Dependencies & pipelines
Supply Chain
Dependencies, packages, CI/CD and third-party services — securing the code you didn't write yourself.
49published articles
49 published articles
Articles in this category
No guides match your search. Try a broader topic or clear the search to browse.
MiMo Code MCP security workflow
Set up LyraShield MCP in MiMo Code step by step: CLI setup, manual config, verification, inline scan, GitHub Action diff gate and agent rules.
Aug 7, 2026Oh My Pi MCP security workflow
Set up LyraShield MCP in Oh My Pi step by step: CLI setup, manual config, verification, inline scan, GitHub Action diff gate and agent rules.
Aug 7, 2026Roo Code MCP security workflow
Set up LyraShield MCP in Roo Code step by step: CLI install, manual config, verification, inline scan, GitHub Action diff gate and agent rules.
Aug 7, 2026Amp App Security Checklist
Practical checklist for Amp: scope orbs, MCP servers, skills and CI gates before shipping AI-built code to production.
Jul 30, 2026Amp MCP security workflow for agent scans
Set up LyraShield AI with Amp via MCP to scan changed code, verify findings and enforce a diff aware GitHub Action gate with SARIF.
Jul 30, 2026Claude Code MCP Agent Rules Security Setup
Configure LyraShield MCP with Claude Code agent rules to catch OWASP risks secrets and dependency issues across local and remote MCP
Jul 30, 2026Claude Code security workflow for AI built apps
Secure Claude Code workflows with MCP scope checks, permission hardening, dependency gating and SARIF evidence for trustworthy releases.
Jul 30, 2026Cline app security checklist
Secure Cline workflows with current MCP configuration, autoApprove controls and verified gates before merge.
Jul 30, 2026Cline MCP security workflow for AI built apps
Connect Cline to LyraShield MCP for bounded scans, evidence-state findings, reviewed fix proposals, retests and a diff-aware SARIF gate.
Jul 30, 2026OpenAI Codex MCP security workflow for PR reviews
Connect OpenAI Codex to LyraShield MCP for bounded scans, evidence-state findings, reviewed fix proposals, retests and a diff-aware SARIF gate.
Jul 30, 2026Codex app security workflow for trusted releases
Lock down Codex config and MCP servers, gate dependencies and secrets and capture SARIF evidence for every AI assisted release.
Jul 30, 2026Cursor app security checklist for AI built code
Harden Cursor built apps before release with MCP config checks, rules hardening, secret scanning, dependency review and verified evidence.
Jul 30, 2026Cursor MCP Security Workflow for AI Built Apps
Set up LyraShield MCP in Cursor to scan AI built code for injection secrets and supply chain risks with findings with recorded evidence states and GitHub gate
Jul 30, 2026Gemini CLI App Security Checklist for Vibe Coding
Secure Gemini CLI with settings.json MCP trust controls, includeTools allow lists and verified secrets and SCA gates.
Jul 30, 2026Gemini CLI MCP security workflow for AI apps
Connect Gemini CLI to LyraShield MCP for bounded scans, evidence-state findings, reviewed fix proposals, retests and a diff-aware SARIF gate.
Jul 30, 2026Hermes Agent App Security Checklist
Harden Hermes agent: config, skill supply chain, MCP tool filtering, mTLS and CI gates for AI-built apps.
Jul 30, 2026Hermes MCP workflow for security scans
Integrate LyraShield AI with Hermes AI via YAML config to run bounded scans per target, preserve evidence states and enforce diff aware PR gating.
Jul 30, 2026JetBrains AI app security checklist
Secure JetBrains AI Assistant workflows with MCP hardening plus secrets scanning and verified review before every merge.
Jul 30, 2026JetBrains MCP Security Workflow for AI IDEs
Integrate LyraShield MCP into JetBrains AI Assistant to scan AI built code for OWASP flaws secrets and supply chain risk
Jul 30, 2026Kilo Code App Security Checklist
Practical checklist for Kilo Code: lock agent rules, MCP authority, dependencies and CI evidence before you ship AI-built code.
Jul 30, 2026Kilo Code MCP security workflow before you ship
Configure LyraShield AI with Kilo Code via MCP to run bounded scans per target, preserve evidence states and enforce diff aware gating on pull requests.
Jul 30, 2026OpenClaw App Security Checklist
Secure OpenClaw gateway: MCP registry, toolFilter, channel inputs, TLS and CI evidence for AI-built app releases.
Jul 30, 2026OpenClaw MCP security workflow
Integrate LyraShield AI with OpenClaw via MCP and GitHub Action to verify builds, upload SARIF and enforce diff aware checks.
Jul 30, 2026OpenCode App Security Checklist for AI Built Apps
Secure OpenCode workflows with current opencode.json MCP controls and verified SCA plus secrets scanning.
