AI Security
How to Run a Rocky Linux Container Scan Correctly
A Rocky Linux container scan only produces accurate results when your scanner reads Rocky's own advisory feed instead of guessing from RHEL or CentOS data.
Feb 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
SaaS Container Security: Protecting Multi-Tenant Workloads
SaaS container security is the set of controls that keep containerized, multi-tenant applications isolated, patched, and hardened from build through runtime. Here is the practical playbook.
Feb 18, 20266 min read
AI Security
How to Fix 'Could Not Find or Load Main Class org.gradle.wrapper.GradleWrapperMain'
The 'could not find or load main class org.gradle.wrapper.GradleWrapperMain' error almost always means gradle-wrapper.jar is missing from your checkout. Here is why it happens and how to fix it safely.
Feb 18, 20265 min read
AI Security
AI-Generated Dockerfile Vulnerability Patterns
LLM-generated Dockerfiles repeat the same six or seven mistakes. Here is the pattern catalog and how to catch them before they ship.
Feb 18, 20267 min read
AI Security
Griffin AI vs OpenAI Function Calling: Scoping
Function calling gives models the ability to act. Acting safely on behalf of a specific user, in a specific context, within specific policy is a different problem.
Feb 17, 20267 min read
AI Security
LLM Selection Cost-Quality Tradeoff For Security
LLM selection is ultimately a cost-quality optimisation under workflow constraints. The curve is not smooth, and the right point on it depends on where errors land in your pipeline.
Feb 17, 20267 min read
AI Security
AI Cyber Solutions: What Actually Works in Security
AI cyber solutions are most useful where they reduce analyst toil: triaging alerts, prioritizing vulnerabilities, and drafting remediation. Here is what to trust and what to question.
Feb 17, 20265 min read
AI Security
Software Licenses Explained: A Practical Guide for Engineering Teams
Software licenses fall into a few clear buckets — permissive, copyleft, and proprietary — and knowing which is which decides what you can legally ship. Here is the map, without the legalese.
Feb 17, 20265 min read
AI Security
Unbounded Output Space And Security Contracts
A function whose output space is finite and enumerable can be secured by testing. A function whose output space is every string of tokens up to some length cannot. That difference quietly invalidates most classical security contracts.
Feb 16, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.