DevSecOps
In-depth guides and analysis on devsecops from the Safeguard engineering team.
497 articles
Shift-Left Security Testing in Practice
Shift-left security testing means catching vulnerabilities at commit time instead of at deployment — here's what that actually looks like on a working pipeline, not just the slogan.
How to Change Java Versions on a Mac: jenv, SDKMAN, and JAVA_HOME
Three reliable ways to change Java version on a Mac — plain JAVA_HOME switching, jenv shims, and SDKMAN — with per-project pinning so builds stop depending on whatever your shell happens to export.
Azure DevOps pipeline security best practices
A practical guide to the six Azure DevOps pipeline settings attackers exploit most, with exact controls to fix fork triggers, secrets, and agents.
Python itsdangerous: Signing Data Safely and Avoiding Key Leaks
The Python itsdangerous library signs data so tampering is detectable. Getting it right depends on how you handle the secret key and key rotation.
Mocking in Python: unittest.mock, MagicMock, and Return Values
A practitioner's guide to Python unit test mocking: when to use Mock vs MagicMock, setting return values and side effects, patching in the right place, and the assertions that make a mock worth writing.
DevOps Maturity Models, Explained
What a devops maturity model actually measures, why devops mttr alone is a weak proxy for maturity, and how teams can measure whether devops delivery value is improving.
How to Add Reachability Analysis to PR Checks
Run reachability analysis on every pull request to slash vulnerability false positives by 70%+, gate merges on exploitable findings, and keep devs focused.
ZAP Security Testing: Using OWASP ZAP in Your Pipeline
ZAP security testing works best as a pipeline stage, not a desktop tool. Docker scan modes, authentication, alert filters, and the CI wiring that makes findings stick.
Python Syntax Checker: Catching Errors Before They Ship
A Python syntax checker validates that your code parses and follows the rules of the language before you run it. Here are the tools that do it and how they fit a secure pipeline.
Choosing a Python Tool for Security: Scanning and Hardening Python Code
The right Python tool depends on what you are trying to catch: bugs in your own code, vulnerable dependencies, or leaked secrets. Here is how the categories fit together.
Java Cheatsheet: Lists, Sums, Random Strings, and Everyday Idioms
A working cheatsheet for Java: modern list creation, summing collections with streams, generating random strings safely, string handling, and the idioms worth memorizing in 2025.
How Snyk CLI's --severity-threshold and --fail-on flags g...
How Snyk CLI severity-threshold and fail-on flags filter and gate vulnerability findings, plus exit codes and common CI/CD misconfigurations.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.