Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
llama.cpp grammars limit which tokens a model may produce, so output always matches a format. How GBNF and JSON schema constraints work, and their limits.
VS Code connects to remote MCP servers natively. Add a servers entry with type http and the Safeguard URL, then sign in once in the browser.
Safeguard offers two routes into CI: connect the repository so the platform scans it, or run the CLI in the job. When each fits, and when to use both.
Gemini CLI needs the httpUrl field for Streamable HTTP servers like Safeguard's. One command adds it, and mcp auth starts the sign in by hand.
Add one url entry to mcp.json, sign in with OAuth, and Cursor can query Safeguard. Covers the global versus project file and the old cursor URL.
For clients without a dedicated guide, add a remote Streamable HTTP server at the Safeguard URL, use OAuth if offered, or a key header if not.
Commit lockfiles for applications. For libraries the answer differs by ecosystem. Here is what the npm, NuGet, uv, Cargo and Gradle docs say.
Terminal coding agents let you sign in with an existing Claude or ChatGPT account or use API credentials. What the docs say, and how to decide.
Codex subagents run in parallel but inherit the parent's sandbox and approvals. How custom agent TOML files work, the config limits and why token use rises.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
