DevSecOps
In-depth guides and analysis on devsecops from the Safeguard engineering team.
497 articles
How to Git Pull a Remote Branch (and Check It Out Safely)
A clear guide to git pull remote branch workflows: fetching, checking out a remote branch for the first time, and the tracking setup that avoids surprises.
Sentry for Node.js: Error Monitoring Without Leaking Secrets
Setting up Sentry in a Node.js app takes minutes, but doing it securely means scrubbing sensitive data before it ever leaves your server. Here is how.
How to Install Python on Mac Terminal: A Step-by-Step Guide
The clean way to install Python on a Mac using the terminal, why you should not touch the system Python, and how to keep your install secure and up to date.
spring-security-core Maven: Keeping Your Auth Layer Patched
The spring-security-core Maven artifact is the heart of authentication and authorization in Spring apps, and a handful of recent CVEs make version hygiene non-negotiable.
Setting JAVA_HOME on Ubuntu: A Step-by-Step Guide
How to set JAVA_HOME on Ubuntu correctly and permanently: find your JDK path, choose the right scope (user vs system), handle multiple JDKs with update-alternatives, and verify it stuck.
node-sass Is End-of-Life: What That Means and How to Migrate to Dart Sass
node-sass reached end-of-life in 2024 and no longer receives updates or Node.js support. Here is why it was deprecated, what the risk is, and how to migrate to Dart Sass in an afternoon.
spring-web Maven Dependency: Known CVEs and How to Stay Patched
The spring-web Maven artifact pulls a lot of transitive weight and has been at the center of high-profile RCE bugs. Here is what to watch and how to keep it patched.
DevSecOps and CI/CD pipeline security
CI/CD pipelines are now a prime attack surface. Here's what Checkmarx's SAST-first approach misses, and how Safeguard secures the full pipeline.
Reducing developer friction in AppSec adoption
Why traditional SAST tooling like Checkmarx creates developer friction, what it costs engineering teams, and how to build developer experience application security that ships.
Snyk and GitHub Actions: How to Wire Up CI Scanning
How to set up Snyk in GitHub Actions the right way — the official actions, storing your token, uploading SARIF to code scanning, and gating pull requests.
OWASP Secure Coding Practices: A Working Checklist
OWASP secure coding practices boil down to a handful of checks that catch most real-world vulnerabilities — here's the checklist teams actually use, not the full 200-item reference.
What Is a DevOps Pipeline? Stages, Tools, and Security Gates
A DevOps pipeline is the automated path code takes from commit to production. Here are the stages every pipeline shares, the tools teams actually use, and where security gates belong.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.