Developer Tools
In-depth guides and analysis on developer tools from the Safeguard engineering team.
100 articles
What to check in a lockfile diff during code review
A lockfile change can hide a new dependency, a changed source or a swapped hash. Here is a short routine for reviewing one without reading every line.
What should you check before one-click installing an MCP server?
Before you click install on an MCP server, read the exact command, check the package, know the privileges it gets and run it in a sandbox. The spec agrees.
What to ask before enabling automated fix pull requests
Automated fix pull requests save time but need guardrails. Ask about review, tests, scope limits, rollback and defaults before turning any of it on.
What should engineering ask a security vendor about support?
Ask about response times, escalation paths, outage communication and who answers at 2am. Eight support questions engineering leaders should put in writing.
What should engineering ask a security vendor about APIs and integrations?
Ask about API coverage, rate limits, webhooks, auth for service accounts and export formats. These questions show whether a tool fits your delivery system.
What target API level does Google Play require in 2026?
From 31 August 2026, new apps and updates must target Android 16, API level 36. The exceptions, the rule for existing apps and the extension, per Google.
What should you log from an AI coding agent, and what should you not?
Log sessions, tool decisions and MCP connections for audit. Keep prompts, tool output and raw API bodies off by default, since they hold sensitive content.
What should a pull request gate block in an ML repo?
A starter gate for ML repos: block new reachable criticals, unpinned installs, leaked keys and unreviewed model artifacts. Warn on the rest.
What should a platform team report on pipeline security each month?
A one page monthly report for platform and DevOps leads: coverage, gate outcomes, exceptions, fix time and trend, plus what to leave out of it.
What should a Dockerfile policy gate block in CI?
A short list of Dockerfile rules worth enforcing automatically, such as secrets in ARG, root users and floating tags, and how to roll them out smoothly.
What does Maven Central require before you can publish a library?
Maven Central needs coordinates, POM metadata, sources and javadoc jars, checksums and a signature per file. A checklist for first time Java publishers.
A checklist for a good fuzz target
Fast, deterministic, no exits, no global state, bounded memory. A short checklist for fuzz targets that find bugs instead of stalling the engine.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.