DevSecOps
DevSecOps and CI/CD pipeline security
CI/CD pipelines are now a prime attack surface. Here's what Checkmarx's SAST-first approach misses, and how Safeguard secures the full pipeline.
Jun 24, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDevSecOps
Reducing developer friction in AppSec adoption
Why traditional SAST tooling like Checkmarx creates developer friction, what it costs engineering teams, and how to build developer experience application security that ships.
Jun 24, 20268 min read
DevSecOps
Snyk and GitHub Actions: How to Wire Up CI Scanning
How to set up Snyk in GitHub Actions the right way — the official actions, storing your token, uploading SARIF to code scanning, and gating pull requests.
Jun 23, 20266 min read
DevSecOps
OWASP Secure Coding Practices: A Working Checklist
OWASP secure coding practices boil down to a handful of checks that catch most real-world vulnerabilities — here's the checklist teams actually use, not the full 200-item reference.
Jun 20, 20265 min read
DevSecOps
What Is a DevOps Pipeline? Stages, Tools, and Security Gates
A DevOps pipeline is the automated path code takes from commit to production. Here are the stages every pipeline shares, the tools teams actually use, and where security gates belong.
Jun 20, 20265 min read
DevSecOps
Shift-Left Security Testing in Practice
Shift-left security testing means catching vulnerabilities at commit time instead of at deployment — here's what that actually looks like on a working pipeline, not just the slogan.
Jun 20, 20265 min read
DevSecOps
How to Change Java Versions on a Mac: jenv, SDKMAN, and JAVA_HOME
Three reliable ways to change Java version on a Mac — plain JAVA_HOME switching, jenv shims, and SDKMAN — with per-project pinning so builds stop depending on whatever your shell happens to export.
Jun 17, 20266 min read
DevSecOps
Azure DevOps pipeline security best practices
A practical guide to the six Azure DevOps pipeline settings attackers exploit most, with exact controls to fix fork triggers, secrets, and agents.
Jun 16, 20267 min read
DevSecOps
Python itsdangerous: Signing Data Safely and Avoiding Key Leaks
The Python itsdangerous library signs data so tampering is detectable. Getting it right depends on how you handle the secret key and key rotation.
Jun 15, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.