release-notes
Safeguard articles tagged "release-notes" — guides, analysis, and best practices for software supply chain and application security.
14 articles
Trivy Operator v0.30: Kubernetes Field Review
Trivy Operator hit v0.30 in early 2026 and the underlying Trivy v0.70 engine landed in April. We benchmarked the combo on a 60-node multi-tenant cluster.
Checkov 3.2.x Field Review: IaC Scanning in 2026
Bridgecrew's Checkov is still shipping weekly patches in 2026. We ran 3.2.527 against a 38,000-line Terraform monorepo and graded coverage, noise, and CI cost.
Semgrep Supply Chain: April 2026 Update Reviewed
Semgrep's April 2026 release added dedicated advisory pages, dependency path data in SBOM exports, a Guardian Supply Chain hook, and Maven/Gradle scanning without lockfiles.
JFrog Curation 2026: Time-Based Waivers and On-Demand Policies
JFrog Curation shipped time-bound waivers, on-demand policy application, group-based scope, and ChainGuard hardened-Maven support in 2026. We tested the upgrade on an Artifactory estate.
Safeguard Q1 2026 Release Recap
A quarterly recap of Q1 2026 at Safeguard: the signed chain from source to runtime, self-healing GA, taint tracking, and the air-gap installer.
Falco 0.40: Modern eBPF Is Now Default
Falco's 0.40 release line makes modern eBPF (CO-RE) the default driver, deprecates the legacy probe and gVisor engine, and changes how operators ship Falco. Here's what changed and what to test.
Safeguard March 2026 Release Notes
March 2026 at Safeguard: Griffin taint tracking, Eagle SBOM-driven advisories, Lion cross-service baselines, and the new runner air-gap installer.
Safeguard February 2026 Release Notes
February 2026 at Safeguard: Lion behavioral baselines, Eagle base image advisories, Griffin reachability for Rust, and a new workflow editor.
Safeguard January 2026 Release Notes
January 2026 release notes from Safeguard: Lion runtime attestations, Griffin cache sharing, self-healing workflows, and runner fleet mode.
Safeguard Q4 2025 Release Recap
A full recap of Q4 2025 at Safeguard: Griffin for Java and .NET, Eagle attestations, Lion serverless, Gold policy-aware remediation, and more.
Safeguard Q3 2025 Release Recap
A quarterly recap of everything Safeguard shipped in Q3 2025 across Griffin, Eagle, Lion, and Gold — with the improvements, deprecations, and next steps.
Grype v0.108 Release Notes Walkthrough
Anchore's Grype shipped v0.108.0 in late 2025 with the new vulnerability database v6 schema, distroless support fixes, and a tightened CPE matcher.