DevSecOps
In-depth guides and analysis on devsecops from the Safeguard engineering team.
497 articles
How Snyk's GitLab CI/CD template integrates security gate...
A technical look at how Snyk's GitLab CI/CD template authenticates, scans, and uses severity thresholds to block merge requests with known vulnerabilities.
How Snyk's Azure Pipelines and Bitbucket Pipelines integr...
Snyk's CLI, Azure Pipelines extension, and Bitbucket pipe handle auth, gating, and reporting differently — here's how each mechanism actually works under the hood.
How the Snyk CLI's exit codes are structured for CI/CD fa...
A mechanical look at how the Snyk CLI's 0/1/2/3 exit codes work, how --severity-threshold and --fail-on change them, and how to branch on them correctly in CI/CD.
DevOps Research and Assessment (DORA): The Four Metrics Explained
DevOps Research and Assessment (DORA) distilled a decade of research into four metrics that predict software delivery performance — here's what they measure and how security work actually affects them.
Is Node.js Safe? A Security Guide
Node.js itself is safe when kept current and configured well. Most real risk lives in your dependencies and your code, not the runtime.
DevOps vs DevSecOps: what actually changes when you add s...
DevOps vs DevSecOps isn't a mindset shift — it's specific new artifacts, gates, and ownership. Here's what changes, contrasted with JFrog's artifact-first model.
Using Literal in Python: Type Safety for Fixed Values
The Literal type in Python lets you constrain a value to a fixed set of options the type checker enforces. Here's how to use it well, and where it quietly improves security.
Node.js Security News: Recent Advisories and How to Stay Ahead
Node.js security news moves on a predictable cadence. Here is how to read the advisories, act on the ones that matter, and harden your apps.
Validating URLs Safely in Python with the validators Library
The Python validators library's url validator is a quick way to check URLs, but older regex-based versions carried a ReDoS risk. Here's how to use it safely.
Why Python assert in Production Code Is a Security Risk
Using Python assert in production code is risky because assertions are stripped when Python runs optimized. Any security check written as an assert simply disappears.
Unit Testing in Node.js: A Practical, Security-Aware Setup
A working guide to unit testing in Node.js with the built-in node:test runner — structure, mocking, coverage, and the security-relevant code paths most suites forget to cover.
Running Trivy on GitHub: A Practical Security Guide
Wiring Trivy into GitHub Actions gives you free container, filesystem, and IaC scanning with results in the Security tab. Here's a working setup and the pinning mistake to avoid.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.