governance
Safeguard articles tagged "governance" — guides, analysis, and best practices for software supply chain and application security.
51 articles
Foundation-Neutral Governance Evaluation
CNCF, Linux Foundation, Apache, Eclipse — each has a different governance model. A practical evaluation of what that means for projects considering adoption.
Open Source Foundation Governance Models
The Linux Foundation, Apache Software Foundation, CNCF, and Eclipse each codify different theories of how open source projects should be governed. The differences matter more than most adopters realize.
Vendor Offboarding and Supply Chain Data Destruction
A practical playbook for offboarding software vendors and ensuring data is actually destroyed, not just promised to be destroyed, across complex subprocessor chains.
SolarWinds Post-Incident Governance Changes Reviewed
Four years after SUNBURST, SolarWinds has rebuilt its SDLC around signed pipelines, parallel builds, and a new CSO office. How much of it is real?
Procurement Security Questionnaires That Actually Work
How to design a supplier security questionnaire that produces usable signal, what to cut from standard templates, and how to integrate the output into real risk decisions.
Right-to-Repair and Software Supply Chain Security
How the right-to-repair movement is reshaping software supply chain obligations in 2026, from firmware transparency to the security implications of mandated component access.
Azure Policy for Supply Chain Enforcement
Azure Policy is the enforcement layer most Azure platforms underuse. A concrete, policy-by-policy guide to wiring it into supply chain controls that actually stick.
Cyber Insurance Exclusions for Supply Chain Incidents
What 2026 cyber insurance policies actually exclude for software supply chain incidents, how carriers test your controls, and what to negotiate before renewal.
Buy vs. Build a Supply Chain Security Platform
When building your own software supply chain security platform makes sense, when it does not, and the hybrid architecture most mature teams actually land on.
PyPI Package Namespace Governance
PyPI's flat global namespace is one of Python packaging's oldest design decisions. How it's governed today, where the tension points are, and what the PEP 752 debate means for the future.
MCP Server Registry Security Governance
MCP servers are becoming a new dependency class with their own supply chain risks. How to think about registry governance, verification, and enterprise ingestion policy.
TCO of SCA Platforms in 2026: What to Model
A realistic model for the total cost of ownership of software composition analysis platforms in 2026, including the hidden costs vendors do not surface in their pricing pages.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.