Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Root in the container often means root on the host. Rootless mode breaks that assumption. Here is how to run Docker and Podman without root and why it matters more than you think.
A comprehensive checklist for hardening your container images, from base image selection to runtime protections, with practical Dockerfile examples.
Container images are opaque by default. Here's how to crack them open with SBOMs to see exactly what's running in production.
Trivy combines SBOM generation with vulnerability scanning in a single tool. Here's how to use both capabilities effectively.
Practical Docker security from image building to runtime, covering multi-stage builds, user namespaces, and image scanning.
Your container registry is a signing oracle, a software distribution system, and a typosquat target rolled into one. Here is the hardening baseline for 2022.
Container security matured significantly in 2021, but the vulnerability landscape in base images, registries, and runtime configurations remains concerning.
Weekly insights on software supply chain security, delivered to your inbox.