Container Security
What is a Golden Image
A golden image is the hardened template every server and container is cloned from — powerful for consistency, dangerous when it goes stale. Here's how to secure it.
Feb 1, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedIndustry Analysis
Erlang/OTP atom exhaustion and deserialization risks in E...
How the elixir atom exhaustion vulnerability lets attackers crash BEAM nodes via unsafe binary_to_term calls, and how Safeguard catches the pattern before it ships.
Feb 1, 20267 min read
Container Security
What is Image Signing
Container image signing binds a cryptographic signature to an image's digest so you can prove what's running is what was actually built — not just scanned.
Feb 1, 20267 min read
Open Source Security
Auditing Elixir and Phoenix apps with mix_audit and Sobelow
A hands-on mix_audit Sobelow tutorial for scanning Elixir and Phoenix apps: dependency audits, static analysis, CI wiring, and triage tips.
Feb 1, 20267 min read
Incident Analysis
Ledger Connect Kit Attack: What Devs Missed
A phishing-obtained GitHub token published a wallet drainer as @ledgerhq/connect-kit in Dec 2023. What the incident tells us about Web3 supply chain trust.
Feb 1, 20267 min read
AI Security
Training Data Opacity As A Trust Limit
You cannot audit what you cannot see. Frontier model training corpora are effectively opaque to their users, and that opacity is not incidental. It shapes what kinds of trust you can extend to the outputs.
Jan 31, 20267 min read
AI Security
Griffin AI vs Gemini Long Context for Codebases
Gemini's million-token context window is a genuinely new capability. For security analysis of large codebases, is it enough on its own?
Jan 31, 20267 min read
AI Security
Human Review Burden: Griffin AI vs Mythos
Auto-remediation only scales if human review stays cheap. Griffin AI's grounded PRs keep reviewer time low; Mythos-class PRs push the cost back to humans.
Jan 31, 20266 min read
Container Security
What is Admission Control (Kubernetes)
Admission control is the last checkpoint in Kubernetes before an object is written to etcd — here's how webhooks, PSA, and policy engines enforce it.
Jan 31, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.