Safeguard
Tag

jdk

Safeguard articles tagged "jdk" — guides, analysis, and best practices for software supply chain and application security.

7 articles

Best Practices

Installing and Verifying Java on macOS Securely

A SHA-256 checksum only proves a JDK download wasn't corrupted in transit — it takes a GPG signature check to prove it actually came from the vendor you trust.

Jul 8, 20266 min read
DevSecOps

Setting JAVA_HOME on Ubuntu: A Step-by-Step Guide

How to set JAVA_HOME on Ubuntu correctly and permanently: find your JDK path, choose the right scope (user vs system), handle multiple JDKs with update-alternatives, and verify it stuck.

Oct 2, 20255 min read
DevSecOps

How to Uninstall Java Safely on Windows, macOS, and Linux

To uninstall Java cleanly you need to remove the runtime, clear leftover paths and environment variables, and confirm nothing critical still depends on it.

Jul 21, 20256 min read
Security

Installing a Java Runtime on Mac the Secure Way

The safest way to install a Java runtime on Mac is a maintained OpenJDK build like Temurin via Homebrew. Here is how to do it on Apple Silicon and avoid licensing and update traps.

Jun 30, 20255 min read
Security

How to Change the Java Version on a Mac Without Breaking Security

A practical guide to change the Java version on Mac using JAVA_HOME and jenv, plus why keeping the right JDK active is a security decision, not just a convenience.

Mar 18, 20255 min read
Security

The Java Developer Kit Explained: Security Risks and How to Harden Your JDK

The Java Developer Kit is more than a compiler and runtime. Here is how to treat the JDK as part of your attack surface and keep it patched.

Mar 11, 20256 min read
DevSecOps

How to brew install java 17 on a Mac (Safely)

To brew install Java 17 on a Mac, use the Temurin cask or the openjdk@17 formula, then wire up JAVA_HOME. Here is the full walkthrough plus the security reasons to keep it patched.

Feb 11, 20255 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

jdk — Safeguard Blog