DevSecOps
In-depth guides and analysis on devsecops from the Safeguard engineering team.
497 articles
Application Development Security: Building It Into the SDLC
Application development security only works when it's built into the software development lifecycle from the first commit, not bolted on before a release deadline.
Container Hardening Guide 2025: From Base Image to Production
A practical guide to hardening container images and deployments. Covers base image selection, build-time security, runtime protections, and Kubernetes-specific controls.
Advanced Python: The Security-Focused Patterns Senior Developers Should Master
Advanced Python is not about clever one-liners. The patterns that separate senior engineers are the ones that keep code safe: safe deserialization, controlled subprocess calls, and disciplined dependency use.
Is Python setup.py Still Safe? Security Risks and the Move to Building Wheels
python setup.py executes arbitrary code at install time and its legacy commands are deprecated. Here is what that means for security and how to build a wheel the modern way.
Drone CI Supply Chain Hardening 2026
A 2026 hardening guide for Drone CI: plugin trust, runner isolation, signed pipelines, secret scoping, and integrating Drone with SLSA and sigstore.
Python MagicMock Security: Keeping Test Doubles Honest
Python's MagicMock makes tests fast and isolated, but the same auto-magic that makes it convenient can hide security regressions. Here is how to use it without lying to yourself.
How to Install Python on a MacBook Safely (2025 Guide)
The macOS system Python is not the one you should build on. Here is how to install Python on a MacBook the right way, isolate projects, and avoid supply-chain surprises.
DevSecOps Tools Comparison 2025: Choosing the Right Stack
The DevSecOps tooling landscape has exploded. From SAST to SCA to SBOM management, this guide compares the major categories and helps you build a coherent security toolchain.
node-html-parser: How to Parse HTML Safely in Node.js
node-html-parser is a fast, dependency-light HTML parser for Node.js. Here is how to use it without opening the door to injection or denial-of-service bugs.
Python SSL: How to Verify TLS Certificates the Right Way
The Python ssl module gives you safe defaults for free, but only if you use them. Here is how to set up certificate verification correctly and avoid the mistakes that quietly disable it.
Securing actions/setup-node in Your CI Pipeline
The actions/setup-node step looks harmless, but pinning, caching, and registry auth choices decide whether it becomes a supply chain foothold. Here is how to harden it.
How to Open Python on Mac (and Do It Securely)
Recent macOS versions ship without Python at all, so opening Python on a Mac now means installing it yourself — and doing that safely matters more than most guides admit.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.