DevSecOps
In-depth guides and analysis on devsecops from the Safeguard engineering team.
497 articles
How to Run Python on Mac: A Step-by-Step Guide
macOS ships with Python, but you should not use it for your own projects. Here is how to run Python on a Mac the right way, from installing a real interpreter to isolating each project.
How to Apply a Patch in Git (Safely and Reviewably)
Applying a patch in Git comes down to git apply versus git am, and knowing which to use, how to preview it, and how to verify it, keeps untrusted diffs from becoming a supply chain problem.
GCP Binary Authorization Real-World Deployment
Binary Authorization works in production, but the rollout pattern is not obvious. This is the real-world deployment guide for 2026 GCP estates.
Log4j Maven Dependency: How to Find, Fix, and Pin It Safely
A practical guide to the Log4j Maven dependency: how to detect log4j-core in your tree, why 2.17.1 is the version to target, and how to pin it for good.
Reachability Analysis For Monorepos And Microservices
Reachability across a monorepo or a microservices fleet needs different engineering than reachability inside a single service. Both are tractable; both have specific failure modes.
Shift-Left, Shift-Everywhere: Program Design
Shift-left is necessary but insufficient. A program design that distributes supply chain checks across IDE, CLI, PR, build, and runtime — without redundancy.
DevSecOps and Platform Engineering: The Convergence No One Expected
Platform engineering teams are becoming the new home for security controls. Here's why that is both promising and risky.
How to Uninstall Python on a Mac Safely and Completely
To uninstall Python on a Mac safely, remove only the versions you installed yourself and never touch the system Python that macOS depends on.
GitLab CI Supply Chain Hardening Checklist 2026
A 2026 hardening checklist for GitLab CI: ID tokens, protected branches, runner isolation, included templates, and the controls that actually shrink blast radius.
DevSecOps Integration: Wiring Security Into Pipelines You Already Have
You do not need a new pipeline — you need to instrument the one you have. A stage-by-stage map for DevSecOps integration in Jenkins, GitHub Actions, GitLab CI, or Azure DevOps.
Reproducible Builds Debian: The Long View
Debian's Reproducible Builds project has been at it for over a decade. Here's what they've learned, what still isn't reproducible, and why it matters.
Turborepo Monorepo Supply Chain Security
Turborepo makes large JavaScript monorepos fast, and speed changes how teams think about dependencies. The supply chain implications are subtle enough that a fast-moving team can be in trouble before anyone notices.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.