Developer Tools
SSH key passphrase and ssh-agent: what developers should do
Put a passphrase on every SSH key and let ssh-agent cache it. How to add or change a passphrase, set a timeout, and avoid unprotected keys on laptops.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
Keep a passphrase on your SSH key and still not retype it
A passphrase on your SSH key does not mean typing it all day. Use ssh-agent, the macOS Keychain option, and one Windows setting that trips up Git.
Oct 18, 20263 min read
Developer Tools
SROS 2 first setup: keystore, enclaves and the three variables
How to create an SROS 2 keystore and per node enclaves, then enable ROS 2 security with three environment variables and the enforce strategy, step by step.
Oct 18, 20263 min read
Developer Tools
Speculative decoding explained: faster local inference, same output
A small draft model proposes tokens and the large model verifies them in parallel. What the original paper claims, and when it helps on local hardware.
Oct 18, 20263 min read
Developer Tools
SPDX package supplier versus download location: how to fill both
Supplier names who distributes the package. Download location says where it was available. Rules from SPDX 2.3.1, with credential handling and VCS syntax.
Oct 18, 20263 min read
Developer Tools
SPDX NOASSERTION versus NONE: what each value means
NOASSERTION means unknown or not stated. NONE means nothing exists. Mixing them up changes the meaning of an SBOM. Where each applies in SPDX 2.3.1.
Oct 18, 20263 min read
Developer Tools
How to add SPDX license identifiers to your source files
Add one SPDX-License-Identifier comment line to each source file so people and tools can read your license without parsing long header text.
Oct 18, 20264 min read
Developer Tools
What does FilesAnalyzed false mean in an SPDX SBOM?
FilesAnalyzed false means an SPDX package is a reference to a component whose files were not analyzed. What that changes for checksums and license fields.
Oct 18, 20263 min read
Developer Tools
Solidity integer overflow: what changed in version 0.8
Since Solidity 0.8.0, arithmetic reverts on overflow by default. What that fixed, what unchecked blocks bring back, and what old contracts still need.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.