DevSecOps
Integrating Security Into the DevSecOps Toolchain
Integrating security into the DevSecOps toolchain works when scanning is wired into the tools engineers already use, not bolted on as a separate gate at the end.
Apr 2, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDevSecOps
How to Validate a URL in Python Safely
A practical guide to validating URLs in Python without opening SSRF or injection holes — what the standard library gives you, where it fails, and how to build a safe validator.
Apr 2, 20266 min read
DevSecOps
Python Security Tools: The Ones Worth Running in Your Pipeline
A practitioner's tour of the Python security tools worth running: pip-audit for dependencies, Bandit for code, and detect-secrets, with CI examples.
Mar 31, 20265 min read
DevSecOps
AWS ECR Image Signing With Cosign In Production
Cosign-signed images in ECR are no longer a side project. This is how to roll out signing across an AWS estate without breaking the deploy pipeline.
Mar 31, 20267 min read
DevSecOps
Git Alias: Faster Workflows Without Sacrificing Security
A git alias turns a long command into a short one. Used well they save keystrokes; used carelessly they hide risky flags. Here is how to build aliases you can trust.
Mar 31, 20266 min read
DevSecOps
Installing Python on Mac Safely: A Security Guide
Installing Python para Mac the wrong way leaves you patching the system interpreter and running sudo pip. Here is the secure, maintainable setup for Python on macOS.
Mar 30, 20265 min read
DevSecOps
CLI Tool Design For Developer Security Checks
A security CLI lives or dies on the experience of typing it. A design guide for building security tooling that respects the developer's terminal.
Mar 30, 20268 min read
DevSecOps
python-multipart Security: Patching the Form-Data DoS
Why the python-multipart parser behind FastAPI and Starlette had a denial-of-service flaw, how to check your version, and how to keep form uploads safe.
Mar 29, 20265 min read
DevSecOps
How to Use Git Branch (and git checkout) Safely
A working reference for creating, switching, and checking out Git branches, plus the security habits that keep secrets and bad commits out of your history.
Mar 29, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.