Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Java reachability under classpath reality: reflection, Spring autowiring, shaded JARs, Log4Shell, and what modern tools actually resolve versus over-approximate.
Gradle version catalogs centralise dependency versions in one file. The security payoff is concrete: auditability, uniform enforcement, and a single PR gate.
Implement dependency verification in Kotlin Gradle projects with checksums, PGP signatures, and repository filtering.
How to secure your Java dependency chain across Maven and Gradle builds, from signature verification to repository management.
Weekly insights on software supply chain security, delivered to your inbox.