Developer Tools
Enable GitHub private vulnerability reporting in five steps
Turn on GitHub private vulnerability reporting so researchers can report flaws privately. Steps, custom forms, CWE requirement and notification setup.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
The effort setting as a cost control: low, medium or high?
An effort setting lets one model spend fewer tokens on easy tasks. Learn what it changes, how to pick a level, and why you should test before shipping it.
Oct 18, 20263 min read
Developer Tools
Ed25519 or RSA for SSH keys: what to generate today
Generate an Ed25519 key unless a legacy system forces RSA 4096. Add a passphrase, load it in an agent, and consider a hardware-backed key type.
Oct 18, 20263 min read
Developer Tools
Drone ground station software: a security checklist
The ground control app is part of a drone's attack surface. A checklist covering signed links, keys, logs, Remote ID inputs and dependency hygiene.
Oct 18, 20263 min read
Developer Tools
Geofence and return mode: choosing safe actions for your drone
In PX4 a geofence breach can trigger Warning, Hold, Return, Land or Terminate. How to choose an action, and why Terminate is off by default.
Oct 18, 20263 min read
Developer Tools
Download only safetensors files from Hugging Face with ignore patterns
Use allow_patterns and ignore_patterns in snapshot_download so pickle based weight files never land on disk. A short how-to with a dry run check first.
Oct 18, 20264 min read
Developer Tools
DORA Article 8: the ICT asset inventory engineers need to keep
DORA Article 8 requires identifying, classifying and mapping ICT assets and dependencies, with inventories kept current. What it means for software teams.
Oct 18, 20263 min read
Developer Tools
Docker rootless mode on a Linux dev machine: prerequisites and setup
Rootless Docker runs the daemon and containers without root. Here are the prerequisites, the install steps, and how to check it is really running rootless.
Oct 18, 20263 min read
Developer Tools
How to pass secrets to a Docker build without leaking them
ARG and ENV values persist in the final image. Use build secret mounts instead: docker build --secret and RUN --mount=type=secret. Commands and pitfalls.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.