Developer Tools
Why does pip install fail on python slim and what should I do?
The slim image lacks compilers and headers, so source-only packages fail to build. Fix it with wheels, a build stage, or targeted apt packages.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
How do I preview a Python dependency upgrade before installing it?
Pip's dry-run mode and JSON install report show what an upgrade would change before anything is installed. How to use them before merging a fix.
Oct 19, 20264 min read
Developer Tools
How do you use pip hash checking on a client Python project?
pip hash checking pins every Python dependency to a known hash so deploys reject tampered or swapped packages. Setup steps and the caveats to know.
Oct 19, 20263 min read
Developer Tools
Pins or hashes: what keeps Python environments aligned?
Pinned versions keep Python installs consistent across dev, staging, and prod. Hashes add proof the files did not change. Here is when to use each.
Oct 19, 20263 min read
Developer Tools
How should pip authenticate to a private index: URL, netrc or keyring?
pip accepts credentials in the index URL, from a netrc file or from the keyring. A comparison of the three for laptops and CI in a small team.
Oct 19, 20263 min read
Developer Tools
What does ~= mean in Python requirements, and should you use it?
The ~= operator in Python requirements means compatible release. See what it allows, how it differs from == and ranges, and when each fits your project.
Oct 19, 20264 min read
Developer Tools
Does the pip-audit data source change your results?
pip-audit can query PyPI or OSV, and its flags change how requirements resolve. See how source and pinning settings affect a Python scan you compare.
Oct 19, 20263 min read
Developer Tools
Reproducible research or patched software: do you have to choose?
You can keep results reproducible and still update. Pin versions in a lock file, record them, and rebuild on a schedule instead of freezing forever.
Oct 19, 20264 min read
Developer Tools
How do you pin and update the Rust toolchain for a project?
Rust stable ships every six weeks. Use a rust-toolchain.toml file to pin a channel per project, and know how rustup picks a toolchain when several are set.
Oct 19, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.