Open link in next tab
Security Developer-in-Residence – Weekly Report #2
https://sethmlarson.dev/security-developer-in-residence-weekly-report-2
This critical role would not be possible without funding from the OpenSSF Alpha-Omega Project. Massive thank-you to Alpha-Omega for investing in the security of the Python ecosystem! Second ...
Featuring:
- Identifying bundled libraries on Python distributions to help scanning for vulnerabilities.
- Trusted Publisher adoption metrics.
- GitHub push protection for PyPI API tokens.
Lots of great stuff!