Topic
Industry
In-depth guides and analysis on industry from the Safeguard engineering team.
3 articles
Industry
CNCF Supply Chain Security Best Practices v2: What Changed
CNCF TAG Security shipped the v2 Supply Chain Security paper in 2025, mainstreaming SBOMs, signed attestations, and zero-trust workload identity. We walk through the practical guidance.
Sep 9, 20257 min read
Industry
in-toto Graduates from CNCF: Attestation Bundles and the v1 Layer
in-toto reached CNCF graduation in April 2025 and shipped a major attestation framework release. We walk through the bundle layer, resource descriptors, and what producers should adopt.
Jul 15, 20257 min read
Industry
CISA Secure by Design Pledge: Reading the One-Year Progress Reports
The CISA Secure by Design pledge crossed its one-year mark in May 2025 with over 150 signatories. We analyze the published progress reports and where vendors are quietly falling short.
Jun 4, 20257 min read