Best Practices
How to Scan Docker Images for Vulnerabilities
A production-grade vulnerability scanning pipeline for Docker images using Trivy and Grype, with reachability-based prioritization and admission enforcement.
Mar 17, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedContainer Security
Container Security vs Virtual Machine Security
Containers and VMs isolate workloads at different layers — kernel vs. hypervisor — which changes attack surface, blast radius, patch speed, and what your scanner actually needs to cover.
Mar 17, 20267 min read
Industry Analysis
GCP Security Command Center Integration
An industry-level look at integrating GCP Security Command Center with the rest of the security stack: which findings are signal, which are noise, and how to route the output so it actually gets actioned.
Mar 17, 20268 min read
Compliance
NIST SP 800-161 Rev. 2 Third-Party Risk 2026
NIST SP 800-161 Rev. 2 reshapes cyber supply chain risk management for federal contractors and commercial buyers. Here is what engineers must operationalize.
Mar 17, 20267 min read
Emerging Technology
GitHub Actions Cache Poisoning Attack Class 2025
GitHub Actions caches were never designed as a trust boundary. In 2025 researchers turned that mismatch into a repeatable supply-chain attack pattern.
Mar 17, 20268 min read
Buyer's Guides
Drata vs Vanta vs Secureframe: head-to-head comparison
Drata, Vanta, and Secureframe automate compliance evidence collection — but that's a different job from securing your software supply chain. Here's how Safeguard fits.
Mar 17, 20267 min read
Incident Analysis
Port of Seattle Rhysida: Airport Ransomware and the Public-Sector Tail
On August 24, 2024, Rhysida ransomware took down Port of Seattle systems including Sea-Tac airport check-in, baggage, and the Port website. The Port refused a $6 million ransom. We unpack the case.
Mar 17, 20267 min read
SBOM & Compliance
Java SBOM Generation Tools Compared
Six tools generate SBOMs from Java projects. They disagree on transitive depth, license fields, and licensing of their own output. A head-to-head.
Mar 17, 20265 min read
Cloud Security
What is Serverless Security
Serverless security protects function code, IAM roles, and event triggers where traditional host-based scanning and patching don't apply.
Mar 17, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.