Tag
build-cache
Safeguard articles tagged "build-cache" — guides, analysis, and best practices for software supply chain and application security.
3 articles
Containers
Docker Compose: Rebuilding Images Correctly (and Catching Stale Layers)
Why docker compose up sometimes runs old code, and how to rebuild images so what runs matches what you edited, including cache, stale layers, and orphaned images.
Jun 4, 20256 min read
DevSecOps
Go Build Cache Poisoning Risks
The Go build cache makes builds fast and reproducible, but a poisoned cache can reuse malicious compiled output indefinitely while the source looks clean.
Nov 28, 20247 min read
DevSecOps
Gradle Build Cache Security Hardening
The Gradle build cache is a performance feature with supply chain consequences. Here is how to configure it so cache poisoning, stale outputs, and cross-project contamination do not become your next incident.
Jun 10, 20247 min read