DevSecOps
Pickling in Python: A Security Guide
Pickling in Python serializes objects to bytes, but unpickling untrusted data can run arbitrary code. Here is how the risk works and how to defend against it.
Apr 9, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDevSecOps
How to Use Python on Mac: Install, Switch Versions, and Set a Default
Learning how to use Python on Mac starts with not touching the system Python. Here is a clean setup for installing, switching, and pinning versions.
Apr 9, 20265 min read
DevSecOps
Azure DevOps Pipeline Supply Chain Controls
Azure DevOps pipelines hold more production deploy power than any other system in many enterprises. The 2026 supply chain controls are not optional anymore.
Apr 9, 20267 min read
DevSecOps
Kubernetes and Infrastructure as Code security
Prisma Cloud pioneered infrastructure as code security scanning for Kubernetes, but alert fatigue and weak commit-level traceability leave real gaps. Here's how to close them.
Apr 9, 20267 min read
DevSecOps
What Is the CI/CD Pipeline (and CI/CD security)?
CI/CD pipelines now hold more privileged access than any other system — yet they're the least monitored. Here's what CI/CD pipeline security really requires.
Apr 9, 20267 min read
DevSecOps
IDE-Time Feedback Loop For Supply Chain
The editor is the highest-leverage place to catch supply chain risk. A design guide for building IDE-time feedback that developers actually want.
Apr 8, 20267 min read
DevSecOps
CircleCI Orb Trust and Pinning in 2026
How to manage CircleCI orb trust in 2026: certified versus uncertified orbs, version pinning, contexts, OIDC, and the controls that hold under real attacker pressure.
Apr 8, 20266 min read
DevSecOps
What Is a Node.js Backend? A Security Guide for Server-Side JavaScript
A practical look at building a Node.js backend that holds up in production, from dependency risk to input validation, with real config you can copy.
Apr 8, 20266 min read
DevSecOps
Werkzeug in Python: What Developers Need to Know About Security
Werkzeug powers Flask and countless WSGI apps in Python. Here is how to use it without leaving the interactive debugger or hostname checks open to attackers.
Apr 7, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.