DevSecOps
How to Sandbox Python Code Safely: A Security Guide
A security guide to running a Python sandbox: why language-level restriction fails, and the OS and runtime isolation that actually contains untrusted code.
May 15, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSBOM & Compliance
Open Source License Compliance: Automating License Risk R...
Manual license audits miss GPL contamination and copyleft traps. Here's how automated license risk reports work, and how Safeguard stacks up against Endor Labs.
May 15, 20267 min read
Security
OPA Policy Language: A Practical Guide to Rego
The OPA policy language is Rego, a declarative language for writing authorization and admission-control rules that live outside your application code. Here's how it works and how to keep it secure.
May 15, 20266 min read
Security
CVE-2021-3918: Prototype Pollution in json-schema Explained
CVE-2021-3918 is a prototype pollution vulnerability in the json-schema npm package that can let crafted input tamper with JavaScript object prototypes. Here is who is affected and how to fix it.
May 15, 20265 min read
Open Source
prism-react-renderer: Safe Syntax Highlighting in React
prism-react-renderer gives you tokenized syntax highlighting in React without dangerouslySetInnerHTML. Here is how it works, why that matters for XSS, and how to keep the dependency healthy.
May 15, 20265 min read
SBOM & Compliance
Cyber Resilience Act (CRA) Compliance for Software Vendors
CRA reporting duties start Sept 2026; fines reach 2.5% of global turnover. What software vendors must do for SBOMs, vulnerability reporting, and audits.
May 15, 20268 min read
Compliance
Open Source Software Licenses: A Security and Compliance Guide
Open source software licenses decide what you can legally do with a dependency. Getting them wrong is a compliance risk that sits right next to your security risk.
May 15, 20266 min read
Security
NGINX Ingress TLS: How to Terminate HTTPS Securely on Kubernetes
Configuring NGINX Ingress TLS means wiring up certificates, secrets, and protocol settings so traffic into your cluster is encrypted and hard to downgrade. Here is the secure setup.
May 15, 20265 min read
SBOM & Compliance
FedRAMP for AppSec Tools: What It Means for Government So...
FedRAMP 20x now demands machine-readable SBOM and vulnerability evidence, not static reports. Here's what changed, what it costs, and where Endor Labs stands.
May 15, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.