Tag

release-engineering

Safeguard articles tagged "release-engineering" — guides, analysis, and best practices for software supply chain and application security.

1 article

DevSecOps

Why semantic versioning and release channels matter for security tools

A backdoor sat in xz-utils 5.6.0 and 5.6.1 for weeks before Andres Freund caught it — stable distro channels, not luck, kept it out of most production systems.

Jul 8, 20266 min read