Licensing
GitHub Licenses: Choosing One for Your Repo
A practical walkthrough of the license options GitHub surfaces when you create a repo, and how to pick one that matches what you actually want people to do with your code.
Feb 18, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedIdentity Security
How to rotate SSH keys safely
A step-by-step guide to rotating SSH keys without downtime: inventory existing keys, generate new pairs, cut over safely, revoke old keys, and verify nothing was missed.
Feb 18, 20268 min read
Best Practices
Azure Functions Supply Chain Security
Azure Functions hide a surprising amount of supply chain risk — Oryx builds, run-from-package, extension bundles, and the way deployment slots interact with identity.
Feb 18, 20268 min read
Best Practices
What is Encryption
Encryption converts readable data into ciphertext using algorithms and keys. Here's how AES, RSA, and TLS actually work — and where implementations fail.
Feb 18, 20266 min read
Security Operations
Security Architecture Review Process: A Practical Framework
Architecture reviews catch security issues before code is written. Most organizations skip them or do them poorly. Here is a process that works.
Feb 18, 20266 min read
Software Supply Chain Security
How to configure GitHub branch protection rules
A practical guide to configuring GitHub branch protection rules — required reviews, status checks, and security settings that keep your main branch safe.
Feb 18, 20268 min read
Application Security
.NET Trimming Security Implications: What Gets Cut and Why It Matters
IL trimming reduces .NET application size but can silently remove security-relevant code paths. Here is what you need to watch for.
Feb 17, 20265 min read
Supply Chain Security
Chocolatey Package Security on Windows: What You Need to Know
Chocolatey is the de facto package manager for Windows automation. Its trust model and security features deserve more scrutiny than most teams give them.
Feb 17, 20265 min read
Vulnerabilities
XXE Attacks Explained: XML External Entity Injection
How an XXE attack turns a trusting XML parser into a file-reading, request-forging liability, with a concrete Java example and the parser flags that shut it down.
Feb 17, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.