Tag
checksum-verification
Safeguard articles tagged "checksum-verification" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Best Practices
Securing Your Ruby Dev Environment on macOS: rbenv, rvm, and Checksums
60 malicious RubyGems downloaded ~275,000 times went undetected for years — here's how to actually verify what rbenv or rvm installs on your Mac.
Jul 13, 20265 min read
Best Practices
Installing and Verifying Java on macOS Securely
A SHA-256 checksum only proves a JDK download wasn't corrupted in transit — it takes a GPG signature check to prove it actually came from the vendor you trust.
Jul 8, 20266 min read