Safeguard CLI
Support Matrix
Supported languages, package managers, and platforms for the Safeguard CLI
This page lists all languages, package managers, container registries, and platforms supported by the Safeguard CLI.
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| npm | package.json | package-lock.json | ✅ Full Support |
| Yarn Classic | package.json | yarn.lock | ✅ Full Support |
| Yarn Berry | package.json | yarn.lock | ✅ Full Support |
| pnpm | package.json | pnpm-lock.yaml | ✅ Full Support |
| Bun | package.json | bun.lockb | ✅ Full Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| pip | requirements.txt | - | ✅ Full Support |
| Pipenv | Pipfile | Pipfile.lock | ✅ Full Support |
| Poetry | pyproject.toml | poetry.lock | ✅ Full Support |
| Conda | environment.yml | conda-lock.yml | ✅ Full Support |
| PDM | pyproject.toml | pdm.lock | ✅ Full Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| Maven | pom.xml | - | ✅ Full Support |
| Gradle | build.gradle, build.gradle.kts | gradle.lockfile | ✅ Full Support |
| Scala SBT | build.sbt | - | ✅ Full Support |
| Kotlin | build.gradle.kts | - | ✅ Full Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| Go Modules | go.mod | go.sum | ✅ Full Support |
| Dep (legacy) | Gopkg.toml | Gopkg.lock | ⚠️ Limited Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| Cargo | Cargo.toml | Cargo.lock | ✅ Full Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| NuGet | *.csproj, *.vbproj, *.fsproj | packages.lock.json | ✅ Full Support |
| Paket | paket.dependencies | paket.lock | ✅ Full Support |
| .NET Core | *.deps.json | - | ✅ Full Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| Bundler | Gemfile | Gemfile.lock | ✅ Full Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| Composer | composer.json | composer.lock | ✅ Full Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| Swift PM | Package.swift | Package.resolved | ✅ Full Support |
| CocoaPods | Podfile | Podfile.lock | ✅ Full Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| Conan | conanfile.txt, conanfile.py | conan.lock | ✅ Full Support |
| vcpkg | vcpkg.json | - | ✅ Full Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| Mix | mix.exs | mix.lock | ✅ Full Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| Cabal | *.cabal | cabal.project.freeze | ✅ Full Support |
| Stack | stack.yaml | stack.yaml.lock | ✅ Full Support |
| Package Manager | Manifest Files | Lock Files | Status |
|---|
| Rebar3 | rebar.config | rebar.lock | ✅ Full Support |
| Registry | Authentication | Status |
|---|
| Docker Hub | Username/Password, Token | ✅ Full Support |
| Amazon ECR | AWS IAM, Access Keys | ✅ Full Support |
| Google GCR | Service Account, gcloud | ✅ Full Support |
| Azure ACR | Service Principal, Managed Identity | ✅ Full Support |
| GitHub Container Registry | Personal Access Token | ✅ Full Support |
| GitLab Container Registry | Personal Access Token | ✅ Full Support |
| JFrog Artifactory | API Key, Token | ✅ Full Support |
| Harbor | Username/Password | ✅ Full Support |
| Quay.io | Robot Account, OAuth | ✅ Full Support |
| Generic OCI Registry | Username/Password | ✅ Full Support |
| File Type | Extensions | Status |
|---|
| Windows Executable | .exe | ✅ Full Support |
| Windows Installer | .msi | ✅ Full Support |
| Windows Library | .dll | ✅ Full Support |
| Android Package | .apk | ✅ Full Support |
| Android Bundle | .aab | ✅ Full Support |
| iOS Application | .ipa | ✅ Full Support |
| Java Archive | .jar, .war, .ear | ✅ Full Support |
| Linux Executable | ELF binaries | ✅ Full Support |
| macOS Application | .app, .dmg | ✅ Full Support |
| Format | Versions | Status |
|---|
| CycloneDX JSON | 1.4, 1.5, 1.6 | ✅ Full Support |
| CycloneDX XML | 1.4, 1.5, 1.6 | ✅ Full Support |
| SPDX JSON | 2.2, 2.3 | ✅ Full Support |
| SPDX Tag-Value | 2.2, 2.3 | ✅ Full Support |
| SPDX RDF | 2.2, 2.3 | ✅ Full Support |
| Format | Status |
|---|
| CycloneDX JSON | ✅ Full Support |
| CycloneDX XML | ✅ Full Support |
| SPDX JSON | ✅ Full Support |
| SPDX Tag-Value | ✅ Full Support |
| SPDX RDF | ✅ Full Support |
| CSV | ✅ Full Support |
| JSON (Custom) | ✅ Full Support |
| SARIF | ✅ Full Support |
| JUnit XML | ✅ Full Support |
The CLI is a static binary, so what matters is the OS and architecture, not
the distribution. Five targets are published:
| OS | Architecture | Archive |
|---|
| macOS | Apple Silicon | safeguard_<version>_darwin_arm64.tar.gz |
| macOS | Intel | safeguard_<version>_darwin_amd64.tar.gz |
| Linux | x86_64 | safeguard_<version>_linux_amd64.tar.gz |
| Linux | arm64 | safeguard_<version>_linux_arm64.tar.gz |
| Windows | x86_64 | safeguard_<version>_windows_amd64.zip |
Windows on ARM has no build of its own; the installer detects it, warns, and
installs the x86_64 binary to run under emulation.
| Platform | Integration Method | Status |
|---|
| GitHub Actions | Official Action | ✅ Full Support |
| GitLab CI | Docker Image | ✅ Full Support |
| Jenkins | Plugin, CLI | ✅ Full Support |
| Azure DevOps | Extension, CLI | ✅ Full Support |
| CircleCI | Orb, CLI | ✅ Full Support |
| Bitbucket Pipelines | Docker Image | ✅ Full Support |
| AWS CodeBuild | CLI | ✅ Full Support |
| Google Cloud Build | CLI | ✅ Full Support |
| Travis CI | CLI | ✅ Full Support |
| TeamCity | CLI | ✅ Full Support |
| IDE | Extension | Status |
|---|
| VS Code | Safeguard Extension | ✅ Available |
| IntelliJ IDEA | Safeguard Plugin | ✅ Available |
| Visual Studio | Safeguard Extension | ✅ Available |
| Eclipse | Safeguard Plugin | 🔄 Coming Soon |
There is no runtime to install alongside the CLI — no Node, no Python, no JVM.
| Requirement | Minimum |
|---|
| Disk Space | ~40MB for the binary, plus the scanners it downloads on first use |
| Feature | Free | Pro | Enterprise |
|---|
| SBOM Generation | ✅ | ✅ | ✅ |
| Vulnerability Scanning | 10/month | Unlimited | Unlimited |
| Policy Gates | Basic | Advanced | Custom |
| API Access | Limited | Full | Full |
| CI/CD Integration | ✅ | ✅ | ✅ |
| Offline Mode | ❌ | ❌ | ✅ |
| Priority Support | ❌ | ✅ | ✅ |
| Symbol | Meaning |
|---|
| ✅ | Full Support |
| ⚠️ | Limited/Partial Support |
| 🔄 | Coming Soon |
| ❌ | Not Supported |
