Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Version drift is how far services lag on a shared dependency. Measure it from SBOMs or lockfiles, chart the spread, and set a target for convergence.
Dependency-Track ingests SBOMs and watches them against vulnerability feeds. How that differs from a scanner, and what it takes to host and run it.
Typosquatting relies on a human typing a wrong name. Dependency confusion relies on a tool choosing the wrong source. Different causes, different fixes.
No. Functions that already reference a deleted layer version keep running its code. Why that matters for vulnerable layers, and how to actually remove it.
Turning off default features can remove code, but Cargo unifies features across the graph. How it works, resolver 2 and how to verify the result.
The same library shows up under different names across SBOMs. Use a canonical identifier, normalization rules and a merge key to count it once.
dbt Python models run on your data platform, not on your laptop. Learn what that means for package sources, review, and the second dependency tree.
A ten minute checklist for reviewing a dbt package before first install: source, pin, macros, hooks, grants, maintainers and how you will update it.
Databricks library scopes, install sources, allowlists and precedence explained, with a short policy for keeping unreviewed packages out of shared compute.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
