Supply Chain
What should you check in a third-party Helm chart before installing it?
Before the first helm install of someone else's chart, render it and read the images, RBAC, webhooks, hooks and dependencies it brings.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSupply Chain
What should you check in a self-hosted extension update setup?
A self-hosted Chrome extension depends on an update manifest URL and a signing key. Here is a short review checklist for transport, hosting and signatures.
Oct 19, 20263 min read
Supply Chain
What to check before adding a dependency to a payments service
Before a new library enters a payments service, check maintenance, release status, vulnerability handling, license fit and who will own updates.
Oct 19, 20265 min read
Supply Chain
What should you ask a customer before sending them your SBOM?
Five short questions about purpose, format, recipients, retention and reuse let you send the right SBOM, in the right form, to the right people.
Oct 19, 20264 min read
Supply Chain
What does the Verified account badge mean on Amazon ECR Public Gallery?
On the Amazon ECR Public Gallery, popular publishers can request a Verified account badge through support. Here is what that does and does not tell you.
Oct 19, 20264 min read
Supply Chain
What supply chain questions come first on a startup questionnaire?
The supply chain questions a first customer questionnaire usually asks, what each one is really testing, and how a small SaaS or ecommerce team can answer.
Oct 19, 20264 min read
Supply Chain
What should your CRM record about an SBOM request?
A field list for logging SBOM requests in your CRM or ticket system: who asked, which version, what you sent, what you promised and when to follow up.
Oct 19, 20263 min read
Supply Chain
What should you check when a package you use changes maintainer?
When a dependency gets a new maintainer or owner, hold the update and check the registry owners, repository link, release build and diff. A step list.
Oct 19, 20264 min read
Supply Chain
What should you ask an open source maintainer before depending on them?
Seven polite questions to send a maintainer before you adopt their package: security contact, release access, signing, successors and support expectations.
Oct 19, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.