urgent does not mean unreviewed. Keep the diff small, get a second reviewer, run the regression test, and record who approved what before shipping.
Oct 19, 20263 min read
Security Guides
How do you review redirect and header rules on a static host?
Redirect and header rule files change who can reach what. Review them like code: open redirects, wildcard matches, missing headers and rule order.
Oct 19, 20264 min read
Security Guides
How many reviewers does a pull request need? A risk tier guide
Match review depth to risk: one reviewer for routine changes, two for sensitive paths, and the security team for new trust boundaries. A simple tier table.
Oct 19, 20264 min read
Security Guides
How do you list and revoke personal access tokens in a GitHub org?
Owners can list active fine-grained tokens, filter by creator, repo and permission, and revoke in bulk. Classic tokens are not in that list. Steps inside.
Oct 19, 20263 min read
Security Guides
How do you review AI-written cryptography code before it ships?
A checklist for reviewing cryptography an AI assistant wrote: algorithms, keys, randomness, password hashing and IV reuse, based on OWASP guidance.
Oct 19, 20263 min read
Security Guides
How do you trace data from source to sink in a code review?
A manual method for secure code review: list where outside data enters, follow it through the code, and check each place it lands. Steps and an example.
Oct 19, 20264 min read
Security Guides
What should you check when a pull request adds a new integration?
A reviewer's checklist for pull requests that connect to a new service: trust boundary, credentials, data sent and received, failure behaviour, packages.
Oct 19, 20264 min read
Security Guides
How to review a Fastfile like production code: what to look for
A Fastfile runs with your signing and store credentials. Review changes to it as carefully as app code, using this checklist of what to look for in a diff.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.