DevSecOps
How to Install Ruby on Mac: A Practical, Secure Setup Guide
The right way to install Ruby on a Mac is with a version manager, not the system Ruby. Here is a clean setup for current Ruby and even legacy 2.7 projects.
Apr 4, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDevSecOps
Updating Python on macOS from the Terminal (Without Breaking Things)
How to update Python on a Mac terminal the safe way: Homebrew or pyenv for the interpreter, never the system copy, plus how to set your default version and keep old installs from lingering.
Apr 4, 20266 min read
DevSecOps
Security automation: stop chasing vulnerabilities, start ...
Chasing CVEs doesn't scale — 40,000+ vulnerabilities were logged in 2024 alone. Here's why prevention-first automation beats patch-cycle chasing, and how it differs from Chainguard's approach.
Apr 3, 20267 min read
DevSecOps
org.json Maven: A Security Guide
The org.json Maven dependency ships a small JSON parser with a history of denial-of-service bugs. Here is how to pin a safe version and catch it transitively.
Apr 3, 20266 min read
DevSecOps
How to Check Python Code for Security Issues: A Practical Guide
A working method to check Python code for security defects, from static analysis of your own source to scanning the third-party packages you pull in.
Apr 2, 20266 min read
DevSecOps
Integrating Security Into the DevSecOps Toolchain
Integrating security into the DevSecOps toolchain works when scanning is wired into the tools engineers already use, not bolted on as a separate gate at the end.
Apr 2, 20265 min read
DevSecOps
How to Validate a URL in Python Safely
A practical guide to validating URLs in Python without opening SSRF or injection holes — what the standard library gives you, where it fails, and how to build a safe validator.
Apr 2, 20266 min read
DevSecOps
Python Security Tools: The Ones Worth Running in Your Pipeline
A practitioner's tour of the Python security tools worth running: pip-audit for dependencies, Bandit for code, and detect-secrets, with CI examples.
Mar 31, 20265 min read
DevSecOps
AWS ECR Image Signing With Cosign In Production
Cosign-signed images in ECR are no longer a side project. This is how to roll out signing across an AWS estate without breaking the deploy pipeline.
Mar 31, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.