best-practices
Safeguard articles tagged "best-practices" — guides, analysis, and best practices for software supply chain and application security.
105 articles
Azure Managed Identities and the Supply Chain
Managed identities are the credential primitive that fixes most supply chain risk in Azure — but only if you use them the way the service actually intends.
Secure Development Environment Setup: A Practical Guide
Setting up a secure development environment involves more than installing an IDE. From OS hardening to credential management, here is a comprehensive checklist for security-conscious teams.
SBOM Validation and Quality Checks: Ensuring Your SBOMs Are Actually Useful
A syntactically valid SBOM can still be useless. Here's how to validate structure, completeness, and accuracy to produce SBOMs worth trusting.
SBOM Sharing and Distribution Best Practices
Generating SBOMs is only half the battle. Sharing them securely and effectively with stakeholders requires careful planning and tooling.
Cryptographic Library Selection Guide: Choosing Wisely for Your Stack
Picking the wrong crypto library means either rolling your own crypto or using a library with a poor security track record. Here is how to choose.
Release Management Security Checklist
A pre-release security checklist that covers dependency verification, vulnerability scanning, SBOM generation, and artifact integrity for every production release.
The End-of-Year Dependency Audit Ritual
Most dependency audits get done in a panic after a CVE lands. A planned year-end audit is cheaper, more thorough, and produces a backlog you can actually work through in Q1.
Secure Coding Practices: A Developer's Guide
Practical secure coding habits every developer should build, covering input validation, authentication, dependency management, and more.
Software Supply Chain Security for Startups: A Practical Guide
You don't need a massive security team to get supply chain security right. Here's a pragmatic, prioritized approach for startups that balances risk reduction with engineering velocity.