Jul 30, 2026OpenCode MCP security workflow
Connect OpenCode to LyraShield MCP for evidence-state findings and a diff-aware GitHub gate using opencode.json and a pinned local package.
Jul 30, 2026Pi Coding Agent App Security Checklist
Harden Pi Coding Agent extensions, skills, tool permissions, secrets and diff-aware CI for AI-built apps.
Jul 30, 2026LyraShield alongside the Pi coding agent
Connect Pi Coding Agent to LyraShield through built-in MCP and hosted OAuth, with skills and CLI/CI alternatives.
Jul 30, 2026VS Code AI app security checklist for MCP builds
Secure VS Code with GitHub Copilot and MCP, covering mcp dot json hardening, agent permissions, secret gating and SARIF evidence.
Jul 30, 2026VS Code MCP Security Workflow with Copilot
Add LyraShield MCP to VS Code for Copilot aware security checks findings with evidence states and diff aware GitHub Action gates
Jul 30, 2026Windsurf MCP Security Workflow for AI Editors
Review a legacy Windsurf MCP workflow, use the current Devin setup guide and keep tool access, scan evidence and retests scoped to your app.
Jul 30, 2026Windsurf security workflow for AI generated apps
Harden Windsurf MCP config, rules, dependencies and secrets with SARIF evidence for secure AI assisted releases of your app.
Jul 30, 2026Zed AI App Security Checklist for Vibe Teams
Secure Zed editor workflows with MCP hardening in settings.json plus verified secrets and dependency checks before merge.
Jul 30, 2026Zed MCP security workflow for AI built apps
Connect Zed to LyraShield AI over MCP for findings with explicit evidence states and a diff aware GitHub Action gate inside your existing editor flow.
Jul 30, 2026Protect AGENTS.md and Rules Files From Poisoning
Prevent prompt injection in AGENTS.md and coding-tool rules with provenance, code ownership, protected review, scoped rules and conflict tests.
Jul 17, 2026AI App Pre-Launch Security Checklist
Run an evidence-based pre-launch review across authorization, secrets, inputs, dependencies, deployment, agents, monitoring, recovery and retests.
Jul 17, 2026Audit AI-suggested dependencies for CVEs
Verify package identity, lock resolved versions, inspect the dependency graph and interpret advisory matches without treating a clean scan as proof.
Jul 17, 2026Prevent CI/CD agents becoming confused deputies
Keep untrusted pull requests outside privileged CI jobs with narrow tokens, protected deployments, bound OIDC claims and verified artifacts.
Jul 17, 2026How to rotate and recover from an exposed API key
Respond to an exposed API key: contain access, rotate safely, verify rejection, investigate misuse, clean reachable copies and document recovery.
Jul 17, 2026Secure GitHub Actions Used by Coding Agents
Harden coding-agent workflows with untrusted-input separation, minimal token permissions, pinned actions, constrained OIDC and approval gates.
Jul 17, 2026Hallucinated Packages and Slopsquatting
Check generated package names against official registries, repositories, releases and owners before any installation runs.
Jul 17, 2026Secure npm install scripts and dependencies
Inspect dependency scripts before they execute, install without production credentials and allow only reviewed lifecycle code in npm.
Jul 17, 2026Secure Node and Express APIs Generated by AI
Build an ordered Express request contract, authorize resources at every route and verify proxy, session, limit, error and dependency settings.
Jul 17, 2026Dependency Scanning With OSV and Lockfiles
Scan resolved dependencies with OSV Scanner v2, interpret advisory matches, manage exceptions, update safely and verify the result.
Jul 17, 2026SARIF for AI Coding Workflows
Structure security results as SARIF 2.1.0 with stable rules, locations, fingerprints, redaction, validation and honest evidence limits.
Jul 17, 2026SAST vs DAST vs SCA for AI-Built Apps
Compare the evidence, timing, targets and blind spots of SAST, DAST and SCA, then combine them into a practical release workflow.
Jul 17, 2026Secret Scanning Before Every Commit
Catch secrets in staged changes, enforce scanning on the remote, govern bypasses, keep fixtures inert and rotate real exposures before cleanup.
Jul 17, 2026Add a Security Diff Gate to Pull Requests
Build a pull-request security gate around immutable commits, explicit coverage, scanner failures, reviewable results and one required decision.
Jul 17, 2026Stop shipping source maps and build artifacts
Inspect source maps, bundles, package tarballs and CI artifacts before release so private source and files do not reach public storage.
Jul 17, 2026Vibe Coding Security: The Complete Guide
A six-layer guide to testing AI-built apps, preserving evidence, retesting fixes and making an honest release decision.
Jul 17, 2026