Developer Tools
Labeling code review comments: nit, optional and blocking
A simple labeling convention that stops style debates from stalling security fixes and tells authors which review comments they must act on.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
Where can a browser extension send your data? Network rules explained
Extension host permissions let code reach servers outside its own origin, with different rules for service workers and content scripts. How to read them.
Oct 18, 20263 min read
Developer Tools
How to review an automated fix pull request on a small screen
What to check before approving a dependency fix pull request from your phone, and when to wait for a laptop. A short, practical review routine.
Oct 18, 20263 min read
Developer Tools
Reusing one MCP setup across Claude, VS Code and Cursor
Three documented ways to avoid retyping MCP servers in every client: import commands, discovery settings and the shared root config file. Limits included.
Oct 18, 20263 min read
Developer Tools
Retry storms: how retries turn a small fault into an outage
Retries feel safe, but stacked across layers they multiply load on a struggling dependency. Here is how to cap attempts, add jitter and budget retries.
Oct 18, 20263 min read
Developer Tools
Retries, timeouts and circuit breakers for LLM API calls
LLM calls are slow, costly and sometimes fail halfway. How to set retries, timeouts and a circuit breaker so failures do not become outages or bills.
Oct 18, 20263 min read
Developer Tools
REST API hardening: allow-list methods, content types and sizes
Return 405, 413, 415 and 406 on purpose. A checklist for allow-listing HTTP methods, content types and request sizes, based on OWASP guidance.
Oct 18, 20263 min read
Developer Tools
Resident or non resident FIDO SSH keys: which to use?
Resident FIDO SSH keys store the handle on the token for easy use across machines, at a higher risk if the token is stolen. How to choose between them.
Oct 18, 20263 min read
Developer Tools
Reranking explained: cross-encoders versus embedding search
A reranker rescores a short list of candidates by reading the query and passage together. Why it improves retrieval, what it costs, and when to add one.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.