Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Long context, cache misses, scheduled tasks, subagents and compaction all add usage in a long agent session. Here are the causes and the fixes for each.
Neither form is safer by default. Safety depends on what the tool can run and reach. Here is a side by side look at terminal agents and IDE assistants.
Zephyr says an LTS release is maintained for about five years: two years of general and security fixes, then security and stability only. Planning notes.
ZAP ships three Docker scan scripts. Baseline is passive and fast, full scan attacks, API scan imports a definition. Here is how to pick one for each job.
The ZAP Automation Framework runs scans from a YAML plan with an env section and jobs like spider, activeScan and report, started with the autorun option.
ZAP's API scan imports an API definition and runs an active scan tuned for APIs. See supported formats, safe mode, exit codes and what it cannot cover.
The Yocto Project generates SPDX SBOMs by default through the create-spdx class. Where the file lands, which variables matter, and what to check.
Yarn's resolutions field forces one version of a nested package. See the syntax, the root-only rule, and a safe way to apply and remove a pin.
Yarn audits direct dependencies unless you add the recursive option, and pnpm audit has its own scope flags. Check defaults before trusting a clean run.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
