Скачать или смотреть Securing Python projects Supply Chain - DevConf.CZ 2023

Speaker(s): Fridolín Pokorný; Maya Costantini

The past years have seen a significant raise in Supply Chain attacks targeting third party Python software used in larger projects. With the need for developers to attest to the integrity and provenance of their software dependencies, new standards have emerged to secure Python software, from development to building, packaging and distribution.

Throughout this talk, developers will learn about the latest tools and the best Software Supply Chain practices that can allow them to secure their Python projects and make them more reliable for users by following the lifecycle of a secure Python project, demystifying terms such as cryptographic signatures, Software Bills of Materials or SLSA attestations along the way.

https://sched.co/1MYdz