Containers
Kubernetes Security Tools: What to Use and Why
A Kubernetes security tool covers one slice of cluster risk — image scanning, admission control, runtime detection, or posture. Here is how to combine them.
Jul 2, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedContainers
How to Scan a Docker Image with Snyk (and What It Misses)
A practical guide to scanning a Snyk Docker image for vulnerabilities: the CLI workflow, base-image advice, free-tier limits, and where container scanning needs a second look.
Jul 2, 20266 min read
Software Supply Chain Security
RubyGems strong_password malicious version RCE
In 2019, attackers hijacked the strong_password RubyGems account and shipped a backdoored v0.0.7 that let them eval() code in production Rails apps.
Jul 2, 20267 min read
Product Launch
Introducing Safeguard Guardrails: Automated Policy Enforcement for Your Supply Chain
Safeguard Guardrails brings automated, configurable policy enforcement to your software supply chain. Define rules once, enforce everywhere.
Jul 2, 20266 min read
AI Security
How Copilot Autofix generates AI-powered vulnerability fi...
Copilot Autofix pairs CodeQL with an LLM to patch code-scanning alerts up to 3x faster. Here's how it works, its limits, and where supply chain risk still slips through.
Jul 2, 20267 min read
Vulnerability Analysis
CVE-2019-11358: Prototype pollution in jQuery $.extend
CVE-2019-11358 lets attackers pollute Object.prototype via jQuery's $.extend() deep merge. Here's the impact, affected versions, and how to fix it.
Jul 1, 20267 min read
Comparisons
Snyk Vulnerability Scanning: How the Engine Actually Works
Snyk vulnerability scanning combines a proprietary vulnerability database with dependency-graph resolution and a separate static analysis engine for code — here's how each piece actually fits together.
Jul 1, 20265 min read
Vulnerability Analysis
CVE-2020-11022: XSS in jQuery via htmlPrefilter
CVE-2020-11022 lets attacker-controlled HTML bypass sanitization via jQuery's htmlPrefilter, enabling XSS in versions before 3.5.0. Impact, timeline, and fixes.
Jul 1, 20267 min read
Vulnerability Analysis
CVE-2020-11023: XSS in jQuery option/script tag handling
CVE-2020-11023 let untrusted HTML with option tags bypass sanitization in jQuery's DOM methods, enabling XSS. Here's the fix, timeline, and remediation.
Jul 1, 20268 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.